$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cc969586-fe65-3f17-854e-da91cff33a5e.roa File: cc969586-fe65-3f17-854e-da91cff33a5e.roa (raw, json) Hash identifier: fvApX3z0PRFMkSiuKgRLwtLdkNZ3GLabYhMQWAnUCkU= Subject key identifier: B3:46:43:08:80:0C:59:52:52:23:5C:24:A0:85:6C:03:81:5E:05:C5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D773A6E42207C1E13D91018E0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cc969586-fe65-3f17-854e-da91cff33a5e.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 214238 IP address blocks: 166.88.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:6e:42:20:7c:1e:13:d9:10:18:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=9a7e6081-56e7-4b48-9444-1769a60b30e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:50:12:1f:c1:b0:2f:3e:89:b0:fe:7b:37:98: 7e:a7:88:91:7d:09:d2:ab:7e:b8:4e:d4:de:9d:af: de:e0:5e:49:7b:b6:af:90:da:99:dd:14:68:d6:71: 2a:51:48:ce:ee:f8:06:01:68:ca:00:97:9d:86:a0: 08:ec:aa:a6:d9:d0:52:33:89:3d:08:69:b7:20:29: 55:f2:05:85:e8:36:92:c3:db:8f:c8:26:1a:8a:66: 3c:c5:6d:b7:08:03:07:c4:6c:34:e4:dd:3d:19:01: ed:e9:50:4a:63:93:ea:f8:ea:ac:58:de:d8:fc:c5: 03:e2:13:c3:09:f1:cf:ba:3f:7b:6d:05:1a:c5:0a: a0:97:77:46:a2:40:0a:4b:84:14:cc:6f:b8:22:f9: b8:4d:55:7a:58:40:44:78:c5:9e:64:44:e9:48:34: 6b:84:e4:59:b8:3c:54:9d:c8:26:d2:03:2f:d8:44: b5:e3:17:cc:16:a6:3d:b6:d4:03:12:57:fd:0e:37: d1:88:e9:ac:07:52:47:43:19:ae:67:15:72:99:38: b0:60:8a:2b:eb:ff:ae:38:a5:1b:0d:81:b2:78:d1: e9:a9:2b:32:f3:51:f1:6e:d8:d6:04:3d:1f:1e:51: 0e:8d:2a:95:bc:e5:5f:02:e3:f1:8a:c6:2b:71:70: c4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:46:43:08:80:0C:59:52:52:23:5C:24:A0:85:6C:03:81:5E:05:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cc969586-fe65-3f17-854e-da91cff33a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b7:e8:d6:2e:d9:aa:cb:c2:bb:3f:f7:34:a2:03:52:c8:0a: 4a:da:6e:37:c4:f5:6b:8a:db:f8:eb:2e:82:32:7b:71:ea:02: af:8d:31:5f:48:2c:0b:31:ca:bd:a6:b6:27:fb:fb:58:1e:de: 9b:e4:33:70:be:fe:f5:60:1f:76:0d:4c:2c:d8:3a:25:18:71: da:a8:b8:65:40:de:08:81:83:21:b2:7d:a3:5d:12:c4:e9:43: aa:0d:ba:11:c4:ec:23:be:b0:69:c1:d5:cb:e7:dd:4b:1b:95: 14:5f:b9:be:bc:a8:87:2c:e3:ca:38:d7:d1:8f:5e:3d:1e:55: 8f:19:76:45:b5:b6:e0:e1:23:23:7d:47:ed:4f:fe:d0:db:86: 9f:9c:0e:2d:ed:5a:f3:48:c1:45:e5:e2:c3:95:b1:b3:6a:47: 93:45:0a:68:db:4b:ee:01:7a:ee:d4:78:2e:17:02:25:98:3b: d2:ef:e4:56:4a:53:12:93:3f:aa:90:c0:b2:44:06:38:d4:ee: 10:28:fd:4c:34:41:32:0a:dc:4b:0b:f3:c2:67:55:03:52:0d: fb:6c:54:30:1e:d1:34:28:15:11:f0:23:23:19:f0:ce:8a:ae: 17:dc:11:a2:d0:8e:dc:f9:ed:e9:ab:37:2b:e9:43:86:68:c6: 49:71:5f:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13Om5CIHweE9kQGOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk OWE3ZTYwODEtNTZlNy00YjQ4LTk0NDQtMTc2OWE2MGIzMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1ASH8GwLz6JsP57N5h+p4iRfQnSq364TtTe na/e4F5Je7avkNqZ3RRo1nEqUUjO7vgGAWjKAJedhqAI7Kqm2dBSM4k9CGm3IClV 8gWF6DaSw9uPyCYaimY8xW23CAMHxGw05N09GQHt6VBKY5Pq+OqsWN7Y/MUD4hPD CfHPuj97bQUaxQqgl3dGokAKS4QUzG+4Ivm4TVV6WEBEeMWeZETpSDRrhORZuDxU ncgm0gMv2ES14xfMFqY9ttQDElf9DjfRiOmsB1JHQxmuZxVymTiwYIor6/+uOKUb DYGyeNHpqSsy81HxbtjWBD0fHlEOjSqVvOVfAuPxisYrcXDEXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNGQwiADFlSUiNcJKCFbAOBXgXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2M5Njk1ODYtZmU2NS0z ZjE3LTg1NGUtZGE5MWNmZjMzYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO36NYu2arLwrs/9zSiA1LICkrabjfE9WuK2/jrLoIye3HqAq+NMV9I LAsxyr2mtif7+1ge3pvkM3C+/vVgH3YNTCzYOiUYcdqouGVA3giBgyGyfaNdEsTp Q6oNuhHE7CO+sGnB1cvn3UsblRRfub68qIcs48o419GPXj0eVY8ZdkW1tuDhIyN9 R+1P/tDbhp+cDi3tWvNIwUXl4sOVsbNqR5NFCmjbS+4Beu7UeC4XAiWYO9Lv5FZK UxKTP6qQwLJEBjjU7hAo/Uw0QTIK3EsL88JnVQNSDftsVDAe0TQoFRHwIyMZ8M6K rhfcEaLQjtz57emrNyvpQ4ZoxklxX8c= -----END CERTIFICATE-----Generated at Mon Apr 13 09:30:28 2026 by rpki-client