$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23840fbc-fafb-3505-9306-274d02b8d7e0.roa File: 23840fbc-fafb-3505-9306-274d02b8d7e0.roa (raw, json) Hash identifier: Owv4ls6LXUO3KdF1D5hYtausfVUzckI3mzAZYUf+6YA= Subject key identifier: E1:BC:ED:87:08:49:54:95:DD:30:84:CA:74:21:DC:86:F0:32:77:B8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B48E2153888D2190CDC342200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23840fbc-fafb-3505-9306-274d02b8d7e0.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 213823 IP address blocks: 166.88.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:15:38:88:d2:19:0c:dc:34:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=1e76944e-653e-4f79-997f-b5a7aec6f095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3b:93:1d:f5:a3:51:35:a4:8a:b2:f0:d0:59: 82:5e:97:94:f1:ba:32:c9:48:a0:89:40:0f:d9:32: a8:a8:68:e5:c7:73:6d:19:19:e0:51:38:85:91:73: d9:fb:9c:ff:0f:5d:20:c7:ca:45:a1:2b:2c:4b:60: 44:39:78:14:c8:da:19:cd:7a:b4:86:fe:6c:6f:b9: 70:22:cc:9b:f9:1b:c3:fd:c1:ee:4c:21:1b:5e:81: 38:da:da:7d:16:1f:c7:85:5c:66:16:1d:de:c9:bd: 51:d6:af:90:6f:40:53:8d:e2:75:17:7a:9e:a7:32: 17:f5:27:d0:82:e0:a1:01:d9:00:9a:29:f5:70:d2: f1:32:7a:f3:d7:d4:3f:0b:22:7f:cf:9b:c3:75:61: c4:a7:5f:2c:dd:d1:f7:9f:1c:65:54:b3:42:2d:28: ca:24:0c:88:35:ec:b3:a8:44:55:73:31:31:53:34: 3f:95:1d:ff:e1:57:b8:74:07:e8:7f:e0:71:58:56: 6a:75:f2:65:5e:b6:be:3a:8c:81:03:2d:17:25:8e: df:36:a7:3f:1f:56:39:93:f7:b3:a5:1a:2c:38:20: 6b:67:55:bf:b7:90:07:63:27:92:e2:ee:fb:36:88: f6:af:f1:7e:b5:b2:c7:f4:9e:6f:f3:0e:46:dc:98: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BC:ED:87:08:49:54:95:DD:30:84:CA:74:21:DC:86:F0:32:77:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23840fbc-fafb-3505-9306-274d02b8d7e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d3:0c:e2:52:3b:df:4d:e4:54:55:90:84:1d:be:07:1d:63: a8:7f:12:6b:86:33:f2:64:a9:a7:a7:e2:c9:64:94:42:44:9f: 19:22:ae:13:da:2b:71:87:e4:e9:ac:d3:0e:42:77:a7:fb:1b: bf:c4:0a:5c:22:c6:95:f6:a0:9d:67:8a:43:87:55:e0:69:5b: 1e:5d:5c:0e:c4:38:34:c3:e0:f5:b8:4c:1c:75:87:be:f6:50: 77:29:af:b9:75:ac:5d:80:d8:81:3a:5d:ae:c3:a2:dc:42:7d: 12:91:bd:67:78:d7:7b:24:9c:4a:69:42:c2:d7:a1:e6:23:6d: 7f:5d:41:1c:98:12:3a:56:10:26:6b:43:72:db:06:f8:13:1f: 4e:c1:09:66:17:0f:a7:a0:7b:b4:5b:b6:71:ad:4c:2a:00:88: 70:6e:cf:7f:b8:92:b5:b4:e3:1d:10:25:42:99:e5:39:8a:4a: 65:30:eb:92:07:91:c7:d9:a8:06:ae:4e:9b:85:b5:16:81:c6: 8b:23:9a:cb:c2:c0:96:30:f6:fe:57:fe:f9:1d:c3:3c:54:90: bf:24:8a:e5:52:3d:a1:3a:fb:fc:c4:8a:9a:40:37:b6:06:70: 07:93:28:36:eb:03:3d:29:34:af:53:00:17:78:e7:16:90:10: 02:2f:ab:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4hU4iNIZDNw0IgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MWU3Njk0NGUtNjUzZS00Zjc5LTk5N2YtYjVhN2FlYzZmMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTuTHfWjUTWkirLw0FmCXpeU8boyyUigiUAP 2TKoqGjlx3NtGRngUTiFkXPZ+5z/D10gx8pFoSssS2BEOXgUyNoZzXq0hv5sb7lw Isyb+RvD/cHuTCEbXoE42tp9Fh/HhVxmFh3eyb1R1q+Qb0BTjeJ1F3qepzIX9SfQ guChAdkAmin1cNLxMnrz19Q/CyJ/z5vDdWHEp18s3dH3nxxlVLNCLSjKJAyINeyz qERVczExUzQ/lR3/4Ve4dAfof+BxWFZqdfJlXra+OoyBAy0XJY7fNqc/H1Y5k/ez pRosOCBrZ1W/t5AHYyeS4u77Noj2r/F+tbLH9J5v8w5G3JhpIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOG87YcISVSV3TCEynQh3IbwMne4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjM4NDBmYmMtZmFmYi0z NTA1LTkzMDYtMjc0ZDAyYjhkN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzTDOJSO99N5FRVkIQdvgcdY6h/EmuGM/Jkqaen4slklEJEnxkirhPa K3GH5Oms0w5Cd6f7G7/EClwixpX2oJ1nikOHVeBpWx5dXA7EODTD4PW4TBx1h772 UHcpr7l1rF2A2IE6Xa7DotxCfRKRvWd413sknEppQsLXoeYjbX9dQRyYEjpWECZr Q3LbBvgTH07BCWYXD6ege7RbtnGtTCoAiHBuz3+4krW04x0QJUKZ5TmKSmUw65IH kcfZqAauTpuFtRaBxosjmsvCwJYw9v5X/vkdwzxUkL8kiuVSPaE6+/zEippAN7YG cAeTKDbrAz0pNK9TABd45xaQEAIvq1U= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:04 2025 by rpki-client