$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa File: b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa (raw, json) Hash identifier: g3EsS99a2X9zIKWjX1oL95EQJeWvoVtfZ+XxILmHkWM= Subject key identifier: 0A:CB:B2:C0:DD:55:76:BE:63:CB:25:CD:CF:EF:E7:49:32:5C:4B:88 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F1CC7AFC4D8CBD14BDCF15400 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 5650 IP address blocks: 166.88.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:af:c4:d8:cb:d1:4b:dc:f1:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=474a94c1-3122-404e-90f3-74d4d4a6c5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:04:a9:04:6c:0b:31:34:94:21:10:c2:21: 8b:8d:d5:25:08:f7:ae:59:67:e1:24:0e:4b:fd:fc: 39:71:fc:11:67:a6:6f:da:11:b1:89:7b:87:43:bd: c0:d4:0e:a7:3c:5d:ba:d2:c8:af:b2:77:97:c3:aa: 79:59:06:87:31:70:f0:77:97:80:3c:97:05:fd:cf: 0a:d7:f7:45:6c:25:34:8f:b0:b2:88:29:47:df:24: 75:81:e0:81:23:2f:da:ae:bb:7e:14:54:a6:43:b7: d3:49:49:d3:3d:ab:3f:23:93:6d:f7:fb:eb:09:ba: 55:ae:b2:e5:94:d5:8d:5b:1d:2e:82:e0:a5:25:27: a3:0d:98:0f:13:ff:99:34:01:48:64:dd:ec:dd:5c: 15:c0:7b:6f:30:b5:d6:28:86:4c:0f:17:f3:f5:d2: c3:4b:be:19:9d:4c:97:78:51:9d:a7:cc:8a:20:0d: 29:2a:45:85:fb:0e:3d:79:bb:cb:ef:3c:3f:69:e8: 5d:66:0e:bd:cf:94:46:7d:54:fe:45:b2:3d:dd:ac: 5b:9f:60:89:25:6c:6a:44:48:a2:e7:33:7d:36:40: 65:95:9c:66:33:6a:c0:a8:95:c8:ac:68:dd:be:91: 2e:4e:4c:78:6f:68:d8:65:b0:aa:7b:17:d9:9b:a7: b7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CB:B2:C0:DD:55:76:BE:63:CB:25:CD:CF:EF:E7:49:32:5C:4B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b5:03:9b:07:09:7d:2f:13:5e:03:65:22:05:d5:56:c1:51: 91:36:c5:16:8b:d0:33:b1:5f:12:f3:9d:66:d8:36:1d:4a:e7: 87:32:c5:fa:85:af:0c:7b:f4:f9:df:77:72:e4:c7:99:d7:b8: 1c:a7:77:9c:78:81:97:53:e6:2f:13:0f:03:83:d4:c4:17:15: d6:54:43:51:05:53:af:16:de:be:47:c0:f9:60:f9:37:ed:15: 13:58:db:e6:e0:10:33:a1:7a:dd:96:49:ed:75:19:d7:13:65: 66:b3:3b:44:64:d3:49:ad:3f:93:30:39:a8:bf:1f:51:5f:a5: 48:91:68:b0:c8:12:04:98:40:62:95:ff:36:6a:61:f9:fe:e3: 48:4e:c6:ca:49:09:77:50:a3:ec:79:42:b0:d2:28:6e:07:e1: 01:fc:3e:71:44:b4:a8:fd:57:54:fe:4e:53:fa:06:8b:96:8f: 6d:28:09:18:9f:10:fc:10:ce:01:e3:af:20:90:f3:6a:29:c6: 0e:fc:b5:4b:12:28:d5:63:cf:fa:2a:59:a6:da:2b:e5:c0:45: bc:6d:31:40:9d:76:2b:fd:85:91:10:38:ae:d0:8c:82:3c:a9: a7:f1:0c:4a:1f:bc:31:ba:56:44:98:44:01:02:92:bf:7f:a0: 97:25:5a:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6/E2MvRS9zxVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NDc0YTk0YzEtMzEyMi00MDRlLTkwZjMtNzRkNGQ0YTZjNWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCMEqQRsCzE0lCEQwiGLjdUlCPeuWWfhJA5L /fw5cfwRZ6Zv2hGxiXuHQ73A1A6nPF260sivsneXw6p5WQaHMXDwd5eAPJcF/c8K 1/dFbCU0j7CyiClH3yR1geCBIy/arrt+FFSmQ7fTSUnTPas/I5Nt9/vrCbpVrrLl lNWNWx0uguClJSejDZgPE/+ZNAFIZN3s3VwVwHtvMLXWKIZMDxfz9dLDS74ZnUyX eFGdp8yKIA0pKkWF+w49ebvL7zw/aehdZg69z5RGfVT+RbI93axbn2CJJWxqREii 5zN9NkBllZxmM2rAqJXIrGjdvpEuTkx4b2jYZbCqexfZm6e3lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArLssDdVXa+Y8slzc/v50kyXEuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjQ4ZTU0ZjItNjNhYS0z NDExLWE2NjgtYTJlNjkyYTZmNGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApli/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACK1A5sHCX0vE14DZSIF1VbBUZE2xRaL0DOxXxLznWbYNh1K54cyxfqF rwx79Pnfd3Lkx5nXuBynd5x4gZdT5i8TDwOD1MQXFdZUQ1EFU68W3r5HwPlg+Tft FRNY2+bgEDOhet2WSe11GdcTZWazO0Rk00mtP5MwOai/H1FfpUiRaLDIEgSYQGKV /zZqYfn+40hOxspJCXdQo+x5QrDSKG4H4QH8PnFEtKj9V1T+TlP6BouWj20oCRif EPwQzgHjryCQ82opxg78tUsSKNVjz/oqWabaK+XARbxtMUCddiv9hZEQOK7QjII8 qafxDEofvDG6VkSYRAECkr9/oJclWqM= -----END CERTIFICATE-----Generated at Tue Sep 22 01:46:54 2026 by rpki-client