$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa File: 088b1098-9f13-3b9c-9ed2-1c879f079fea.roa (raw, json) Hash identifier: L8woD97cJtPJ96g1etlZnfvw9XLQHux5wulIcA1BRBE= Subject key identifier: D6:46:A1:66:15:11:7C:2C:40:E4:73:20:D8:96:7C:CC:38:F1:F4:70 Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F4328584D2BDA1F4130DC10F476134000 Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 398813 IP address blocks: 166.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:1f:41:30:dc:10:f4:76:13:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=a4bafc13-511f-4c42-b99c-435226bb90ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9c:3a:7a:af:07:77:9d:25:0a:18:1d:e2:c6: 76:cc:5b:54:f4:c0:ce:1b:1b:54:25:c9:53:a5:1f: c9:cc:7a:42:a5:0e:cb:48:1d:89:b1:77:1d:b3:41: 14:cb:5c:b3:da:73:aa:b7:9f:fa:da:03:d2:09:42: 04:32:bd:bc:75:43:fc:92:f7:fb:cd:bd:61:e6:a3: 71:1d:c6:58:e2:90:c3:94:49:90:46:29:e5:00:10: 1c:a5:4a:f0:d6:44:c6:15:6f:38:9e:90:4b:ac:42: c9:67:50:5b:68:7f:2e:7b:5f:05:02:e7:ae:34:25: c5:08:fa:cd:cf:d5:2d:80:f5:f3:84:51:e3:f2:04: 98:5e:77:8d:49:35:ff:49:27:1b:99:4c:3c:05:22: eb:39:7f:a4:7d:50:0d:b1:78:46:50:a5:8a:07:07: 35:03:96:43:f7:79:bb:1d:73:a8:cd:4c:e3:b9:cf: e3:07:a6:0f:77:e0:55:3d:4a:5b:b5:67:2e:f3:58: 9d:8d:8c:8c:47:74:d2:00:02:c2:aa:e9:75:a8:1a: 11:85:59:d4:ee:37:55:3b:21:ac:84:dd:b8:28:de: ed:6a:b9:77:85:0d:8d:9d:1f:b4:17:60:81:ee:78: 22:6d:58:b3:67:99:d7:3f:27:8b:8c:76:a5:ab:3a: 46:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:46:A1:66:15:11:7C:2C:40:E4:73:20:D8:96:7C:CC:38:F1:F4:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: 166.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:59:0d:24:cf:1f:31:43:5b:d6:e8:5b:4c:d1:20:5d:f4:28: 66:38:f2:cf:85:9c:f4:99:a1:3f:27:b1:3e:91:0e:a2:23:52: 06:74:01:74:c0:9c:43:75:2b:df:75:d5:19:f4:10:f6:1c:a9: 02:e3:92:1b:14:9d:a0:0b:97:d9:11:ce:6e:c4:30:26:48:71: d1:e2:21:12:f6:1a:0c:d2:c1:33:73:df:90:0b:25:f6:0b:73: 22:b1:ec:7b:b7:20:c7:f5:9c:c7:a7:a2:11:1c:f6:7e:1a:0c: 55:7f:ac:2e:0d:77:ef:26:a1:7f:58:73:5e:0c:58:0b:12:ff: 68:50:db:83:8e:b9:77:fe:8f:1a:54:2f:c0:c5:87:e0:29:63: b4:cf:9e:3d:8f:41:a1:e7:96:71:5e:42:a0:45:b6:7b:4a:3f: ce:1b:de:b6:3f:24:80:c3:cc:6c:38:8e:19:ec:81:5b:78:1f: 20:1a:e1:67:17:f0:f2:17:d4:55:9d:ac:aa:f5:45:17:3e:8d: 90:d4:52:2a:7e:1e:b3:cd:65:d5:9b:69:25:9e:dd:86:04:f8: 8b:df:06:f2:5d:77:78:13:3f:c5:e2:9a:11:f3:10:b5:0a:ca: bb:a0:cf:39:57:9c:6e:0a:2e:2d:f4:7c:16:77:92:2d:b5:b9: ee:56:24:57 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0r2h9BMNwQ9HYTQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YTRiYWZjMTMtNTExZi00YzQyLWI5OWMtNDM1MjI2YmI5MGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jw6eq8Hd50lChgd4sZ2zFtU9MDOGxtUJclT pR/JzHpCpQ7LSB2JsXcds0EUy1yz2nOqt5/62gPSCUIEMr28dUP8kvf7zb1h5qNx HcZY4pDDlEmQRinlABAcpUrw1kTGFW84npBLrELJZ1BbaH8ue18FAueuNCXFCPrN z9UtgPXzhFHj8gSYXneNSTX/SScbmUw8BSLrOX+kfVANsXhGUKWKBwc1A5ZD93m7 HXOozUzjuc/jB6YPd+BVPUpbtWcu81idjYyMR3TSAALCqul1qBoRhVnU7jdVOyGs hN24KN7tarl3hQ2NnR+0F2CB7ngibVizZ5nXPyeLjHalqzpG9wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNZGoWYVEXwsQORzINiWfMw48fRwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvMDg4YjEwOTgtOWYxMy0z YjljLTllZDItMWM4NzlmMDc5ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhlkNJM8fMUNb1uhbTNEgXfQoZjjyz4Wc9JmhPyexPpEOoiNSBnQBdMCc Q3Ur33XVGfQQ9hypAuOSGxSdoAuX2RHObsQwJkhx0eIhEvYaDNLBM3PfkAsl9gtz IrHse7cgx/Wcx6eiERz2fhoMVX+sLg137yahf1hzXgxYCxL/aFDbg465d/6PGlQv wMWH4CljtM+ePY9BoeeWcV5CoEW2e0o/zhvetj8kgMPMbDiOGeyBW3gfIBrhZxfw 8hfUVZ2sqvVFFz6NkNRSKn4es81l1ZtpJZ7dhgT4i98G8l13eBM/xeKaEfMQtQrK u6DPOVecbgouLfR8FneSLbW57lYkVw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:00:45 2026 by rpki-client