$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c0cea1a-f2a5-36c4-80c8-24a76c4fdfab.roa File: 5c0cea1a-f2a5-36c4-80c8-24a76c4fdfab.roa (raw, json) Hash identifier: 4AJUDEjV2n+/HJC2O+RmsSz2k+YYQV7CxBnsZgukjFw= Subject key identifier: 9A:37:89:C1:F8:94:B1:A0:76:8C:9A:56:62:60:BD:58:BA:F4:50:14 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D773A6C249CD8D555F1449700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c0cea1a-f2a5-36c4-80c8-24a76c4fdfab.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 214238 IP address blocks: 166.88.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:6c:24:9c:d8:d5:55:f1:44:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=435a2ae3-6e11-4df4-9541-26dfb1e81c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:14:45:78:62:f6:44:1d:1e:22:e8:2b:4a: 60:b1:fe:34:1a:99:9a:df:c6:50:d3:d2:72:f7:b3: fa:e7:4c:05:12:e2:2a:a6:92:d0:35:c6:da:c3:fa: 8c:02:2b:d7:42:4a:ab:2d:bf:6d:f4:62:25:73:5f: c4:94:3c:df:fa:0d:06:24:3b:cc:6f:8a:ae:38:d4: 37:ff:bb:b5:2e:a7:66:76:0d:a2:cd:60:97:0a:9b: 01:dc:2c:3e:dc:10:d6:86:e0:58:cb:63:4c:2e:d4: 2f:ce:b9:99:8b:80:d1:ae:cb:fd:2d:7b:8d:ce:38: c0:25:4b:43:7f:bd:e7:09:2b:81:65:4d:d8:99:39: c4:af:80:7c:7e:86:08:b6:77:8b:1d:cf:c4:dd:66: 30:8a:fc:da:5d:b5:c1:25:cb:96:67:60:8a:9f:25: 18:1f:fc:b2:fc:9d:4c:ad:db:a3:7b:7d:8b:7b:0f: 32:4d:35:b2:07:10:7b:89:76:81:b6:9c:97:c2:b8: 18:2e:c4:41:f2:a6:e2:44:18:5e:85:33:0f:ad:88: 52:b2:46:99:17:fb:45:e8:f6:32:67:da:bc:60:c2: 28:2e:ee:b2:cc:ee:3b:d5:68:22:cf:96:26:5b:15: 34:5a:77:48:7c:59:7c:c1:b1:50:3d:4f:79:8e:cb: 60:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:37:89:C1:F8:94:B1:A0:76:8C:9A:56:62:60:BD:58:BA:F4:50:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c0cea1a-f2a5-36c4-80c8-24a76c4fdfab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:94:c2:e5:73:2e:45:17:d9:52:5b:d2:9e:00:59:ad:7e:1e: 0a:26:ce:9e:53:85:56:65:bf:ea:47:b4:59:46:2c:bc:52:a7: ca:92:5a:74:b8:1a:fe:68:56:80:e2:5c:fd:37:38:72:92:09: 36:64:61:bd:8a:99:cf:05:52:11:a4:da:c9:23:62:c1:fa:d4: 27:40:78:95:dc:70:8c:a9:85:4b:b9:8d:20:81:14:be:3f:c0: 4d:33:9a:0a:40:6f:38:f2:9b:1f:54:54:74:d6:d7:ee:90:a3: bc:44:f4:67:94:44:48:26:75:9c:96:e4:84:0b:3a:db:1c:ef: c8:a9:f2:f2:fa:1f:dc:83:ac:c6:ee:e5:db:9e:dc:01:b8:b1: 54:0e:9e:b5:8c:af:ec:a9:8e:ac:f5:21:ff:f1:31:3b:f5:0b: f4:af:ea:a5:1f:eb:23:9c:94:98:f4:5b:26:cc:b5:62:93:fc: 73:b0:ff:c8:32:1e:c3:6f:de:53:39:59:5f:e6:47:c0:d9:00: 8d:59:82:5c:89:50:a4:27:84:7c:ec:0d:f6:1b:73:77:50:5f: 24:3f:dc:7b:3e:38:ac:ec:2c:d1:f5:c8:52:e7:c9:2a:81:6c: 26:0f:7d:e5:93:33:5a:36:95:2b:20:56:8f:65:d3:37:84:38: 40:bc:da:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OmwknNjVVfFElwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk NDM1YTJhZTMtNmUxMS00ZGY0LTk1NDEtMjZkZmIxZTgxYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoUURXhi9kQdHiLoK0pgsf40Gpma38ZQ09Jy 97P650wFEuIqppLQNcbaw/qMAivXQkqrLb9t9GIlc1/ElDzf+g0GJDvMb4quONQ3 /7u1Lqdmdg2izWCXCpsB3Cw+3BDWhuBYy2NMLtQvzrmZi4DRrsv9LXuNzjjAJUtD f73nCSuBZU3YmTnEr4B8foYItneLHc/E3WYwivzaXbXBJcuWZ2CKnyUYH/yy/J1M rduje32Lew8yTTWyBxB7iXaBtpyXwrgYLsRB8qbiRBhehTMPrYhSskaZF/tF6PYy Z9q8YMIoLu6yzO471Wgiz5YmWxU0WndIfFl8wbFQPU95jstgCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJo3icH4lLGgdoyaVmJgvVi69FAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWMwY2VhMWEtZjJhNS0z NmM0LTgwYzgtMjRhNzZjNGZkZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCUwuVzLkUX2VJb0p4AWa1+Hgomzp5ThVZlv+pHtFlGLLxSp8qSWnS4 Gv5oVoDiXP03OHKSCTZkYb2Kmc8FUhGk2skjYsH61CdAeJXccIyphUu5jSCBFL4/ wE0zmgpAbzjymx9UVHTW1+6Qo7xE9GeUREgmdZyW5IQLOtsc78ip8vL6H9yDrMbu 5due3AG4sVQOnrWMr+ypjqz1If/xMTv1C/Sv6qUf6yOclJj0WybMtWKT/HOw/8gy HsNv3lM5WV/mR8DZAI1ZglyJUKQnhHzsDfYbc3dQXyQ/3Hs+OKzsLNH1yFLnySqB bCYPfeWTM1o2lSsgVo9l0zeEOEC82sM= -----END CERTIFICATE-----Generated at Mon Apr 13 09:31:30 2026 by rpki-client