$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/ea34c3d0-2a4c-37e3-aacf-8678d3e28dd0.roa File: ea34c3d0-2a4c-37e3-aacf-8678d3e28dd0.roa (raw, json) Hash identifier: D5FcXxfEIFS0gtPCyX/Xw7rbPVnwQMjBP0XFG6xPZNs= Subject key identifier: 87:DD:88:F9:03:F7:D1:3E:AA:0B:B9:3F:22:3A:D6:9A:9C:09:1C:C5 Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584F506D451A4F10A3F17DF8EF00 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/ea34c3d0-2a4c-37e3-aacf-8678d3e28dd0.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 12684 IP address blocks: 66.133.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:45:1a:4f:10:a3:f1:7d:f8:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=29101574-0999-4b01-9842-cc14536b23c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b2:f7:c0:d7:1a:1b:51:a5:3d:31:84:28:37: 70:b4:5d:b9:ee:ae:66:b6:a0:73:93:5a:d7:54:81: a1:f8:7c:8d:e8:00:e6:50:0e:15:62:9a:bb:be:a7: e9:07:40:81:49:55:80:45:17:2e:f5:c9:2e:70:5b: aa:c2:dd:ad:3a:f4:58:fe:86:b1:c9:28:9a:ec:8a: d3:2e:2f:a8:a1:fb:9d:b3:c3:e4:e2:9e:8b:62:a1: b3:b9:91:fd:f9:b2:89:92:e5:7f:fc:bb:31:52:64: b9:91:cb:60:41:1d:98:ed:bc:9a:cc:42:bb:79:2d: c9:00:f3:c1:d5:13:3f:8c:e7:b2:91:9b:8e:b6:a8: e7:61:7f:cc:3a:fa:e2:72:af:a2:01:6b:f5:a1:52: a8:26:da:9c:87:b6:d2:a7:ab:ff:2c:39:58:c0:b4: 89:04:5a:84:ee:dd:b4:a9:4b:55:90:38:4c:04:9e: 29:6d:b9:7b:06:dc:aa:7b:43:33:1f:05:7f:59:88: 60:22:d2:1c:7e:82:82:96:6b:0c:ce:d4:50:8a:c8: 1a:b0:9f:ef:57:27:89:eb:3a:53:1c:4d:bb:d6:90: 43:e1:2b:1a:ee:41:f1:88:3f:d3:79:d7:02:c4:eb: ed:d0:63:d3:c2:cf:3a:e1:5f:50:cd:48:e6:06:0a: 4f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DD:88:F9:03:F7:D1:3E:AA:0B:B9:3F:22:3A:D6:9A:9C:09:1C:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/ea34c3d0-2a4c-37e3-aacf-8678d3e28dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 66.133.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c2:d5:61:0b:37:60:1b:ba:2d:e3:9b:88:1d:45:cb:df:47: 50:39:67:5f:73:0c:a3:4c:13:08:3e:62:5c:31:70:af:80:2d: 76:0b:0c:44:16:e1:11:66:8f:f0:d7:81:03:21:7c:1e:44:22: bd:6b:d4:4c:79:aa:3b:4d:79:51:0a:99:4f:98:b4:e2:db:58: 38:e1:b7:10:28:71:95:03:b0:ca:80:92:53:31:59:8b:bf:7d: 56:f3:16:cb:5a:d0:b3:61:a4:73:57:05:cd:33:5a:80:ad:24: a0:8a:3d:20:89:e2:5c:1f:d5:03:5c:19:8d:0f:18:0b:c2:e0: 95:39:de:c0:a1:cc:3e:8d:e9:0e:b5:22:bb:30:58:db:72:f5: 8b:0f:ec:a6:5d:98:f2:73:ac:87:9d:bc:37:11:e1:01:a6:08: 95:f3:71:fb:3b:c2:f6:a1:ae:da:24:96:cb:0f:d9:4d:fb:34: 65:f9:80:9c:10:a8:7a:1e:46:39:64:42:94:1a:0a:37:80:58: 2a:dc:06:9d:e6:69:4d:a1:94:61:27:5d:42:04:d3:33:db:71: d4:5d:66:4b:44:98:53:89:18:58:f7:51:48:ae:84:54:95:83: 1f:1a:b7:b9:00:cc:1d:64:f9:d1:1b:22:c5:7e:6a:73:51:07: e2:91:e8:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUUaTxCj8X347wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MjkxMDE1NzQtMDk5OS00YjAxLTk4NDItY2MxNDUzNmIyM2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrL3wNcaG1GlPTGEKDdwtF257q5mtqBzk1rX VIGh+HyN6ADmUA4VYpq7vqfpB0CBSVWARRcu9ckucFuqwt2tOvRY/oaxySia7IrT Li+oofuds8Pk4p6LYqGzuZH9+bKJkuV//LsxUmS5kctgQR2Y7byazEK7eS3JAPPB 1RM/jOeykZuOtqjnYX/MOvricq+iAWv1oVKoJtqch7bSp6v/LDlYwLSJBFqE7t20 qUtVkDhMBJ4pbbl7Btyqe0MzHwV/WYhgItIcfoKClmsMztRQisgasJ/vVyeJ6zpT HE271pBD4Ssa7kHxiD/TedcCxOvt0GPTws864V9QzUjmBgpPhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfdiPkD99E+qgu5PyI61pqcCRzFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvZWEzNGMzZDAtMmE0Yy0z N2UzLWFhY2YtODY3OGQzZTI4ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoUHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfC1WELN2Abui3jm4gdRcvfR1A5Z19zDKNMEwg+YlwxcK+ALXYLDEQW 4RFmj/DXgQMhfB5EIr1r1Ex5qjtNeVEKmU+YtOLbWDjhtxAocZUDsMqAklMxWYu/ fVbzFsta0LNhpHNXBc0zWoCtJKCKPSCJ4lwf1QNcGY0PGAvC4JU53sChzD6N6Q61 IrswWNty9YsP7KZdmPJzrIedvDcR4QGmCJXzcfs7wvahrtoklssP2U37NGX5gJwQ qHoeRjlkQpQaCjeAWCrcBp3maU2hlGEnXUIE0zPbcdRdZktEmFOJGFj3UUiuhFSV gx8at7kAzB1k+dEbIsV+anNRB+KR6CY= -----END CERTIFICATE-----Generated at Thu Oct 8 13:18:32 2026 by rpki-client