$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa File: a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa (raw, json) Hash identifier: MgwGfYGDau3ngWfMpUfgTAgoaJUdKIKxNMfyIProknA= Subject key identifier: C2:2A:E3:A9:AA:DC:DB:97:43:E3:6B:DA:BF:A0:54:BF:59:DF:FC:55 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584DF7A5DF10F163FA9BD995DA80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa Signing time: Wed 27 May 2026 01:00:14 +0000 ROA not before: Wed 27 May 2026 01:00:14 +0000 ROA not after: Tue 25 Aug 2026 01:00:14 +0000 asID: 212238 IP address blocks: 166.88.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f7:a5:df:10:f1:63:fa:9b:d9:95:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 27 01:00:14 2026 GMT Not After : Aug 25 01:00:14 2026 GMT Subject: CN=4e70f5c0-a6e0-42d0-a1a1-f3f45534aa94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0b:70:f4:85:4f:7e:6b:ae:58:8b:38:d8:0e: 52:d8:c5:b5:60:e8:7c:2b:48:4a:ae:7e:42:d7:c8: e1:da:c9:a0:63:c1:de:86:e9:b7:3a:5e:17:28:4f: 0f:b9:d7:dc:8c:9f:18:0b:cc:96:c7:ed:1e:b9:eb: dc:20:db:5c:2a:2f:ee:02:fd:80:f8:c5:9b:69:21: ed:9f:76:1a:b3:d8:cf:0f:de:86:70:19:b5:8a:c1: 97:de:0c:7d:07:9c:d7:be:6a:8b:bf:a3:0a:f4:6b: f5:07:74:33:1f:28:e0:a3:d8:43:e0:c1:d9:cb:ca: 93:59:06:e1:32:77:30:8f:84:1d:e6:2b:fa:ab:18: 0f:0d:cf:35:22:63:fb:39:e2:a7:33:08:42:c0:d3: b4:32:5b:f0:e3:9b:38:87:b8:3b:05:e4:7a:d8:ed: 01:33:73:e6:7d:e9:88:bf:b0:d8:fc:f1:8a:73:1b: 7d:c3:4b:43:44:70:3e:46:f7:2c:db:81:4e:1c:75: 2f:c8:1c:9a:35:1c:06:53:78:6e:fe:50:3a:f9:cc: 21:f9:98:4c:60:36:26:c8:5d:ee:33:be:c4:19:05: 56:49:6f:94:81:38:6c:30:30:69:33:20:8e:60:ba: 9b:6d:98:2f:4e:f5:90:60:95:f9:ff:c5:db:af:5d: 69:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2A:E3:A9:AA:DC:DB:97:43:E3:6B:DA:BF:A0:54:BF:59:DF:FC:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8f:a3:b8:b6:1b:e3:32:85:82:6c:82:0a:4d:b5:8c:a8:47: 30:e5:63:ce:a6:37:00:1b:83:86:59:43:2c:dd:00:87:97:48: 24:3c:29:6e:b9:f1:ae:42:e0:b9:53:92:0c:eb:7f:03:9f:7b: d6:78:2c:93:f2:1a:44:14:03:a2:98:b2:a5:0b:9a:a8:07:1c: 26:c7:7d:dc:22:6b:fb:f7:b8:ce:e3:01:fa:75:b8:22:42:60: ab:5e:c0:1f:5c:1c:33:2b:34:e8:45:f6:eb:20:07:92:25:03: cf:3d:c5:da:0b:19:4e:f7:f6:f4:63:33:09:ee:8b:78:60:79: 0f:74:d0:7c:b3:ba:d3:97:57:cd:71:c8:95:45:9d:9a:b3:a2: e3:a8:80:e9:a9:42:f3:d3:8e:9f:39:49:56:58:c8:7e:35:59: ef:a8:42:97:6b:25:8c:85:39:b6:83:e6:34:4f:87:3a:38:1c: cb:a3:19:9a:9d:b9:68:76:c3:56:2b:94:d0:06:36:8b:a2:7d: de:86:3d:76:27:45:e6:95:88:af:6d:e2:57:0f:96:06:9f:a0: 12:58:3c:e2:d7:d2:ea:5b:a6:3a:f8:4f:28:96:2a:8d:fb:7f: a7:85:7d:6e:0b:1a:49:ea:65:d7:67:8b:c3:1d:b1:a2:6c:25: 32:1d:20:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE33pd8Q8WP6m9mV2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDUyNzAxMDAxNFoXDTI2MDgyNTAxMDAxNFowLzEtMCsGA1UEAxMk NGU3MGY1YzAtYTZlMC00MmQwLWExYTEtZjNmNDU1MzRhYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQtw9IVPfmuuWIs42A5S2MW1YOh8K0hKrn5C 18jh2smgY8Hehum3Ol4XKE8PudfcjJ8YC8yWx+0euevcINtcKi/uAv2A+MWbaSHt n3Yas9jPD96GcBm1isGX3gx9B5zXvmqLv6MK9Gv1B3QzHyjgo9hD4MHZy8qTWQbh Mncwj4Qd5iv6qxgPDc81ImP7OeKnMwhCwNO0Mlvw45s4h7g7BeR62O0BM3PmfemI v7DY/PGKcxt9w0tDRHA+Rvcs24FOHHUvyByaNRwGU3hu/lA6+cwh+ZhMYDYmyF3u M77EGQVWSW+UgThsMDBpMyCOYLqbbZgvTvWQYJX5/8Xbr11ptwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIq46mq3NuXQ+Nr2r+gVL9Z3/xVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTc5NmQ5ZTgtM2UzNC0z MWU1LWE4ZDAtYTVjOGJmOWFiZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOPo7i2G+MyhYJsggpNtYyoRzDlY86mNwAbg4ZZQyzdAIeXSCQ8KW65 8a5C4LlTkgzrfwOfe9Z4LJPyGkQUA6KYsqULmqgHHCbHfdwia/v3uM7jAfp1uCJC YKtewB9cHDMrNOhF9usgB5IlA889xdoLGU739vRjMwnui3hgeQ900HyzutOXV81x yJVFnZqzouOogOmpQvPTjp85SVZYyH41We+oQpdrJYyFObaD5jRPhzo4HMujGZqd uWh2w1YrlNAGNouifd6GPXYnReaViK9t4lcPlgafoBJYPOLX0upbpjr4TyiWKo37 f6eFfW4LGknqZddni8MdsaJsJTIdICw= -----END CERTIFICATE-----Generated at Thu May 28 17:13:29 2026 by rpki-client