$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/087befe6-4e51-3237-93b3-0a414ab3672c.roa File: 087befe6-4e51-3237-93b3-0a414ab3672c.roa (raw, json) Hash identifier: VovKHAfJEBimH7U7K34kMIWI2saq3/7igPmHttFgjfo= Subject key identifier: F2:4C:9D:27:48:C2:38:76:9E:33:8D:FD:27:67:A2:B6:B7:12:D8:02 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D739D295D130762FC52552E00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/087befe6-4e51-3237-93b3-0a414ab3672c.roa Signing time: Thu 09 Apr 2026 17:56:12 +0000 ROA not before: Thu 09 Apr 2026 17:56:12 +0000 ROA not after: Wed 08 Jul 2026 17:56:12 +0000 asID: 3356 IP address blocks: 166.88.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:9d:29:5d:13:07:62:fc:52:55:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 9 17:56:12 2026 GMT Not After : Jul 8 17:56:12 2026 GMT Subject: CN=137c5989-8684-47e8-8b1e-51b2152c6da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:34:2b:ec:6e:00:e0:d5:0a:94:5a:4d:5c:8e: 18:56:1a:55:f2:d6:1f:5d:f1:b9:ac:31:4e:41:68: ca:70:ba:73:67:ab:28:ca:47:14:a8:e5:81:ed:bf: 81:0f:99:05:4f:d2:85:f3:20:f8:5e:87:a8:2e:11: 15:ca:74:44:4e:61:27:bd:d1:8d:17:8d:41:86:14: 41:7b:de:48:4b:43:27:75:e1:57:38:3a:a1:5b:8d: ce:c1:1b:b2:13:fe:17:78:56:1a:06:58:41:9b:2d: 94:ac:a2:af:2e:cb:58:eb:2f:b2:1f:96:76:1c:a6: 7d:f4:18:ae:63:ff:31:6d:fb:54:7f:09:b8:02:23: 00:28:b5:42:3f:d3:81:e1:29:6d:f1:07:5c:3e:63: 28:49:25:06:24:51:ac:3e:e4:65:9d:13:ff:47:28: 50:0f:70:a4:eb:98:e8:99:85:9b:7f:06:0a:d9:db: 10:09:93:76:19:94:71:bc:2e:f1:4c:6c:ea:51:6b: 76:fd:80:a1:4a:60:20:9b:ea:ce:6a:9d:cb:22:f1: 22:80:b3:5a:d3:1e:18:75:80:36:38:5e:05:00:05: db:ff:40:dc:4a:06:e5:61:47:12:b8:af:fe:5d:7b: 00:70:74:21:71:2c:30:1b:a7:6a:54:f0:10:da:ba: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4C:9D:27:48:C2:38:76:9E:33:8D:FD:27:67:A2:B6:B7:12:D8:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/087befe6-4e51-3237-93b3-0a414ab3672c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:98:1d:14:92:18:a7:ef:b9:f3:74:48:dc:73:58:73:3a:c5: 59:ff:3c:f6:81:36:94:89:0d:de:fd:29:e7:e2:c1:b0:98:9e: 12:8c:39:53:a0:fa:23:69:d5:83:96:a6:a2:6f:9a:33:f3:3c: 9f:ce:72:36:40:68:69:6c:04:fe:8c:53:89:94:8d:fd:1f:09: 62:4d:21:6e:e6:6f:fd:02:a4:8d:33:1a:6c:a1:0e:5e:22:df: 83:eb:a8:c6:b5:b9:42:df:a9:d2:69:9a:5b:59:da:3b:22:16: ba:a4:3b:46:44:d8:b4:93:96:4e:84:f4:85:ee:ab:52:60:cd: 78:38:9f:56:81:5a:e5:8a:af:29:b9:12:82:5b:e9:bc:43:8c: 5a:82:49:dd:18:f0:e2:0b:93:b4:ab:9f:63:b4:ab:eb:32:25: 5c:02:c7:32:3a:a3:bf:ea:26:e2:64:bf:2c:78:56:70:85:77: 0f:8f:6d:37:ae:54:9e:69:9c:17:a8:88:19:d3:7a:31:61:8e: 2a:05:43:bd:4c:04:2d:44:80:f0:d6:2c:90:4d:6c:a4:0d:cc: 4a:1a:d6:08:7f:59:7c:aa:48:a4:b2:68:fa:38:2c:10:a1:05: c7:78:ff:f6:74:0a:7e:02:98:78:75:a0:56:0e:7d:6c:e3:c3: 45:99:d8:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1znSldEwdi/FJVLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQwOTE3NTYxMloXDTI2MDcwODE3NTYxMlowLzEtMCsGA1UEAxMk MTM3YzU5ODktODY4NC00N2U4LThiMWUtNTFiMjE1MmM2ZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzQr7G4A4NUKlFpNXI4YVhpV8tYfXfG5rDFO QWjKcLpzZ6soykcUqOWB7b+BD5kFT9KF8yD4XoeoLhEVynRETmEnvdGNF41BhhRB e95IS0MndeFXODqhW43OwRuyE/4XeFYaBlhBmy2UrKKvLstY6y+yH5Z2HKZ99Biu Y/8xbftUfwm4AiMAKLVCP9OB4Slt8QdcPmMoSSUGJFGsPuRlnRP/RyhQD3Ck65jo mYWbfwYK2dsQCZN2GZRxvC7xTGzqUWt2/YChSmAgm+rOap3LIvEigLNa0x4YdYA2 OF4FAAXb/0DcSgblYUcSuK/+XXsAcHQhcSwwG6dqVPAQ2rq/TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJMnSdIwjh2njON/Sdnora3EtgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDg3YmVmZTYtNGU1MS0z MjM3LTkzYjMtMGE0MTRhYjM2NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKYHRSSGKfvufN0SNxzWHM6xVn/PPaBNpSJDd79KefiwbCYnhKMOVOg +iNp1YOWpqJvmjPzPJ/OcjZAaGlsBP6MU4mUjf0fCWJNIW7mb/0CpI0zGmyhDl4i 34PrqMa1uULfqdJpmltZ2jsiFrqkO0ZE2LSTlk6E9IXuq1JgzXg4n1aBWuWKrym5 EoJb6bxDjFqCSd0Y8OILk7Srn2O0q+syJVwCxzI6o7/qJuJkvyx4VnCFdw+PbTeu VJ5pnBeoiBnTejFhjioFQ71MBC1EgPDWLJBNbKQNzEoa1gh/WXyqSKSyaPo4LBCh Bcd4//Z0Cn4CmHh1oFYOfWzjw0WZ2Ms= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:19 2026 by rpki-client