$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95fe41af-5c2a-35c9-b3da-10d61b9b57da.roa File: 95fe41af-5c2a-35c9-b3da-10d61b9b57da.roa (raw, json) Hash identifier: w/6hvdIThK8xhKpExqhemd7hDFUQ8NrZQnNENXz+Zdg= Subject key identifier: 4B:81:DF:78:95:A1:00:D2:41:4C:2B:A7:2C:6F:1B:59:25:9D:C6:D4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F119D964AF287DAD1039051C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95fe41af-5c2a-35c9-b3da-10d61b9b57da.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 26383 IP address blocks: 166.88.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:96:4a:f2:87:da:d1:03:90:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=b953b0fa-9487-41bd-b8c5-4b071e9724d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:09:22:8a:b5:8b:43:55:cd:6b:30:59:11: 41:96:7f:00:65:06:83:d7:c5:a5:6d:bf:3b:41:a0: a9:51:08:a3:fd:59:11:68:9e:7e:68:68:d7:96:3d: 5a:98:ae:a9:22:3c:d5:ac:10:85:90:88:0a:20:dd: c9:33:e1:71:fe:25:45:75:df:5a:02:50:a9:ca:91: 86:69:06:9c:75:eb:1d:9e:0b:b3:d5:a2:a6:c7:15: e3:59:fa:ac:81:5f:8f:f4:48:9d:79:78:b1:a7:67: f8:6e:43:c9:27:18:b7:c7:42:8b:e8:b5:4f:82:bd: 64:34:86:7d:e8:59:0c:0f:ae:23:c1:35:42:fe:9e: 2c:89:ec:39:0d:84:60:b4:b9:cf:ee:c6:8a:7f:11: ea:9e:02:f2:3b:19:b9:8a:5e:a6:f8:b9:9c:17:aa: 69:5e:6a:65:de:83:f7:35:e0:3c:34:f5:ac:67:d9: 25:8f:42:0b:b7:a6:4a:df:81:f5:02:d2:9f:5e:5b: c1:d4:b8:7e:fe:27:51:9c:18:24:30:af:76:36:50: 65:65:7d:07:82:f6:15:5e:7c:12:ad:e0:85:56:8e: fa:96:bd:57:cf:43:8c:7c:52:bf:e2:a6:1a:09:a8: 06:6e:e2:56:06:9a:e2:68:70:39:b8:80:f9:43:3b: f8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:81:DF:78:95:A1:00:D2:41:4C:2B:A7:2C:6F:1B:59:25:9D:C6:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95fe41af-5c2a-35c9-b3da-10d61b9b57da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:2a:9e:90:72:7b:d5:84:cc:9d:d8:70:ca:46:9a:5f:fc:d1: 6c:65:50:6a:31:90:16:b8:5a:81:3e:7c:0e:fc:c4:e0:34:eb: 1e:df:4d:75:d0:ae:97:e9:fb:ae:6f:db:ee:c3:26:1e:b3:5c: 5e:6f:2d:52:5c:d7:7d:25:c8:4c:27:63:6f:0b:f4:65:41:36: 88:63:7e:02:8d:b0:e3:03:a9:c5:a2:f1:1e:14:5c:8c:f0:de: 20:fc:a7:21:64:2d:3b:86:5d:ea:98:af:3f:06:ca:1b:b3:73: 63:c6:51:4a:5e:96:d6:30:1e:f6:26:df:2c:79:3e:ae:2c:d8: 2a:d3:8d:92:7b:3f:73:d7:4a:49:b9:40:94:61:f7:7a:26:ff: e1:7e:4f:b7:04:64:0a:eb:c4:ec:68:1b:06:16:fa:9c:3e:7c: 34:fb:92:71:8c:76:92:44:11:0c:5f:70:00:51:3a:31:2c:2c: ff:e5:f0:28:c4:1e:3e:8c:b7:d4:26:4d:c1:89:75:86:97:35: 1e:aa:5e:5c:a5:57:b9:2c:e3:33:12:03:8c:18:02:9f:cb:92: 40:0c:79:79:f4:31:ff:13:47:78:69:69:b6:86:59:0b:5d:a0: da:67:51:1d:bf:8d:45:ec:59:54:c5:89:cd:b3:ba:28:5c:f2: e6:8a:9b:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnZZK8ofa0QOQUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjk1M2IwZmEtOTQ4Ny00MWJkLWI4YzUtNGIwNzFlOTcyNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UwJIoq1i0NVzWswWRFBln8AZQaD18Wlbb87 QaCpUQij/VkRaJ5+aGjXlj1amK6pIjzVrBCFkIgKIN3JM+Fx/iVFdd9aAlCpypGG aQacdesdnguz1aKmxxXjWfqsgV+P9EideXixp2f4bkPJJxi3x0KL6LVPgr1kNIZ9 6FkMD64jwTVC/p4siew5DYRgtLnP7saKfxHqngLyOxm5il6m+LmcF6ppXmpl3oP3 NeA8NPWsZ9klj0ILt6ZK34H1AtKfXlvB1Lh+/idRnBgkMK92NlBlZX0HgvYVXnwS reCFVo76lr1Xz0OMfFK/4qYaCagGbuJWBpriaHA5uID5Qzv4DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuB33iVoQDSQUwrpyxvG1klncbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTVmZTQxYWYtNWMyYS0z NWM5LWIzZGEtMTBkNjFiOWI1N2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplifMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4qnpBye9WEzJ3YcMpGml/80WxlUGoxkBa4WoE+fA78xOA06x7fTXXQ rpfp+65v2+7DJh6zXF5vLVJc130lyEwnY28L9GVBNohjfgKNsOMDqcWi8R4UXIzw 3iD8pyFkLTuGXeqYrz8Gyhuzc2PGUUpeltYwHvYm3yx5Pq4s2CrTjZJ7P3PXSkm5 QJRh93om/+F+T7cEZArrxOxoGwYW+pw+fDT7knGMdpJEEQxfcABROjEsLP/l8CjE Hj6Mt9QmTcGJdYaXNR6qXlylV7ks4zMSA4wYAp/LkkAMeXn0Mf8TR3hpabaGWQtd oNpnUR2/jUXsWVTFic2zuihc8uaKm+E= -----END CERTIFICATE-----Generated at Tue Sep 22 18:13:50 2026 by rpki-client