$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fd20383-e1da-3f23-a3e9-35da7fa12a9a.roa File: 3fd20383-e1da-3f23-a3e9-35da7fa12a9a.roa (raw, json) Hash identifier: hO0/zbwCr1/VnwRX7XVyUMXFzs+EzZCeg9aoV+0VC8Q= Subject key identifier: 6D:E7:AC:51:7A:FC:AE:09:3E:D9:0C:E5:7D:EC:7A:EC:00:01:42:01 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D8740A120EDF252FBFEA34E40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fd20383-e1da-3f23-a3e9-35da7fa12a9a.roa Signing time: Thu 16 Apr 2026 18:45:55 +0000 ROA not before: Thu 16 Apr 2026 18:45:55 +0000 ROA not after: Wed 15 Jul 2026 18:45:55 +0000 asID: 212238 IP address blocks: 166.88.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:40:a1:20:ed:f2:52:fb:fe:a3:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 16 18:45:55 2026 GMT Not After : Jul 15 18:45:55 2026 GMT Subject: CN=3aa04e7a-189c-4a3b-93e1-a8c2a948b3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d4:65:44:b7:39:9a:8c:3e:d5:6a:6f:1a:9d: f4:9c:3f:ae:e9:0a:db:ae:8b:1a:5f:c3:21:08:6e: 97:fd:bf:ad:0e:57:90:72:11:2f:9b:6f:d5:ef:92: 51:2b:7a:5d:81:d4:92:99:0d:d1:4b:17:bb:df:8f: c0:d2:33:58:c1:b3:02:09:cb:d5:f9:40:9c:30:bb: 06:ef:78:06:d6:10:89:58:b1:2b:77:63:5f:98:6c: 9b:5b:91:0e:cd:ba:c2:88:48:1d:d3:ed:f9:18:cf: c5:e2:8a:a8:75:f5:f4:58:9c:cc:3e:24:5f:20:d8: 04:96:87:3a:07:1a:9d:84:1d:76:87:a0:0e:18:04: 04:3a:79:72:47:7a:6f:30:8d:37:c5:5c:a5:b0:14: 8d:d5:1d:6e:94:7d:68:39:6a:c8:01:69:91:6b:12: ee:07:dc:71:84:ae:4c:95:ce:2f:1a:7d:33:f1:25: 7d:f2:93:d0:16:67:f2:4a:a6:53:89:d9:b0:e8:3e: 4e:ef:13:aa:0b:73:39:b3:c0:18:6b:eb:01:c9:25: fa:43:a6:a1:62:a8:d3:6f:73:15:85:61:3a:96:72: 0d:35:2e:8a:a2:81:a5:06:8d:1a:16:d5:4e:fa:f1: 67:fe:5c:13:57:cc:88:92:5a:b9:95:c5:ce:0d:1c: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E7:AC:51:7A:FC:AE:09:3E:D9:0C:E5:7D:EC:7A:EC:00:01:42:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fd20383-e1da-3f23-a3e9-35da7fa12a9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6b:9b:ee:bf:58:fd:87:7a:fc:7f:ea:d3:0c:91:b4:32:e1: 24:4e:f3:44:45:d7:ca:82:95:a7:85:90:34:d2:43:77:e5:e2: 86:c8:50:80:44:e5:fd:43:f2:f6:32:e9:a3:57:fb:18:73:68: 2e:f2:3e:50:af:eb:38:59:29:e0:9a:7e:6f:05:50:a9:b6:70: 23:21:7e:8b:0f:a1:b0:e3:34:b4:d4:54:6e:04:f8:4c:69:5e: 91:da:11:76:54:c2:d8:23:2f:1f:cb:ef:57:6c:0d:db:f8:53: f2:28:90:9c:7a:7b:65:4c:79:0e:de:48:26:2e:01:53:38:f9: 64:74:98:c6:12:9f:a7:35:29:c9:d1:f6:bc:07:43:d8:4f:75: e4:e4:55:48:6a:b3:7c:fc:e6:01:d4:cb:7c:45:b5:b2:93:bc: da:49:c9:5f:00:69:86:25:fe:2d:19:a1:8b:2d:6d:1d:14:ab: 96:a1:88:6d:e9:92:19:0d:f1:70:c4:50:5b:6b:62:ec:ae:4f: bd:49:ad:d7:41:d7:7c:36:98:0c:0b:4d:c5:6c:1b:d6:14:61: a1:1c:1b:91:02:c7:f0:99:4a:4a:88:6a:d6:b1:b8:1f:67:ba: fb:79:f3:eb:00:e5:76:e3:fe:bf:ad:7a:4f:e6:02:56:40:20: c8:62:01:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2HQKEg7fJS+/6jTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQxNjE4NDU1NVoXDTI2MDcxNTE4NDU1NVowLzEtMCsGA1UEAxMk M2FhMDRlN2EtMTg5Yy00YTNiLTkzZTEtYThjMmE5NDhiM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtRlRLc5mow+1WpvGp30nD+u6QrbrosaX8Mh CG6X/b+tDleQchEvm2/V75JRK3pdgdSSmQ3RSxe734/A0jNYwbMCCcvV+UCcMLsG 73gG1hCJWLErd2NfmGybW5EOzbrCiEgd0+35GM/F4oqodfX0WJzMPiRfINgEloc6 BxqdhB12h6AOGAQEOnlyR3pvMI03xVylsBSN1R1ulH1oOWrIAWmRaxLuB9xxhK5M lc4vGn0z8SV98pPQFmfySqZTidmw6D5O7xOqC3M5s8AYa+sBySX6Q6ahYqjTb3MV hWE6lnINNS6KooGlBo0aFtVO+vFn/lwTV8yIklq5lcXODRw+NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3nrFF6/K4JPtkM5X3seuwAAUIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2ZkMjAzODMtZTFkYS0z ZjIzLWEzZTktMzVkYTdmYTEyYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9rm+6/WP2Hevx/6tMMkbQy4SRO80RF18qClaeFkDTSQ3fl4obIUIBE 5f1D8vYy6aNX+xhzaC7yPlCv6zhZKeCafm8FUKm2cCMhfosPobDjNLTUVG4E+Exp XpHaEXZUwtgjLx/L71dsDdv4U/IokJx6e2VMeQ7eSCYuAVM4+WR0mMYSn6c1KcnR 9rwHQ9hPdeTkVUhqs3z85gHUy3xFtbKTvNpJyV8AaYYl/i0ZoYstbR0Uq5ahiG3p khkN8XDEUFtrYuyuT71JrddB13w2mAwLTcVsG9YUYaEcG5ECx/CZSkqIataxuB9n uvt58+sA5Xbj/r+tek/mAlZAIMhiAXw= -----END CERTIFICATE-----Generated at Fri Apr 17 06:52:06 2026 by rpki-client