$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aefab7c6-978e-3f5e-bea7-39ea1fc69317.roa File: aefab7c6-978e-3f5e-bea7-39ea1fc69317.roa (raw, json) Hash identifier: pazx7cHKhG+1SPDJW147Sa38c3MwT1OEea5KCBTZBRI= Subject key identifier: CB:37:93:9A:3D:FE:C1:42:78:B9:28:39:D1:8B:08:1B:99:DB:B9:37 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F497E38E9F1BA0196C4400440 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aefab7c6-978e-3f5e-bea7-39ea1fc69317.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18779 IP address blocks: 166.88.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:38:e9:f1:ba:01:96:c4:40:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fd21f003-61b3-4e7e-9f76-6f8c343fa521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:3d:c1:69:fd:c3:c8:f4:ad:1c:f7:c5:ce: a6:dd:de:00:7e:99:56:6c:d5:f2:1a:50:0b:81:e9: 2f:69:1d:32:20:2b:83:f4:0e:e1:39:3c:5d:c2:c5: 50:85:d2:7c:80:22:8d:8b:71:80:2e:2f:d7:90:95: 1b:14:0e:0a:8f:90:51:c7:09:c3:32:b2:bb:51:2e: 6f:ed:c0:0c:9a:e5:bb:a2:09:26:e1:d5:ae:d9:11: 05:3c:bf:24:0b:71:e6:f5:01:7a:13:e8:ba:fb:3e: 3c:6d:ae:60:53:df:a9:bc:f9:57:c7:7f:86:9d:21: 1b:ff:8c:e6:b2:c7:a5:27:ac:35:00:73:96:f3:88: ce:02:61:f5:30:94:a2:e1:35:04:90:ea:3b:e8:76: 66:36:c5:17:10:18:d1:a4:fd:ec:c4:54:c2:fc:5e: 12:d1:2b:a4:a3:64:1b:21:24:c6:17:57:0c:8a:ae: 48:7e:7b:db:ba:af:28:13:7e:40:de:25:0f:a1:51: b3:68:db:0f:60:d8:00:6e:7f:39:a4:4c:8a:55:9c: c8:c8:f4:6a:71:dc:d1:48:0f:e9:ab:c9:f2:54:d6: 78:4c:ae:c3:01:89:3a:b8:28:0d:db:c4:91:9e:d8: f5:eb:6c:24:8d:49:ac:a6:ea:e2:7e:ee:30:bd:58: 6f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:37:93:9A:3D:FE:C1:42:78:B9:28:39:D1:8B:08:1B:99:DB:B9:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aefab7c6-978e-3f5e-bea7-39ea1fc69317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:16:dd:bf:d7:15:45:fc:6c:0a:d4:fc:ea:83:6a:81:00:99: 2b:08:4a:56:28:2a:99:cc:62:25:67:1e:1e:b2:53:90:c8:53: fb:9d:2d:06:fc:8c:ab:ba:cb:f5:68:f3:29:6d:41:ae:09:ad: 06:95:4f:8d:b2:05:dd:61:d6:91:8c:1d:f5:19:54:95:45:2f: 58:de:0b:cb:80:1c:4f:59:3a:d4:85:be:97:46:4c:11:81:d5: 38:88:11:bc:29:1e:e6:03:07:0b:41:45:57:1e:78:3a:47:3c: 4a:12:74:c7:52:8d:cc:48:59:21:32:61:ec:46:70:e9:78:eb: e1:aa:4a:0b:e9:30:8e:d7:23:f1:5b:a2:3b:b4:54:dc:ac:b0: e7:6a:bc:50:c6:52:45:d1:95:00:27:52:d3:e1:92:2d:87:f8: 84:fe:5e:9d:78:68:38:40:49:8d:b7:88:1d:55:06:2e:aa:14: be:63:17:4c:db:b6:0a:01:53:2d:a7:2a:7c:c7:ee:77:e3:14: 1d:85:c9:72:ff:39:74:48:44:cc:8e:dd:c9:fd:0b:0d:e7:4c: 15:e6:13:d9:d0:85:5f:02:95:fb:d5:44:6d:7a:49:22:3f:5b: d6:7f:b6:f8:9d:79:0c:cc:c9:22:a5:93:6a:8e:94:a3:b4:0f: 6b:b8:7b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfjjp8boBlsRABEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQyMWYwMDMtNjFiMy00ZTdlLTlmNzYtNmY4YzM0M2ZhNTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwM9wWn9w8j0rRz3xc6m3d4AfplWbNXyGlAL gekvaR0yICuD9A7hOTxdwsVQhdJ8gCKNi3GALi/XkJUbFA4Kj5BRxwnDMrK7US5v 7cAMmuW7ogkm4dWu2REFPL8kC3Hm9QF6E+i6+z48ba5gU9+pvPlXx3+GnSEb/4zm sselJ6w1AHOW84jOAmH1MJSi4TUEkOo76HZmNsUXEBjRpP3sxFTC/F4S0Suko2Qb ISTGF1cMiq5Ifnvbuq8oE35A3iUPoVGzaNsPYNgAbn85pEyKVZzIyPRqcdzRSA/p q8nyVNZ4TK7DAYk6uCgN28SRntj162wkjUmspurifu4wvVhvPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMs3k5o9/sFCeLkoOdGLCBuZ27k3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWVmYWI3YzYtOTc4ZS0z ZjVlLWJlYTctMzllYTFmYzY5MzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQW3b/XFUX8bArU/OqDaoEAmSsISlYoKpnMYiVnHh6yU5DIU/udLQb8 jKu6y/Vo8yltQa4JrQaVT42yBd1h1pGMHfUZVJVFL1jeC8uAHE9ZOtSFvpdGTBGB 1TiIEbwpHuYDBwtBRVceeDpHPEoSdMdSjcxIWSEyYexGcOl46+GqSgvpMI7XI/Fb oju0VNyssOdqvFDGUkXRlQAnUtPhki2H+IT+Xp14aDhASY23iB1VBi6qFL5jF0zb tgoBUy2nKnzH7nfjFB2FyXL/OXRIRMyO3cn9Cw3nTBXmE9nQhV8ClfvVRG16SSI/ W9Z/tvideQzMySKlk2qOlKO0D2u4e34= -----END CERTIFICATE-----Generated at Sat Sep 26 07:16:36 2026 by rpki-client