$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28010d9c-10f8-3f65-9e5e-2c722558caa8.roa File: 28010d9c-10f8-3f65-9e5e-2c722558caa8.roa (raw, json) Hash identifier: npiYKMX0OQLnAwXb+CloszmW7dtYmAF6V+BbvuV5jOk= Subject key identifier: 00:B8:C2:59:39:A2:3B:AC:DD:AD:0B:82:EC:80:4B:03:85:25:B8:66 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E772FA2EA9DE304D56EC980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28010d9c-10f8-3f65-9e5e-2c722558caa8.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:2f:a2:ea:9d:e3:04:d5:6e:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=28166969-50ff-4887-9307-16ba91d7b091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ac:72:e1:cd:8a:fa:c2:15:76:36:ef:b3:f9: 70:4c:2c:91:97:64:8d:9d:ca:68:22:45:75:6f:8d: a6:12:31:a2:0a:4f:90:f0:b2:d1:b8:14:c3:e0:a8: b7:18:21:46:eb:73:00:07:b2:43:b9:94:cc:6c:89: 77:0b:b2:8d:8f:f9:36:9d:22:11:fd:0c:04:04:fc: 42:63:e6:1d:92:dd:6d:a4:f3:0f:50:64:76:a5:68: 26:a9:f3:1f:42:66:b5:5e:b9:9b:04:df:ab:6d:32: fd:44:27:a2:cf:24:60:37:ae:2f:42:43:53:af:65: f8:cf:42:ed:57:90:18:c7:c7:ad:a0:eb:f0:1e:a5: 82:d2:0e:87:2e:c2:f8:89:d8:df:09:d6:69:e7:19: ff:79:3a:b2:df:79:4e:3b:cc:62:97:ed:5c:b6:9c: 12:ea:f9:6a:cf:c7:8c:3b:3e:b0:c1:81:5a:ec:ce: 0d:25:a7:c1:16:06:4b:55:3d:ae:f6:1f:23:2a:4b: 3e:7e:df:42:67:be:d2:3c:9b:ce:7b:2f:dc:95:26: 04:76:2a:6c:01:a2:bd:bf:e0:c6:d1:9e:f5:e0:cb: 16:14:30:66:7b:04:75:90:45:6b:f6:87:ef:87:85: d7:33:7d:ed:af:cd:d8:28:bc:c0:84:63:a9:d1:00: 3f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B8:C2:59:39:A2:3B:AC:DD:AD:0B:82:EC:80:4B:03:85:25:B8:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28010d9c-10f8-3f65-9e5e-2c722558caa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:93:d4:f1:21:71:f6:b8:de:a4:c9:69:54:f4:bf:3b:36:28: 7f:89:54:31:88:2d:a9:0d:2f:d5:76:44:83:20:ed:2d:27:ff: fa:d5:15:a8:60:06:1b:44:13:69:12:bf:5a:94:33:67:8b:39: 46:56:cf:ad:d2:f2:b2:37:c4:72:3e:7e:41:0b:0f:1a:db:81: d7:2d:8b:87:b0:9c:44:4a:9b:72:98:14:54:12:76:9e:4a:fb: 7d:9e:91:19:26:fd:b8:ae:d3:d1:1f:7e:21:5c:6f:8a:22:c6: f3:51:7e:f8:72:c6:5c:fa:ea:ab:5a:a3:eb:f0:a5:c1:f7:c1: 99:5d:34:de:40:63:ec:30:9e:16:04:ed:8b:3a:a4:a4:c4:92: 74:db:07:c0:92:04:c5:02:54:55:09:4d:82:c3:5a:d6:d3:60: 0f:5e:53:29:96:6b:52:85:2d:86:58:66:87:75:4f:b8:f8:03: 1f:10:42:98:c0:8e:fd:79:15:bc:97:13:7f:4f:c9:c3:8c:2f: ef:4e:04:e0:d1:44:06:54:03:69:df:e4:fb:13:a2:a4:13:a5: e2:5d:7f:2a:17:05:11:1c:65:8b:48:d0:5f:f1:50:ca:b5:a5: 28:b4:34:26:1a:51:9e:6c:e3:a7:f6:21:ef:4d:50:5f:2d:db: 0b:60:cf:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdy+i6p3jBNVuyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MjgxNjY5NjktNTBmZi00ODg3LTkzMDctMTZiYTkxZDdiMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaxy4c2K+sIVdjbvs/lwTCyRl2SNncpoIkV1 b42mEjGiCk+Q8LLRuBTD4Ki3GCFG63MAB7JDuZTMbIl3C7KNj/k2nSIR/QwEBPxC Y+Ydkt1tpPMPUGR2pWgmqfMfQma1XrmbBN+rbTL9RCeizyRgN64vQkNTr2X4z0Lt V5AYx8etoOvwHqWC0g6HLsL4idjfCdZp5xn/eTqy33lOO8xil+1ctpwS6vlqz8eM Oz6wwYFa7M4NJafBFgZLVT2u9h8jKks+ft9CZ77SPJvOey/clSYEdipsAaK9v+DG 0Z714MsWFDBmewR1kEVr9ofvh4XXM33tr83YKLzAhGOp0QA/AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC4wlk5ojus3a0LguyASwOFJbhmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjgwMTBkOWMtMTBmOC0z ZjY1LTllNWUtMmM3MjI1NThjYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOT1PEhcfa43qTJaVT0vzs2KH+JVDGILakNL9V2RIMg7S0n//rVFahg BhtEE2kSv1qUM2eLOUZWz63S8rI3xHI+fkELDxrbgdcti4ewnERKm3KYFFQSdp5K +32ekRkm/biu09EffiFcb4oixvNRfvhyxlz66qtao+vwpcH3wZldNN5AY+wwnhYE 7Ys6pKTEknTbB8CSBMUCVFUJTYLDWtbTYA9eUymWa1KFLYZYZod1T7j4Ax8QQpjA jv15FbyXE39PycOML+9OBODRRAZUA2nf5PsToqQTpeJdfyoXBREcZYtI0F/xUMq1 pSi0NCYaUZ5s46f2Ie9NUF8t2wtgz6Q= -----END CERTIFICATE-----Generated at Sat Oct 11 08:45:53 2025 by rpki-client