$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/af5066dd-70d7-3cb3-a565-ca0dbcfc9f2f.roa File: af5066dd-70d7-3cb3-a565-ca0dbcfc9f2f.roa (raw, json) Hash identifier: 6Bwx73VwgKT7XZLCfjA3ptGFheSND5MlZitNhRo/57s= Subject key identifier: 9F:95:EC:D8:F7:F6:E6:A1:E0:23:6C:8B:2A:CE:5F:F9:CF:7F:45:A0 Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584F506D4B4792716D1BD9B06240 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/af5066dd-70d7-3cb3-a565-ca0dbcfc9f2f.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 12684 IP address blocks: 66.133.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4b:47:92:71:6d:1b:d9:b0:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=1dbecfb1-d1da-4c74-843d-ee0b1ecac27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:44:93:55:a9:5c:2c:e9:72:03:41:95:27:c0: d0:fe:ec:62:f0:ca:73:6d:b8:6c:05:cf:e2:b4:d1: ce:76:2b:be:2e:12:d4:71:2a:7e:e4:dd:d8:0c:35: 49:4f:55:a6:b6:2a:5a:cd:80:2d:ac:43:45:5c:66: 43:37:ec:f0:4b:92:ca:4e:14:85:3d:dd:3c:21:31: 09:59:a2:36:f5:cf:df:8e:2b:87:41:9a:9f:64:42: 61:82:b3:e5:b0:0c:59:08:4f:48:37:2f:c4:08:bf: a1:b8:5a:f4:fc:4a:9f:d6:4d:71:57:b5:d4:26:cb: 4c:03:60:f5:98:18:9d:87:6c:a8:5e:17:c5:a8:c1: e8:53:7c:6e:b9:7b:e4:13:64:99:a2:4e:58:c3:95: 14:e7:ab:72:36:57:1d:ba:33:6f:38:be:db:d6:e1: 0b:ae:91:9a:ba:a3:ee:bb:b1:6b:fd:b0:22:5f:ff: ff:39:6d:7d:50:1a:bc:c2:35:5b:db:e8:79:ee:53: 0d:2b:2e:d3:36:c3:62:bd:ad:69:59:8f:c0:d3:bf: f2:88:e8:4b:64:e2:a9:8d:63:e2:90:9b:67:ad:de: 81:e1:fa:8b:dd:82:24:45:89:17:6b:75:7f:f5:8e: 55:ff:15:1a:d3:0c:fc:d9:89:31:a8:e0:ee:b7:e8: 41:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:95:EC:D8:F7:F6:E6:A1:E0:23:6C:8B:2A:CE:5F:F9:CF:7F:45:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/af5066dd-70d7-3cb3-a565-ca0dbcfc9f2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 66.133.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b0:26:3a:c4:8d:c6:bd:dc:f5:b9:3d:9b:ec:09:b4:0a:14: 4b:e7:a1:93:5e:6a:86:24:66:18:59:24:9e:06:45:32:03:fb: 13:0b:0e:99:a9:cc:90:6d:3d:40:b1:ce:85:cf:ff:a4:32:94: 37:ff:e3:05:1f:36:b4:92:f9:44:50:d8:b0:ab:c0:a9:49:3a: 4c:a5:e8:e0:b0:ba:9c:ac:9a:8b:46:94:97:45:a4:7d:bf:25: b3:08:63:c1:2e:a9:b4:27:c0:a1:8c:df:c2:29:5f:49:fc:c0: d8:68:0f:db:8a:7a:72:18:e1:d6:0a:5c:47:79:eb:f3:2a:10: f2:f4:2a:19:3d:cb:59:cc:7a:1a:ee:b5:79:5e:ed:a2:6d:a3: 24:a8:6e:4e:df:f8:81:69:ac:4e:95:2e:a4:cb:ca:dc:d7:8d: 8e:66:95:b8:0a:7b:01:a0:49:0e:2a:d2:80:0e:22:cf:13:bf: 29:df:bd:31:43:8b:91:14:2d:fb:d8:3a:39:c0:8e:9b:0c:b0: 4d:83:8f:73:94:ae:6d:54:46:61:0e:f8:0c:a2:69:cb:9f:ab: e7:82:e8:3d:03:47:69:80:cd:7d:4b:b4:da:df:c4:fb:0c:e4: 95:b8:0a:df:12:0c:fa:50:d1:cd:04:29:a1:95:e9:f2:99:c8: 79:43:b4:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUtHknFtG9mwYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MWRiZWNmYjEtZDFkYS00Yzc0LTg0M2QtZWUwYjFlY2FjMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0STValcLOlyA0GVJ8DQ/uxi8MpzbbhsBc/i tNHOdiu+LhLUcSp+5N3YDDVJT1WmtipazYAtrENFXGZDN+zwS5LKThSFPd08ITEJ WaI29c/fjiuHQZqfZEJhgrPlsAxZCE9INy/ECL+huFr0/Eqf1k1xV7XUJstMA2D1 mBidh2yoXhfFqMHoU3xuuXvkE2SZok5Yw5UU56tyNlcdujNvOL7b1uELrpGauqPu u7Fr/bAiX///OW19UBq8wjVb2+h57lMNKy7TNsNiva1pWY/A07/yiOhLZOKpjWPi kJtnrd6B4fqL3YIkRYkXa3V/9Y5V/xUa0wz82YkxqODut+hBIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+V7Nj39uah4CNsiyrOX/nPf0WgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvYWY1MDY2ZGQtNzBkNy0z Y2IzLWE1NjUtY2EwZGJjZmM5ZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+wJjrEjca93PW5PZvsCbQKFEvnoZNeaoYkZhhZJJ4GRTID+xMLDpmp zJBtPUCxzoXP/6QylDf/4wUfNrSS+URQ2LCrwKlJOkyl6OCwupysmotGlJdFpH2/ JbMIY8EuqbQnwKGM38IpX0n8wNhoD9uKenIY4dYKXEd56/MqEPL0Khk9y1nMehru tXle7aJtoySobk7f+IFprE6VLqTLytzXjY5mlbgKewGgSQ4q0oAOIs8TvynfvTFD i5EULfvYOjnAjpsMsE2Dj3OUrm1URmEO+Ayiacufq+eC6D0DR2mAzX1LtNrfxPsM 5JW4Ct8SDPpQ0c0EKaGV6fKZyHlDtLc= -----END CERTIFICATE-----Generated at Tue Oct 6 14:18:16 2026 by rpki-client