$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4120909a-da13-31c9-9ac4-d02ace972a6b.roa File: 4120909a-da13-31c9-9ac4-d02ace972a6b.roa (raw, json) Hash identifier: rBhkh07j0F9KnucrrlDmYOVZxBJ4m3cJ7fw3pnK2sd8= Subject key identifier: 71:F1:A1:35:41:53:AE:DA:CF:D5:56:68:42:97:CD:0A:3A:BE:2F:33 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584DA6B02C2ABE226BCF09334180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4120909a-da13-31c9-9ac4-d02ace972a6b.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 26548 IP address blocks: 166.88.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:2c:2a:be:22:6b:cf:09:33:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=6d1300ca-49c4-4007-9846-50556971a61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ce:5b:3a:91:b4:44:6c:fb:a9:b9:65:ac:c5: 83:78:c3:84:f1:fb:1e:fa:c1:ad:22:94:13:8d:75: f2:1a:17:2b:d0:10:9c:a4:4d:eb:75:b4:36:5d:c8: e7:09:51:42:08:aa:d2:58:8b:81:4f:6e:de:7f:ca: da:c9:12:60:d5:a0:5e:31:de:1d:c3:3d:16:e3:3a: 56:00:d5:19:b2:f8:dc:63:01:47:cc:9f:b6:95:d7: 60:5c:e3:68:b9:13:4d:51:78:ba:94:91:e0:78:36: fd:3b:ce:ff:56:94:6f:29:26:68:6f:bd:3b:5e:6b: 09:74:b3:e0:c0:ba:27:37:bb:37:99:9a:b6:ca:a3: 3d:d6:56:27:6b:e2:b9:82:e0:60:d3:14:45:2f:8e: 4e:83:06:cb:a6:67:fd:6d:cb:7e:c7:73:2d:12:63: 07:94:b8:5c:bf:90:b9:50:6e:79:55:01:36:7a:2b: 2e:3f:9b:3e:0f:a5:0a:7b:67:9c:13:f5:b5:48:e7: 0c:04:30:ae:83:9f:a1:69:ce:6b:aa:a4:99:f8:74: c6:07:d2:98:73:1d:ef:3e:49:7a:64:23:5d:6f:c8: 79:9d:32:55:2d:f3:1c:92:84:99:f0:b8:b9:8b:1f: aa:05:4c:ce:31:67:4e:f9:8d:cb:dd:b4:1f:a4:99: 62:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F1:A1:35:41:53:AE:DA:CF:D5:56:68:42:97:CD:0A:3A:BE:2F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4120909a-da13-31c9-9ac4-d02ace972a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:1c:a1:e8:b7:e0:a0:27:5a:66:34:bc:ec:9a:dd:85:e7:4c: 48:d1:ee:01:fe:a5:7e:eb:d1:53:5d:03:ab:19:72:6b:9d:12: 24:5c:8f:18:25:93:e5:91:c0:9a:66:66:af:e4:97:c1:02:b7: 60:a4:99:65:89:a6:06:72:1e:46:d2:78:42:13:05:2f:65:de: 54:d6:8e:5e:aa:d7:77:b3:03:27:d1:a0:40:ef:d9:da:30:cf: c9:02:0e:0b:42:2f:7f:90:65:99:37:eb:73:cd:89:eb:98:39: 1c:df:59:7d:e3:51:54:ee:00:f3:6d:86:c4:14:dc:01:43:d5: f6:d3:ad:39:ed:ec:48:74:2e:63:49:b7:dd:ef:8e:d3:3f:43: f4:ef:ce:af:fa:77:c0:53:91:e3:20:d3:89:8f:9d:22:9f:9e: 70:44:a7:91:a9:02:56:33:e1:8d:71:ed:6e:23:d5:1a:9a:e6: 0e:16:d0:b6:27:b1:66:b2:e9:fb:03:27:aa:89:99:c1:ef:3a: c8:7c:fb:d5:b7:7a:70:40:fb:45:a9:55:5f:f9:b8:3c:d2:d0: fb:a2:79:0f:21:c8:2b:9c:57:6b:bc:d3:97:e3:87:93:30:f4: 0e:63:26:61:bf:34:31:ea:ba:75:a5:ea:ba:9f:ce:ad:79:9c: 9b:0a:f0:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCwqviJrzwkzQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NmQxMzAwY2EtNDljNC00MDA3LTk4NDYtNTA1NTY5NzFhNjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi85bOpG0RGz7qbllrMWDeMOE8fse+sGtIpQT jXXyGhcr0BCcpE3rdbQ2XcjnCVFCCKrSWIuBT27ef8rayRJg1aBeMd4dwz0W4zpW ANUZsvjcYwFHzJ+2lddgXONouRNNUXi6lJHgeDb9O87/VpRvKSZob707XmsJdLPg wLonN7s3mZq2yqM91lYna+K5guBg0xRFL45OgwbLpmf9bct+x3MtEmMHlLhcv5C5 UG55VQE2eisuP5s+D6UKe2ecE/W1SOcMBDCug5+hac5rqqSZ+HTGB9KYcx3vPkl6 ZCNdb8h5nTJVLfMckoSZ8Li5ix+qBUzOMWdO+Y3L3bQfpJliWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHxoTVBU67az9VWaEKXzQo6vi8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDEyMDkwOWEtZGExMy0z MWM5LTlhYzQtZDAyYWNlOTcyYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplirMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAcoei34KAnWmY0vOya3YXnTEjR7gH+pX7r0VNdA6sZcmudEiRcjxgl k+WRwJpmZq/kl8ECt2CkmWWJpgZyHkbSeEITBS9l3lTWjl6q13ezAyfRoEDv2dow z8kCDgtCL3+QZZk363PNieuYORzfWX3jUVTuAPNthsQU3AFD1fbTrTnt7Eh0LmNJ t93vjtM/Q/Tvzq/6d8BTkeMg04mPnSKfnnBEp5GpAlYz4Y1x7W4j1Rqa5g4W0LYn sWay6fsDJ6qJmcHvOsh8+9W3enBA+0WpVV/5uDzS0PuieQ8hyCucV2u805fjh5Mw 9A5jJmG/NDHqunWl6rqfzq15nJsK8Cg= -----END CERTIFICATE-----Generated at Wed May 13 16:17:50 2026 by rpki-client