$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/884fdebd-f528-38e0-a719-5ec8933f2048.roa File: 884fdebd-f528-38e0-a719-5ec8933f2048.roa (raw, json) Hash identifier: jeRVdrK4/1SKId1+FiRLVnA646Kv5X2wA9/jwQyWzA0= Subject key identifier: 81:09:60:59:C1:FA:8E:22:17:82:64:76:0D:ED:B2:59:5E:FB:27:1F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D0EA7D924821FA49E66160250 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/884fdebd-f528-38e0-a719-5ec8933f2048.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 18779 IP address blocks: 166.88.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:d9:24:82:1f:a4:9e:66:16:02:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=6947322c-710f-4ce0-bb96-0d06be7a8c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e8:79:8f:26:a4:9c:d4:cc:ad:17:b3:c9:16: 97:1a:a3:1d:ed:b8:3f:58:31:19:1d:8e:04:bb:30: 68:b6:a7:e1:1b:c6:83:2c:99:9a:79:c9:9b:7a:87: 98:6d:9a:9b:7a:b6:b2:eb:2d:6a:60:25:0d:bf:f1: 70:0e:57:5e:49:9a:03:9b:de:66:e5:56:0d:5e:47: 56:6d:7e:a6:4e:1f:96:d1:f0:23:7c:98:d8:08:22: fe:71:2c:87:cf:54:09:c3:f9:9c:ff:28:17:53:2e: c2:e9:92:2c:c2:67:0a:95:9a:c0:66:8a:3c:9c:87: ef:27:fa:94:d2:1a:ce:0a:6d:3d:85:5d:4e:c2:6f: e4:4e:29:b7:fb:98:e2:b0:7b:10:e3:40:89:8b:41: 9a:2a:b7:5c:89:31:ac:b0:a1:99:70:05:84:bb:72: 43:89:75:f7:e4:78:31:a8:db:ea:88:e1:84:9e:81: cb:26:bc:ca:c4:10:60:ae:ea:ed:b0:f1:69:e9:c9: fb:c5:40:9e:38:1e:1f:34:f2:49:d0:7a:93:d1:50: cd:ff:4e:b4:9d:bd:0e:f6:6b:b6:0e:81:21:1c:99: f8:2a:f7:a6:da:a7:4f:0e:fb:42:72:17:81:99:cb: 19:12:18:1b:26:5f:2b:13:a9:40:43:0b:56:52:6a: 0c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:09:60:59:C1:FA:8E:22:17:82:64:76:0D:ED:B2:59:5E:FB:27:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/884fdebd-f528-38e0-a719-5ec8933f2048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:5a:69:73:72:9e:3b:f8:7d:e2:93:dc:5b:c6:fa:e1:5f:b1: 60:4e:46:d6:c9:85:b7:60:08:1b:37:4b:aa:94:8c:3b:e0:7e: f9:95:55:49:ca:c7:d7:22:c4:94:59:ce:53:64:5d:16:55:99: 17:e9:65:49:eb:a2:b7:1e:63:d0:96:2f:67:b0:d2:34:88:f5: 00:1a:9e:d8:87:3a:8f:ae:d7:f1:46:19:52:f5:f0:30:0b:bf: d6:0d:59:af:8b:0f:aa:0d:0e:81:d4:e1:71:4d:c6:62:39:93: b0:26:53:d5:b7:f1:e1:18:54:d4:14:a2:d6:0c:99:22:70:41: cf:36:67:84:a6:b2:7d:dc:16:7b:22:6b:ba:3e:5e:b9:d2:11: f4:11:36:bd:2a:3a:c6:1c:06:4e:96:ae:99:4f:f1:37:f4:42: a7:44:e9:56:f9:db:bb:20:dc:2f:88:00:4f:7c:c0:fa:e4:ad: 44:b9:4b:77:aa:89:e8:d0:fd:be:99:51:3a:98:1d:01:73:ba: d2:9d:a3:ea:d3:5a:4f:ab:46:69:46:68:fc:97:78:fb:fe:a6: 3c:17:bc:4b:41:a6:3a:e4:9b:02:71:53:9e:ba:5a:1a:8f:d2: 85:9c:84:c6:e3:c5:74:5e:1e:d8:34:d0:3f:d6:64:22:65:2d: 94:9c:79:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op9kkgh+knmYWAlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk Njk0NzMyMmMtNzEwZi00Y2UwLWJiOTYtMGQwNmJlN2E4YzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOh5jyaknNTMrRezyRaXGqMd7bg/WDEZHY4E uzBotqfhG8aDLJmaecmbeoeYbZqberay6y1qYCUNv/FwDldeSZoDm95m5VYNXkdW bX6mTh+W0fAjfJjYCCL+cSyHz1QJw/mc/ygXUy7C6ZIswmcKlZrAZoo8nIfvJ/qU 0hrOCm09hV1Owm/kTim3+5jisHsQ40CJi0GaKrdciTGssKGZcAWEu3JDiXX35Hgx qNvqiOGEnoHLJrzKxBBgrurtsPFp6cn7xUCeOB4fNPJJ0HqT0VDN/060nb0O9mu2 DoEhHJn4Kvem2qdPDvtCcheBmcsZEhgbJl8rE6lAQwtWUmoMgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEJYFnB+o4iF4Jkdg3tslle+ycfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODg0ZmRlYmQtZjUyOC0z OGUwLWE3MTktNWVjODkzM2YyMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpaaXNynjv4feKT3FvG+uFfsWBORtbJhbdgCBs3S6qUjDvgfvmVVUnK x9cixJRZzlNkXRZVmRfpZUnrorceY9CWL2ew0jSI9QAantiHOo+u1/FGGVL18DAL v9YNWa+LD6oNDoHU4XFNxmI5k7AmU9W38eEYVNQUotYMmSJwQc82Z4Smsn3cFnsi a7o+XrnSEfQRNr0qOsYcBk6WrplP8Tf0QqdE6Vb527sg3C+IAE98wPrkrUS5S3eq iejQ/b6ZUTqYHQFzutKdo+rTWk+rRmlGaPyXePv+pjwXvEtBpjrkmwJxU566WhqP 0oWchMbjxXReHtg00D/WZCJlLZScefY= -----END CERTIFICATE-----Generated at Thu Mar 26 01:01:36 2026 by rpki-client