$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a520a56c-1748-36c0-8ed8-3ec3f8e97a1c.roa File: a520a56c-1748-36c0-8ed8-3ec3f8e97a1c.roa (raw, json) Hash identifier: kcGEKg1nzHvy1o5hRXHf3CgIt4tnAr2oRV6b47Iw9SE= Subject key identifier: 57:38:C9:E4:1C:61:C3:06:BE:04:60:AD:DF:12:A6:8E:D4:62:D8:D0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F00DCD1824EA2E5CC02886F80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a520a56c-1748-36c0-8ed8-3ec3f8e97a1c.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 30456 IP address blocks: 166.88.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:d1:82:4e:a2:e5:cc:02:88:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=da6b2d6f-7186-4d74-90e8-3a88eb9012ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f6:88:73:35:82:60:ea:21:2a:65:3f:83:9c: 16:34:04:b3:c5:09:8c:61:2f:b4:ba:36:f0:dd:4f: de:a7:8e:51:0f:c2:55:4d:a7:04:de:7c:25:c3:b9: 85:c3:39:d7:11:0e:0c:a6:4d:7c:02:74:06:5d:9b: f2:ce:7c:25:80:04:14:fb:38:66:2f:dc:c0:37:4b: 67:58:01:8a:55:57:84:ec:c3:84:fb:f5:d4:b8:f9: fe:aa:c4:8a:4b:58:f5:05:aa:38:dc:6e:04:2b:76: 02:39:92:d0:d4:09:d6:45:30:2a:82:fc:19:99:4f: 75:11:08:a9:de:0e:77:a7:ab:d2:8e:ef:3e:f1:68: af:a2:ac:25:dc:be:93:a5:3d:e1:45:7e:1b:53:64: 70:08:48:b9:ae:ba:9c:3c:eb:c6:fb:bf:13:50:bf: 34:a0:fb:ab:29:3b:70:0c:07:08:17:70:46:c3:c2: dd:30:fd:59:c6:49:4e:e1:c0:cc:56:80:c7:68:74: f0:4f:56:93:86:01:74:9d:3a:08:50:22:db:2c:2c: c8:45:bc:42:6e:65:ae:ca:11:c9:22:cc:32:c8:1c: bc:1e:00:86:b0:60:56:3f:10:5b:f4:4e:e6:f4:dd: d0:2c:42:79:c0:0a:64:3c:c3:2e:a4:ab:c9:55:23: ae:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:38:C9:E4:1C:61:C3:06:BE:04:60:AD:DF:12:A6:8E:D4:62:D8:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a520a56c-1748-36c0-8ed8-3ec3f8e97a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6a:5a:be:36:03:d1:7a:63:df:c5:7d:f0:53:94:b8:89:da: d4:58:37:db:57:b5:af:f4:d1:b3:67:ce:00:f1:6f:61:dd:cd: ab:b6:45:bf:82:70:aa:0b:c9:fd:87:bc:e2:e0:1b:5b:3b:4b: 6c:e8:cb:79:8b:5d:fb:e3:22:37:46:01:ab:c7:62:74:a9:dd: d9:01:5e:f8:c4:f2:ac:5d:e5:04:53:30:30:d9:12:0c:e4:f1: 0f:04:48:8f:3c:b4:a0:47:b2:e6:5b:29:40:fb:d3:d2:33:0b: 18:6a:7d:37:6c:87:c3:0a:38:c1:ca:85:00:60:c7:76:cf:d7: fd:23:fb:4c:61:af:c8:fd:ea:56:28:af:47:2c:2c:cf:20:94: 1f:1f:31:6a:db:b5:49:59:8f:f2:ff:30:d8:cd:e6:f0:19:46: 78:9c:ff:36:97:32:e5:16:e4:6f:5b:aa:0a:4d:1f:97:7f:cb: b0:eb:e4:dc:39:02:ca:ca:f3:48:3e:c4:14:ff:40:93:d3:e0: 56:34:a9:9a:b0:c5:82:10:ea:94:85:d9:f8:a3:36:e9:61:90: 45:e2:f5:ca:f8:20:0a:56:88:65:6c:a8:1b:2b:8f:e2:43:17: af:ea:fe:48:6d:16:1b:ea:8d:5f:c2:7d:26:9c:e9:f3:1c:c5: 04:79:98:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3NGCTqLlzAKIb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk ZGE2YjJkNmYtNzE4Ni00ZDc0LTkwZTgtM2E4OGViOTAxMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfaIczWCYOohKmU/g5wWNASzxQmMYS+0ujbw 3U/ep45RD8JVTacE3nwlw7mFwznXEQ4Mpk18AnQGXZvyznwlgAQU+zhmL9zAN0tn WAGKVVeE7MOE+/XUuPn+qsSKS1j1Bao43G4EK3YCOZLQ1AnWRTAqgvwZmU91EQip 3g53p6vSju8+8Wivoqwl3L6TpT3hRX4bU2RwCEi5rrqcPOvG+78TUL80oPurKTtw DAcIF3BGw8LdMP1ZxklO4cDMVoDHaHTwT1aThgF0nToIUCLbLCzIRbxCbmWuyhHJ IswyyBy8HgCGsGBWPxBb9E7m9N3QLEJ5wApkPMMupKvJVSOuYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFc4yeQcYcMGvgRgrd8Spo7UYtjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTUyMGE1NmMtMTc0OC0z NmMwLThlZDgtM2VjM2Y4ZTk3YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1qWr42A9F6Y9/FffBTlLiJ2tRYN9tXta/00bNnzgDxb2Hdzau2Rb+C cKoLyf2HvOLgG1s7S2zoy3mLXfvjIjdGAavHYnSp3dkBXvjE8qxd5QRTMDDZEgzk 8Q8ESI88tKBHsuZbKUD709IzCxhqfTdsh8MKOMHKhQBgx3bP1/0j+0xhr8j96lYo r0csLM8glB8fMWrbtUlZj/L/MNjN5vAZRnic/zaXMuUW5G9bqgpNH5d/y7Dr5Nw5 AsrK80g+xBT/QJPT4FY0qZqwxYIQ6pSF2fijNulhkEXi9cr4IApWiGVsqBsrj+JD F6/q/khtFhvqjV/CfSac6fMcxQR5mGU= -----END CERTIFICATE-----Generated at Tue Sep 22 21:02:38 2026 by rpki-client