$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/61b68676-99e9-3931-ae67-c5a72bfe3647.roa File: 61b68676-99e9-3931-ae67-c5a72bfe3647.roa (raw, json) Hash identifier: nE3D9D1nKzyRtb/qR+r28RNh6d/EK32N3/WQQD8Sy8A= Subject key identifier: 88:34:B1:62:47:2B:6E:86:48:86:1B:AD:DB:27:27:24:9C:53:57:C5 Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584F51D2ABCDC6EF6D6404601840 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/61b68676-99e9-3931-ae67-c5a72bfe3647.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 12684 IP address blocks: 66.133.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:ab:cd:c6:ef:6d:64:04:60:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=87e99b98-6fbb-4e87-b737-474129c0264a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:55:2f:41:81:da:9c:72:dc:66:85:ee:12: 68:0c:11:be:66:75:79:30:92:c9:21:e3:09:b2:15: 23:f3:59:42:a4:4c:13:d6:95:fb:64:fb:48:cb:ed: 77:fe:12:ec:1e:41:72:f4:d1:44:f6:8b:85:f0:ff: c0:32:e5:6c:b1:00:6f:24:46:86:e2:a4:1f:22:93: aa:aa:74:1a:78:6c:7e:46:38:6e:22:0a:5b:59:d1: c4:ac:54:4f:11:a3:34:05:af:35:97:4f:fd:d1:d7: 59:d1:7a:9b:b1:4d:28:fa:ed:b6:4a:02:97:16:a0: 44:57:eb:ee:97:79:50:1b:a6:af:12:68:9d:c0:d8: cc:0a:7d:b7:3d:9d:93:5a:90:18:36:84:af:4e:33: 40:f3:1f:15:d7:38:9d:f3:f0:f3:93:78:0d:66:95: de:90:93:b9:59:e2:c2:ba:0e:16:7d:ca:82:bc:70: cf:f8:40:55:29:3b:4f:b2:5a:ed:92:ba:dc:0e:09: 65:f6:7a:ef:da:77:d2:2c:6c:b2:db:e0:53:a1:2c: ac:83:ab:a9:28:af:5a:50:3e:09:78:6c:aa:e1:25: 11:cb:83:28:92:5c:b9:72:2e:dc:d5:cd:8e:e2:3c: dd:4a:24:0e:4d:97:c6:d7:73:5a:d4:07:90:f5:cd: 01:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:34:B1:62:47:2B:6E:86:48:86:1B:AD:DB:27:27:24:9C:53:57:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/61b68676-99e9-3931-ae67-c5a72bfe3647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 66.133.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:67:40:b4:ab:ec:65:e0:c1:13:b8:7a:83:d5:69:41:1e:94: 38:a9:6f:5f:61:d9:99:cd:7b:c5:7e:a1:54:2d:34:05:fc:be: b3:02:5c:f8:fe:4d:52:4d:6f:3c:ab:33:bc:5c:9d:4c:e7:11: 83:be:6f:40:86:d9:2a:69:f4:7e:8f:8a:10:c9:2a:e6:dd:d5: f4:3b:50:1e:88:b6:ad:e3:86:81:08:2b:38:aa:b3:85:e4:04: 68:7f:25:9e:4b:f3:17:09:f3:3d:a8:57:c4:fb:2f:22:d4:ce: 40:f4:20:ef:6e:c2:5a:98:24:ad:8c:5b:82:72:1a:a5:a9:ff: 3b:4e:f7:88:74:d4:47:22:75:9a:64:07:ec:a8:62:47:51:fe: d9:29:de:e1:69:5c:61:b1:64:a2:dd:5b:64:1d:70:0e:9a:13: 7f:28:2a:99:08:de:e1:3d:65:26:e1:5e:d2:5a:be:48:6d:aa: 29:fd:ae:e8:39:9e:58:1c:ee:6a:a9:1f:4a:95:6d:d2:a6:86: 3c:95:1b:eb:88:af:c5:f6:0c:87:2c:2a:48:d4:0f:8b:e1:fe: 8a:46:df:36:4e:2c:2c:09:ca:20:f1:54:a7:26:bc:c9:8a:a7: 64:ca:9b:96:1c:07:3c:c6:53:85:cd:f7:80:00:a5:57:8a:c8: ce:50:0f:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0qvNxu9tZARgGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ODdlOTliOTgtNmZiYi00ZTg3LWI3MzctNDc0MTI5YzAyNjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9FVL0GB2pxy3GaF7hJoDBG+ZnV5MJLJIeMJ shUj81lCpEwT1pX7ZPtIy+13/hLsHkFy9NFE9ouF8P/AMuVssQBvJEaG4qQfIpOq qnQaeGx+RjhuIgpbWdHErFRPEaM0Ba81l0/90ddZ0XqbsU0o+u22SgKXFqBEV+vu l3lQG6avEmidwNjMCn23PZ2TWpAYNoSvTjNA8x8V1zid8/Dzk3gNZpXekJO5WeLC ug4WfcqCvHDP+EBVKTtPslrtkrrcDgll9nrv2nfSLGyy2+BToSysg6upKK9aUD4J eGyq4SURy4Mokly5ci7c1c2O4jzdSiQOTZfG13Na1AeQ9c0BVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg0sWJHK26GSIYbrdsnJyScU1fFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvNjFiNjg2NzYtOTllOS0z OTMxLWFlNjctYzVhNzJiZmUzNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoUpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1nQLSr7GXgwRO4eoPVaUEelDipb19h2ZnNe8V+oVQtNAX8vrMCXPj+ TVJNbzyrM7xcnUznEYO+b0CG2Spp9H6PihDJKubd1fQ7UB6Itq3jhoEIKziqs4Xk BGh/JZ5L8xcJ8z2oV8T7LyLUzkD0IO9uwlqYJK2MW4JyGqWp/ztO94h01EcidZpk B+yoYkdR/tkp3uFpXGGxZKLdW2QdcA6aE38oKpkI3uE9ZSbhXtJavkhtqin9rug5 nlgc7mqpH0qVbdKmhjyVG+uIr8X2DIcsKkjUD4vh/opG3zZOLCwJyiDxVKcmvMmK p2TKm5YcBzzGU4XN94AApVeKyM5QDzM= -----END CERTIFICATE-----Generated at Sun Oct 4 22:34:49 2026 by rpki-client