$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d50a309-fbee-33ad-b903-52332cafa298.roa File: 2d50a309-fbee-33ad-b903-52332cafa298.roa (raw, json) Hash identifier: m00TTwVnkU69FXbKydgVTQNBcdyPCSb1J2eJeXR1oYs= Subject key identifier: 4A:03:6F:D6:3E:FF:41:7A:6F:53:D0:64:5D:59:17:D5:14:16:97:94 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584DAE4FC13B2B7DBD890A488E80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d50a309-fbee-33ad-b903-52332cafa298.roa Signing time: Thu 30 Apr 2026 18:32:55 +0000 ROA not before: Thu 30 Apr 2026 18:32:55 +0000 ROA not after: Wed 29 Jul 2026 18:32:55 +0000 asID: 44559 IP address blocks: 166.88.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:4f:c1:3b:2b:7d:bd:89:0a:48:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 30 18:32:55 2026 GMT Not After : Jul 29 18:32:55 2026 GMT Subject: CN=95a3bd30-163e-45f2-9b9d-7382f9f7e96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:6e:f7:94:f2:cf:aa:54:3d:4a:36:a4:92: 21:da:4d:d6:76:d3:fc:b0:a0:bb:77:09:e7:c7:d8: 76:b8:0a:41:7c:d6:97:d0:26:31:ac:6c:82:a7:7b: 9f:4c:6c:a1:62:31:19:54:c0:11:55:21:18:cc:0d: 10:26:42:7b:bc:b2:56:c4:c1:40:31:55:6e:c9:55: 21:1b:ee:49:bc:18:24:06:a9:f0:1a:cd:91:22:f7: d3:93:48:b8:87:a9:32:1e:3f:1a:d2:7b:2f:6d:be: a0:c9:78:df:68:da:06:c5:12:48:c8:bd:9d:76:56: 97:87:a2:89:27:c8:fc:ba:4e:1b:91:c9:97:0e:5b: 1d:fd:fe:8e:89:d2:72:f2:3f:87:32:45:35:8e:a2: e6:b6:48:06:41:2e:7d:48:12:a8:ea:59:48:36:b5: 0a:2c:d8:bd:d2:cb:21:3b:f5:ee:4a:33:05:b9:05: b4:02:d0:0c:ed:13:bd:de:5d:cd:fe:e7:7a:fd:71: 0c:30:51:82:0b:0a:3f:b9:7a:fb:a3:88:c1:eb:d4: 3a:7a:9f:af:e4:df:6d:c1:d1:78:65:e9:c7:fe:9f: 50:2d:2a:04:dd:74:a5:4d:6c:e9:0f:7a:33:d5:05: e8:33:73:cd:43:c9:ec:0d:39:22:ae:0c:1e:54:e4: c2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:03:6F:D6:3E:FF:41:7A:6F:53:D0:64:5D:59:17:D5:14:16:97:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d50a309-fbee-33ad-b903-52332cafa298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:5b:a6:de:9a:13:3c:a5:19:7f:01:c6:ea:34:f6:dc:c1:17: 95:58:94:15:b1:87:ec:f0:f3:c4:3b:e3:5b:29:0a:b3:b0:a9: 09:53:d3:fb:66:2a:86:7c:45:98:71:60:b8:85:3c:4f:4e:25: 96:a9:49:6b:b6:54:11:8a:1d:a0:f2:80:44:f1:60:95:a4:70: 93:f0:8d:2f:45:a8:41:ca:20:0b:4e:2b:7b:eb:c6:3d:24:b3: 5a:c8:d5:57:24:bc:1a:8c:20:2f:74:83:32:16:1e:ac:b5:9b: 49:57:60:b8:77:03:1a:49:fc:61:f1:be:1e:61:13:ae:57:59: 0b:1c:33:a1:e1:71:df:79:f5:4a:23:7b:bf:71:e3:7f:23:bc: 64:bd:05:b5:e3:a5:0f:26:b7:c9:e6:23:0f:33:88:a6:a4:2b: ff:ac:0f:22:ff:bb:6a:75:9a:5a:5c:cf:31:c2:00:08:28:14: 0c:39:4d:a5:cd:c7:b3:d9:b7:95:9a:a2:4f:e4:9d:ab:bf:97: 3c:61:3d:4e:70:2b:88:01:a8:01:63:7a:6d:f1:90:97:2a:81: 36:05:d6:e5:f0:91:3d:a2:77:84:e6:96:91:78:f5:68:37:6c: f5:bc:01:33:c0:7a:e9:e9:f1:5a:17:57:3b:fc:cb:05:7c:3c: 49:3b:95:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uT8E7K329iQpIjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQzMDE4MzI1NVoXDTI2MDcyOTE4MzI1NVowLzEtMCsGA1UEAxMk OTVhM2JkMzAtMTYzZS00NWYyLTliOWQtNzM4MmY5ZjdlOTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUFu95Tyz6pUPUo2pJIh2k3WdtP8sKC7dwnn x9h2uApBfNaX0CYxrGyCp3ufTGyhYjEZVMARVSEYzA0QJkJ7vLJWxMFAMVVuyVUh G+5JvBgkBqnwGs2RIvfTk0i4h6kyHj8a0nsvbb6gyXjfaNoGxRJIyL2ddlaXh6KJ J8j8uk4bkcmXDlsd/f6OidJy8j+HMkU1jqLmtkgGQS59SBKo6llINrUKLNi90ssh O/XuSjMFuQW0AtAM7RO93l3N/ud6/XEMMFGCCwo/uXr7o4jB69Q6ep+v5N9twdF4 ZenH/p9QLSoE3XSlTWzpD3oz1QXoM3PNQ8nsDTkirgweVOTCFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoDb9Y+/0F6b1PQZF1ZF9UUFpeUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmQ1MGEzMDktZmJlZS0z M2FkLWI5MDMtNTIzMzJjYWZhMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlbpt6aEzylGX8Bxuo09tzBF5VYlBWxh+zw88Q741spCrOwqQlT0/tm KoZ8RZhxYLiFPE9OJZapSWu2VBGKHaDygETxYJWkcJPwjS9FqEHKIAtOK3vrxj0k s1rI1VckvBqMIC90gzIWHqy1m0lXYLh3AxpJ/GHxvh5hE65XWQscM6Hhcd959Uoj e79x438jvGS9BbXjpQ8mt8nmIw8ziKakK/+sDyL/u2p1mlpczzHCAAgoFAw5TaXN x7PZt5Waok/knau/lzxhPU5wK4gBqAFjem3xkJcqgTYF1uXwkT2id4TmlpF49Wg3 bPW8ATPAeunp8VoXVzv8ywV8PEk7lbg= -----END CERTIFICATE-----Generated at Wed May 13 14:16:56 2026 by rpki-client