$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a0d7533-6720-3617-8935-0cfdc8fb6a4c.roa File: 3a0d7533-6720-3617-8935-0cfdc8fb6a4c.roa (raw, json) Hash identifier: Nyqr3eGrD5JIfQoo1THCADr0GOKEU7OQ7/wJPvzY2JM= Subject key identifier: 02:97:01:14:72:D5:8C:7E:15:BB:2E:DD:11:DF:75:ED:89:4D:B0:B3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584C5501396EE02C4C4CF4003BC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a0d7533-6720-3617-8935-0cfdc8fb6a4c.roa Signing time: Sun 28 Dec 2025 02:00:30 +0000 ROA not before: Sun 28 Dec 2025 02:00:30 +0000 ROA not after: Sat 28 Mar 2026 01:00:30 +0000 asID: 7018 IP address blocks: 166.88.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:55:01:39:6e:e0:2c:4c:4c:f4:00:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Dec 28 02:00:30 2025 GMT Not After : Mar 28 01:00:30 2026 GMT Subject: CN=caa64a06-37f9-4aed-b89d-2acf9c63e18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:d9:23:0e:96:17:3a:09:ee:e5:68:be:95: b8:63:e1:d8:48:98:e2:68:be:1c:cb:78:46:2c:25: 7f:75:58:80:65:35:9d:c4:93:89:9a:d3:53:4b:fb: e1:c5:21:1a:fc:ce:a0:97:66:6f:b4:e8:8b:3c:30: 06:1b:32:e9:05:2a:bc:f6:db:5c:71:c4:b3:bd:45: 41:7c:a2:93:28:80:cc:0f:a1:b6:ee:cf:99:28:5e: 65:d2:e7:f0:48:ef:5d:a8:cf:ca:43:7f:50:8c:4b: 5a:5a:72:c8:f9:24:a9:d1:94:0f:49:20:76:74:4a: 2d:c0:73:27:bf:d4:e9:e7:3e:f9:4d:ab:71:07:ca: d7:e9:63:6f:20:83:a9:ac:a4:c0:9a:4c:50:c4:e0: da:56:67:18:f2:e9:1f:6d:0d:73:5e:65:bd:6e:a0: 12:22:1a:84:8e:cb:1e:3d:b2:52:74:93:0f:e9:c5: f4:7f:96:73:d6:cf:69:cf:ee:22:7f:31:79:bd:0f: 7e:87:c4:37:b7:32:3b:7d:89:f1:de:0a:64:ba:4a: ca:e0:a5:04:09:cf:3c:c3:3a:b3:5e:a9:73:57:1f: 3a:24:e9:0f:84:e0:81:0a:ce:d1:dc:eb:81:78:b6: 3e:f1:e6:83:02:50:45:9a:9d:d0:9a:b1:a7:28:59: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:97:01:14:72:D5:8C:7E:15:BB:2E:DD:11:DF:75:ED:89:4D:B0:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a0d7533-6720-3617-8935-0cfdc8fb6a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:99:de:64:6d:27:6d:b0:17:6f:05:f2:e8:7a:df:3f:61:2c: ab:4c:69:24:c7:5a:8e:ee:4a:c2:0b:06:4b:cb:07:63:68:cf: 5c:7d:c6:cc:cc:9a:fd:bd:5a:7f:c6:82:3a:33:ea:4d:12:11: 92:8a:20:18:40:04:c8:51:52:fe:e4:bc:24:c2:00:db:e3:d9: 2d:f8:76:07:15:b6:1a:e9:ab:e4:d0:b6:1c:7b:5e:6f:7d:70: 4b:94:59:29:f1:0b:f6:bc:59:2a:8e:1e:4f:05:34:c6:bd:5d: 80:8d:32:1e:7a:c6:0c:89:93:ad:91:ea:9d:c0:fa:7a:ae:f1: d1:ef:1b:f8:3c:52:ec:f9:46:7a:b4:57:58:8f:2d:d0:27:b2: c7:73:1f:bc:64:2b:08:ad:2e:9f:ec:a5:07:d2:7f:ca:07:fb: 8f:08:ee:8f:f3:65:ff:e6:ab:eb:b5:02:be:b4:ae:a5:28:75: b2:81:39:f0:7f:72:d6:da:17:ba:45:47:55:ff:0c:e0:f5:29: e5:ca:83:f1:16:f0:a2:95:d3:68:0e:cc:de:cf:1b:89:e9:a4: 79:b7:ae:a9:51:4b:06:9b:e4:eb:67:23:fb:cc:04:bc:7a:e2: 06:5e:ae:79:91:ab:4b:f9:79:48:f2:33:e5:ff:5c:42:c0:82: 85:12:9c:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExVATlu4CxMTPQAO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTIyODAyMDAzMFoXDTI2MDMyODAxMDAzMFowLzEtMCsGA1UEAxMk Y2FhNjRhMDYtMzdmOS00YWVkLWI4OWQtMmFjZjljNjNlMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwDZIw6WFzoJ7uVovpW4Y+HYSJjiaL4cy3hG LCV/dViAZTWdxJOJmtNTS/vhxSEa/M6gl2ZvtOiLPDAGGzLpBSq89ttcccSzvUVB fKKTKIDMD6G27s+ZKF5l0ufwSO9dqM/KQ39QjEtaWnLI+SSp0ZQPSSB2dEotwHMn v9Tp5z75TatxB8rX6WNvIIOprKTAmkxQxODaVmcY8ukfbQ1zXmW9bqASIhqEjsse PbJSdJMP6cX0f5Zz1s9pz+4ifzF5vQ9+h8Q3tzI7fYnx3gpkukrK4KUECc88wzqz XqlzVx86JOkPhOCBCs7R3OuBeLY+8eaDAlBFmp3QmrGnKFmXcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKXARRy1Yx+Fbsu3RHfde2JTbCzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2EwZDc1MzMtNjcyMC0z NjE3LTg5MzUtMGNmZGM4ZmI2YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiZ3mRtJ22wF28F8uh63z9hLKtMaSTHWo7uSsILBkvLB2Noz1x9xszM mv29Wn/Ggjoz6k0SEZKKIBhABMhRUv7kvCTCANvj2S34dgcVthrpq+TQthx7Xm99 cEuUWSnxC/a8WSqOHk8FNMa9XYCNMh56xgyJk62R6p3A+nqu8dHvG/g8Uuz5Rnq0 V1iPLdAnssdzH7xkKwitLp/spQfSf8oH+48I7o/zZf/mq+u1Ar60rqUodbKBOfB/ ctbaF7pFR1X/DOD1KeXKg/EW8KKV02gOzN7PG4nppHm3rqlRSwab5OtnI/vMBLx6 4gZernmRq0v5eUjyM+X/XELAgoUSnEc= -----END CERTIFICATE-----Generated at Thu Feb 26 09:30:30 2026 by rpki-client