$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09d9c6a2-5350-3c50-9f8f-e86aa66145e6.roa File: 09d9c6a2-5350-3c50-9f8f-e86aa66145e6.roa (raw, json) Hash identifier: G2+/wnyHHvPTx9AxYtnGtbUjn4xxNbDfPwqQjA4qvnk= Subject key identifier: F9:AA:EF:F8:10:04:E3:5C:95:31:7D:45:79:A6:54:CE:24:E2:83:20 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584DAE4FC32393EA913D039FE900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09d9c6a2-5350-3c50-9f8f-e86aa66145e6.roa Signing time: Thu 30 Apr 2026 18:32:56 +0000 ROA not before: Thu 30 Apr 2026 18:32:56 +0000 ROA not after: Wed 29 Jul 2026 18:32:56 +0000 asID: 214238 IP address blocks: 166.88.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:4f:c3:23:93:ea:91:3d:03:9f:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 30 18:32:56 2026 GMT Not After : Jul 29 18:32:56 2026 GMT Subject: CN=5317ece4-badf-4b94-8490-deb7ae0e8a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b5:2b:8b:14:48:72:76:b7:43:af:b1:39:77: 1f:f0:3f:a3:cc:75:f1:15:7f:f4:42:35:ed:f9:06: 96:af:63:86:aa:97:9a:d2:64:90:35:f7:97:72:d2: d5:b1:68:53:30:d3:af:4e:a0:0e:d4:45:38:94:e1: ab:ae:0a:76:4c:8d:97:eb:81:35:d9:e6:2c:71:56: 25:cd:a7:71:67:dd:ef:3a:9e:1c:8e:3a:15:0a:fd: 9f:3e:4c:29:1d:d4:56:80:7f:c1:f8:70:d9:c1:02: 68:2a:27:0a:dc:49:0f:d2:01:e3:fd:eb:c2:df:a0: 73:39:4b:bf:e1:42:8c:27:f4:2a:5e:96:29:43:2d: c1:97:2d:4e:34:c3:bc:40:8f:a0:f6:3b:ad:63:3c: b6:7f:20:b2:36:8f:d0:5c:20:0f:5c:b5:c6:11:d1: ae:47:82:95:f4:c5:04:30:11:4b:45:1e:1e:27:21: d4:84:32:08:36:e1:cc:49:1f:f9:23:75:d9:bc:c4: a3:4d:27:b8:7f:df:98:ac:93:13:5a:c3:48:0c:d5: db:7c:8a:dc:d8:cd:39:4b:37:b0:92:7b:be:a3:d4: ed:1a:17:68:d1:a7:ab:49:08:de:45:39:4e:2c:eb: 56:48:40:91:6d:18:0b:2a:c7:c8:7f:bb:a9:33:89: 18:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AA:EF:F8:10:04:E3:5C:95:31:7D:45:79:A6:54:CE:24:E2:83:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09d9c6a2-5350-3c50-9f8f-e86aa66145e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ae:37:b8:e7:17:82:68:7e:dc:63:72:87:4d:5a:0d:c7:09: 93:38:e7:77:c8:e7:d7:e8:5d:03:12:bf:a4:14:49:e3:88:1e: e8:ed:9e:cd:49:7a:0d:9f:4e:da:39:40:96:33:be:07:34:05: e3:01:49:ae:0d:15:9c:06:08:37:2e:c2:71:40:48:14:e7:0b: 33:c5:2b:d4:ae:16:9f:7a:e3:f5:0c:d8:6a:2c:f5:b7:89:82: 2c:1f:7c:6e:2a:69:8a:8a:4a:a9:cf:d5:1a:f2:86:d8:63:b9: d9:db:8a:fa:9b:eb:8d:7e:a2:ed:8f:fa:a9:ad:57:a6:a9:03: 2d:8d:b4:13:f8:ed:96:77:fc:c4:e1:97:41:8b:57:d8:59:44: 28:46:98:60:70:16:6d:da:bc:61:53:cd:6f:30:86:94:ae:6a: aa:7b:30:31:f1:d4:3f:32:49:59:79:a9:11:4e:be:20:c8:5f: 1e:fa:0e:a6:4a:26:8d:f2:07:4f:9c:33:15:8d:d8:c4:72:f3: 34:da:0f:21:ba:8e:50:c2:91:32:98:71:38:03:d9:d3:ec:53: a2:c5:0f:ff:85:55:73:6b:9e:77:3c:ab:43:03:a8:7d:65:9b: c8:e0:66:b4:6e:3c:4c:74:9f:68:ed:33:9b:f5:3c:f1:43:47: e6:f5:17:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uT8Mjk+qRPQOf6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQzMDE4MzI1NloXDTI2MDcyOTE4MzI1NlowLzEtMCsGA1UEAxMk NTMxN2VjZTQtYmFkZi00Yjk0LTg0OTAtZGViN2FlMGU4YTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbUrixRIcna3Q6+xOXcf8D+jzHXxFX/0QjXt +QaWr2OGqpea0mSQNfeXctLVsWhTMNOvTqAO1EU4lOGrrgp2TI2X64E12eYscVYl zadxZ93vOp4cjjoVCv2fPkwpHdRWgH/B+HDZwQJoKicK3EkP0gHj/evC36BzOUu/ 4UKMJ/QqXpYpQy3Bly1ONMO8QI+g9jutYzy2fyCyNo/QXCAPXLXGEdGuR4KV9MUE MBFLRR4eJyHUhDIINuHMSR/5I3XZvMSjTSe4f9+YrJMTWsNIDNXbfIrc2M05Szew knu+o9TtGhdo0aerSQjeRTlOLOtWSECRbRgLKsfIf7upM4kYPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmq7/gQBONclTF9RXmmVM4k4oMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDlkOWM2YTItNTM1MC0z YzUwLTlmOGYtZTg2YWE2NjE0NWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCuN7jnF4JoftxjcodNWg3HCZM453fI59foXQMSv6QUSeOIHujtns1J eg2fTto5QJYzvgc0BeMBSa4NFZwGCDcuwnFASBTnCzPFK9SuFp964/UM2Gos9beJ giwffG4qaYqKSqnP1Rryhthjudnbivqb641+ou2P+qmtV6apAy2NtBP47ZZ3/MTh l0GLV9hZRChGmGBwFm3avGFTzW8whpSuaqp7MDHx1D8ySVl5qRFOviDIXx76DqZK Jo3yB0+cMxWN2MRy8zTaDyG6jlDCkTKYcTgD2dPsU6LFD/+FVXNrnnc8q0MDqH1l m8jgZrRuPEx0n2jtM5v1PPFDR+b1F0Q= -----END CERTIFICATE-----Generated at Tue May 12 21:52:34 2026 by rpki-client