$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa File: 86f61352-45a4-3d85-9f07-9a73694b819e.roa (raw, json) Hash identifier: bix9iQC58eX34Ta1w12JnPIEoMbpreuXRj/1JU1vnHQ= Subject key identifier: B2:20:0B:11:7B:49:D3:79:3C:03:28:A9:55:36:16:97:0C:7C:C7:D4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EA8EC4A3326BE95A536E3D3E0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 9312 IP address blocks: 166.88.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:4a:33:26:be:95:a5:36:e3:d3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=e3439ff1-7fb0-4c29-af31-36737f3ea5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d0:07:53:a7:66:a3:c0:59:19:56:9b:0f:c3: b9:89:33:04:2e:3b:20:da:d6:8e:89:fd:32:40:fb: 97:66:5c:fd:94:b1:ae:41:30:1b:2b:b4:63:5e:14: 3c:4f:dd:28:e8:31:0d:1c:8f:11:12:dc:f2:97:da: e9:e0:7c:2f:61:01:08:0f:97:5a:58:2d:d2:69:a3: 51:67:84:72:0b:5e:e4:62:74:1a:68:c5:4e:65:1d: 89:70:e2:0f:17:c8:34:6b:7b:68:ea:fa:07:cd:31: f7:c4:45:64:72:22:d6:29:55:0b:4f:d0:25:71:aa: ab:7c:77:a5:5a:ba:c8:91:1c:b2:77:42:cf:7a:03: a2:65:cd:dc:e4:c4:98:ce:f0:90:a5:4d:ed:2e:47: ab:94:67:8c:c8:b1:d1:2d:a1:3f:73:4e:3b:27:29: 75:9a:6f:da:4d:90:76:b2:74:ad:9b:cd:64:3f:82: ab:6b:71:1a:ad:c9:90:1a:d7:3f:ff:82:51:7a:a0: 73:a4:0f:8c:4b:45:3c:55:be:21:da:27:f2:95:b2: 80:1a:b3:84:5a:02:42:d8:85:fd:bc:8d:b6:ae:e9: e7:ee:ea:36:53:30:a9:3e:82:cb:f8:62:ae:c7:57: 59:fa:e1:cb:86:15:2d:d9:61:07:d9:2f:fb:12:df: fa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:20:0B:11:7B:49:D3:79:3C:03:28:A9:55:36:16:97:0C:7C:C7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b8:3a:48:be:e7:a0:75:da:1e:e1:15:14:06:ae:2b:ed:e7: f7:ba:8f:81:54:ae:11:47:92:db:71:58:de:39:25:78:a3:4c: 4a:14:b1:96:86:6d:4d:53:44:94:3a:2d:9f:16:db:16:33:10: 51:db:6f:c6:a6:af:ba:95:f8:e3:d8:a5:18:cb:3a:d5:2f:ec: 3b:88:ff:48:61:d2:16:70:d1:e4:40:7c:c1:9f:de:6a:35:c4: 59:c9:1c:dc:3e:24:75:a1:8e:18:f2:7e:cb:98:0e:02:ec:4b: 7b:ce:41:1e:81:44:b8:1e:44:e1:c5:76:57:ad:b1:b2:15:0b: 2c:64:93:b1:35:19:3a:31:82:6c:ee:7e:d8:52:9b:6c:b4:f1: f8:eb:e4:a0:cf:97:b7:06:1a:46:25:6d:64:f9:5b:3f:77:66: 02:47:ac:26:81:72:da:de:ba:80:dc:d3:4c:cb:f0:c0:7b:29: 51:28:02:ea:a0:c5:ba:62:c1:19:bb:da:8a:6f:6b:02:66:9e: ca:59:23:c7:73:7d:69:99:dc:60:1a:f0:a0:54:d6:64:86:0d: c3:81:bc:a5:1f:1c:9b:1b:c4:6b:05:d6:88:5c:cd:18:24:79: 9b:3d:1b:a4:f1:f3:84:67:26:7f:50:f4:37:1b:bc:11:ac:85: 8e:41:20:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7EozJr6VpTbj0+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk ZTM0MzlmZjEtN2ZiMC00YzI5LWFmMzEtMzY3MzdmM2VhNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndAHU6dmo8BZGVabD8O5iTMELjsg2taOif0y QPuXZlz9lLGuQTAbK7RjXhQ8T90o6DENHI8REtzyl9rp4HwvYQEID5daWC3SaaNR Z4RyC17kYnQaaMVOZR2JcOIPF8g0a3to6voHzTH3xEVkciLWKVULT9AlcaqrfHel WrrIkRyyd0LPegOiZc3c5MSYzvCQpU3tLkerlGeMyLHRLaE/c047Jyl1mm/aTZB2 snStm81kP4Kra3EarcmQGtc//4JReqBzpA+MS0U8Vb4h2ifylbKAGrOEWgJC2IX9 vI22runn7uo2UzCpPoLL+GKux1dZ+uHLhhUt2WEH2S/7Et/6FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIgCxF7SdN5PAMoqVU2FpcMfMfUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODZmNjEzNTItNDVhNC0z ZDg1LTlmMDctOWE3MzY5NGI4MTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW4Oki+56B12h7hFRQGrivt5/e6j4FUrhFHkttxWN45JXijTEoUsZaG bU1TRJQ6LZ8W2xYzEFHbb8amr7qV+OPYpRjLOtUv7DuI/0hh0hZw0eRAfMGf3mo1 xFnJHNw+JHWhjhjyfsuYDgLsS3vOQR6BRLgeROHFdletsbIVCyxkk7E1GToxgmzu fthSm2y08fjr5KDPl7cGGkYlbWT5Wz93ZgJHrCaBctreuoDc00zL8MB7KVEoAuqg xbpiwRm72opvawJmnspZI8dzfWmZ3GAa8KBU1mSGDcOBvKUfHJsbxGsF1ohczRgk eZs9G6Tx84RnJn9Q9DcbvBGshY5BIOo= -----END CERTIFICATE-----Generated at Thu Aug 27 16:08:41 2026 by rpki-client