$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aefab7c6-978e-3f5e-bea7-39ea1fc69317.roa File: aefab7c6-978e-3f5e-bea7-39ea1fc69317.roa (raw, json) Hash identifier: MbBRwhT2miJEUTUgWH12YLk6FGazL3DWbJpjLrZKS2c= Subject key identifier: B2:01:8A:D2:3D:4B:60:C3:5D:C4:52:B1:36:66:DB:52:43:B8:30:AE Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EA794B55F00C58A2D0FB256C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aefab7c6-978e-3f5e-bea7-39ea1fc69317.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 18779 IP address blocks: 166.88.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:b5:5f:00:c5:8a:2d:0f:b2:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f70ec9dd-27eb-4a74-8719-4cd8e1d53268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fa:62:6d:b6:c7:53:90:39:17:08:72:fc:12: 57:35:33:ce:79:8f:f5:cc:c0:25:f9:9e:48:3d:ff: 2b:20:38:2e:e7:e7:bf:0f:86:28:ea:c8:63:be:e8: 39:f6:7f:ce:7d:78:8a:02:f1:da:0a:7b:a2:32:82: d1:01:8b:7d:2d:70:6a:9a:22:ef:79:17:44:b4:ba: b4:d9:5b:39:76:23:fa:f7:85:70:dc:b1:21:9f:3c: 47:6d:7d:2e:ed:cf:00:5b:1e:d5:9c:3b:0c:60:45: 34:d6:3b:b8:d3:8c:0c:fc:fb:e5:fc:f8:52:67:3e: e0:09:06:70:eb:85:46:24:88:5a:2c:de:16:cd:d0: 0d:95:5b:db:de:17:33:d3:3f:58:bf:2a:b7:29:0f: 0e:76:f6:d4:93:51:bf:83:eb:3e:52:d1:ad:1f:97: 68:ad:19:d7:2a:70:4b:cc:62:bb:77:c0:be:79:04: 05:b7:57:d7:df:9e:b9:20:a9:78:b9:53:eb:9e:67: 9f:9c:67:ff:0d:b2:b1:2d:1b:0b:b1:bd:f3:c5:7a: 98:d8:39:ef:8f:ed:b8:a1:ab:e2:98:8b:ac:8e:28: 43:94:86:3f:c2:b7:aa:58:b3:3c:60:0b:c8:8d:34: 69:8f:d4:70:46:d3:8e:db:0e:e9:5e:2a:bd:28:f0: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:01:8A:D2:3D:4B:60:C3:5D:C4:52:B1:36:66:DB:52:43:B8:30:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aefab7c6-978e-3f5e-bea7-39ea1fc69317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:84:2d:a2:a2:90:28:9f:c6:40:e1:01:2e:12:42:94:4e:b1: 41:a1:b3:18:88:c1:9e:f8:e1:a1:69:c2:12:32:81:d1:55:db: 21:c5:5c:ee:9e:5f:ef:1c:f4:50:c3:01:e4:47:69:ad:78:4c: bf:ee:3e:8e:83:2e:b5:e9:7b:9a:2d:69:7e:2a:09:c8:38:3e: 51:2b:44:e7:9d:27:e7:91:a1:77:46:d3:b8:ff:e9:46:d7:b9: d4:f4:fe:d7:86:cd:24:df:df:7b:76:fe:08:96:88:ad:41:27: f4:d9:5d:82:aa:57:bf:d7:15:60:23:25:ec:31:1a:07:82:2d: 3c:43:63:d3:61:3a:d5:ba:7b:41:36:f2:72:ed:d7:d3:59:f0: 1a:1e:e4:88:5f:53:b5:91:d6:bd:ac:72:0c:2e:bf:51:25:37: 3b:9d:ab:ea:bd:a0:22:f2:69:48:1d:dc:6e:a1:65:3a:e1:85: 84:26:19:8c:95:e8:b1:01:06:94:f7:a0:a1:d1:dc:19:1b:53: ee:41:ca:00:76:c8:25:bc:3c:a7:30:e7:d7:3a:63:a4:e4:70: 63:7a:66:4b:48:16:06:4e:a3:0b:79:aa:45:96:56:2e:11:11: 03:a4:8b:c8:e1:b7:f8:bb:27:37:2d:6b:fc:1d:68:48:19:15: bb:ca:8f:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlLVfAMWKLQ+yVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjcwZWM5ZGQtMjdlYi00YTc0LTg3MTktNGNkOGUxZDUzMjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivpibbbHU5A5Fwhy/BJXNTPOeY/1zMAl+Z5I Pf8rIDgu5+e/D4Yo6shjvug59n/OfXiKAvHaCnuiMoLRAYt9LXBqmiLveRdEtLq0 2Vs5diP694Vw3LEhnzxHbX0u7c8AWx7VnDsMYEU01ju404wM/Pvl/PhSZz7gCQZw 64VGJIhaLN4WzdANlVvb3hcz0z9Yvyq3KQ8OdvbUk1G/g+s+UtGtH5dorRnXKnBL zGK7d8C+eQQFt1fX3565IKl4uVPrnmefnGf/DbKxLRsLsb3zxXqY2Dnvj+24oavi mIusjihDlIY/wreqWLM8YAvIjTRpj9RwRtOO2w7pXiq9KPDtdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIBitI9S2DDXcRSsTZm21JDuDCuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWVmYWI3YzYtOTc4ZS0z ZjVlLWJlYTctMzllYTFmYzY5MzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeELaKikCifxkDhAS4SQpROsUGhsxiIwZ744aFpwhIygdFV2yHFXO6e X+8c9FDDAeRHaa14TL/uPo6DLrXpe5otaX4qCcg4PlErROedJ+eRoXdG07j/6UbX udT0/teGzSTf33t2/giWiK1BJ/TZXYKqV7/XFWAjJewxGgeCLTxDY9NhOtW6e0E2 8nLt19NZ8Boe5IhfU7WR1r2scgwuv1ElNzudq+q9oCLyaUgd3G6hZTrhhYQmGYyV 6LEBBpT3oKHR3BkbU+5BygB2yCW8PKcw59c6Y6TkcGN6ZktIFgZOowt5qkWWVi4R EQOki8jht/i7Jzcta/wdaEgZFbvKj8c= -----END CERTIFICATE-----Generated at Thu Aug 27 14:17:41 2026 by rpki-client