$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa File: 654a5901-d2ef-3c77-9fec-fb93802aa967.roa (raw, json) Hash identifier: R68MYXUcHLnrUkPCkfCbIb2ixtsCHT4hT45RrKl4Qw4= Subject key identifier: C9:FE:53:52:0A:AC:06:65:ED:95:F0:C6:C7:53:92:8C:D1:41:41:AF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F4985C84A81A82D53BF2B5B00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 212238 IP address blocks: 166.88.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:c8:4a:81:a8:2d:53:bf:2b:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=96ff621f-c12f-4401-91f1-09c71bb3deae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ba:a5:5b:22:8b:1e:ab:e2:af:d1:8c:d5:2b: 89:f2:31:aa:83:f5:80:9c:48:44:8c:4a:32:2b:95: bd:c2:7c:28:04:ff:4c:b0:9c:49:fc:4a:98:a2:cc: 28:a9:b1:b2:a7:c1:26:c2:b4:40:51:c4:b4:ec:ac: 1b:ea:ff:d0:e8:f0:36:9b:7e:84:65:53:96:ce:31: ba:cd:1d:28:18:b9:a4:f8:12:dd:70:ce:25:65:97: c2:2e:0f:7f:2b:95:41:f1:6b:18:58:cf:1d:01:32: b1:c5:14:61:e6:84:0c:d7:1e:85:fe:5e:38:06:c9: be:77:b3:18:33:5f:85:b2:ae:b6:23:b5:f5:a7:71: 60:94:fe:4b:f8:5b:20:eb:0d:05:f9:f0:3f:43:76: 3e:2e:9a:1f:fe:dd:07:f2:e8:d9:34:6a:50:af:00: f6:6d:e3:77:43:40:e6:a6:49:e0:7d:d4:9c:e2:4d: 15:23:66:8d:b9:4b:f5:51:7e:a9:c6:35:e8:5b:85: d2:4f:f1:9c:64:5d:aa:ab:33:66:e4:0b:3e:3b:bb: ff:26:a5:28:65:01:b1:2c:30:7a:1b:52:15:f5:88: 8e:11:7a:ba:c7:9b:a0:31:90:a6:32:4c:89:1a:68: 0f:c5:a0:72:73:9d:49:43:e0:92:fb:29:5e:a5:b1: 61:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FE:53:52:0A:AC:06:65:ED:95:F0:C6:C7:53:92:8C:D1:41:41:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:4f:e4:f7:55:8e:e9:36:fb:2f:b4:81:2a:8d:56:6b:b6:8c: 2b:3e:88:c1:ba:cd:2b:87:8e:b5:22:3d:f9:85:b4:29:1b:b8: 48:61:66:c8:6f:78:df:59:f6:77:10:96:df:37:69:22:24:cb: 37:42:37:da:8a:f4:57:e5:f0:d8:c3:6a:7a:6b:ae:ea:47:66: ec:dc:25:5c:f5:30:31:14:64:e5:87:7d:08:a1:91:0d:d1:95: 89:60:9e:1b:2e:e1:ca:0c:bd:a2:63:a2:2f:47:a7:fd:f8:31: ea:d8:29:dc:4d:3d:3c:6a:3f:df:3a:73:fb:8e:5c:3d:25:81: e5:4c:34:71:4b:83:84:65:4c:e9:02:08:14:50:4f:9a:13:43: 03:aa:ce:90:1a:a9:aa:53:01:92:66:de:a4:56:0c:c6:7c:52: c3:d8:8e:27:66:d1:c7:74:f7:9f:52:21:fd:a6:be:f1:96:04: af:d0:45:1b:28:b2:06:33:09:24:d0:b6:66:28:89:18:57:06: b3:16:0c:c0:63:a6:73:9f:44:94:a1:28:7e:2a:6a:82:64:e2: a0:1e:30:58:b7:4d:eb:d1:88:ad:8f:ae:56:37:65:b9:32:c7: 68:36:69:20:22:c4:d4:de:bf:90:73:d9:95:9f:fb:2f:16:56: 60:8e:79:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhchKgagtU78rWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTZmZjYyMWYtYzEyZi00NDAxLTkxZjEtMDljNzFiYjNkZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrqlWyKLHqvir9GM1SuJ8jGqg/WAnEhEjEoy K5W9wnwoBP9MsJxJ/EqYoswoqbGyp8EmwrRAUcS07Kwb6v/Q6PA2m36EZVOWzjG6 zR0oGLmk+BLdcM4lZZfCLg9/K5VB8WsYWM8dATKxxRRh5oQM1x6F/l44Bsm+d7MY M1+Fsq62I7X1p3FglP5L+Fsg6w0F+fA/Q3Y+Lpof/t0H8ujZNGpQrwD2beN3Q0Dm pkngfdSc4k0VI2aNuUv1UX6pxjXoW4XST/GcZF2qqzNm5As+O7v/JqUoZQGxLDB6 G1IV9YiOEXq6x5ugMZCmMkyJGmgPxaByc51JQ+CS+ylepbFhtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMn+U1IKrAZl7ZXwxsdTkozRQUGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjU0YTU5MDEtZDJlZi0z Yzc3LTlmZWMtZmI5MzgwMmFhOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdP5PdVjuk2+y+0gSqNVmu2jCs+iMG6zSuHjrUiPfmFtCkbuEhhZshv eN9Z9ncQlt83aSIkyzdCN9qK9Ffl8NjDanprrupHZuzcJVz1MDEUZOWHfQihkQ3R lYlgnhsu4coMvaJjoi9Hp/34MerYKdxNPTxqP986c/uOXD0lgeVMNHFLg4RlTOkC CBRQT5oTQwOqzpAaqapTAZJm3qRWDMZ8UsPYjidm0cd0959SIf2mvvGWBK/QRRso sgYzCSTQtmYoiRhXBrMWDMBjpnOfRJShKH4qaoJk4qAeMFi3TevRiK2PrlY3Zbky x2g2aSAixNTev5Bz2ZWf+y8WVmCOeSc= -----END CERTIFICATE-----Generated at Tue Oct 13 17:36:11 2026 by rpki-client