$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ac466d21-9834-3f23-9908-80d1e6518979.roa File: ac466d21-9834-3f23-9908-80d1e6518979.roa (raw, json) Hash identifier: cSIwMI4CIT3tjQF6D5w3TFwiwlGEJp8AuH2djhp9aL4= Subject key identifier: DB:84:D4:26:F2:27:B2:3D:38:21:50:7D:69:3B:B9:AE:13:3B:E6:B1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584E4DCEA470BCBA9C464CF2D780 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ac466d21-9834-3f23-9908-80d1e6518979.roa Signing time: Fri 26 Jun 2026 21:42:07 +0000 ROA not before: Fri 26 Jun 2026 21:42:07 +0000 ROA not after: Thu 24 Sep 2026 21:42:07 +0000 asID: 213929 IP address blocks: 166.88.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:ce:a4:70:bc:ba:9c:46:4c:f2:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 26 21:42:07 2026 GMT Not After : Sep 24 21:42:07 2026 GMT Subject: CN=0d800312-9aed-4856-a7eb-2b2b119be6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:be:32:3e:25:4b:c3:c0:c3:d5:8e:83:0d:ce: e7:ba:63:84:cb:49:3f:f9:28:42:7e:e3:7e:24:6b: 9e:6d:91:db:59:1f:46:50:fa:34:5f:58:bf:0b:76: 5b:e8:33:7f:b5:e5:2d:ff:cd:8b:e2:99:58:0d:4c: dc:95:f9:14:6d:53:66:a8:db:fb:2e:1d:80:2b:ac: 1a:70:84:0e:2d:67:9a:23:e7:0a:8d:01:da:aa:9c: 75:e2:f0:ee:bc:40:77:75:96:5e:b7:5c:53:0b:4b: 10:1f:24:04:be:8d:bd:03:fe:04:18:86:52:0d:40: f1:f1:32:67:74:0e:c9:3b:39:e0:03:ea:83:e5:19: ed:e3:ec:7d:9e:be:65:64:c7:03:47:37:30:bd:f1: 8b:2a:a4:23:0b:72:2f:15:8c:a4:8c:9d:de:e1:fc: 73:84:d8:c7:ed:f7:24:da:e8:70:68:f2:c8:89:b9: b6:fd:34:a3:05:a2:40:f0:11:3e:3c:7b:7c:b2:6c: 89:43:a5:4a:5f:64:13:f7:43:6b:76:31:04:95:26: d4:e9:39:5a:51:24:c6:ee:ef:b5:e2:2d:5a:c7:d9: a6:06:40:58:7b:a9:25:d2:80:9d:9d:0f:12:66:d1: 24:07:6d:c4:7f:10:12:3e:65:a7:c2:77:2d:29:b8: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:84:D4:26:F2:27:B2:3D:38:21:50:7D:69:3B:B9:AE:13:3B:E6:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ac466d21-9834-3f23-9908-80d1e6518979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:20:8f:c1:29:a3:c7:5d:e9:ff:a3:e1:eb:62:2e:94:6d:7d: 9c:fb:5f:3a:75:3d:55:90:35:54:cb:46:f1:b0:f2:cf:ce:d8: 38:16:51:3c:a9:92:bd:2f:5f:11:7c:47:4f:94:3c:27:52:31: 04:2f:77:d5:9e:19:85:21:16:b7:5e:a1:f4:18:9f:6f:ad:bf: 77:11:77:3a:58:c3:6a:05:68:3a:23:e3:c1:ca:23:fa:e2:13: ed:f2:86:ae:30:50:b2:2f:b9:c6:6b:88:62:64:26:c8:74:10: 1b:d3:89:22:80:9b:50:94:2f:fc:25:b6:c7:65:ca:bb:cf:34: 3e:fd:68:82:f7:d8:ae:e9:33:1c:bb:b8:b2:b9:21:96:b9:57: f1:01:c9:5c:8e:8c:5e:9e:01:72:ce:42:fa:65:95:74:02:52: 7e:64:e8:37:94:da:f5:60:83:44:50:89:36:51:20:73:da:44: 6e:91:b1:cf:a0:4d:ac:2a:96:37:53:8e:dd:54:de:3b:96:e2: b9:2b:77:b1:1e:1f:ae:7a:10:c2:b4:a3:00:74:20:e3:2b:a6: 53:9c:4d:29:bd:f0:ce:eb:bb:1a:a7:f6:34:40:ec:08:b2:be: 86:1b:bc:c3:48:f0:d4:1e:3b:3a:eb:bf:14:85:83:8b:1d:83: 6f:4c:91:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NzqRwvLqcRkzy14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDYyNjIxNDIwN1oXDTI2MDkyNDIxNDIwN1owLzEtMCsGA1UEAxMk MGQ4MDAzMTItOWFlZC00ODU2LWE3ZWItMmIyYjExOWJlNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir4yPiVLw8DD1Y6DDc7numOEy0k/+ShCfuN+ JGuebZHbWR9GUPo0X1i/C3Zb6DN/teUt/82L4plYDUzclfkUbVNmqNv7Lh2AK6wa cIQOLWeaI+cKjQHaqpx14vDuvEB3dZZet1xTC0sQHyQEvo29A/4EGIZSDUDx8TJn dA7JOzngA+qD5Rnt4+x9nr5lZMcDRzcwvfGLKqQjC3IvFYykjJ3e4fxzhNjH7fck 2uhwaPLIibm2/TSjBaJA8BE+PHt8smyJQ6VKX2QT90NrdjEElSbU6TlaUSTG7u+1 4i1ax9mmBkBYe6kl0oCdnQ8SZtEkB23EfxASPmWnwnctKbgkrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuE1CbyJ7I9OCFQfWk7ua4TO+axMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWM0NjZkMjEtOTgzNC0z ZjIzLTk5MDgtODBkMWU2NTE4OTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUgj8Epo8dd6f+j4etiLpRtfZz7Xzp1PVWQNVTLRvGw8s/O2DgWUTyp kr0vXxF8R0+UPCdSMQQvd9WeGYUhFrdeofQYn2+tv3cRdzpYw2oFaDoj48HKI/ri E+3yhq4wULIvucZriGJkJsh0EBvTiSKAm1CUL/wltsdlyrvPND79aIL32K7pMxy7 uLK5IZa5V/EByVyOjF6eAXLOQvpllXQCUn5k6DeU2vVgg0RQiTZRIHPaRG6Rsc+g TawqljdTjt1U3juW4rkrd7EeH656EMK0owB0IOMrplOcTSm98M7ruxqn9jRA7Aiy voYbvMNI8NQeOzrrvxSFg4sdg29MkXQ= -----END CERTIFICATE-----Generated at Sat Jun 27 18:19:58 2026 by rpki-client