$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79b44bb2-af12-3bb6-83c1-fa639f6b8d2e.roa File: 79b44bb2-af12-3bb6-83c1-fa639f6b8d2e.roa (raw, json) Hash identifier: Z3XdA0RaBqKQVoqlPhHMTnHwnJik6TREbH7MPQ9wIPQ= Subject key identifier: 02:12:AA:72:8F:30:51:F0:E8:12:B9:00:34:80:F0:49:29:89:EA:B1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D0EA7D79614EAA169783D2E00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79b44bb2-af12-3bb6-83c1-fa639f6b8d2e.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 18779 IP address blocks: 166.88.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:d7:96:14:ea:a1:69:78:3d:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=31b0bc83-68e0-4c1a-a73c-b1f5d0e26877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:99:1d:b8:7d:4a:8b:6a:14:5c:6e:b4:f4:9c: e3:dc:68:6c:6c:ad:f4:d7:b1:60:a2:fb:36:50:74: de:13:8f:d2:59:b2:cc:3d:82:48:60:d0:58:95:be: 50:f4:b4:e4:8c:08:33:9a:50:27:23:80:73:f3:32: 86:4d:63:33:39:44:0d:18:e7:0d:9b:75:4d:fe:11: a2:a7:87:f2:7a:8a:98:c8:42:0a:36:6b:4f:6f:9a: fb:1f:2e:a3:ee:c6:8e:44:70:0e:d7:8c:18:86:9f: ab:87:e5:2c:10:33:ad:aa:bc:78:e1:fe:d3:8b:de: b5:22:79:88:a2:92:c1:e5:c4:e7:22:a4:23:ba:9c: 7b:d3:9e:aa:ad:d4:a9:08:f5:11:87:05:49:e8:f2: 65:13:80:82:11:85:83:22:63:55:6e:2d:f4:31:3e: 77:f5:93:4c:aa:bb:71:cc:6f:d1:e8:82:eb:0e:c4: e3:9b:9e:62:65:4a:f8:01:eb:9c:12:e5:75:b5:bd: 7d:da:29:c8:64:e4:ab:ae:e9:19:21:94:ad:30:e4: c9:08:e2:72:69:d9:f4:9a:74:67:94:b0:f4:e7:69: f1:14:28:b8:af:db:1e:72:f0:ef:af:34:03:0a:68: 83:17:56:d7:49:22:0a:f7:31:ee:d5:cb:39:d9:d5: 7f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:12:AA:72:8F:30:51:F0:E8:12:B9:00:34:80:F0:49:29:89:EA:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79b44bb2-af12-3bb6-83c1-fa639f6b8d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:33:8e:a6:91:06:c8:92:ad:ea:15:05:f9:4f:79:a4:26:78: eb:fc:95:4c:ee:5b:1a:83:73:a1:a5:8e:40:05:ce:60:42:67: 18:74:bf:c0:55:5c:a9:00:d0:85:46:e4:fc:4e:fc:d5:a2:d0: 81:1c:ed:86:99:d2:d5:5d:9d:f2:44:79:c3:3c:e8:6e:0e:62: df:29:82:7d:c2:fb:75:0d:4f:e9:5e:b9:df:86:46:4e:12:8a: 00:a0:e4:25:35:30:69:32:d4:c7:bc:1c:66:50:eb:25:66:f1: b7:0b:38:20:2e:59:c6:cc:5d:89:d4:a9:fc:3f:45:5b:ac:81: 54:a1:3a:31:76:0e:98:49:4f:f9:f0:c7:07:47:ce:3d:ef:94: 9a:6e:94:a2:c7:03:15:f3:1f:6d:b6:06:42:9c:5d:b7:78:de: e8:a5:8b:10:9e:f4:52:f5:3e:e8:15:30:45:47:3d:ed:bb:1b: bc:64:da:9b:89:99:d8:ab:f2:57:81:ef:f3:40:10:0e:4f:ad: 18:0c:4d:5c:f8:9e:be:f6:5f:38:28:b0:5d:fd:47:c3:57:ff: 53:fb:07:21:3d:5b:6d:55:33:37:1c:ea:7b:6e:b9:54:f1:6b: c6:66:70:67:5e:80:d2:a1:b7:c3:01:62:c3:73:ff:e4:57:70: 91:ae:c8:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op9eWFOqhaXg9LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk MzFiMGJjODMtNjhlMC00YzFhLWE3M2MtYjFmNWQwZTI2ODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5kduH1Ki2oUXG609Jzj3GhsbK3017Fgovs2 UHTeE4/SWbLMPYJIYNBYlb5Q9LTkjAgzmlAnI4Bz8zKGTWMzOUQNGOcNm3VN/hGi p4fyeoqYyEIKNmtPb5r7Hy6j7saORHAO14wYhp+rh+UsEDOtqrx44f7Ti961InmI opLB5cTnIqQjupx7056qrdSpCPURhwVJ6PJlE4CCEYWDImNVbi30MT539ZNMqrtx zG/R6ILrDsTjm55iZUr4AeucEuV1tb192inIZOSrrukZIZStMOTJCOJyadn0mnRn lLD052nxFCi4r9secvDvrzQDCmiDF1bXSSIK9zHu1cs52dV/qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAISqnKPMFHw6BK5ADSA8EkpieqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzliNDRiYjItYWYxMi0z YmI2LTgzYzEtZmE2MzlmNmI4ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUzjqaRBsiSreoVBflPeaQmeOv8lUzuWxqDc6GljkAFzmBCZxh0v8BV XKkA0IVG5PxO/NWi0IEc7YaZ0tVdnfJEecM86G4OYt8pgn3C+3UNT+leud+GRk4S igCg5CU1MGky1Me8HGZQ6yVm8bcLOCAuWcbMXYnUqfw/RVusgVShOjF2DphJT/nw xwdHzj3vlJpulKLHAxXzH222BkKcXbd43uilixCe9FL1PugVMEVHPe27G7xk2puJ mdir8leB7/NAEA5PrRgMTVz4nr72XzgosF39R8NX/1P7ByE9W21VMzcc6ntuuVTx a8ZmcGdegNKht8MBYsNz/+RXcJGuyNg= -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:39 2026 by rpki-client