$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6595606f-6960-3da4-ac52-91de9ed92e9d.roa File: 6595606f-6960-3da4-ac52-91de9ed92e9d.roa (raw, json) Hash identifier: 65FWre3mnE+CdMe9Qo6nN+LK9vcQAkdrA4pz/qUInVM= Subject key identifier: BB:A4:92:04:20:AD:F9:08:8E:74:59:80:A4:9E:85:48:0B:84:9C:15 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D281507D216604EBA29033E80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6595606f-6960-3da4-ac52-91de9ed92e9d.roa Signing time: Fri 13 Mar 2026 16:36:17 +0000 ROA not before: Fri 13 Mar 2026 16:36:17 +0000 ROA not after: Thu 11 Jun 2026 16:36:17 +0000 asID: 203054 IP address blocks: 166.88.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:28:15:07:d2:16:60:4e:ba:29:03:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 13 16:36:17 2026 GMT Not After : Jun 11 16:36:17 2026 GMT Subject: CN=fff1a729-5fb3-4cdb-b799-15102ebabb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:3d:8b:01:2f:ea:4f:0f:fd:b8:d8:fa:a9: 2f:a5:f9:a7:61:e4:b2:88:00:74:e2:62:83:89:eb: b3:c3:8b:6a:55:b8:3c:e1:f4:f9:45:9e:ad:c6:fe: 9e:7a:5e:c8:83:76:80:e4:51:7f:9d:10:5a:05:df: a2:04:74:34:09:d6:ba:29:b3:19:5f:71:4e:67:cc: d6:26:ea:2d:df:ce:80:2d:ef:f9:5c:d5:58:5c:4b: 4f:2c:82:8d:f9:c6:9f:23:8e:d2:0f:a8:36:26:43: 10:50:10:2e:0b:b8:d7:0a:a7:2c:0e:21:43:48:8a: 93:3f:ad:02:85:a3:e0:b4:e4:f4:09:c4:c6:07:0e: e7:23:24:80:40:97:f5:b5:f8:eb:f5:cc:9d:82:09: d0:a4:18:20:eb:84:55:2d:22:58:6c:5c:44:1b:6c: 44:aa:2f:b7:8e:3c:9c:71:94:79:26:eb:1d:c7:79: 51:86:f0:17:7a:f0:98:39:0d:21:11:fc:dc:eb:cb: f0:f5:b3:ca:3e:3b:ae:c0:3b:65:90:ba:03:d7:82: 00:b3:8d:24:b2:43:c8:a5:6c:24:6f:52:b4:2e:8a: 93:ae:f6:0b:7f:04:74:89:0f:d9:84:8e:f7:0f:26: 49:d6:77:da:5a:1f:c6:bd:99:3d:d5:08:ca:47:7f: d9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A4:92:04:20:AD:F9:08:8E:74:59:80:A4:9E:85:48:0B:84:9C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6595606f-6960-3da4-ac52-91de9ed92e9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5e:71:10:0a:e8:3e:69:65:92:c8:ab:aa:82:a1:00:04:12: 13:ea:c8:af:d9:1c:bd:a2:7e:b3:89:66:fd:ba:20:00:e8:51: e5:af:75:3e:31:52:a7:76:dc:1f:84:0a:a9:60:a5:fc:e9:c8: f7:3c:e5:de:79:d5:b2:4a:f4:ca:ba:f9:7c:87:49:57:36:51: d7:32:99:46:76:db:f4:9a:e9:67:4c:83:23:a8:91:f0:a7:21: 9f:00:5e:fc:bf:7e:e1:b2:6d:2e:6b:13:92:14:de:5c:11:f8: 78:f4:31:01:8a:aa:fd:83:f8:2b:fa:0b:ab:69:38:bb:65:19: ff:e3:5e:dc:48:d5:37:99:e9:05:9a:2a:ad:6b:c7:9b:5f:6e: bc:fb:a1:6b:c2:db:91:37:bc:38:2a:be:57:9f:e1:b4:cf:64: 13:d3:04:7b:a2:2c:5d:6c:a2:92:83:a0:90:fa:3c:ae:ad:d6: d6:3c:d5:3b:11:db:02:32:1b:42:ef:53:fd:5d:69:f3:88:db: e7:be:49:25:0a:8a:0e:94:f1:86:8c:83:d2:59:09:72:4c:b3: 2f:a9:2a:80:f1:d1:2a:71:06:75:96:a3:df:83:d6:d8:ed:c6: 34:ec:4a:83:b6:51:50:ff:66:42:9f:0f:ca:4d:6d:d4:31:e8: cf:38:26:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0oFQfSFmBOuikDPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMxMzE2MzYxN1oXDTI2MDYxMTE2MzYxN1owLzEtMCsGA1UEAxMk ZmZmMWE3MjktNWZiMy00Y2RiLWI3OTktMTUxMDJlYmFiYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+w9iwEv6k8P/bjY+qkvpfmnYeSyiAB04mKD ieuzw4tqVbg84fT5RZ6txv6eel7Ig3aA5FF/nRBaBd+iBHQ0Cda6KbMZX3FOZ8zW Juot386ALe/5XNVYXEtPLIKN+cafI47SD6g2JkMQUBAuC7jXCqcsDiFDSIqTP60C haPgtOT0CcTGBw7nIySAQJf1tfjr9cydggnQpBgg64RVLSJYbFxEG2xEqi+3jjyc cZR5Jusdx3lRhvAXevCYOQ0hEfzc68vw9bPKPjuuwDtlkLoD14IAs40kskPIpWwk b1K0LoqTrvYLfwR0iQ/ZhI73DyZJ1nfaWh/GvZk91QjKR3/Z1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLukkgQgrfkIjnRZgKSehUgLhJwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjU5NTYwNmYtNjk2MC0z ZGE0LWFjNTItOTFkZTllZDkyZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFecRAK6D5pZZLIq6qCoQAEEhPqyK/ZHL2ifrOJZv26IADoUeWvdT4x Uqd23B+ECqlgpfzpyPc85d551bJK9Mq6+XyHSVc2UdcymUZ22/Sa6WdMgyOokfCn IZ8AXvy/fuGybS5rE5IU3lwR+Hj0MQGKqv2D+Cv6C6tpOLtlGf/jXtxI1TeZ6QWa Kq1rx5tfbrz7oWvC25E3vDgqvlef4bTPZBPTBHuiLF1sopKDoJD6PK6t1tY81TsR 2wIyG0LvU/1dafOI2+e+SSUKig6U8YaMg9JZCXJMsy+pKoDx0SpxBnWWo9+D1tjt xjTsSoO2UVD/ZkKfD8pNbdQx6M84Jho= -----END CERTIFICATE-----Generated at Thu Mar 26 00:49:48 2026 by rpki-client