$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa File: 29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa (raw, json) Hash identifier: SzjcoJtOoghR9eChyYQsBrjHSdh00MFakBsCvDKCvTM= Subject key identifier: B5:05:7C:64:72:EE:36:4C:6B:BA:6A:8B:8A:0E:CF:88:90:8F:41:75 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B461703DF2AF056E81C23D040 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 10557 IP address blocks: 166.88.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:03:df:2a:f0:56:e8:1c:23:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=cba56d88-96fc-4fe5-b5ea-5bc3f8e2bef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:af:dc:e8:98:c6:cb:7c:d3:12:84:df:05:05: 1c:65:bb:6e:a0:9c:2a:5f:f3:ab:ee:b4:20:19:31: 6c:f0:a2:a5:fd:ce:84:00:d7:db:75:30:e5:14:2f: 22:36:74:a8:30:ec:0d:4d:83:13:07:88:42:38:cd: 25:80:df:28:15:cd:c9:10:c2:02:04:42:87:66:6e: c1:ca:c7:44:ca:14:99:e0:c3:0d:8d:cf:ac:db:06: 3e:1d:95:6a:78:3e:d9:2a:46:f2:a7:cf:95:f5:b6: 75:99:fa:94:36:3b:a9:cd:01:66:48:52:6b:bc:5b: a2:c8:0a:cd:aa:bc:4b:8d:56:42:02:a2:41:a6:11: d3:e1:ec:1e:68:5e:0d:8a:15:9a:d9:c3:7b:19:26: 99:b2:f7:15:1f:83:98:1d:5f:55:ab:7b:05:07:c0: 41:ab:e3:f3:6d:50:04:60:25:df:f5:bf:dc:33:07: cd:bc:86:75:af:9d:ac:90:f3:9f:01:b2:f0:f1:b5: 5b:0b:f9:c0:06:1f:7e:1a:10:c4:bb:b4:e9:92:d9: e9:17:11:30:02:09:13:b2:57:ef:09:72:58:d4:9d: 91:ee:29:52:93:4c:72:6b:70:cb:2f:4c:11:ec:68: ba:86:7d:33:7b:9c:a0:01:8b:fe:bf:96:bd:38:b0: ef:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:05:7C:64:72:EE:36:4C:6B:BA:6A:8B:8A:0E:CF:88:90:8F:41:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:3d:9a:43:48:8a:e0:4c:85:c4:96:ab:35:03:f4:02:29:4d: a4:e3:05:fe:7c:da:54:f1:10:5b:1a:28:66:2a:30:4b:7d:fe: 68:9b:3d:b3:01:e5:30:9f:3c:b8:ff:d0:23:d8:56:17:0b:0c: e1:93:86:73:c5:af:dc:a2:94:fa:44:55:95:c1:fe:c2:a9:1d: 64:09:8d:b4:f0:f2:23:3a:f9:30:0d:12:80:86:a0:26:e3:11: a6:30:84:01:3f:bc:4e:0d:5f:e0:9c:ce:4e:a4:9a:9d:36:f2: 49:ac:ab:c4:65:c8:f7:d0:d0:3d:5e:ce:22:25:47:b3:a5:bb: fd:17:21:5a:a4:63:fb:98:2f:ed:c6:c8:70:18:5c:fc:b4:cb: cc:62:31:31:eb:e9:24:4f:0b:bc:fa:56:3b:4a:a8:50:9f:d3: de:c8:01:23:67:f0:26:ae:f3:e9:b1:4b:84:d8:f1:be:64:89: 89:f9:02:19:69:25:62:04:ea:0a:80:3d:35:de:ed:e5:cb:1e: 83:a0:ba:ea:da:60:eb:6d:9b:8a:82:df:7a:cb:d2:09:c7:a5: dc:05:a9:dc:3b:f5:6a:69:0a:be:a6:33:34:7c:1a:f1:6d:65: 17:11:f3:d9:d3:cf:c3:b0:54:12:62:ae:12:6a:1b:5f:84:c4: 90:e7:93:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFwPfKvBW6Bwj0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk Y2JhNTZkODgtOTZmYy00ZmU1LWI1ZWEtNWJjM2Y4ZTJiZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma/c6JjGy3zTEoTfBQUcZbtuoJwqX/Or7rQg GTFs8KKl/c6EANfbdTDlFC8iNnSoMOwNTYMTB4hCOM0lgN8oFc3JEMICBEKHZm7B ysdEyhSZ4MMNjc+s2wY+HZVqeD7ZKkbyp8+V9bZ1mfqUNjupzQFmSFJrvFuiyArN qrxLjVZCAqJBphHT4eweaF4NihWa2cN7GSaZsvcVH4OYHV9Vq3sFB8BBq+PzbVAE YCXf9b/cMwfNvIZ1r52skPOfAbLw8bVbC/nABh9+GhDEu7TpktnpFxEwAgkTslfv CXJY1J2R7ilSk0xya3DLL0wR7Gi6hn0ze5ygAYv+v5a9OLDvAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUFfGRy7jZMa7pqi4oOz4iQj0F1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjkyMzliNmEtZTdkOC0z YTBiLTk3MzAtOTcwYzk2ODFlOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQ9mkNIiuBMhcSWqzUD9AIpTaTjBf582lTxEFsaKGYqMEt9/mibPbMB 5TCfPLj/0CPYVhcLDOGThnPFr9yilPpEVZXB/sKpHWQJjbTw8iM6+TANEoCGoCbj EaYwhAE/vE4NX+Cczk6kmp028kmsq8RlyPfQ0D1eziIlR7Olu/0XIVqkY/uYL+3G yHAYXPy0y8xiMTHr6SRPC7z6VjtKqFCf097IASNn8Cau8+mxS4TY8b5kiYn5Ahlp JWIE6gqAPTXe7eXLHoOguuraYOttm4qC33rL0gnHpdwFqdw79WppCr6mMzR8GvFt ZRcR89nTz8OwVBJirhJqG1+ExJDnkyI= -----END CERTIFICATE-----Generated at Sat Oct 11 08:45:45 2025 by rpki-client