$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7f632bf5-5608-3000-a46a-c3dd48dad668.roa File: 7f632bf5-5608-3000-a46a-c3dd48dad668.roa (raw, json) Hash identifier: 4779WJh98dP6suyKJh91X3IzZYKn4rIuCtJljkye+tQ= Subject key identifier: 96:0F:F4:36:16:54:E7:93:FE:2B:84:3B:07:F2:F9:26:64:9E:CA:46 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D366F53EC93A042DAD8650400 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7f632bf5-5608-3000-a46a-c3dd48dad668.roa Signing time: Wed 18 Mar 2026 19:59:32 +0000 ROA not before: Wed 18 Mar 2026 19:59:32 +0000 ROA not after: Tue 16 Jun 2026 19:59:32 +0000 asID: 401152 IP address blocks: 166.88.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:6f:53:ec:93:a0:42:da:d8:65:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 18 19:59:32 2026 GMT Not After : Jun 16 19:59:32 2026 GMT Subject: CN=8b7d1019-5ed3-4587-aa14-67dca6671dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:cc:b4:19:3e:12:9a:46:86:5c:45:eb:c8: 06:66:5d:7b:54:fb:4d:fd:29:b5:e4:d4:27:25:67: e3:13:5a:86:8a:33:e7:51:71:71:33:c7:5d:f0:fb: e6:6d:fb:7a:82:69:09:d3:53:04:30:33:62:f9:d5: 5e:78:c0:86:c8:94:48:3b:0a:60:71:b4:92:c2:d2: 6d:0c:03:3b:3d:a1:57:52:bb:d7:77:f9:2f:ed:4e: 2e:72:ac:9c:d9:fe:4c:e7:84:0a:5e:00:15:77:e2: f8:e5:36:04:f9:37:c3:4b:ce:b0:dd:39:24:4a:01: d6:01:41:c4:47:3d:fe:f6:39:c6:4b:7f:3d:35:de: 34:ef:d3:3f:e8:df:99:d4:f4:3c:44:dd:ce:18:d4: db:34:b9:b3:63:d6:58:f2:39:55:66:d3:f6:21:d6: 09:6f:08:d5:40:4c:06:5b:b9:a6:ca:99:94:6c:91: af:4d:14:69:02:18:95:6d:71:12:dd:8c:a0:69:1c: 44:5a:b5:f1:b7:57:ab:21:f8:92:a8:20:54:da:b2: b6:62:dc:ad:00:54:a5:ac:e0:7f:47:eb:4f:4e:74: d5:69:a7:d3:fb:59:f8:40:3e:d2:f6:26:ce:d7:82: c8:1e:5d:c5:35:99:af:43:c3:10:ce:8e:f2:21:df: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0F:F4:36:16:54:E7:93:FE:2B:84:3B:07:F2:F9:26:64:9E:CA:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7f632bf5-5608-3000-a46a-c3dd48dad668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f2:82:83:5f:29:db:eb:1e:db:4d:9b:ea:1c:e3:79:f7:a7: 23:ee:46:8d:26:9f:9e:f3:b3:60:15:fc:50:2f:8e:7c:bc:20: a8:13:2a:b2:50:7d:d4:eb:4b:4a:a8:6b:55:b8:69:7b:cb:a6: 54:d4:8f:d0:fd:ca:5f:64:55:b4:60:c5:66:d0:a0:36:01:06: 56:ae:b6:ae:0c:5e:ad:c7:ae:d8:22:6d:1d:45:f9:64:79:58: 7e:cb:5f:cc:cd:82:ff:ca:33:d9:16:b2:02:b4:04:bd:14:bb: 25:9e:5b:29:d3:1c:e1:3a:e9:65:14:69:4b:37:8d:7e:dc:3d: 10:a3:94:de:4c:32:e6:34:a6:fb:c4:53:91:a2:03:66:17:01: 3d:b2:c6:ce:a7:41:f1:70:83:a7:9b:5e:51:b7:ee:1d:8b:fb: d2:7f:37:22:df:52:87:50:1c:52:73:84:da:b0:f9:b5:a5:21: 4d:64:bd:0c:b3:41:75:86:e7:a3:72:fc:6b:75:15:6e:0d:9e: 33:59:13:db:b2:9c:52:0c:24:42:84:2a:81:a5:e4:47:1d:71: 3e:eb:43:75:64:74:86:fe:ef:ad:15:53:f7:4f:f4:82:f5:59: db:10:0b:f3:e5:fd:24:02:f9:37:ba:fc:b2:97:5a:57:0f:4b: d7:7a:49:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02b1Psk6BC2thlBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMxODE5NTkzMloXDTI2MDYxNjE5NTkzMlowLzEtMCsGA1UEAxMk OGI3ZDEwMTktNWVkMy00NTg3LWFhMTQtNjdkY2E2NjcxZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJnMtBk+EppGhlxF68gGZl17VPtN/Sm15NQn JWfjE1qGijPnUXFxM8dd8Pvmbft6gmkJ01MEMDNi+dVeeMCGyJRIOwpgcbSSwtJt DAM7PaFXUrvXd/kv7U4ucqyc2f5M54QKXgAVd+L45TYE+TfDS86w3TkkSgHWAUHE Rz3+9jnGS389Nd4079M/6N+Z1PQ8RN3OGNTbNLmzY9ZY8jlVZtP2IdYJbwjVQEwG W7mmypmUbJGvTRRpAhiVbXES3YygaRxEWrXxt1erIfiSqCBU2rK2YtytAFSlrOB/ R+tPTnTVaafT+1n4QD7S9ibO14LIHl3FNZmvQ8MQzo7yId8a/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYP9DYWVOeT/iuEOwfy+SZknspGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvN2Y2MzJiZjUtNTYwOC0z MDAwLWE0NmEtYzNkZDQ4ZGFkNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHygoNfKdvrHttNm+oc43n3pyPuRo0mn57zs2AV/FAvjny8IKgTKrJQ fdTrS0qoa1W4aXvLplTUj9D9yl9kVbRgxWbQoDYBBlautq4MXq3HrtgibR1F+WR5 WH7LX8zNgv/KM9kWsgK0BL0UuyWeWynTHOE66WUUaUs3jX7cPRCjlN5MMuY0pvvE U5GiA2YXAT2yxs6nQfFwg6ebXlG37h2L+9J/NyLfUodQHFJzhNqw+bWlIU1kvQyz QXWG56Ny/Gt1FW4NnjNZE9uynFIMJEKEKoGl5EcdcT7rQ3VkdIb+760VU/dP9IL1 WdsQC/Pl/SQC+Te6/LKXWlcPS9d6SSo= -----END CERTIFICATE-----Generated at Thu Mar 26 00:49:49 2026 by rpki-client