$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cdc6fb24-9660-37d6-b0b8-6b06f9f153c5.roa File: cdc6fb24-9660-37d6-b0b8-6b06f9f153c5.roa (raw, json) Hash identifier: F+C/E0wu7memPTUUS/fpA3pHNsW3kgVZsKHZQ/718fg= Subject key identifier: 9A:F0:C4:2A:B0:D2:C5:30:DC:81:B1:98:B3:F9:A8:A5:92:06:6C:CC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D4461D2A1F1ECD9AFAA611940 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cdc6fb24-9660-37d6-b0b8-6b06f9f153c5.roa Signing time: Mon 23 Mar 2026 19:53:39 +0000 ROA not before: Mon 23 Mar 2026 19:53:39 +0000 ROA not after: Sun 21 Jun 2026 19:53:39 +0000 asID: 11798 IP address blocks: 166.88.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:61:d2:a1:f1:ec:d9:af:aa:61:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 23 19:53:39 2026 GMT Not After : Jun 21 19:53:39 2026 GMT Subject: CN=ca6a425e-1f21-4206-9412-28031a30de71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5e:55:76:d1:58:ca:a2:9e:de:d5:a5:95:45: 10:e6:cc:98:bf:dd:81:9c:13:17:cd:80:1c:c0:64: 37:c9:8b:99:e2:23:c1:58:49:60:21:8d:ca:50:07: b0:9a:d5:0a:f1:d6:09:70:30:27:db:4e:41:09:d5: f0:64:6c:c2:6b:59:aa:03:9f:92:52:bb:88:da:10: 0c:c9:ba:33:33:c4:89:58:c9:e2:51:f9:15:d3:92: 73:1d:91:76:67:0a:08:5c:b9:c4:3a:3f:bd:18:29: ea:c3:49:4a:70:70:42:47:8e:66:1f:08:ea:01:f3: ee:aa:60:cd:e4:21:63:2e:14:c2:75:04:27:01:d3: 30:0c:25:99:47:ac:ba:ee:f8:64:f0:ab:2c:86:52: 54:bd:ec:e5:bb:cd:4a:26:ef:f3:1b:31:b9:f3:53: 15:5c:17:8a:78:9b:8d:8c:1e:60:8d:7f:c0:8f:62: 97:6b:5a:b4:76:bc:da:d3:20:b2:92:1d:2d:7c:0d: 8b:6a:db:6a:ec:34:9d:ce:91:5f:0c:c9:69:a7:bd: 3b:f2:c0:1a:bc:2e:43:33:d2:d5:5a:fb:3f:fa:2f: 0b:58:6c:7b:5e:47:9e:0a:ef:a3:1a:c8:56:c7:47: ea:82:65:c0:8e:d2:68:fc:0a:a9:d6:23:b1:06:50: a1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F0:C4:2A:B0:D2:C5:30:DC:81:B1:98:B3:F9:A8:A5:92:06:6C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cdc6fb24-9660-37d6-b0b8-6b06f9f153c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:7a:c7:d7:de:cd:98:78:bb:ad:a9:9b:e2:17:b6:d7:3f:25: 56:70:87:3e:be:80:04:21:d9:14:a9:83:96:93:ce:77:8b:cc: 48:7e:57:81:8f:f7:e1:ec:89:db:24:9b:70:aa:48:54:7a:c6: fe:64:63:b3:a4:eb:54:cc:1e:32:9d:0a:e2:b6:5c:ba:43:3a: 5a:c0:3a:eb:f7:57:2e:8e:6b:f1:39:f8:eb:4d:da:11:63:ad: 48:9b:be:31:94:18:9a:87:d2:d1:94:95:2d:a8:6f:ae:f3:21: 35:3f:61:da:fc:44:1c:c7:41:c8:5c:f4:ae:b7:30:e3:12:f1: 57:55:d0:fa:0a:d9:4c:ce:7c:46:16:c1:2e:d3:d2:ce:79:60: 12:04:af:0f:54:a8:45:31:e6:23:bb:7c:f1:b5:cb:0c:c4:00: 4f:57:53:ff:ff:1e:ce:c9:e0:1f:41:0b:5f:f4:04:4a:46:e4: c5:2a:b4:04:a0:b4:4b:05:6f:af:9a:5a:ae:f8:5b:8f:20:bf: 9b:24:fa:e5:bf:2e:d0:7b:4e:ae:76:01:9e:ef:54:2a:14:75: ff:20:39:67:dc:88:bf:64:09:2a:1d:75:b0:ea:86:f1:80:b1: 6a:92:ff:65:7b:66:24:ee:06:16:a9:f4:d1:9d:0c:65:79:fb: f1:17:e6:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYdKh8ezZr6phGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMyMzE5NTMzOVoXDTI2MDYyMTE5NTMzOVowLzEtMCsGA1UEAxMk Y2E2YTQyNWUtMWYyMS00MjA2LTk0MTItMjgwMzFhMzBkZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA215VdtFYyqKe3tWllUUQ5syYv92BnBMXzYAc wGQ3yYuZ4iPBWElgIY3KUAewmtUK8dYJcDAn205BCdXwZGzCa1mqA5+SUruI2hAM ybozM8SJWMniUfkV05JzHZF2ZwoIXLnEOj+9GCnqw0lKcHBCR45mHwjqAfPuqmDN 5CFjLhTCdQQnAdMwDCWZR6y67vhk8KsshlJUvezlu81KJu/zGzG581MVXBeKeJuN jB5gjX/Aj2KXa1q0drza0yCykh0tfA2Lattq7DSdzpFfDMlpp7078sAavC5DM9LV Wvs/+i8LWGx7XkeeCu+jGshWx0fqgmXAjtJo/Aqp1iOxBlChjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrwxCqw0sUw3IGxmLP5qKWSBmzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2RjNmZiMjQtOTY2MC0z N2Q2LWIwYjgtNmIwNmY5ZjE1M2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp6x9fezZh4u62pm+IXttc/JVZwhz6+gAQh2RSpg5aTzneLzEh+V4GP 9+Hsidskm3CqSFR6xv5kY7Ok61TMHjKdCuK2XLpDOlrAOuv3Vy6Oa/E5+OtN2hFj rUibvjGUGJqH0tGUlS2ob67zITU/Ydr8RBzHQchc9K63MOMS8VdV0PoK2UzOfEYW wS7T0s55YBIErw9UqEUx5iO7fPG1ywzEAE9XU///Hs7J4B9BC1/0BEpG5MUqtASg tEsFb6+aWq74W48gv5sk+uW/LtB7Tq52AZ7vVCoUdf8gOWfciL9kCSoddbDqhvGA sWqS/2V7ZiTuBhap9NGdDGV5+/EX5nU= -----END CERTIFICATE-----Generated at Sat Mar 28 12:19:32 2026 by rpki-client