$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3205c0d1-a8cb-3411-ae13-833e18ab224c.roa File: 3205c0d1-a8cb-3411-ae13-833e18ab224c.roa (raw, json) Hash identifier: wKp5uGt4pBkid3Gs0Zoa8F3vo8r9ZIQIU1beZtEwrcw= Subject key identifier: 2F:3A:B9:0A:AE:B5:0E:8F:D1:B7:14:72:89:5D:13:2D:6D:E3:C0:20 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B328C632043ED03A95963B640 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3205c0d1-a8cb-3411-ae13-833e18ab224c.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 11404 IP address blocks: 166.88.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:63:20:43:ed:03:a9:59:63:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=fabf14b9-a1f0-4973-b0e8-5da60bc40b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:73:f5:33:82:5b:9b:b3:22:c0:a2:a1:5b:c5: 65:44:1c:e6:50:1b:e0:b2:4c:4a:bd:97:c2:df:c2: 3e:6b:90:42:d5:6f:8e:e9:f5:75:92:79:41:94:af: ab:86:2a:b2:cb:7b:02:74:03:9a:2f:5f:3f:d4:31: f5:9e:d0:b5:57:52:76:f8:0a:07:7e:93:42:9f:7f: d0:78:e8:72:0c:55:4d:7f:d3:11:69:c6:a9:de:c2: 5e:c3:90:d4:bc:1a:93:b7:43:d9:b2:0d:fd:9c:ec: 0c:22:0e:3c:92:f3:35:dd:ef:7b:5a:21:4e:85:9b: 26:e0:de:7e:27:c7:cc:8c:63:72:f5:dc:ef:d6:12: 8b:00:ce:64:dd:c5:57:8d:60:59:6b:3f:e2:11:b6: 39:7d:75:dd:04:6b:b9:5c:00:38:0f:e9:f1:f9:32: 6e:5d:5b:75:dd:14:ba:37:97:5f:7f:ab:4c:dc:06: 91:cf:4f:fd:0d:f2:60:89:94:96:3a:2d:fe:49:b3: be:33:04:b5:f3:a7:8c:e7:43:82:00:8f:e9:97:79: 9c:ff:90:dd:a0:1b:8c:e5:e6:fa:d8:98:c5:88:16: f5:02:87:15:98:e0:1f:2e:10:d2:b6:ae:80:cd:51: ad:4a:07:c1:ac:a0:87:9e:29:47:e9:1c:3d:d4:ce: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3A:B9:0A:AE:B5:0E:8F:D1:B7:14:72:89:5D:13:2D:6D:E3:C0:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3205c0d1-a8cb-3411-ae13-833e18ab224c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:87:63:9a:bd:d1:ed:e4:a7:ad:07:11:e8:58:1c:9f:ae:b8: c1:eb:44:fe:57:51:6f:25:48:43:69:5a:36:ef:d9:49:66:9e: 40:cb:80:d9:62:0e:49:17:05:d6:b8:35:00:b5:5c:98:b4:ff: 86:5d:17:43:c4:96:00:a0:fb:43:3c:51:28:b3:45:70:4b:89: 7c:3b:80:06:e3:cc:96:ee:6c:b8:59:af:ec:d2:40:d8:2c:78: ab:38:c5:0c:f7:ee:53:3f:b3:ac:cc:06:80:89:f6:e1:bc:aa: b8:aa:86:56:a2:02:5c:b2:44:f2:a1:d7:0b:38:32:44:81:0e: 28:5d:e1:5e:4c:53:74:06:d5:b3:01:fe:78:eb:30:fd:6b:1e: 37:9c:6c:38:64:15:1f:a4:1c:51:e8:f8:25:fe:ca:24:04:ea: 45:76:c1:b7:32:ca:eb:80:cf:61:ea:79:9a:48:38:cb:d8:77: f5:f3:99:a8:48:c9:7f:aa:0b:38:9a:b5:07:73:81:20:b9:27: f5:2f:90:6c:a1:53:a3:08:db:e8:18:b2:5c:e6:e5:bc:d1:bb: 96:a9:c0:13:5b:ef:bb:f0:fb:83:5f:f2:19:37:9d:7c:2c:0c: 29:2a:af:04:76:08:1a:4a:4b:94:aa:9d:ac:72:9c:2f:84:90: a7:00:c9:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjGMgQ+0DqVljtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmFiZjE0YjktYTFmMC00OTczLWIwZTgtNWRhNjBiYzQwYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03P1M4Jbm7MiwKKhW8VlRBzmUBvgskxKvZfC 38I+a5BC1W+O6fV1knlBlK+rhiqyy3sCdAOaL18/1DH1ntC1V1J2+AoHfpNCn3/Q eOhyDFVNf9MRacap3sJew5DUvBqTt0PZsg39nOwMIg48kvM13e97WiFOhZsm4N5+ J8fMjGNy9dzv1hKLAM5k3cVXjWBZaz/iEbY5fXXdBGu5XAA4D+nx+TJuXVt13RS6 N5dff6tM3AaRz0/9DfJgiZSWOi3+SbO+MwS186eM50OCAI/pl3mc/5DdoBuM5eb6 2JjFiBb1AocVmOAfLhDStq6AzVGtSgfBrKCHnilH6Rw91M4SIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC86uQqutQ6P0bcUcoldEy1t48AgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzIwNWMwZDEtYThjYi0z NDExLWFlMTMtODMzZTE4YWIyMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplg1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6HY5q90e3kp60HEehYHJ+uuMHrRP5XUW8lSENpWjbv2UlmnkDLgNli DkkXBda4NQC1XJi0/4ZdF0PElgCg+0M8USizRXBLiXw7gAbjzJbubLhZr+zSQNgs eKs4xQz37lM/s6zMBoCJ9uG8qriqhlaiAlyyRPKh1ws4MkSBDihd4V5MU3QG1bMB /njrMP1rHjecbDhkFR+kHFHo+CX+yiQE6kV2wbcyyuuAz2HqeZpIOMvYd/XzmahI yX+qCziatQdzgSC5J/UvkGyhU6MI2+gYslzm5bzRu5apwBNb77vw+4Nf8hk3nXws DCkqrwR2CBpKS5SqnaxynC+EkKcAyVw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:47:21 2025 by rpki-client