$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38dc369f-4732-3662-b2e0-d13ecc0d8551.roa File: 38dc369f-4732-3662-b2e0-d13ecc0d8551.roa (raw, json) Hash identifier: k03EI9CPINou8AE+JDi8JLz63ZlZuVlq/48tRViroh4= Subject key identifier: 0A:14:7D:65:DC:A0:68:56:1F:D0:CA:20:E2:66:F6:52:EE:EC:D2:E4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D773A8250ECE478ACDD477F40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38dc369f-4732-3662-b2e0-d13ecc0d8551.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 214238 IP address blocks: 166.88.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:82:50:ec:e4:78:ac:dd:47:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=01fcb6c9-fc54-4d9c-b128-ef164fa25d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f6:8c:78:0f:72:6c:3a:31:83:7f:7f:03:b7: 4b:b1:55:7d:42:1c:0e:6d:29:e8:64:81:6b:24:1f: d8:61:03:ae:2c:e7:92:39:1b:73:46:5f:fd:ae:74: cb:ee:ad:60:28:76:b2:50:a3:78:6b:46:7f:9f:01: 5d:a6:e8:3a:af:12:d0:e8:ee:89:24:93:45:bd:39: 8f:3c:fd:d3:06:ef:71:fd:11:41:0d:12:a4:b5:78: 9f:c8:22:ef:17:ba:57:1d:35:b8:af:48:45:81:96: 0a:5b:b7:a3:9b:d4:6c:61:8e:4e:3d:d0:c1:98:2d: cd:2c:21:e4:46:eb:f7:c8:0c:03:66:c4:9e:27:3e: 87:5a:5f:96:3c:f5:a3:ce:06:2e:29:ce:94:33:87: a8:ed:20:73:f5:e0:04:ea:1b:d7:a0:7d:fe:4b:ef: 2e:b4:1f:91:53:f4:d2:56:91:aa:3a:30:f3:6e:7f: ed:37:f6:75:f0:3e:8f:e3:55:2a:d7:6b:c0:d1:91: 14:cf:0a:7a:90:77:56:b6:d7:59:8d:fc:45:4a:71: 4d:57:77:f2:d1:02:d6:4d:97:9b:8c:1b:1a:79:75: 0e:38:73:97:e2:44:39:66:fc:e9:cd:7e:fb:3c:7e: ab:d5:74:0d:39:40:f9:dc:55:61:96:8d:83:b8:86: a5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:14:7D:65:DC:A0:68:56:1F:D0:CA:20:E2:66:F6:52:EE:EC:D2:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38dc369f-4732-3662-b2e0-d13ecc0d8551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:73:36:60:26:3e:19:fd:5b:d9:db:fc:65:c1:86:e7:04:d6: 9f:18:fb:83:2e:91:02:08:2c:50:99:47:ce:04:87:66:9d:fb: 64:0a:09:92:5c:84:ea:79:bb:88:66:c4:99:49:13:26:b5:ee: dd:d5:76:8b:d2:f2:44:18:6a:97:15:c6:fa:c3:a9:e7:b5:54: d9:72:ea:56:39:46:3c:6f:31:f5:19:8f:e4:06:95:b2:11:88: 85:17:a7:89:ca:70:d9:f1:1c:00:19:c1:08:7f:74:10:cf:54: ad:99:65:88:4a:eb:2a:75:d1:cd:5c:bf:48:3c:18:88:78:9e: 8c:d5:fa:85:ad:30:bd:26:28:9c:18:69:ca:dd:c5:b7:a1:c9: f2:a7:f9:f3:a9:22:d0:2a:f6:16:6c:66:de:de:bd:97:15:eb: a9:fb:89:3a:e5:78:3e:a7:2e:45:4b:1e:39:b3:75:18:17:49: fa:51:0d:97:96:72:eb:06:ff:31:68:02:f0:44:4e:00:8b:f5: 28:b9:cb:e8:b8:5b:53:16:5b:0c:a8:5e:63:81:e7:4d:fe:24: a3:54:62:59:6f:da:58:4f:8b:d5:2d:8e:03:16:8a:7d:95:cd: 16:92:e3:72:6d:3a:ff:4b:7c:58:c2:59:fc:fc:4b:41:75:3f: 31:67:50:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoJQ7OR4rN1Hf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk MDFmY2I2YzktZmM1NC00ZDljLWIxMjgtZWYxNjRmYTI1ZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vaMeA9ybDoxg39/A7dLsVV9QhwObSnoZIFr JB/YYQOuLOeSORtzRl/9rnTL7q1gKHayUKN4a0Z/nwFdpug6rxLQ6O6JJJNFvTmP PP3TBu9x/RFBDRKktXifyCLvF7pXHTW4r0hFgZYKW7ejm9RsYY5OPdDBmC3NLCHk Ruv3yAwDZsSeJz6HWl+WPPWjzgYuKc6UM4eo7SBz9eAE6hvXoH3+S+8utB+RU/TS VpGqOjDzbn/tN/Z18D6P41Uq12vA0ZEUzwp6kHdWttdZjfxFSnFNV3fy0QLWTZeb jBsaeXUOOHOX4kQ5ZvzpzX77PH6r1XQNOUD53FVhlo2DuIaljwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoUfWXcoGhWH9DKIOJm9lLu7NLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzhkYzM2OWYtNDczMi0z NjYyLWIyZTAtZDEzZWNjMGQ4NTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNzNmAmPhn9W9nb/GXBhucE1p8Y+4MukQIILFCZR84Eh2ad+2QKCZJc hOp5u4hmxJlJEya17t3VdovS8kQYapcVxvrDqee1VNly6lY5RjxvMfUZj+QGlbIR iIUXp4nKcNnxHAAZwQh/dBDPVK2ZZYhK6yp10c1cv0g8GIh4nozV+oWtML0mKJwY acrdxbehyfKn+fOpItAq9hZsZt7evZcV66n7iTrleD6nLkVLHjmzdRgXSfpRDZeW cusG/zFoAvBETgCL9Si5y+i4W1MWWwyoXmOB503+JKNUYllv2lhPi9UtjgMWin2V zRaS43JtOv9LfFjCWfz8S0F1PzFnUOo= -----END CERTIFICATE-----Generated at Mon Apr 13 09:31:48 2026 by rpki-client