$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ca78c3d-baa3-3fa5-a6dc-2d701ed84150.roa File: 4ca78c3d-baa3-3fa5-a6dc-2d701ed84150.roa (raw, json) Hash identifier: 4r1uq1yeVL6qk+bS/oEsuiR/8O7SmF+vwMG738mMx9I= Subject key identifier: C1:95:26:F1:5F:D9:99:1D:8E:3D:DD:C0:90:85:95:2C:1B:A9:39:0F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D59EAAF20E9437AEFA0D35200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ca78c3d-baa3-3fa5-a6dc-2d701ed84150.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 26383 IP address blocks: 166.88.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:af:20:e9:43:7a:ef:a0:d3:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=c7c39890-acb3-48be-93e8-879f800b9984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:b8:36:26:4d:59:21:3f:88:5b:a2:a0:9b: a2:4f:84:64:fd:0b:09:1c:4d:ce:0f:6a:89:a9:2a: ca:b6:07:6f:09:fe:16:4c:6a:42:f7:6e:33:ec:37: ac:2a:90:85:3b:39:64:b6:ae:23:9d:f0:64:d8:2c: a2:17:19:75:d3:43:79:43:8c:3e:65:98:b3:6c:af: 13:60:6e:24:3b:17:f2:ca:c2:f6:02:a7:25:99:4a: c4:cb:d8:27:e1:bf:20:a0:48:37:5c:48:8e:53:4a: b6:26:82:01:bf:e7:02:95:c4:d2:6c:c8:b6:64:0d: 9b:a1:15:1f:73:87:c9:b3:32:1b:b2:ca:17:b6:2e: cb:53:97:5c:dc:e3:7d:45:b5:10:b3:f3:51:8d:62: cd:2d:20:a0:28:c4:2f:4d:37:4d:3f:ff:ba:eb:66: e4:a1:a3:f6:1d:7a:43:d9:1c:d8:4c:25:e1:12:08: b7:87:78:50:7e:24:74:0a:a6:51:ee:14:19:0c:a0: ce:ff:7c:b8:bc:8f:0b:e5:8b:a7:50:fe:89:e0:3c: 12:b7:9d:15:ed:e9:68:da:f3:b3:4f:94:36:7e:09: 1a:47:4d:03:79:a7:77:0f:9f:ea:fc:54:c7:42:c9: dc:21:f1:cf:54:9f:26:8c:59:9f:9d:1d:0f:f4:e3: ac:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:95:26:F1:5F:D9:99:1D:8E:3D:DD:C0:90:85:95:2C:1B:A9:39:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ca78c3d-baa3-3fa5-a6dc-2d701ed84150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:6e:ca:b3:5b:ed:32:38:6f:c9:7b:24:de:e1:f7:6d:01:69: 97:44:ec:dc:37:db:e5:e7:ea:e5:07:db:e8:6b:ab:f8:96:47: 05:1b:a7:c4:13:6d:a7:78:2c:c2:2a:44:38:dc:71:e4:4d:7c: cb:ab:54:6b:42:b3:c3:2a:7c:f1:fb:62:9f:16:04:80:31:bc: cb:53:d0:be:3d:19:8e:23:8a:3e:50:25:ac:c5:fb:e6:be:57: 36:d2:0f:12:34:96:e0:20:a3:de:60:db:f8:95:97:15:1b:d0: c1:a0:69:6b:c1:de:83:d6:28:47:63:8d:9e:4d:fa:96:62:23: cf:14:96:b8:8a:f1:a8:71:1e:1a:ef:2d:ec:21:58:19:d5:f3: 33:4f:ac:bd:a1:8a:4b:d1:65:8d:2b:15:7f:2c:8c:0d:1c:f3: 44:e6:dd:d0:ba:8c:67:f7:c2:e4:d0:20:37:47:6d:fe:8c:9a: 52:0a:ed:0b:3b:70:e7:6e:c9:59:2f:c4:15:a6:bc:9d:96:c1: 47:c0:fe:5c:3b:d7:1f:16:05:6b:c7:5b:b9:14:e0:1a:c2:bc: 8e:bb:74:38:9f:5c:03:c9:e3:8d:65:a1:10:32:2f:c1:43:4b: a1:4b:ff:e3:23:d2:02:c2:00:09:5b:5d:88:0b:7b:e6:92:5e: 43:b3:66:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6q8g6UN676DTUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YzdjMzk4OTAtYWNiMy00OGJlLTkzZTgtODc5ZjgwMGI5OTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyu4NiZNWSE/iFuioJuiT4Rk/QsJHE3OD2qJ qSrKtgdvCf4WTGpC924z7DesKpCFOzlktq4jnfBk2CyiFxl100N5Q4w+ZZizbK8T YG4kOxfyysL2AqclmUrEy9gn4b8goEg3XEiOU0q2JoIBv+cClcTSbMi2ZA2boRUf c4fJszIbssoXti7LU5dc3ON9RbUQs/NRjWLNLSCgKMQvTTdNP/+662bkoaP2HXpD 2RzYTCXhEgi3h3hQfiR0CqZR7hQZDKDO/3y4vI8L5YunUP6J4DwSt50V7elo2vOz T5Q2fgkaR00Dead3D5/q/FTHQsncIfHPVJ8mjFmfnR0P9OOsNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGVJvFf2Zkdjj3dwJCFlSwbqTkPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGNhNzhjM2QtYmFhMy0z ZmE1LWE2ZGMtMmQ3MDFlZDg0MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZuyrNb7TI4b8l7JN7h920BaZdE7Nw32+Xn6uUH2+hrq/iWRwUbp8QT bad4LMIqRDjcceRNfMurVGtCs8MqfPH7Yp8WBIAxvMtT0L49GY4jij5QJazF++a+ VzbSDxI0luAgo95g2/iVlxUb0MGgaWvB3oPWKEdjjZ5N+pZiI88UlriK8ahxHhrv LewhWBnV8zNPrL2hikvRZY0rFX8sjA0c80Tm3dC6jGf3wuTQIDdHbf6MmlIK7Qs7 cOduyVkvxBWmvJ2WwUfA/lw71x8WBWvHW7kU4BrCvI67dDifXAPJ441loRAyL8FD S6FL/+Mj0gLCAAlbXYgLe+aSXkOzZuE= -----END CERTIFICATE-----Generated at Mon Apr 13 09:30:34 2026 by rpki-client