$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0faefaf0-e506-3b16-9859-16377b11e78a.roa File: 0faefaf0-e506-3b16-9859-16377b11e78a.roa (raw, json) Hash identifier: Pf64UXvr5VOy8gKnapofn/MC6zaMS8dM/b1NWM+SkQE= Subject key identifier: DE:27:CE:E6:FE:07:8F:46:23:EA:B7:C1:5E:4B:AC:A1:25:14:52:91 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F17324CFA8ED52376F28BD800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0faefaf0-e506-3b16-9859-16377b11e78a.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 11426 IP address blocks: 166.88.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:4c:fa:8e:d5:23:76:f2:8b:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=0c4985c1-93e3-4b21-96d4-2fdd1cef9c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:47:43:f0:0c:4a:47:57:fd:36:d9:52:33:82: 50:c6:3e:10:8f:9c:0c:0a:08:a4:a7:0e:5e:63:07: 96:b0:e2:9f:7e:ec:31:01:b8:81:50:52:57:aa:7d: 25:33:ee:a4:b3:f1:4c:da:63:4b:82:fe:ed:0b:a7: 22:e3:f7:77:f2:f5:a1:c4:64:03:47:af:a2:42:63: 76:b5:0e:dc:63:01:69:a7:e8:3f:85:12:38:d4:c0: a0:f6:68:1a:50:77:1f:8d:6f:ad:46:f3:f9:bf:93: d9:5d:2c:d0:13:85:3d:c9:69:76:44:a4:ac:d0:6c: e8:57:9e:fb:cf:e6:f8:7b:8d:7e:3e:2a:60:60:f7: dd:98:98:43:16:cf:a9:83:e3:0b:8c:d5:c9:59:f6: 9e:a9:24:87:90:f6:85:d3:a2:5a:ec:37:3a:39:dc: af:c7:54:13:cd:7f:47:c1:60:63:c6:7c:ea:c0:17: 8f:db:7b:a1:03:4f:ac:36:53:af:c6:28:06:ce:af: 7d:e1:5f:66:df:8c:c9:2d:aa:07:16:89:0e:0e:1f: 49:6c:fe:81:60:72:e2:db:e6:03:5d:3f:9b:5e:86: b5:59:32:0b:0e:d5:38:ae:4a:a1:90:4b:39:58:84: 46:bb:0a:ee:18:30:7f:ef:77:98:74:19:5f:cf:d7: 28:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:27:CE:E6:FE:07:8F:46:23:EA:B7:C1:5E:4B:AC:A1:25:14:52:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0faefaf0-e506-3b16-9859-16377b11e78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:22:4d:8f:dd:92:91:04:d3:89:ec:8f:b1:83:f4:c8:1b:94: 81:2e:f4:86:1e:86:9a:c2:17:db:fa:fa:39:43:8b:1a:6c:6d: c3:05:c5:c0:a7:28:f2:16:f9:40:ad:f8:d4:95:c7:a4:99:b2: f7:ab:f2:5e:53:3d:93:c3:2e:b0:36:a2:2e:0d:82:ab:e2:75: 8d:0f:92:b4:a0:44:00:6a:e7:e7:b8:04:39:a9:9b:69:4a:cf: 2b:9c:b7:da:1b:85:79:13:73:44:de:6c:60:1b:d7:10:ae:54: 60:16:99:30:f8:bf:3b:a8:e6:ea:71:c7:d4:27:6e:28:35:ca: 10:ab:a4:77:19:a2:72:db:7e:c3:12:8b:95:e6:9d:95:fe:6c: 84:1d:c4:3c:61:3e:a0:5f:a1:14:85:da:40:aa:38:9f:6d:1b: 50:40:13:b1:1e:71:70:4e:9b:bf:f5:43:22:97:97:5e:83:3f: 4f:b5:7d:2a:5d:bd:3b:b2:10:cf:96:1f:47:86:a7:35:dc:75: 74:9f:00:19:64:82:0f:a3:54:20:74:08:9b:1e:a4:de:05:7f: 6e:30:ce:5b:b3:df:94:be:cb:d1:18:00:8d:21:28:f2:c5:37: e2:33:06:ff:16:7b:b9:d8:22:43:59:b3:86:93:94:08:5d:c6: b1:04:f6:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkz6jtUjdvKL2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MGM0OTg1YzEtOTNlMy00YjIxLTk2ZDQtMmZkZDFjZWY5Yzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEdD8AxKR1f9NtlSM4JQxj4Qj5wMCgikpw5e YweWsOKffuwxAbiBUFJXqn0lM+6ks/FM2mNLgv7tC6ci4/d38vWhxGQDR6+iQmN2 tQ7cYwFpp+g/hRI41MCg9mgaUHcfjW+tRvP5v5PZXSzQE4U9yWl2RKSs0GzoV577 z+b4e41+PipgYPfdmJhDFs+pg+MLjNXJWfaeqSSHkPaF06Ja7Dc6Odyvx1QTzX9H wWBjxnzqwBeP23uhA0+sNlOvxigGzq994V9m34zJLaoHFokODh9JbP6BYHLi2+YD XT+bXoa1WTILDtU4rkqhkEs5WIRGuwruGDB/73eYdBlfz9coZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4nzub+B49GI+q3wV5LrKElFFKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMGZhZWZhZjAtZTUwNi0z YjE2LTk4NTktMTYzNzdiMTFlNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIiTY/dkpEE04nsj7GD9MgblIEu9IYehprCF9v6+jlDixpsbcMFxcCn KPIW+UCt+NSVx6SZsver8l5TPZPDLrA2oi4NgqvidY0PkrSgRABq5+e4BDmpm2lK zyuct9obhXkTc0TebGAb1xCuVGAWmTD4vzuo5upxx9Qnbig1yhCrpHcZonLbfsMS i5XmnZX+bIQdxDxhPqBfoRSF2kCqOJ9tG1BAE7EecXBOm7/1QyKXl16DP0+1fSpd vTuyEM+WH0eGpzXcdXSfABlkgg+jVCB0CJsepN4Ff24wzluz35S+y9EYAI0hKPLF N+IzBv8We7nYIkNZs4aTlAhdxrEE9lc= -----END CERTIFICATE-----Generated at Sat Sep 26 15:40:42 2026 by rpki-client