$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf3657e9-3db8-39a1-9094-2f52dde66f9e.roa File: bf3657e9-3db8-39a1-9094-2f52dde66f9e.roa (raw, json) Hash identifier: M36liXUjO3uU72hKtraJfTYyu+gVHOg5YP8NjEHNgOc= Subject key identifier: 38:AF:93:35:25:95:C2:19:66:1D:68:44:58:FD:3D:AE:70:9F:60:63 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D011418E4F75882C335599480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf3657e9-3db8-39a1-9094-2f52dde66f9e.roa Signing time: Fri 27 Feb 2026 17:17:53 +0000 ROA not before: Fri 27 Feb 2026 17:17:53 +0000 ROA not after: Thu 28 May 2026 16:17:53 +0000 asID: 26383 IP address blocks: 166.88.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:01:14:18:e4:f7:58:82:c3:35:59:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 27 17:17:53 2026 GMT Not After : May 28 16:17:53 2026 GMT Subject: CN=3d402f6d-365f-4fe9-8169-243a89c9c142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2c:d8:83:53:fe:86:52:61:41:34:6e:0a:e4: 27:7f:83:73:76:e9:51:81:f7:a2:34:cd:64:8a:12: 7e:31:ea:f8:60:08:9d:63:7c:48:16:41:1d:4d:7c: fd:2c:cc:9b:a4:4b:49:8d:d3:6c:b7:96:ed:a1:7c: 2a:4e:e0:fc:b3:96:df:2e:0f:8f:f8:77:74:fd:cb: 5a:56:ee:41:9f:cb:6b:d5:ce:55:87:11:48:05:91: 65:e2:ac:ae:b4:42:af:7c:1e:27:8d:4e:64:44:a9: 39:68:9a:2e:34:7b:c9:d0:76:15:a9:50:f7:5d:f4: 0a:d8:ca:8c:2e:9b:1d:86:a9:5f:eb:08:64:d7:ce: a9:6b:b7:86:ba:e3:74:ca:84:c3:15:6e:1d:c3:70: 92:52:a6:df:c0:f1:fb:13:b9:21:00:61:55:25:4a: 42:80:a7:e3:a0:9f:0f:43:d4:c7:e8:5c:60:4a:36: 23:90:27:1f:c0:83:4b:71:46:d5:41:23:b1:25:4d: a9:4a:fe:3a:1b:18:53:8d:23:1b:1f:4c:4d:31:1f: 6b:72:7f:8d:df:26:99:20:55:9c:d9:ef:2f:e7:4e: fb:25:f4:bc:25:29:79:3c:9d:ad:1d:d9:59:f2:b0: eb:b2:a4:18:fe:99:1d:f8:77:05:f9:78:95:77:af: 4a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AF:93:35:25:95:C2:19:66:1D:68:44:58:FD:3D:AE:70:9F:60:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf3657e9-3db8-39a1-9094-2f52dde66f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a7:72:0c:4e:39:26:9a:ad:18:eb:c1:35:09:5b:a5:ae:a7: f6:5b:49:1f:b7:e0:31:74:c0:dd:4e:3c:2e:4b:32:28:2b:c1: 46:77:f8:56:74:65:bf:4a:c3:9a:f8:24:c0:81:52:79:4a:c9: ea:62:c7:73:31:90:da:3d:40:1b:bf:29:99:09:31:4f:97:6e: 85:3c:52:7f:29:60:cd:e8:35:8c:cf:98:25:30:03:c9:9c:fb: c8:65:22:a2:40:50:be:9c:23:48:d8:47:15:b9:3d:97:11:25: 9b:d6:05:3e:2b:da:fd:87:d9:22:97:e7:3b:60:54:fa:6f:47: 2e:42:40:fd:4b:c1:93:a7:b0:0a:38:62:9b:25:83:ce:9b:67: 8b:95:ab:f8:98:78:64:3a:83:cb:09:0c:40:ba:cb:f8:dd:4a: d9:9a:f9:27:a7:1f:28:0d:be:2c:bb:42:b7:3d:2c:71:75:b9: 8e:b3:4b:f1:db:b4:bb:de:71:b0:3a:f9:99:d0:66:d3:7e:24: 33:ef:a3:ed:f0:42:c1:10:b6:57:f8:f4:51:36:46:7f:25:7d: 11:c3:2a:48:2c:61:69:59:4d:8b:47:c1:df:5d:34:35:23:1c: 92:7d:b1:db:14:b9:5b:4d:c5:3f:7a:04:a1:bb:25:ac:ed:24: cb:8e:5f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0BFBjk91iCwzVZlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDIyNzE3MTc1M1oXDTI2MDUyODE2MTc1M1owLzEtMCsGA1UEAxMk M2Q0MDJmNmQtMzY1Zi00ZmU5LTgxNjktMjQzYTg5YzljMTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyzYg1P+hlJhQTRuCuQnf4NzdulRgfeiNM1k ihJ+Mer4YAidY3xIFkEdTXz9LMybpEtJjdNst5btoXwqTuD8s5bfLg+P+Hd0/cta Vu5Bn8tr1c5VhxFIBZFl4qyutEKvfB4njU5kRKk5aJouNHvJ0HYVqVD3XfQK2MqM Lpsdhqlf6whk186pa7eGuuN0yoTDFW4dw3CSUqbfwPH7E7khAGFVJUpCgKfjoJ8P Q9TH6FxgSjYjkCcfwINLcUbVQSOxJU2pSv46GxhTjSMbH0xNMR9rcn+N3yaZIFWc 2e8v5077JfS8JSl5PJ2tHdlZ8rDrsqQY/pkd+HcF+XiVd69KvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDivkzUllcIZZh1oRFj9Pa5wn2BjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmYzNjU3ZTktM2RiOC0z OWExLTkwOTQtMmY1MmRkZTY2ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApli5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASncgxOOSaarRjrwTUJW6Wup/ZbSR+34DF0wN1OPC5LMigrwUZ3+FZ0 Zb9Kw5r4JMCBUnlKyepix3MxkNo9QBu/KZkJMU+XboU8Un8pYM3oNYzPmCUwA8mc +8hlIqJAUL6cI0jYRxW5PZcRJZvWBT4r2v2H2SKX5ztgVPpvRy5CQP1LwZOnsAo4 Ypslg86bZ4uVq/iYeGQ6g8sJDEC6y/jdStma+SenHygNviy7Qrc9LHF1uY6zS/Hb tLvecbA6+ZnQZtN+JDPvo+3wQsEQtlf49FE2Rn8lfRHDKkgsYWlZTYtHwd9dNDUj HJJ9sdsUuVtNxT96BKG7JaztJMuOX9o= -----END CERTIFICATE-----Generated at Sun Mar 1 18:11:09 2026 by rpki-client