$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa File: a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa (raw, json) Hash identifier: zoPVkyC2lu6+R568N1Kn+qnxbbBU+rIf8qLvK/HX0qg= Subject key identifier: 2D:5D:A9:78:DF:50:D8:B0:F6:D2:4A:BB:69:92:06:61:60:BE:BF:99 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F4985CAD2D28F9EB1F67BC900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 212238 IP address blocks: 166.88.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:ca:d2:d2:8f:9e:b1:f6:7b:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=45161452-21b1-47e8-8652-8c48f03505be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:c8:32:a0:c4:d8:69:4a:04:9a:02:65:18: 70:c1:5d:76:91:ac:4d:56:e4:ea:02:78:cd:4b:25: 51:90:f3:10:35:5f:65:99:fd:ac:83:bb:e8:5f:ab: 51:db:b6:28:72:36:44:18:e7:b3:39:e6:10:69:ca: 2d:c4:27:7e:08:26:09:d3:c4:3a:b9:68:6b:74:77: 05:ab:38:17:12:1e:78:53:c6:3b:7b:29:0e:bc:7e: 1e:96:83:9c:0d:36:77:ee:89:15:02:46:44:f0:3a: 37:ca:a1:80:a3:b7:df:66:ee:33:70:71:ca:ff:a8: 0c:bc:51:5a:0c:eb:af:03:06:2e:42:f0:f6:b5:8a: 6f:33:d9:34:fd:01:b8:28:eb:93:46:07:9d:18:b2: dd:dc:fd:89:fa:1b:b4:20:04:ff:fd:d1:30:18:02: 3d:3a:4e:a2:d6:e6:e4:c9:a3:05:7c:ca:4d:a2:b1: 4d:63:e6:17:f3:37:f4:a1:29:7a:62:62:a9:1e:91: 3b:87:ea:ed:cf:2a:78:7b:da:87:f5:81:9c:28:3a: 78:cc:65:1f:c6:ea:b6:b5:22:08:69:e2:fc:6d:57: 56:1d:d1:53:e1:b9:85:6d:de:2c:99:60:9b:f7:f8: 31:87:43:6b:c3:d7:69:c9:a3:bc:7a:5d:35:7b:0d: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5D:A9:78:DF:50:D8:B0:F6:D2:4A:BB:69:92:06:61:60:BE:BF:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e8:c0:ab:c1:06:4a:2e:de:5f:14:5c:0b:78:37:d6:d2:41: 12:3f:cd:79:69:d9:50:a7:d7:36:5a:4d:3f:17:76:4e:85:70: 01:60:dc:6d:8c:61:e7:35:09:f4:30:d2:5e:61:d9:fe:b7:61: 92:6e:2a:37:60:ad:4b:f5:92:33:8d:32:f4:16:13:b8:35:95: d7:6b:ed:0c:16:d8:7d:c9:38:c7:b7:0a:89:21:c5:05:48:c1: c9:38:cb:e1:5e:c7:c1:4b:56:55:02:78:93:cb:fb:9b:f7:80: 71:20:56:e6:2d:17:3c:f1:1c:4c:66:f8:54:21:f0:f1:d3:6b: 72:21:f2:0a:16:88:82:7c:bc:8b:b2:d3:2e:58:19:58:13:7b: d0:32:80:dc:fa:2e:f3:dd:3a:09:d9:db:d1:f7:0b:25:9a:3d: e2:dc:cf:fa:5e:4e:6b:59:bb:7a:0d:0a:2c:ba:bf:af:75:e5: 3c:b9:68:23:ab:86:d4:3c:db:96:9f:c4:1e:fa:7c:12:55:ec: fd:55:f0:db:09:24:c9:45:bb:08:83:68:d8:56:03:2e:fe:de: c0:0e:5c:db:b2:85:75:2a:c7:a2:80:e6:7c:16:16:44:62:6d: db:34:a5:b1:3b:c5:ab:1b:14:b4:1d:97:08:c9:a0:d5:b4:10: 87:a3:78:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhcrS0o+esfZ7yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDUxNjE0NTItMjFiMS00N2U4LTg2NTItOGM0OGYwMzUwNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4jIMqDE2GlKBJoCZRhwwV12kaxNVuTqAnjN SyVRkPMQNV9lmf2sg7voX6tR27YocjZEGOezOeYQacotxCd+CCYJ08Q6uWhrdHcF qzgXEh54U8Y7eykOvH4eloOcDTZ37okVAkZE8Do3yqGAo7ffZu4zcHHK/6gMvFFa DOuvAwYuQvD2tYpvM9k0/QG4KOuTRgedGLLd3P2J+hu0IAT//dEwGAI9Ok6i1ubk yaMFfMpNorFNY+YX8zf0oSl6YmKpHpE7h+rtzyp4e9qH9YGcKDp4zGUfxuq2tSII aeL8bVdWHdFT4bmFbd4smWCb9/gxh0Nrw9dpyaO8el01ew0iGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1dqXjfUNiw9tJKu2mSBmFgvr+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTc5NmQ5ZTgtM2UzNC0z MWU1LWE4ZDAtYTVjOGJmOWFiZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDowKvBBkou3l8UXAt4N9bSQRI/zXlp2VCn1zZaTT8Xdk6FcAFg3G2M Yec1CfQw0l5h2f63YZJuKjdgrUv1kjONMvQWE7g1lddr7QwW2H3JOMe3CokhxQVI wck4y+Fex8FLVlUCeJPL+5v3gHEgVuYtFzzxHExm+FQh8PHTa3Ih8goWiIJ8vIuy 0y5YGVgTe9AygNz6LvPdOgnZ29H3CyWaPeLcz/peTmtZu3oNCiy6v6915Ty5aCOr htQ825afxB76fBJV7P1V8NsJJMlFuwiDaNhWAy7+3sAOXNuyhXUqx6KA5nwWFkRi bds0pbE7xasbFLQdlwjJoNW0EIejeGQ= -----END CERTIFICATE-----Generated at Tue Oct 13 17:34:59 2026 by rpki-client