$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/8a107d0e-dacf-3f24-af3b-0d6063b87a1a.roa File: 8a107d0e-dacf-3f24-af3b-0d6063b87a1a.roa (raw, json) Hash identifier: 7EBTD2sy4EY57PWj/Yl7JsJUsQjQ8j/lnY9Rn3lHiy0= Subject key identifier: 2A:BE:AD:2F:F8:D0:71:41:A7:D1:DF:A0:14:B6:24:AA:96:1F:83:E7 Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584F506D4C0D70963BD6B9DA5200 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/8a107d0e-dacf-3f24-af3b-0d6063b87a1a.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 12684 IP address blocks: 66.133.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4c:0d:70:96:3b:d6:b9:da:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=eb4e585a-6d22-4a05-bce9-a31f5b83ca57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:33:d2:18:d7:f1:b9:80:cc:d3:a4:50:53: 1f:c5:f7:ee:99:0e:eb:58:a1:5c:14:fa:ec:f1:a0: cc:2e:5f:8e:06:9c:86:23:e1:29:1a:95:19:20:d1: 77:af:e8:b3:6e:9d:bf:f3:c9:e4:1e:81:e1:c6:77: 16:25:f3:d8:2a:37:7f:bb:10:08:50:8a:cc:03:09: 03:f4:45:e4:b8:e5:f2:38:18:0e:3b:c3:34:c8:21: fe:ec:84:07:26:b1:5d:0e:87:2f:ef:14:76:c4:de: b2:58:77:bf:18:71:1b:0a:2f:3c:bf:ad:79:57:d2: 7f:55:7f:2c:c1:0a:04:26:a7:8b:f8:7f:fe:1d:da: 11:e9:4b:98:6c:00:33:29:08:dd:89:93:24:0c:6a: 3d:04:93:47:55:2e:2c:1d:27:08:1e:44:65:29:78: 75:25:19:90:56:8a:87:f3:f2:9a:4c:bd:ac:1c:a4: 31:bc:8d:17:71:29:a7:10:89:cc:04:f1:1f:05:82: c4:de:ea:36:70:5c:5b:58:61:70:a3:a4:7a:f4:42: c3:37:14:58:79:35:86:23:3c:e8:43:eb:72:53:5b: 04:83:19:17:4e:22:ef:df:5e:74:96:a9:fa:cb:b7: d8:5e:d8:8b:4a:91:b0:1f:df:3f:52:59:d6:8a:6a: 7a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BE:AD:2F:F8:D0:71:41:A7:D1:DF:A0:14:B6:24:AA:96:1F:83:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/8a107d0e-dacf-3f24-af3b-0d6063b87a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 66.133.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0a:aa:7f:15:68:18:62:86:62:e4:ae:f6:b3:04:c5:7f:80: 5c:1b:9e:ef:bf:08:7b:d7:e7:f4:3b:94:e5:b2:3c:c9:2c:52: 2a:73:1b:59:37:36:e3:d2:9d:ee:72:81:ef:7c:57:0f:0e:0a: af:06:67:de:4a:cd:b6:2b:14:05:0d:43:70:6c:63:72:40:5b: 7b:d0:fa:d9:5e:ea:e5:08:ac:87:1a:90:1d:ec:83:bc:75:f8: 33:15:a7:53:40:43:6f:0a:7a:e9:1b:64:2a:d3:3a:89:11:19: 21:96:1a:43:83:28:73:9d:65:fc:4c:bf:41:29:73:2a:bc:9c: 34:5a:20:cb:ae:ae:b5:30:14:a4:a4:5c:bc:e9:02:23:80:c0: 36:e6:ad:5f:a3:7c:df:1f:90:99:e1:0a:1f:d9:11:ae:2e:7d: ab:00:90:b4:59:3c:43:63:bd:89:a7:c5:31:95:7e:7e:21:c5: 35:5b:5b:fc:6f:67:a3:aa:2f:84:01:49:bc:61:eb:11:10:76: 40:de:12:be:df:d9:7e:ca:22:a0:c0:73:40:58:8c:ee:f0:dd: 71:89:d5:28:98:5f:c3:0b:12:8f:c6:b7:26:d7:b1:f2:75:b3: 61:d0:e5:a7:9f:b9:0c:4d:e9:f2:76:d3:07:5c:10:25:85:c4: ad:88:55:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUwNcJY71rnaUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZWI0ZTU4NWEtNmQyMi00YTA1LWJjZTktYTMxZjViODNjYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIQz0hjX8bmAzNOkUFMfxffumQ7rWKFcFPrs 8aDMLl+OBpyGI+EpGpUZINF3r+izbp2/88nkHoHhxncWJfPYKjd/uxAIUIrMAwkD 9EXkuOXyOBgOO8M0yCH+7IQHJrFdDocv7xR2xN6yWHe/GHEbCi88v615V9J/VX8s wQoEJqeL+H/+HdoR6UuYbAAzKQjdiZMkDGo9BJNHVS4sHScIHkRlKXh1JRmQVoqH 8/KaTL2sHKQxvI0XcSmnEInMBPEfBYLE3uo2cFxbWGFwo6R69ELDNxRYeTWGIzzo Q+tyU1sEgxkXTiLv3150lqn6y7fYXtiLSpGwH98/UlnWimp65wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq+rS/40HFBp9HfoBS2JKqWH4PnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvOGExMDdkMGUtZGFjZi0z ZjI0LWFmM2ItMGQ2MDYzYjg3YTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwKqn8VaBhihmLkrvazBMV/gFwbnu+/CHvX5/Q7lOWyPMksUipzG1k3 NuPSne5yge98Vw8OCq8GZ95KzbYrFAUNQ3BsY3JAW3vQ+tle6uUIrIcakB3sg7x1 +DMVp1NAQ28KeukbZCrTOokRGSGWGkODKHOdZfxMv0Epcyq8nDRaIMuurrUwFKSk XLzpAiOAwDbmrV+jfN8fkJnhCh/ZEa4ufasAkLRZPENjvYmnxTGVfn4hxTVbW/xv Z6OqL4QBSbxh6xEQdkDeEr7f2X7KIqDAc0BYjO7w3XGJ1SiYX8MLEo/GtybXsfJ1 s2HQ5aefuQxN6fJ20wdcECWFxK2IVV0= -----END CERTIFICATE-----Generated at Tue Sep 29 01:35:59 2026 by rpki-client