$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0dfd453a-802d-3739-814e-954a6f4099e7.roa File: 0dfd453a-802d-3739-814e-954a6f4099e7.roa (raw, json) Hash identifier: cg4dIhuvBst/9rpjJnSSaKOVS1XymINGQqnRtVCmDI0= Subject key identifier: 49:32:DE:36:14:0F:D0:B6:39:84:9C:E1:87:6A:E6:81:E9:CF:A8:E3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F49871C0CFB3C645330563480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0dfd453a-802d-3739-814e-954a6f4099e7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 29802 IP address blocks: 166.88.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:1c:0c:fb:3c:64:53:30:56:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=731ede07-cf55-4ed1-88fc-0e5c3ea54f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d2:47:98:37:1c:97:72:39:12:49:b6:53:3e: f6:60:b8:43:e3:36:ac:55:ac:95:cd:d8:e7:0b:ed: 2e:2a:25:46:17:e1:9b:80:7e:c3:52:9f:17:e8:0e: a9:2b:1d:7b:36:e7:63:41:52:a7:02:17:13:22:27: 1d:c3:2a:2c:24:ea:e5:40:f6:9b:71:6b:06:fc:2f: 4d:e6:53:e5:18:c7:ab:ea:3c:f7:63:d1:85:d5:27: 7f:4a:2e:a8:d6:2b:e9:25:f0:87:ff:91:51:de:5b: 0f:74:f6:c8:88:2a:35:81:b1:98:f1:24:1e:32:90: 44:a0:c9:eb:f2:4b:be:a0:67:dc:01:0d:76:28:76: f1:e8:cf:ef:22:55:6d:27:42:43:5d:74:f6:98:40: 4e:9f:9e:19:de:6f:59:ad:9a:df:56:45:cc:0c:6e: 46:d0:39:53:ef:5c:32:04:67:ac:66:c6:fb:a7:4d: 79:90:08:4b:ea:e9:a2:88:52:80:8b:1c:24:7e:c4: e2:57:0c:41:67:49:8d:52:ea:78:7b:48:49:c4:59: a3:6d:f9:c0:75:d4:bd:44:30:4d:c7:4c:cd:55:20: 43:45:97:96:b2:99:5a:b7:6e:7e:69:a6:1a:e4:05: fe:76:ae:96:d2:d0:81:b6:51:cb:a9:a2:14:73:6f: 34:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:32:DE:36:14:0F:D0:B6:39:84:9C:E1:87:6A:E6:81:E9:CF:A8:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0dfd453a-802d-3739-814e-954a6f4099e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:12:94:0f:49:c4:1b:3f:5b:7f:b2:50:fd:c1:f0:df:64:11: ec:7f:4e:57:e2:89:e2:bb:cb:7f:96:ac:bd:c7:b6:b7:ff:99: 57:87:27:c9:1d:3d:64:d7:07:c2:6c:45:88:81:5e:87:b3:29: 6f:3b:69:8f:ac:bf:ec:b9:a1:4f:2c:cc:a4:86:3e:3c:63:48: 79:65:ab:5d:0a:45:fd:67:c8:32:3e:f0:59:f9:6e:ac:bf:46: 3b:0a:88:fd:ba:a7:03:83:49:d0:a0:91:4a:2f:40:23:33:b5: 53:7f:20:ca:b3:36:ff:35:bc:f8:89:c2:87:fe:c6:1b:f5:30: 77:d2:2e:9f:a9:17:37:87:cb:df:90:f8:e5:40:7f:f2:12:da: f4:63:2d:50:50:63:5a:8d:6f:f8:ce:5a:99:1a:a0:61:64:31: 9d:96:81:16:e4:11:ad:93:d5:53:ec:29:e1:df:35:d8:a7:32: 32:a1:af:3b:4c:36:47:20:6e:6e:42:71:62:d3:dc:71:05:39: 14:55:27:0c:6c:4e:07:ea:cf:c0:dd:e8:80:d8:18:50:27:88: db:c0:d5:10:e2:87:bc:ca:01:c7:56:68:cd:e7:3d:82:4a:e4: 33:81:cc:51:42:45:7b:f6:6f:21:b4:8c:a9:d4:0b:1e:97:34: 42:bf:49:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhxwM+zxkUzBWNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzMxZWRlMDctY2Y1NS00ZWQxLTg4ZmMtMGU1YzNlYTU0ZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9JHmDccl3I5Ekm2Uz72YLhD4zasVayVzdjn C+0uKiVGF+GbgH7DUp8X6A6pKx17NudjQVKnAhcTIicdwyosJOrlQPabcWsG/C9N 5lPlGMer6jz3Y9GF1Sd/Si6o1ivpJfCH/5FR3lsPdPbIiCo1gbGY8SQeMpBEoMnr 8ku+oGfcAQ12KHbx6M/vIlVtJ0JDXXT2mEBOn54Z3m9ZrZrfVkXMDG5G0DlT71wy BGesZsb7p015kAhL6umiiFKAixwkfsTiVwxBZ0mNUup4e0hJxFmjbfnAddS9RDBN x0zNVSBDRZeWsplat25+aaYa5AX+dq6W0tCBtlHLqaIUc2803wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEky3jYUD9C2OYSc4Ydq5oHpz6jjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMGRmZDQ1M2EtODAyZC0z NzM5LTgxNGUtOTU0YTZmNDA5OWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQSlA9JxBs/W3+yUP3B8N9kEex/TlfiieK7y3+WrL3Htrf/mVeHJ8kd PWTXB8JsRYiBXoezKW87aY+sv+y5oU8szKSGPjxjSHllq10KRf1nyDI+8Fn5bqy/ RjsKiP26pwODSdCgkUovQCMztVN/IMqzNv81vPiJwof+xhv1MHfSLp+pFzeHy9+Q +OVAf/IS2vRjLVBQY1qNb/jOWpkaoGFkMZ2WgRbkEa2T1VPsKeHfNdinMjKhrztM Nkcgbm5CcWLT3HEFORRVJwxsTgfqz8Dd6IDYGFAniNvA1RDih7zKAcdWaM3nPYJK 5DOBzFFCRXv2byG0jKnUCx6XNEK/STk= -----END CERTIFICATE-----Generated at Wed Oct 14 07:54:47 2026 by rpki-client