$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d2c2f09-1592-3cbe-b817-b9da288d3974.roa File: 9d2c2f09-1592-3cbe-b817-b9da288d3974.roa (raw, json) Hash identifier: lviipAaIJi+s3jJ+SlV1E28Ya6p9EaAHC790siHAf0k= Subject key identifier: A0:B8:E6:44:65:90:DF:F0:B9:89:81:1F:D4:37:1D:2D:88:C4:47:D8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D27AAC121820E0AB2C0ECDC80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d2c2f09-1592-3cbe-b817-b9da288d3974.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 44559 IP address blocks: 166.88.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:c1:21:82:0e:0a:b2:c0:ec:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=010f31fd-5a0f-41fa-b176-85823b7be069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:ce:f9:38:b0:6c:41:a5:a9:4d:37:5a:8b: 1c:c3:35:3d:d4:83:e4:cc:01:e5:d1:9f:ec:11:e0: 5d:ff:d0:6b:ad:ac:81:e1:50:6f:f9:ed:74:fa:f9: 79:24:8b:4d:e3:52:18:9a:99:be:a4:7f:bb:98:7d: d1:3c:2d:a0:c0:e5:5c:d5:7e:aa:11:76:33:7b:91: 64:1a:fa:d4:85:b3:42:c0:97:d2:d7:53:8d:5c:fe: 8d:ae:ed:ce:32:1f:14:52:8e:f5:98:e4:42:9d:0e: 27:a1:a7:11:b0:dc:fa:3e:d3:ee:a5:84:4d:d4:b2: 10:6f:9f:9d:81:a1:99:c2:50:d3:3f:f0:93:47:1d: 07:64:2d:8b:20:c0:99:6d:af:25:2b:2e:3f:a2:0c: cc:f7:8e:a9:46:72:ad:ae:3e:6e:6c:92:0a:ef:be: ff:ed:a6:df:75:27:66:36:27:4f:c9:55:47:0c:50: d2:81:17:79:13:2d:6e:52:88:69:b5:70:e8:5c:8b: 1e:9f:90:97:44:0b:f5:f1:30:4d:8b:aa:d8:19:af: 3f:87:de:b3:06:e3:ca:74:94:e8:f6:4b:d0:eb:c6: 39:d4:57:c0:cd:95:98:16:55:b7:eb:ac:b4:c0:cf: 8d:b0:ae:5a:91:c5:26:9c:eb:66:56:d0:91:3d:fc: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B8:E6:44:65:90:DF:F0:B9:89:81:1F:D4:37:1D:2D:88:C4:47:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d2c2f09-1592-3cbe-b817-b9da288d3974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:12:3f:5e:db:29:fe:9c:13:8b:62:5e:e4:3b:99:bd:c8:1a: 25:7f:1e:45:47:9a:07:35:66:93:35:ce:5e:fd:83:03:fa:1e: 94:82:c5:04:3e:d9:49:f2:9c:56:c9:eb:4c:ad:41:18:84:5b: dd:db:0a:75:07:6d:98:c8:15:81:28:6b:fc:d1:ee:df:f3:ef: 4b:e0:08:0d:ec:8e:49:24:e8:c0:eb:d9:a2:a6:d3:40:f1:ee: d3:1e:26:45:07:4d:d3:18:26:ee:b1:a9:13:df:95:45:74:8f: 09:66:38:cc:b8:65:86:d0:c7:2e:5a:fd:42:62:ae:1e:64:91: 3b:db:e0:00:4b:2f:3f:1a:e4:7a:d0:9d:9d:0a:d4:59:45:ac: 83:cb:6d:eb:4d:ec:17:9f:9d:35:39:0d:53:18:94:43:ec:c4: 93:ab:8d:35:49:b9:5d:24:e6:6c:4c:34:b1:c8:c5:b6:d2:3b: 76:b3:7d:88:04:ed:d9:68:b4:a9:a2:54:d1:89:09:1c:8b:47: 1c:d9:a7:b4:37:ed:72:43:63:d6:fe:2c:d1:c5:8c:b6:dd:77: 45:78:65:de:96:46:b2:23:2c:06:e3:3c:70:a6:e9:f7:b4:5f: 67:4f:e0:84:64:04:90:4f:24:e6:5e:b4:3f:6f:75:08:13:2b: 3e:0f:5a:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqsEhgg4KssDs3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MDEwZjMxZmQtNWEwZi00MWZhLWIxNzYtODU4MjNiN2JlMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkanO+TiwbEGlqU03WoscwzU91IPkzAHl0Z/s EeBd/9BrrayB4VBv+e10+vl5JItN41IYmpm+pH+7mH3RPC2gwOVc1X6qEXYze5Fk GvrUhbNCwJfS11ONXP6Nru3OMh8UUo71mORCnQ4noacRsNz6PtPupYRN1LIQb5+d gaGZwlDTP/CTRx0HZC2LIMCZba8lKy4/ogzM946pRnKtrj5ubJIK777/7abfdSdm NidPyVVHDFDSgRd5Ey1uUohptXDoXIsen5CXRAv18TBNi6rYGa8/h96zBuPKdJTo 9kvQ68Y51FfAzZWYFlW366y0wM+NsK5akcUmnOtmVtCRPfwCXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKC45kRlkN/wuYmBH9Q3HS2IxEfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWQyYzJmMDktMTU5Mi0z Y2JlLWI4MTctYjlkYTI4OGQzOTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8SP17bKf6cE4tiXuQ7mb3IGiV/HkVHmgc1ZpM1zl79gwP6HpSCxQQ+ 2UnynFbJ60ytQRiEW93bCnUHbZjIFYEoa/zR7t/z70vgCA3sjkkk6MDr2aKm00Dx 7tMeJkUHTdMYJu6xqRPflUV0jwlmOMy4ZYbQxy5a/UJirh5kkTvb4ABLLz8a5HrQ nZ0K1FlFrIPLbetN7BefnTU5DVMYlEPsxJOrjTVJuV0k5mxMNLHIxbbSO3azfYgE 7dlotKmiVNGJCRyLRxzZp7Q37XJDY9b+LNHFjLbdd0V4Zd6WRrIjLAbjPHCm6fe0 X2dP4IRkBJBPJOZetD9vdQgTKz4PWlc= -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:56 2026 by rpki-client