$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3658677-03a7-3faf-8dee-b1e8f114471b.roa File: d3658677-03a7-3faf-8dee-b1e8f114471b.roa (raw, json) Hash identifier: MSYqXTjBoI/LCecFeKlAks7cnmLHoxZr0d+686duS5M= Subject key identifier: F4:29:38:EB:B8:14:AC:1D:A1:A8:BB:5F:14:4F:E8:13:62:DF:3C:28 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F17324381310130E0340DE700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3658677-03a7-3faf-8dee-b1e8f114471b.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 212669 IP address blocks: 166.88.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:43:81:31:01:30:e0:34:0d:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=353949dd-aeef-4acb-93ef-74c7d9553064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cf:3b:c8:76:65:21:9b:ce:20:55:8d:dd:73: eb:23:89:67:19:10:85:c1:58:37:b7:be:90:b6:3d: 71:24:fb:7f:ab:0c:5e:93:36:f0:dd:df:2f:7b:09: 24:5c:12:01:dd:ef:61:2d:82:0b:9c:0b:c5:87:66: 7d:20:12:9b:50:fa:b3:e6:c7:6b:c5:6e:7d:ea:c3: 9e:51:e2:f3:20:82:7d:94:15:cb:cd:25:63:6f:9a: 42:4e:cb:d3:90:b9:60:04:df:5e:82:3d:03:18:f9: c3:7b:8b:01:78:42:d4:60:88:f5:7e:7e:49:e7:05: 97:bb:77:9d:05:06:82:9d:7d:c8:bf:85:6c:cc:11: 0b:fc:0a:86:cc:31:bd:92:86:45:eb:d0:80:c0:eb: 77:9a:5e:2a:0d:1c:9b:d2:fe:7a:04:ab:f3:0d:be: 86:19:2d:11:60:77:20:97:e7:0b:20:40:48:4c:4b: f4:e4:ae:93:26:9a:c6:dd:e5:d2:53:ac:a4:07:a9: 13:f4:89:64:e3:34:a4:2b:75:3b:bd:ba:0e:f2:fd: f7:4c:43:04:53:b9:9a:79:7c:cd:1e:c3:d6:05:87: a1:0d:df:16:73:a5:27:dd:43:32:d8:c1:6b:15:98: eb:8f:96:72:71:40:27:b4:9d:ee:98:94:c6:00:a5: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:29:38:EB:B8:14:AC:1D:A1:A8:BB:5F:14:4F:E8:13:62:DF:3C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3658677-03a7-3faf-8dee-b1e8f114471b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:70:97:44:bd:38:7f:e4:6c:ec:e7:b6:61:b6:eb:a3:0e:a7: f1:d1:a6:19:16:eb:26:b1:ed:44:68:1a:c1:cc:99:e9:fb:5d: 88:88:e3:30:82:4e:25:18:fd:de:05:da:b0:aa:c3:d5:d7:e1: b3:bd:97:30:b8:f6:02:91:ba:64:bb:db:0a:cc:01:29:35:d7: 41:b0:2d:93:1a:ff:72:be:84:db:ff:e7:31:b3:91:5e:1e:d8: 14:1c:43:f9:b4:64:02:05:85:4b:8d:6a:fa:2f:16:54:21:df: 7c:d0:4b:3d:9a:3e:c3:6d:f1:89:23:63:4e:c5:d9:7b:e3:64: 9c:d7:c1:8b:1f:9d:a9:a0:bd:f3:8d:a7:03:bb:a0:76:af:a6: a1:d6:f5:28:b4:f0:cc:99:0a:6d:c2:6d:8a:03:c1:79:42:80: be:2a:e2:65:28:7e:d4:09:f4:a1:6a:71:20:ed:31:fb:e5:58: 26:c4:89:98:ce:c4:c6:75:6f:1e:fc:84:97:d4:37:ce:8f:c5: cf:44:d1:be:9a:d5:bc:6a:55:b0:b4:5f:4b:6d:0f:2f:c2:cf: ba:50:df:e2:fb:46:4d:63:46:90:76:93:5b:d8:f3:6c:c4:08: 24:72:53:90:a1:b2:e3:c6:90:8a:43:24:a3:46:fc:3f:5e:d4: 80:bf:4f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkOBMQEw4DQN5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MzUzOTQ5ZGQtYWVlZi00YWNiLTkzZWYtNzRjN2Q5NTUzMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM87yHZlIZvOIFWN3XPrI4lnGRCFwVg3t76Q tj1xJPt/qwxekzbw3d8vewkkXBIB3e9hLYILnAvFh2Z9IBKbUPqz5sdrxW596sOe UeLzIIJ9lBXLzSVjb5pCTsvTkLlgBN9egj0DGPnDe4sBeELUYIj1fn5J5wWXu3ed BQaCnX3Iv4VszBEL/AqGzDG9koZF69CAwOt3ml4qDRyb0v56BKvzDb6GGS0RYHcg l+cLIEBITEv05K6TJprG3eXSU6ykB6kT9Ilk4zSkK3U7vboO8v33TEMEU7maeXzN HsPWBYehDd8Wc6Un3UMy2MFrFZjrj5ZycUAntJ3umJTGAKVB9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQpOOu4FKwdoai7XxRP6BNi3zwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDM2NTg2NzctMDNhNy0z ZmFmLThkZWUtYjFlOGYxMTQ0NzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFwl0S9OH/kbOzntmG266MOp/HRphkW6yax7URoGsHMmen7XYiI4zCC TiUY/d4F2rCqw9XX4bO9lzC49gKRumS72wrMASk110GwLZMa/3K+hNv/5zGzkV4e 2BQcQ/m0ZAIFhUuNavovFlQh33zQSz2aPsNt8YkjY07F2XvjZJzXwYsfnamgvfON pwO7oHavpqHW9Si08MyZCm3CbYoDwXlCgL4q4mUoftQJ9KFqcSDtMfvlWCbEiZjO xMZ1bx78hJfUN86Pxc9E0b6a1bxqVbC0X0ttDy/Cz7pQ3+L7Rk1jRpB2k1vY82zE CCRyU5ChsuPGkIpDJKNG/D9e1IC/TwY= -----END CERTIFICATE-----Generated at Tue Sep 22 11:34:59 2026 by rpki-client