$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa File: 5ffd159f-4992-32fc-a662-70d42206aa8c.roa (raw, json) Hash identifier: nzCy09heU3kalX275de9yLn+6SE7LV8//7yM0DzpIZc= Subject key identifier: 75:98:8A:86:B4:F7:33:F9:20:BC:BD:65:1D:D1:10:2B:CD:C0:75:BA Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F49854ED16A35ABACAE7AA300 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 149440 IP address blocks: 166.88.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:4e:d1:6a:35:ab:ac:ae:7a:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=99f5c587-5de8-43af-a6eb-4862f66d68e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ba:36:a6:ca:e9:0e:fd:0e:29:0b:7d:01:8a: ca:c2:ff:48:89:c2:ae:4e:dc:05:ca:90:0c:65:76: 03:97:1d:e5:5a:31:16:94:1f:cf:55:c3:e6:34:35: 57:f8:1a:94:03:fa:df:66:10:c0:47:34:f0:d0:9c: 57:3e:c6:af:b9:7c:08:66:fc:8f:a9:d6:c0:71:88: 5d:fe:ea:b7:14:b7:e8:ba:c8:f8:5f:2b:2f:40:99: a8:89:92:6c:2f:ac:39:53:7d:26:5c:44:ae:f2:be: ea:35:28:b2:58:75:4f:8b:bd:ef:a1:da:57:ba:6c: 8e:63:94:4e:a4:b8:2b:e2:60:7f:41:b3:7c:26:b7: 36:05:47:8b:65:44:50:8a:75:f4:e2:b3:25:b0:4b: 7f:63:c3:c4:33:b3:84:d0:2d:c3:41:3a:7c:54:67: af:79:fd:44:ce:11:a2:01:8d:ec:96:da:ea:59:12: b2:62:5d:10:7a:af:a5:fb:db:a4:52:a2:8b:2f:26: 10:f4:b0:75:78:93:f0:47:1f:8b:f7:d1:b4:e1:e9: 52:57:b5:8b:b8:cb:54:2e:f0:e6:3e:07:79:42:64: 73:12:98:3f:f3:81:43:9b:44:3a:20:9e:c4:aa:51: 01:7b:04:04:3c:30:c6:a4:1b:fb:a7:81:b3:44:20: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:98:8A:86:B4:F7:33:F9:20:BC:BD:65:1D:D1:10:2B:CD:C0:75:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8e:d3:c2:26:d3:e3:70:01:a1:2f:65:00:2a:b5:ed:7d:c3: 38:a1:55:11:b2:db:db:e7:62:06:5b:e2:ab:56:8c:0a:77:31: 9c:e6:9e:ff:77:f4:25:20:f4:87:ff:77:4a:64:79:54:d7:b6: 15:7c:73:3d:b8:89:a4:4a:0f:fd:f5:e2:79:63:34:02:9f:94: 25:40:8b:14:a7:18:71:12:c5:ba:83:9e:09:ff:84:40:5e:6d: 02:ba:ad:41:ff:48:8c:41:24:6e:2c:09:d8:2d:81:ac:f6:f8: d9:5b:3b:59:c3:b0:04:b8:b5:54:48:07:98:2f:c0:87:5f:6a: 0c:eb:cc:1b:8e:38:2f:9c:ef:ef:da:26:c2:e9:40:2b:4d:74: 28:be:56:a9:ef:ea:4e:a6:97:5b:1e:ae:3d:e0:40:60:86:c2: ed:3e:57:d2:43:4b:17:8b:5c:b6:51:fb:57:4e:93:14:b8:ca: 1f:a9:d6:ab:8d:5f:fe:d5:ce:aa:14:ed:b6:37:e1:06:57:77: bf:12:25:be:f3:95:da:1d:c6:67:f0:db:bd:f7:5c:4a:61:2b: 7e:9d:b3:6d:10:68:bb:22:65:6a:82:d6:2b:16:e5:64:dd:63: 59:69:98:73:01:9b:13:d1:52:2a:6a:13:00:14:60:ff:f3:5d: c0:43:f3:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhU7RajWrrK56owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTlmNWM1ODctNWRlOC00M2FmLWE2ZWItNDg2MmY2NmQ2OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7o2psrpDv0OKQt9AYrKwv9IicKuTtwFypAM ZXYDlx3lWjEWlB/PVcPmNDVX+BqUA/rfZhDARzTw0JxXPsavuXwIZvyPqdbAcYhd /uq3FLfousj4XysvQJmoiZJsL6w5U30mXESu8r7qNSiyWHVPi73vodpXumyOY5RO pLgr4mB/QbN8Jrc2BUeLZURQinX04rMlsEt/Y8PEM7OE0C3DQTp8VGevef1EzhGi AY3sltrqWRKyYl0Qeq+l+9ukUqKLLyYQ9LB1eJPwRx+L99G04elSV7WLuMtULvDm Pgd5QmRzEpg/84FDm0Q6IJ7EqlEBewQEPDDGpBv7p4GzRCBH2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWYioa09zP5ILy9ZR3RECvNwHW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWZmZDE1OWYtNDk5Mi0z MmZjLWE2NjItNzBkNDIyMDZhYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6O08Im0+NwAaEvZQAqte19wzihVRGy29vnYgZb4qtWjAp3MZzmnv93 9CUg9If/d0pkeVTXthV8cz24iaRKD/314nljNAKflCVAixSnGHESxbqDngn/hEBe bQK6rUH/SIxBJG4sCdgtgaz2+NlbO1nDsAS4tVRIB5gvwIdfagzrzBuOOC+c7+/a JsLpQCtNdCi+Vqnv6k6ml1serj3gQGCGwu0+V9JDSxeLXLZR+1dOkxS4yh+p1quN X/7VzqoU7bY34QZXd78SJb7zldodxmfw2733XEphK36ds20QaLsiZWqC1isW5WTd Y1lpmHMBmxPRUipqEwAUYP/zXcBD834= -----END CERTIFICATE-----Generated at Sat Sep 26 09:28:26 2026 by rpki-client