$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8cf2c059-9b2d-3354-8dc1-e206c9286fe7.roa File: 8cf2c059-9b2d-3354-8dc1-e206c9286fe7.roa (raw, json) Hash identifier: uL2bIHYV4tTPGiYajiqI/ABuZHmIxyLle9rl2jMUc2E= Subject key identifier: CF:9D:32:A2:F8:C3:0A:12:87:AA:F2:BB:4A:FA:CD:8D:AA:88:DE:2A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D773A6AB9F091845328E06E00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8cf2c059-9b2d-3354-8dc1-e206c9286fe7.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 214238 IP address blocks: 166.88.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:6a:b9:f0:91:84:53:28:e0:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=0d791f2c-7e5e-4ca8-acc3-0b254b7ddbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3b:b0:ff:ed:00:fa:19:3e:92:f1:c4:2e:ca: 74:e7:d9:02:57:fd:e9:92:e9:7a:2a:1e:b4:2d:26: 83:db:b3:9c:18:71:64:e5:6c:df:27:ec:25:b0:76: d9:0b:b1:bf:32:52:d4:ce:5b:a8:b2:06:d6:6c:ed: 69:ea:6a:f5:b0:2a:fe:a8:d2:92:cc:1d:95:93:57: c2:31:54:6a:47:e3:25:8b:ea:26:5c:9c:08:4e:aa: d8:32:30:f9:33:9f:eb:ec:dd:ca:0e:bd:4d:50:0a: 27:e2:16:9c:4c:3f:74:68:47:c9:2a:24:7e:ac:52: 00:e5:f1:03:3c:67:a7:8a:f9:83:e3:e6:c2:2c:f9: 81:46:85:a4:31:0f:bd:60:ca:ca:91:e5:6f:e5:e7: e9:85:ed:79:d6:43:f5:46:b8:bd:76:b0:a3:9c:4f: 07:48:50:6f:fa:ba:59:2a:32:cc:f8:c4:08:34:45: f3:5b:20:89:31:a3:c9:35:d2:8a:b6:14:7c:4a:f3: 88:4a:be:12:3c:9f:99:98:c0:c8:d6:70:4b:de:e6: 08:ec:f2:64:3f:8b:d1:b9:3e:72:38:8a:fd:cb:14: c8:3f:de:25:7c:76:35:51:ea:39:13:16:07:43:cd: 21:81:07:3c:8f:7f:8e:dc:bd:c1:55:34:75:e1:4d: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9D:32:A2:F8:C3:0A:12:87:AA:F2:BB:4A:FA:CD:8D:AA:88:DE:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8cf2c059-9b2d-3354-8dc1-e206c9286fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f5:af:b4:60:f4:a0:5e:17:e9:be:b3:b7:ae:69:3e:62:c6: f3:ca:1e:f6:fd:33:70:65:79:4e:46:67:1c:88:c5:55:10:f7: 98:a6:4f:49:8b:e2:0a:2f:64:ad:5a:d1:d0:07:bf:7a:51:01: 6b:4a:de:9d:df:96:07:4b:f2:26:c2:f3:0a:b3:d3:d1:78:93: 0b:a3:73:32:3c:fd:79:bf:05:d9:72:48:78:10:1e:81:19:a8: fc:b9:09:ca:a1:8f:97:6c:e8:13:58:be:59:5b:75:f6:ba:14: 94:fd:4a:b2:8f:ec:68:e8:22:02:79:66:ee:d0:a5:e0:48:47: 01:e8:86:3b:c6:37:06:83:5d:6c:4b:d0:ce:54:0b:e7:2b:44: 41:c9:16:df:cf:f4:9d:97:d0:50:41:df:7b:0e:88:66:58:19: d7:b1:aa:92:8b:a5:97:68:ec:33:ed:1d:47:70:c7:09:44:9a: d3:35:0b:31:6e:d0:43:d6:ea:64:a3:50:68:0b:bf:c3:d6:c2: f7:3d:09:2d:cc:6c:94:0f:5d:10:43:bb:40:ca:a4:0a:f9:19: 70:96:26:e5:5d:d1:01:b3:9b:28:f0:69:07:62:90:b3:98:b7: b3:42:f3:a2:dd:df:fd:bf:14:ab:71:a3:4b:18:56:e6:58:ab: 93:2f:f8:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13Omq58JGEUyjgbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk MGQ3OTFmMmMtN2U1ZS00Y2E4LWFjYzMtMGIyNTRiN2RkYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzuw/+0A+hk+kvHELsp059kCV/3pkul6Kh60 LSaD27OcGHFk5WzfJ+wlsHbZC7G/MlLUzluosgbWbO1p6mr1sCr+qNKSzB2Vk1fC MVRqR+Mli+omXJwITqrYMjD5M5/r7N3KDr1NUAon4hacTD90aEfJKiR+rFIA5fED PGenivmD4+bCLPmBRoWkMQ+9YMrKkeVv5efphe151kP1Rri9drCjnE8HSFBv+rpZ KjLM+MQINEXzWyCJMaPJNdKKthR8SvOISr4SPJ+ZmMDI1nBL3uYI7PJkP4vRuT5y OIr9yxTIP94lfHY1Ueo5ExYHQ80hgQc8j3+O3L3BVTR14U1QfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+dMqL4wwoSh6ryu0r6zY2qiN4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGNmMmMwNTktOWIyZC0z MzU0LThkYzEtZTIwNmM5Mjg2ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIr1r7Rg9KBeF+m+s7euaT5ixvPKHvb9M3BleU5GZxyIxVUQ95imT0mL 4govZK1a0dAHv3pRAWtK3p3flgdL8ibC8wqz09F4kwujczI8/Xm/BdlySHgQHoEZ qPy5Ccqhj5ds6BNYvllbdfa6FJT9SrKP7GjoIgJ5Zu7QpeBIRwHohjvGNwaDXWxL 0M5UC+crREHJFt/P9J2X0FBB33sOiGZYGdexqpKLpZdo7DPtHUdwxwlEmtM1CzFu 0EPW6mSjUGgLv8PWwvc9CS3MbJQPXRBDu0DKpAr5GXCWJuVd0QGzmyjwaQdikLOY t7NC86Ld3/2/FKtxo0sYVuZYq5Mv+Jk= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:54 2026 by rpki-client