$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/06b1c120-81f7-34d6-8061-d254c264df23.roa File: 06b1c120-81f7-34d6-8061-d254c264df23.roa (raw, json) Hash identifier: JlpAFEoucODthioPVbdSY3zDnQOtnh0aal6KlGaI47g= Subject key identifier: 77:5A:F0:72:66:48:BD:42:95:B4:0E:67:41:5E:5C:60:82:84:22:63 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D5E1A77867376D73C2BBBA000 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/06b1c120-81f7-34d6-8061-d254c264df23.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 134351 IP address blocks: 166.88.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:77:86:73:76:d7:3c:2b:bb:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=a75bf68c-a4cc-4df6-9eea-278f1b46235a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5b:23:48:51:2a:a7:9f:b0:f3:25:59:39:4c: 4b:7c:0c:38:ea:af:05:e2:5a:70:9e:a7:e4:34:b9: 98:84:41:0c:54:a8:d0:40:35:5c:ca:4c:18:9f:ad: f0:b7:4b:17:02:57:b2:8e:b6:1d:9a:b3:51:50:54: ed:05:45:58:05:50:36:20:fa:f1:b3:af:ad:89:d0: 94:58:51:f6:1c:6a:ec:3a:15:b6:5e:d6:bd:dc:c9: 0e:1c:2c:fa:6b:20:09:a7:e7:67:0b:8b:ab:b4:12: 20:36:bf:df:41:2c:dc:f8:d5:5c:f6:fe:3f:f8:51: 7b:69:20:69:55:68:06:03:cd:97:e9:72:21:86:48: fc:f3:ca:d0:9e:5a:b6:a1:42:2f:d8:ba:e2:ac:be: 78:bb:a5:5a:9c:98:87:84:d2:0d:35:7c:8d:8d:a4: df:83:7d:f4:18:13:81:b0:f1:b1:27:4a:69:7a:bd: 1a:34:f8:c1:ea:f0:d9:6b:24:e1:c6:d5:c2:c3:00: 2e:b8:ae:ed:8e:5d:f7:2e:38:47:d9:aa:d5:ea:bc: db:8b:ca:df:05:df:e9:74:a8:f9:44:93:c2:48:44: 85:0a:07:87:f7:b7:88:29:c5:99:2f:aa:58:c6:67: a6:68:4f:bc:f9:22:74:e9:fc:96:be:ec:01:8b:25: ee:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5A:F0:72:66:48:BD:42:95:B4:0E:67:41:5E:5C:60:82:84:22:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/06b1c120-81f7-34d6-8061-d254c264df23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8c:f6:80:80:73:b2:fa:b0:c1:46:1d:f4:eb:e8:98:4a:cf: 76:f0:96:94:15:c2:f3:7d:7b:32:b2:06:86:2b:60:f2:bb:4c: 50:db:b7:1c:67:e5:de:d6:cd:21:86:ce:31:f7:bf:a5:34:3e: 48:a4:5a:2f:a1:45:3b:12:86:a2:9f:41:1e:9c:bc:62:c2:5f: 40:e2:0c:a7:63:db:a8:02:50:22:12:88:67:b2:ea:5b:0b:3b: ac:64:2a:ec:ca:b2:39:23:20:61:ee:08:f6:b6:1d:c5:c0:98: ce:91:07:ea:04:97:06:6d:19:4e:a8:9e:ef:fc:cc:87:90:69: c0:1d:65:18:6f:a8:74:81:f6:4c:0a:40:cd:65:f3:e6:f1:5d: 53:3b:58:60:a7:ba:0b:80:6d:4f:fd:2b:8d:8e:11:9b:ea:49: 8f:c2:77:2d:9e:8c:84:2f:5b:f9:dd:20:db:bf:b7:2e:c5:ac: f5:78:ba:1c:0c:b0:a2:31:29:e5:ad:68:6b:f5:71:40:a2:fa: 15:05:93:e7:2c:30:f1:11:13:af:1b:20:a7:76:56:ac:a6:4d: ff:9b:99:97:78:f2:31:ca:a1:e5:c8:88:96:68:00:13:d5:10: 7a:ba:88:74:4d:be:be:b1:98:d9:7d:4b:ba:62:0e:14:02:dd: d1:96:99:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGneGc3bXPCu7oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YTc1YmY2OGMtYTRjYy00ZGY2LTllZWEtMjc4ZjFiNDYyMzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFsjSFEqp5+w8yVZOUxLfAw46q8F4lpwnqfk NLmYhEEMVKjQQDVcykwYn63wt0sXAleyjrYdmrNRUFTtBUVYBVA2IPrxs6+tidCU WFH2HGrsOhW2Xta93MkOHCz6ayAJp+dnC4urtBIgNr/fQSzc+NVc9v4/+FF7aSBp VWgGA82X6XIhhkj888rQnlq2oUIv2LrirL54u6VanJiHhNINNXyNjaTfg330GBOB sPGxJ0pper0aNPjB6vDZayThxtXCwwAuuK7tjl33LjhH2arV6rzbi8rfBd/pdKj5 RJPCSESFCgeH97eIKcWZL6pYxmemaE+8+SJ06fyWvuwBiyXuoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHda8HJmSL1ClbQOZ0FeXGCChCJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDZiMWMxMjAtODFmNy0z NGQ2LTgwNjEtZDI1NGMyNjRkZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuM9oCAc7L6sMFGHfTr6JhKz3bwlpQVwvN9ezKyBoYrYPK7TFDbtxxn 5d7WzSGGzjH3v6U0PkikWi+hRTsShqKfQR6cvGLCX0DiDKdj26gCUCISiGey6lsL O6xkKuzKsjkjIGHuCPa2HcXAmM6RB+oElwZtGU6onu/8zIeQacAdZRhvqHSB9kwK QM1l8+bxXVM7WGCnuguAbU/9K42OEZvqSY/Cdy2ejIQvW/ndINu/ty7FrPV4uhwM sKIxKeWtaGv1cUCi+hUFk+csMPERE68bIKd2VqymTf+bmZd48jHKoeXIiJZoABPV EHq6iHRNvr6xmNl9S7piDhQC3dGWmTA= -----END CERTIFICATE-----Generated at Mon Apr 13 09:33:12 2026 by rpki-client