$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89f676d4-c4cf-3d3b-baa1-30d2db8ccc3a.roa File: 89f676d4-c4cf-3d3b-baa1-30d2db8ccc3a.roa (raw, json) Hash identifier: Kc05Po0qvN61gzgh7vquQk/oCgapDmSndtkbTJu3QMg= Subject key identifier: CF:E2:BA:B0:29:8C:12:F6:13:FF:C8:69:EF:91:F7:FE:28:A7:02:C1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584E0A2B64EA0B50B34780346C40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89f676d4-c4cf-3d3b-baa1-30d2db8ccc3a.roa Signing time: Tue 02 Jun 2026 16:14:02 +0000 ROA not before: Tue 02 Jun 2026 16:14:02 +0000 ROA not after: Mon 31 Aug 2026 16:14:02 +0000 asID: 58232 IP address blocks: 166.88.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:2b:64:ea:0b:50:b3:47:80:34:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 2 16:14:02 2026 GMT Not After : Aug 31 16:14:02 2026 GMT Subject: CN=3ec3470e-67cf-42ca-99b2-cf2adf5fb73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4f:5f:71:02:6a:17:bf:9b:b7:c6:e4:49:1b: d4:b9:a7:16:de:a9:16:77:ec:83:77:10:9f:70:93: 94:23:3a:ef:9b:1b:2d:d7:30:52:79:c5:d0:96:68: c0:08:63:c2:b3:bd:48:66:13:0e:e9:cf:b8:d9:30: f5:23:7d:92:25:00:c3:fd:85:f7:9e:24:3f:d9:8b: 11:9a:76:27:1f:33:87:05:a6:d5:79:bd:02:b0:10: 6d:42:49:96:fe:73:fa:db:91:a4:96:61:db:7d:b4: a9:29:ae:16:f7:cc:22:b8:8c:5b:f2:11:75:03:c1: a5:83:ab:09:6f:ca:cf:a8:cb:af:d2:87:e9:28:f2: b6:ab:ac:bb:a3:c5:f5:ee:51:eb:68:52:27:13:df: 42:e4:bb:31:a8:5f:0f:56:a9:db:96:b7:11:e2:fd: 05:e5:63:df:72:2f:2d:95:d0:ca:36:0b:58:c0:fd: 01:c6:00:ee:5e:c7:4b:3f:12:2f:98:1a:1f:ce:2d: d3:0e:82:61:3c:09:f2:59:ba:60:79:bb:60:99:55: dd:12:b5:99:dc:82:10:77:67:15:77:b4:c1:f8:d2: 3b:7c:1d:d0:e8:da:d2:e4:d3:a6:12:51:2d:77:20: 91:68:88:d9:a5:18:b1:be:09:c0:9f:17:34:0d:72: b5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E2:BA:B0:29:8C:12:F6:13:FF:C8:69:EF:91:F7:FE:28:A7:02:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89f676d4-c4cf-3d3b-baa1-30d2db8ccc3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:af:e2:d9:69:b5:49:bf:fb:52:d2:0f:e0:08:5a:82:8c:a9: 66:4b:67:5e:fb:ec:8a:b0:7e:8a:30:92:7e:d4:d5:1d:36:bb: 83:b0:60:a1:4a:70:a6:47:82:37:87:4b:a1:7f:8a:8c:1e:cd: ca:63:95:39:e8:f0:ee:1c:78:ae:46:ab:32:6a:7a:35:1a:17: f9:f3:78:cc:b3:dd:e1:18:99:08:0c:60:35:5f:68:1f:3a:87: b0:19:ea:9c:e5:62:26:48:af:04:76:ac:28:bb:4c:26:60:80: 64:1d:ed:a7:2c:8f:5e:83:2a:74:ba:cd:af:d7:f7:0f:a1:54: 3f:f2:30:36:9b:79:f6:e3:38:50:c9:ff:4d:49:35:d8:3c:b1: eb:93:cc:7a:15:6c:c8:0c:41:f2:1c:20:58:a8:8b:e0:76:45: 81:66:48:7b:8a:87:d8:10:9f:92:91:ff:b1:9e:3b:bc:91:17: bc:1b:44:f6:4d:57:d4:7b:ea:71:b0:a8:01:d2:50:49:77:40: dd:fa:e4:79:19:f8:22:17:63:88:1a:49:48:74:62:c0:5b:82: 12:81:71:13:0e:1c:91:ee:68:13:d7:37:0c:dc:9f:e6:e9:5a: 97:a6:66:7d:4d:88:6b:ed:d3:ae:8d:bf:cd:7b:32:50:cd:77: a3:67:96:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KK2TqC1CzR4A0bEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDYwMjE2MTQwMloXDTI2MDgzMTE2MTQwMlowLzEtMCsGA1UEAxMk M2VjMzQ3MGUtNjdjZi00MmNhLTk5YjItY2YyYWRmNWZiNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh09fcQJqF7+bt8bkSRvUuacW3qkWd+yDdxCf cJOUIzrvmxst1zBSecXQlmjACGPCs71IZhMO6c+42TD1I32SJQDD/YX3niQ/2YsR mnYnHzOHBabVeb0CsBBtQkmW/nP625GklmHbfbSpKa4W98wiuIxb8hF1A8Glg6sJ b8rPqMuv0ofpKPK2q6y7o8X17lHraFInE99C5LsxqF8PVqnblrcR4v0F5WPfci8t ldDKNgtYwP0BxgDuXsdLPxIvmBofzi3TDoJhPAnyWbpgebtgmVXdErWZ3IIQd2cV d7TB+NI7fB3Q6NrS5NOmElEtdyCRaIjZpRixvgnAnxc0DXK15wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/iurApjBL2E//Iae+R9/4opwLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODlmNjc2ZDQtYzRjZi0z ZDNiLWJhYTEtMzBkMmRiOGNjYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplirMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACav4tlptUm/+1LSD+AIWoKMqWZLZ1777Iqwfoowkn7U1R02u4OwYKFK cKZHgjeHS6F/iowezcpjlTno8O4ceK5GqzJqejUaF/nzeMyz3eEYmQgMYDVfaB86 h7AZ6pzlYiZIrwR2rCi7TCZggGQd7acsj16DKnS6za/X9w+hVD/yMDabefbjOFDJ /01JNdg8seuTzHoVbMgMQfIcIFioi+B2RYFmSHuKh9gQn5KR/7GeO7yRF7wbRPZN V9R76nGwqAHSUEl3QN365HkZ+CIXY4gaSUh0YsBbghKBcRMOHJHuaBPXNwzcn+bp WpemZn1NiGvt066Nv817MlDNd6NnlsA= -----END CERTIFICATE-----Generated at Sat Jun 13 08:23:21 2026 by rpki-client