$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d97fbec9-fb01-326c-84a4-153ca90ccf22.roa File: d97fbec9-fb01-326c-84a4-153ca90ccf22.roa (raw, json) Hash identifier: y9CFkkDzZhnDlpxcGd/NVbs1fqR+SINEoMPqldw8oa0= Subject key identifier: A8:87:D3:71:2B:AE:D4:7A:53:A9:24:F2:B6:7C:AB:4A:90:58:2B:A0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D27AA1A9D5D769445C6E04AC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d97fbec9-fb01-326c-84a4-153ca90ccf22.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 44559 IP address blocks: 166.88.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:1a:9d:5d:76:94:45:c6:e0:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=4b2a919e-294f-4f99-9618-feeaf701284a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:91:3a:8a:88:55:8a:54:88:c1:1e:01:55:94: 8b:5a:05:4a:c5:6a:ff:38:19:04:61:24:52:2b:f2: 3f:df:96:c0:65:59:1d:4f:91:81:4b:09:0b:27:37: f4:36:32:97:a4:be:74:52:2c:a1:23:4c:78:f7:9f: 0e:46:08:0b:d0:07:d1:f5:98:4a:39:64:8e:42:1f: 6c:20:31:b7:f7:59:5d:98:ee:83:d0:ea:e9:e5:a1: 18:36:6e:af:dd:3a:d2:fa:a0:33:e1:88:7b:73:e2: 94:25:41:7b:b5:7e:7b:64:4e:eb:2d:e7:fc:3b:af: 28:b4:5b:1b:4d:ad:f5:03:f9:69:d3:26:16:56:f2: 6e:3e:db:20:9c:56:85:c3:3c:1c:e9:67:db:8b:bc: 4c:96:fc:15:68:84:90:00:ef:5d:f7:e9:6a:52:81: 2c:19:0d:7d:a6:47:01:3e:0a:1b:e7:03:13:00:16: 01:f1:c5:e9:50:24:2b:54:3f:a0:71:ff:e9:b9:4f: eb:9d:f0:b9:4a:34:1d:35:32:ae:9a:cd:2c:30:ce: 26:8f:fa:fd:01:a0:87:a0:e2:06:bd:3e:ea:0b:f8: f2:c9:4e:b8:ad:70:68:6b:be:02:ba:82:08:5b:91: a2:5f:f0:e6:93:65:4a:b5:39:d1:54:fa:43:52:2f: f5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:87:D3:71:2B:AE:D4:7A:53:A9:24:F2:B6:7C:AB:4A:90:58:2B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d97fbec9-fb01-326c-84a4-153ca90ccf22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b9:82:73:1a:5f:60:c4:0e:38:1d:c1:29:d0:4d:30:83:e1: a4:01:83:f3:89:d9:f6:44:43:33:d1:d5:0c:aa:79:50:8e:a3: b6:e5:3c:3a:ad:70:47:33:0b:a4:be:e9:0a:4a:16:cf:58:3c: f8:91:2c:91:d5:fa:76:77:80:91:e4:0d:5d:68:e2:5e:18:69: 97:46:5d:57:50:04:f3:ed:56:fa:ff:56:21:85:df:59:4a:46: af:18:2d:e7:e5:39:af:9e:3e:24:53:e3:a9:02:3b:0d:d4:aa: 81:2f:73:78:6f:68:ee:d2:7a:70:75:13:c4:5a:ee:5e:4f:4f: d5:51:b6:69:8d:fc:44:86:3f:e3:04:3f:ec:37:ba:62:37:0f: ce:5e:cb:96:1f:e0:90:c4:0f:a1:a9:6c:d8:80:f9:61:6c:9c: 15:f5:19:4d:c6:4f:0a:d0:de:b8:4d:5e:19:c5:cf:71:d3:fc: 23:60:f1:23:ce:62:87:07:df:8c:b6:7b:20:c8:3c:0c:d1:c3: 3f:18:ec:f8:89:98:ae:89:17:ce:4d:6f:88:11:11:dd:02:a7: 5a:1c:cb:73:5e:72:25:24:9e:e2:ec:63:8b:9d:6c:13:81:6f: 1c:05:93:d9:5c:15:c9:e0:91:5d:8a:b2:81:b4:96:4c:81:cc: 19:39:27:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqhqdXXaURcbgSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NGIyYTkxOWUtMjk0Zi00Zjk5LTk2MTgtZmVlYWY3MDEyODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5E6iohVilSIwR4BVZSLWgVKxWr/OBkEYSRS K/I/35bAZVkdT5GBSwkLJzf0NjKXpL50UiyhI0x4958ORggL0AfR9ZhKOWSOQh9s IDG391ldmO6D0Orp5aEYNm6v3TrS+qAz4Yh7c+KUJUF7tX57ZE7rLef8O68otFsb Ta31A/lp0yYWVvJuPtsgnFaFwzwc6Wfbi7xMlvwVaISQAO9d9+lqUoEsGQ19pkcB Pgob5wMTABYB8cXpUCQrVD+gcf/puU/rnfC5SjQdNTKums0sMM4mj/r9AaCHoOIG vT7qC/jyyU64rXBoa74CuoIIW5GiX/Dmk2VKtTnRVPpDUi/1NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiH03ErrtR6U6kk8rZ8q0qQWCugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDk3ZmJlYzktZmIwMS0z MjZjLTg0YTQtMTUzY2E5MGNjZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG5gnMaX2DEDjgdwSnQTTCD4aQBg/OJ2fZEQzPR1QyqeVCOo7blPDqt cEczC6S+6QpKFs9YPPiRLJHV+nZ3gJHkDV1o4l4YaZdGXVdQBPPtVvr/ViGF31lK Rq8YLeflOa+ePiRT46kCOw3UqoEvc3hvaO7SenB1E8Ra7l5PT9VRtmmN/ESGP+ME P+w3umI3D85ey5Yf4JDED6GpbNiA+WFsnBX1GU3GTwrQ3rhNXhnFz3HT/CNg8SPO YocH34y2eyDIPAzRwz8Y7PiJmK6JF85Nb4gREd0Cp1ocy3NeciUknuLsY4udbBOB bxwFk9lcFcngkV2KsoG0lkyBzBk5J6g= -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:44 2026 by rpki-client