$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd433ea6-1e1c-3b26-9bc8-f97e6a051f42.roa File: cd433ea6-1e1c-3b26-9bc8-f97e6a051f42.roa (raw, json) Hash identifier: kQfvJBmjqlWEmQac6l2xkm5be0BwPkmCM7ADhuJumT4= Subject key identifier: 02:66:7D:64:A3:F9:C2:44:FE:8B:6E:FB:F8:54:26:9B:1E:09:97:0B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D143D53EF010BC7ADB00F7CC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd433ea6-1e1c-3b26-9bc8-f97e6a051f42.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 209854 IP address blocks: 166.88.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:53:ef:01:0b:c7:ad:b0:0f:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=09d2fd68-1b25-45f2-beed-20b4b7bff49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:b1:06:55:f9:0c:75:6c:fb:84:f2:c5:7f: b7:10:78:4a:ba:0b:56:05:42:e8:8e:bb:2b:7b:b6: 89:52:14:d5:a4:09:fe:7d:15:fe:bf:91:0d:38:39: e3:c2:49:6e:14:97:89:2e:4f:b9:c3:68:aa:7a:3f: bf:4c:ef:a9:b6:d1:da:bd:e9:ac:06:4e:a4:22:13: 5a:0c:c3:57:dd:f2:84:90:1c:b1:d8:46:9c:59:ba: e5:63:61:1a:0c:cc:28:8a:b8:aa:61:79:d1:00:cc: 97:b3:28:26:2e:11:d9:01:74:4d:72:9a:13:d8:12: 62:92:6f:42:67:13:63:33:46:05:4f:c4:46:9c:e6: 82:77:64:c0:12:cb:03:e3:2b:16:72:b1:27:3e:11: 76:c7:3b:b4:ed:28:66:40:57:3a:93:2d:51:0d:88: ee:07:27:ac:73:8b:0c:78:fc:a4:6f:a0:01:10:cc: cd:7e:bf:e5:03:66:26:5f:f5:e5:93:0f:a7:26:94: 40:a1:2d:23:76:79:72:3f:bb:f2:45:04:61:f8:23: e5:43:9b:4f:48:5b:06:9c:5c:8b:80:b5:e0:11:b0: 69:af:05:bd:45:2b:26:ae:fc:01:78:23:75:44:fc: c1:8a:7c:6c:75:e3:55:e3:b7:e6:0b:33:36:93:95: 8a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:66:7D:64:A3:F9:C2:44:FE:8B:6E:FB:F8:54:26:9B:1E:09:97:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd433ea6-1e1c-3b26-9bc8-f97e6a051f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ce:fa:3c:86:25:37:ea:bd:0a:89:57:bd:1d:88:9b:ce:fc: 12:19:41:73:c9:ea:c0:b3:47:cc:9f:c1:31:e1:7b:8d:e8:35: 66:d0:d4:9c:cf:b2:ec:b6:7b:8c:5c:cb:22:c1:5a:7c:a9:1a: 51:9b:a8:5f:12:71:74:bf:62:2e:4e:68:1a:a4:d3:b6:ea:c3: 0d:ba:76:21:79:a6:c0:17:b6:d7:b5:89:8d:2c:56:cf:cc:20: c0:2c:6e:33:b7:30:0e:8f:8a:7e:4d:10:bb:d8:b8:49:8a:2e: 6e:38:8a:ad:dc:48:b8:b2:33:37:4d:14:0d:1c:d6:9a:3a:b4: 0c:f3:94:13:91:1a:43:29:34:37:90:c2:e7:9f:11:4b:96:9b: 40:a4:41:bc:60:55:d7:3c:4a:95:32:cb:20:ef:9f:20:7e:0f: 95:5c:6d:b9:df:6b:77:81:0a:c3:cc:2b:d3:ea:91:85:b2:81: ed:a7:33:16:14:fc:b0:f8:3d:bf:0b:77:9a:dc:5f:76:af:b8: ec:ed:53:8a:66:e9:a7:22:85:89:a6:fa:e7:1d:8d:bf:2b:95: 83:1f:16:b0:c9:a8:b4:76:c9:75:bc:63:ee:ca:fb:0d:f3:f1: 10:b6:b7:a7:4e:cf:c7:47:1c:dd:79:38:9a:bd:7d:45:8f:6c: 2d:bd:81:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPVPvAQvHrbAPfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MDlkMmZkNjgtMWIyNS00NWYyLWJlZWQtMjBiNGI3YmZmNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7exBlX5DHVs+4TyxX+3EHhKugtWBULojrsr e7aJUhTVpAn+fRX+v5ENODnjwkluFJeJLk+5w2iqej+/TO+pttHavemsBk6kIhNa DMNX3fKEkByx2EacWbrlY2EaDMwoiriqYXnRAMyXsygmLhHZAXRNcpoT2BJikm9C ZxNjM0YFT8RGnOaCd2TAEssD4ysWcrEnPhF2xzu07ShmQFc6ky1RDYjuByesc4sM ePykb6ABEMzNfr/lA2YmX/Xlkw+nJpRAoS0jdnlyP7vyRQRh+CPlQ5tPSFsGnFyL gLXgEbBprwW9RSsmrvwBeCN1RPzBinxsdeNV47fmCzM2k5WK9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJmfWSj+cJE/otu+/hUJpseCZcLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2Q0MzNlYTYtMWUxYy0z YjI2LTliYzgtZjk3ZTZhMDUxZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLO+jyGJTfqvQqJV70diJvO/BIZQXPJ6sCzR8yfwTHhe43oNWbQ1JzP suy2e4xcyyLBWnypGlGbqF8ScXS/Yi5OaBqk07bqww26diF5psAXtte1iY0sVs/M IMAsbjO3MA6Pin5NELvYuEmKLm44iq3cSLiyMzdNFA0c1po6tAzzlBORGkMpNDeQ wuefEUuWm0CkQbxgVdc8SpUyyyDvnyB+D5Vcbbnfa3eBCsPMK9PqkYWyge2nMxYU /LD4Pb8Ld5rcX3avuOztU4pm6acihYmm+ucdjb8rlYMfFrDJqLR2yXW8Y+7K+w3z 8RC2t6dOz8dHHN15OJq9fUWPbC29gb0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:32 2026 by rpki-client