$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2c541b40-fb75-32d7-a89a-ad91942a4342.roa File: 2c541b40-fb75-32d7-a89a-ad91942a4342.roa (raw, json) Hash identifier: gWT0WW/dGsvR/T8jG/zkdFQ+00gNhvsQEkmm5jYx71g= Subject key identifier: A2:38:6F:5E:D0:3C:73:CD:F9:10:40:46:3B:12:F3:B9:B9:80:94:2B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D1707E2171419520F1EF46A00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2c541b40-fb75-32d7-a89a-ad91942a4342.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 212238 IP address blocks: 166.88.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:e2:17:14:19:52:0f:1e:f4:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=3d9b4198-3c9c-4905-aee9-dd86a823f9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:a7:4c:d5:49:04:87:ab:a6:12:43:81:35: e8:54:ba:87:ab:24:eb:d2:a5:81:2b:34:54:86:92: 09:f3:20:04:42:ab:c1:6f:97:b5:32:5c:be:d4:c6: a4:e4:28:51:6a:dc:1d:df:be:f2:89:23:0d:10:c8: b6:ef:67:a4:a2:31:61:24:cf:2a:36:e5:54:0f:25: 78:17:bb:1c:a0:a3:c4:1a:87:3b:24:19:b9:72:54: ac:f7:a1:7f:84:dd:5e:0d:1f:59:1d:22:d1:98:3c: b6:ca:44:db:33:c8:22:f4:c0:99:39:8c:2a:6d:92: 43:60:2c:1f:51:f3:78:46:08:b1:28:83:18:2f:b1: 1a:70:7e:ac:cb:f3:f2:f3:ca:e3:a7:8e:ab:29:d0: 00:52:a3:a9:e1:0b:a9:cb:0c:3d:cf:77:b4:f7:88: e9:22:2a:e2:bb:62:ee:05:ea:03:1c:4d:d3:98:59: e7:dd:ab:73:57:8f:ee:49:55:4c:81:c0:08:a9:3b: 56:47:0e:02:f8:cd:6d:08:a8:06:f2:9d:7d:97:56: 44:83:e8:2b:73:ac:bb:08:b9:57:87:fe:65:7e:58: 05:3a:5b:8b:8e:30:02:6d:3c:a7:b4:75:c6:24:b6: 3f:b1:9f:7e:46:63:cc:04:dc:81:68:b3:5d:f8:1d: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:38:6F:5E:D0:3C:73:CD:F9:10:40:46:3B:12:F3:B9:B9:80:94:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2c541b40-fb75-32d7-a89a-ad91942a4342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8b:75:eb:7f:13:31:43:ca:a4:95:e6:ff:29:5c:40:63:d0: 80:a6:59:96:25:a1:e6:d8:06:4e:06:2e:97:b1:19:20:46:e7: fe:2a:32:7c:04:35:87:48:0b:1d:67:9f:58:8b:3d:c9:1a:c5: ce:48:47:9c:c9:a5:22:f0:4f:8a:56:fe:24:80:7e:5f:16:47: e7:a0:cc:3e:40:2e:4f:55:72:02:e7:49:18:43:87:d1:0f:75: 87:37:33:49:1a:44:69:a3:94:50:c3:5e:6f:10:1e:e8:5e:2b: d7:1b:a7:7c:c3:11:77:4c:9b:2a:22:61:75:7c:9f:b5:8b:73: 50:55:ed:c4:96:3e:e1:34:a6:11:1b:5d:84:e8:9d:61:d0:6f: 27:d1:11:22:22:e7:f7:6f:f0:b6:05:fd:7a:fd:1f:e1:39:84: bf:65:3e:19:de:3f:2a:b5:04:77:65:a6:b2:da:06:4f:e9:45: 4b:37:66:ad:ec:90:30:f1:c1:5f:f7:36:2c:45:8c:46:3e:44: db:63:b7:0d:82:6d:d0:50:5e:f0:db:38:f8:34:12:28:1b:36: d8:70:8b:f4:8a:84:8e:af:ca:a7:a4:dd:1f:ec:ee:9b:c0:57: a8:58:09:b2:60:55:27:6a:c9:71:d3:57:fb:45:0a:e0:da:5b: 49:42:6b:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB+IXFBlSDx70agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk M2Q5YjQxOTgtM2M5Yy00OTA1LWFlZTktZGQ4NmE4MjNmOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXKnTNVJBIerphJDgTXoVLqHqyTr0qWBKzRU hpIJ8yAEQqvBb5e1Mly+1Mak5ChRatwd377yiSMNEMi272ekojFhJM8qNuVUDyV4 F7scoKPEGoc7JBm5clSs96F/hN1eDR9ZHSLRmDy2ykTbM8gi9MCZOYwqbZJDYCwf UfN4RgixKIMYL7EacH6sy/Py88rjp46rKdAAUqOp4Qupyww9z3e094jpIiriu2Lu BeoDHE3TmFnn3atzV4/uSVVMgcAIqTtWRw4C+M1tCKgG8p19l1ZEg+grc6y7CLlX h/5lflgFOluLjjACbTyntHXGJLY/sZ9+RmPMBNyBaLNd+B05UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKI4b17QPHPN+RBARjsS87m5gJQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmM1NDFiNDAtZmI3NS0z MmQ3LWE4OWEtYWQ5MTk0MmE0MzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGLdet/EzFDyqSV5v8pXEBj0ICmWZYloebYBk4GLpexGSBG5/4qMnwE NYdICx1nn1iLPckaxc5IR5zJpSLwT4pW/iSAfl8WR+egzD5ALk9VcgLnSRhDh9EP dYc3M0kaRGmjlFDDXm8QHuheK9cbp3zDEXdMmyoiYXV8n7WLc1BV7cSWPuE0phEb XYTonWHQbyfRESIi5/dv8LYF/Xr9H+E5hL9lPhnePyq1BHdlprLaBk/pRUs3Zq3s kDDxwV/3NixFjEY+RNtjtw2CbdBQXvDbOPg0EigbNthwi/SKhI6vyqek3R/s7pvA V6hYCbJgVSdqyXHTV/tFCuDaW0lCa6s= -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:09 2026 by rpki-client