$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7941b22e-3222-34af-bc8b-a5717613bf1e.roa File: 7941b22e-3222-34af-bc8b-a5717613bf1e.roa (raw, json) Hash identifier: +tZxb8cUE5xSKFScoS/H06KsYbz15VRCNv0FCedKf9s= Subject key identifier: 04:A1:D0:F2:30:AB:65:0A:FA:7D:BF:84:7F:CD:FD:A0:80:78:8A:22 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F4985CBE6C70EB036098C2380 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7941b22e-3222-34af-bc8b-a5717613bf1e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 149440 IP address blocks: 166.88.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:cb:e6:c7:0e:b0:36:09:8c:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a36dbf46-526f-40ef-877a-bedb66789515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:b7:a2:a3:68:3c:40:95:cc:45:f8:18:92: e4:35:85:cc:0a:73:85:ff:8c:4f:5d:d6:8d:cc:f4: 13:6f:e0:44:2d:20:1a:75:08:35:54:66:e9:b1:61: 99:b3:7f:f5:9f:5d:f5:9e:35:76:27:be:f7:d3:88: 35:c6:77:b1:06:b1:61:1e:6d:8b:2d:cb:d7:1d:a2: ce:77:10:cf:32:22:ee:08:2b:2b:3c:8d:e7:54:d3: 1a:18:05:3f:69:d6:a8:98:08:bd:b4:76:ef:fa:bc: 4c:9b:19:82:ab:c4:b6:90:0b:21:57:de:29:07:52: 53:2e:54:f5:55:e9:20:88:34:23:46:3e:92:ae:4f: 97:0a:8f:53:b0:c2:8b:5d:a6:94:73:a5:d3:ca:f3: 97:b1:55:5f:96:1e:6d:69:d9:d4:5d:00:40:36:1a: 95:9c:4f:06:3d:4a:b9:29:18:ec:0c:d6:66:31:13: ae:18:95:5a:bc:68:ce:3a:f4:31:0f:af:16:08:cc: e6:b2:18:15:91:0f:22:92:ad:f6:76:09:5a:39:03: 40:3d:ab:24:b2:50:05:48:48:5c:f3:4c:9b:bc:fe: 15:59:34:7c:a3:21:c7:2a:36:fb:06:91:a5:22:37: a5:ea:b9:f4:13:a3:23:91:75:7c:00:af:28:12:43: 06:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A1:D0:F2:30:AB:65:0A:FA:7D:BF:84:7F:CD:FD:A0:80:78:8A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7941b22e-3222-34af-bc8b-a5717613bf1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:92:b4:be:6f:8c:a2:2d:d8:e9:31:73:bc:9c:1f:d9:a0:8b: 60:36:10:fc:de:02:c7:35:93:82:36:49:46:72:c5:76:e0:b3: ed:f0:97:62:ba:a6:0b:b6:74:02:e4:16:c2:7e:fa:29:c5:5a: 27:c1:8a:44:61:14:0a:d1:c9:70:27:ee:ca:80:73:19:f7:d7: ff:ec:96:6b:fc:b9:6d:3e:ba:b3:64:4e:34:0c:8b:c5:d6:45: 27:fc:e1:b9:c2:04:c8:e0:2a:3a:96:4c:0a:eb:b3:38:82:b4: c8:d5:25:7b:ba:bb:9b:ae:20:85:aa:17:ff:13:f0:46:29:ac: 8b:28:72:04:a1:95:bf:42:c1:5a:77:dc:3b:8e:96:a5:0f:09: db:c0:f0:27:20:2e:dc:a9:22:76:f0:23:03:4c:d8:75:df:2d: 58:ea:99:8d:1b:0f:17:71:08:ce:3b:22:0b:ac:ea:c2:ce:9e: c3:4b:e0:c9:98:b7:18:9c:19:a4:54:84:be:55:a6:4b:9c:4e: c7:fd:4a:38:a2:be:f3:fd:3c:15:b0:6a:bd:1f:21:22:6c:f2: c5:b5:99:2b:dd:23:dc:8d:87:5d:6d:13:c1:b6:ef:2f:85:6a: c6:1c:dc:1a:3d:45:ed:f5:33:b0:ae:25:f5:b7:6e:78:28:e2: 17:81:a5:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhcvmxw6wNgmMI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTM2ZGJmNDYtNTI2Zi00MGVmLTg3N2EtYmVkYjY2Nzg5NTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy523oqNoPECVzEX4GJLkNYXMCnOF/4xPXdaN zPQTb+BELSAadQg1VGbpsWGZs3/1n131njV2J77304g1xnexBrFhHm2LLcvXHaLO dxDPMiLuCCsrPI3nVNMaGAU/adaomAi9tHbv+rxMmxmCq8S2kAshV94pB1JTLlT1 VekgiDQjRj6Srk+XCo9TsMKLXaaUc6XTyvOXsVVflh5tadnUXQBANhqVnE8GPUq5 KRjsDNZmMROuGJVavGjOOvQxD68WCMzmshgVkQ8ikq32dglaOQNAPaskslAFSEhc 80ybvP4VWTR8oyHHKjb7BpGlIjel6rn0E6MjkXV8AK8oEkMGLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASh0PIwq2UK+n2/hH/N/aCAeIoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzk0MWIyMmUtMzIyMi0z NGFmLWJjOGItYTU3MTc2MTNiZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGStL5vjKIt2Okxc7ycH9mgi2A2EPzeAsc1k4I2SUZyxXbgs+3wl2K6 pgu2dALkFsJ++inFWifBikRhFArRyXAn7sqAcxn31//slmv8uW0+urNkTjQMi8XW RSf84bnCBMjgKjqWTArrsziCtMjVJXu6u5uuIIWqF/8T8EYprIsocgShlb9CwVp3 3DuOlqUPCdvA8CcgLtypInbwIwNM2HXfLVjqmY0bDxdxCM47Igus6sLOnsNL4MmY txicGaRUhL5VpkucTsf9SjiivvP9PBWwar0fISJs8sW1mSvdI9yNh11tE8G27y+F asYc3Bo9Re31M7CuJfW3bngo4heBpWo= -----END CERTIFICATE-----Generated at Tue Sep 29 11:53:42 2026 by rpki-client