$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/401e0e83-65ef-396c-8a57-4fc70bc8ed38.roa File: 401e0e83-65ef-396c-8a57-4fc70bc8ed38.roa (raw, json) Hash identifier: DNKJ/WgsIOgJQlI8zkBfm4wsHrcODQbzRdfFZdXZ70c= Subject key identifier: D3:13:0A:0D:34:AE:64:48:75:D9:00:52:F4:1A:DA:1C:71:87:12:F8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D0EA7D9C6A48C040E623B3E80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/401e0e83-65ef-396c-8a57-4fc70bc8ed38.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 18779 IP address blocks: 166.88.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:d9:c6:a4:8c:04:0e:62:3b:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=44724d23-2dd4-42d2-9cbc-3e0f49c94949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f6:0b:6d:5f:ca:8f:00:61:f4:1e:02:a0:44: e0:26:d2:51:88:be:ef:b9:e8:ee:ed:36:39:60:b2: 21:db:1f:45:6f:7c:c4:a7:16:b2:8d:5d:fb:f1:2a: eb:9f:f5:ce:3a:d2:d4:de:83:5c:af:4c:ee:27:7f: 6d:7c:b9:6a:52:99:30:27:1c:83:50:e4:0c:3e:57: 2e:f3:46:59:f5:b2:84:b9:8a:56:a5:55:62:58:cf: 5e:23:76:ac:82:c2:a2:c8:ba:02:4b:0b:5f:2f:da: b4:0b:cd:05:ce:46:d0:99:47:cf:70:c1:94:1e:01: 66:fb:32:a6:eb:66:fe:0e:45:80:60:28:28:74:0d: 1f:05:bf:eb:d1:3f:21:af:ef:47:49:89:4b:b4:7d: df:a0:56:68:80:11:f0:cf:52:65:01:c6:51:10:c7: 37:08:7a:57:28:a9:9a:7b:42:0d:6a:23:f6:a9:1e: d2:13:aa:ae:21:30:f9:8c:92:05:7d:f6:e9:ac:33: 01:98:7d:07:aa:f0:f4:a2:f8:ff:24:d9:60:ee:6f: 29:40:6f:b7:bf:7e:88:dc:70:7e:de:3b:74:1e:c6: ee:78:0c:a6:e1:0d:21:53:06:f0:64:e8:b8:51:17: e1:49:00:be:1b:85:3e:46:27:ac:0a:b2:24:dc:d4: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:13:0A:0D:34:AE:64:48:75:D9:00:52:F4:1A:DA:1C:71:87:12:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/401e0e83-65ef-396c-8a57-4fc70bc8ed38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:54:2f:1d:bf:2b:95:05:28:a1:45:81:81:43:09:dc:71:0f: 36:f5:19:84:c1:ca:a8:c1:a7:77:86:84:2a:b7:c9:40:f0:9e: d5:99:27:73:22:f8:22:60:5a:55:70:38:b2:e4:81:8a:e0:78: 22:06:33:45:50:60:1a:16:e0:4d:82:da:6b:ae:3f:e2:86:47: 83:22:ff:2d:b9:5b:d9:9a:ab:e5:7c:ec:83:c8:55:a9:3d:c4: 3d:40:90:b4:19:c1:fa:15:e2:8e:e9:1b:7b:98:a1:94:05:7e: cc:c2:dd:ae:a5:7a:93:e6:bf:02:d2:20:76:57:d3:98:00:d5: e4:bd:fb:6a:0d:2c:68:46:6d:8b:ef:f7:70:7f:13:24:ef:d6: f8:64:01:38:0d:74:24:b3:59:c1:3d:bf:75:7c:af:1c:3c:78: 85:cd:3b:39:c0:70:d5:fb:ae:f2:f0:9c:0d:88:f1:d4:48:02: 1b:30:1a:69:a1:d2:ea:aa:fb:36:0e:f1:59:20:8b:b9:a9:4a: c8:65:54:2f:d5:0f:d6:f4:34:30:a3:50:6b:a8:43:4c:82:40: 77:f7:85:d5:8e:94:d3:f7:d4:77:22:f3:61:ed:b4:73:f3:63: 9d:fa:21:6a:02:7b:a5:93:4b:cf:00:1b:fb:fd:e0:85:d0:63: 9d:2d:a7:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op9nGpIwEDmI7PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NDQ3MjRkMjMtMmRkNC00MmQyLTljYmMtM2UwZjQ5Yzk0OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPYLbV/KjwBh9B4CoETgJtJRiL7vueju7TY5 YLIh2x9Fb3zEpxayjV378Srrn/XOOtLU3oNcr0zuJ39tfLlqUpkwJxyDUOQMPlcu 80ZZ9bKEuYpWpVViWM9eI3asgsKiyLoCSwtfL9q0C80FzkbQmUfPcMGUHgFm+zKm 62b+DkWAYCgodA0fBb/r0T8hr+9HSYlLtH3foFZogBHwz1JlAcZREMc3CHpXKKma e0INaiP2qR7SE6quITD5jJIFffbprDMBmH0HqvD0ovj/JNlg7m8pQG+3v36I3HB+ 3jt0HsbueAym4Q0hUwbwZOi4URfhSQC+G4U+RiesCrIk3NQhGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMTCg00rmRIddkAUvQa2hxxhxL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDAxZTBlODMtNjVlZi0z OTZjLThhNTctNGZjNzBiYzhlZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplj+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlULx2/K5UFKKFFgYFDCdxxDzb1GYTByqjBp3eGhCq3yUDwntWZJ3Mi +CJgWlVwOLLkgYrgeCIGM0VQYBoW4E2C2muuP+KGR4Mi/y25W9maq+V87IPIVak9 xD1AkLQZwfoV4o7pG3uYoZQFfszC3a6lepPmvwLSIHZX05gA1eS9+2oNLGhGbYvv 93B/EyTv1vhkATgNdCSzWcE9v3V8rxw8eIXNOznAcNX7rvLwnA2I8dRIAhswGmmh 0uqq+zYO8Vkgi7mpSshlVC/VD9b0NDCjUGuoQ0yCQHf3hdWOlNP31Hci82HttHPz Y536IWoCe6WTS88AG/v94IXQY50tp74= -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:38 2026 by rpki-client