$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c2bd204-1900-3b87-b914-eadc3bf4cdf2.roa File: 8c2bd204-1900-3b87-b914-eadc3bf4cdf2.roa (raw, json) Hash identifier: gNsFnC8IPsBwR4RnYMnxOepx2ZHoZZxxEzI0UafyKNE= Subject key identifier: 6E:8A:81:8C:AA:BB:F2:AB:A3:99:EB:D1:43:87:B5:27:E0:F9:37:5F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D6EDA8DDB36750396148C7E40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c2bd204-1900-3b87-b914-eadc3bf4cdf2.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 216093 IP address blocks: 166.88.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:8d:db:36:75:03:96:14:8c:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=0d081635-3f26-4910-8525-69a6101a17b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:12:64:bd:c6:d5:dd:7a:18:16:f9:00:6a:07: d1:99:01:ed:66:f1:dc:19:2e:66:76:6a:bf:95:a6: 4f:db:0b:b3:da:47:c2:24:c3:4c:1a:f1:9d:54:93: 9f:42:1f:e3:9a:a0:0d:43:9e:ab:a6:94:5d:72:ff: 04:72:cf:92:7c:b7:13:9a:cf:67:eb:92:7f:15:1c: 84:71:79:99:15:32:6b:14:ef:04:fe:c7:75:d9:9a: 03:80:cc:b7:04:72:ef:71:01:9d:59:84:12:3e:96: 58:15:b8:07:24:78:01:74:4a:39:5c:19:9a:2a:62: fe:15:c0:18:df:ce:84:19:bb:db:3e:b9:3f:fa:38: ca:8c:50:f8:dc:2c:3f:e1:5e:18:75:42:23:aa:73: 38:c0:28:ed:7e:fd:9d:f0:2d:c8:81:b7:23:e8:4b: f6:02:0c:66:4e:ea:cd:ca:26:c2:b2:ee:aa:15:24: 5d:4f:2d:33:4a:e8:a8:ec:6e:be:18:75:2a:23:60: 3a:9b:2d:a6:9d:8f:0a:f8:bd:1e:6d:30:e2:83:34: d0:64:4e:12:a5:c4:c9:7b:2a:9d:0d:94:08:1f:bb: 6c:e7:b4:73:61:1e:b8:9d:5f:95:9e:71:54:57:9a: 7f:5b:d6:be:56:08:b3:a3:31:b3:e8:b9:da:d6:00: 4a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8A:81:8C:AA:BB:F2:AB:A3:99:EB:D1:43:87:B5:27:E0:F9:37:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c2bd204-1900-3b87-b914-eadc3bf4cdf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:bf:3f:5f:91:02:bc:34:7c:27:3a:1d:e9:7d:f5:d3:9f:e7: fe:e7:96:e2:e5:a0:95:6f:54:f2:eb:11:96:62:28:f4:a3:f7: 7e:35:5e:61:8b:66:77:34:bb:35:5b:4f:45:83:c1:6d:b8:95: 0a:8a:ff:33:1b:b0:81:6f:25:3f:68:d5:70:d8:d0:7e:06:ff: 87:16:7e:fb:7f:5b:c9:85:41:a3:eb:d0:15:76:f2:70:0d:65: 1d:e6:a1:c0:7a:a2:04:b9:64:59:97:50:65:4c:42:87:52:5b: b9:57:26:23:fb:d5:b3:ee:30:15:fc:52:5a:78:50:1f:cc:36: 5d:74:6e:1c:ed:11:70:e1:f4:d9:09:d8:ab:0b:c8:5d:5d:63: 00:3c:18:6b:46:c7:2d:64:26:ab:46:46:6d:65:b8:49:ab:05: 79:9b:c6:dd:c9:45:39:b7:f4:a4:f9:01:43:f8:c6:97:19:79: d4:c7:69:c6:9a:37:b5:7d:af:6c:fc:07:36:36:55:84:8f:28: 3e:b6:7b:31:7b:47:c5:97:c0:e6:cb:39:4b:e9:a7:b4:b6:fb: 66:ab:60:31:b7:aa:ce:02:38:85:53:d0:c4:e2:0b:48:87:2d: 28:dd:f0:b5:f3:db:f5:35:3d:e0:d0:71:68:72:26:93:d8:a4: 3a:90:f6:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2o3bNnUDlhSMfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MGQwODE2MzUtM2YyNi00OTEwLTg1MjUtNjlhNjEwMWExN2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRJkvcbV3XoYFvkAagfRmQHtZvHcGS5mdmq/ laZP2wuz2kfCJMNMGvGdVJOfQh/jmqANQ56rppRdcv8Ecs+SfLcTms9n65J/FRyE cXmZFTJrFO8E/sd12ZoDgMy3BHLvcQGdWYQSPpZYFbgHJHgBdEo5XBmaKmL+FcAY 386EGbvbPrk/+jjKjFD43Cw/4V4YdUIjqnM4wCjtfv2d8C3Igbcj6Ev2AgxmTurN yibCsu6qFSRdTy0zSuio7G6+GHUqI2A6my2mnY8K+L0ebTDigzTQZE4SpcTJeyqd DZQIH7ts57RzYR64nV+VnnFUV5p/W9a+VgizozGz6Lna1gBK2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6KgYyqu/Kro5nr0UOHtSfg+TdfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGMyYmQyMDQtMTkwMC0z Yjg3LWI5MTQtZWFkYzNiZjRjZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu/P1+RArw0fCc6Hel99dOf5/7nluLloJVvVPLrEZZiKPSj9341XmGL Znc0uzVbT0WDwW24lQqK/zMbsIFvJT9o1XDY0H4G/4cWfvt/W8mFQaPr0BV28nAN ZR3mocB6ogS5ZFmXUGVMQodSW7lXJiP71bPuMBX8Ulp4UB/MNl10bhztEXDh9NkJ 2KsLyF1dYwA8GGtGxy1kJqtGRm1luEmrBXmbxt3JRTm39KT5AUP4xpcZedTHacaa N7V9r2z8BzY2VYSPKD62ezF7R8WXwObLOUvpp7S2+2arYDG3qs4COIVT0MTiC0iH LSjd8LXz2/U1PeDQcWhyJpPYpDqQ9oE= -----END CERTIFICATE-----Generated at Mon Apr 13 09:30:57 2026 by rpki-client