$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36a6681a-5e49-3f2e-b5af-4b56292fb840.roa File: 36a6681a-5e49-3f2e-b5af-4b56292fb840.roa (raw, json) Hash identifier: tAN+8b2xdKOjfYYZmILoR4NHHtqje0sqxzBP+yMjSBc= Subject key identifier: 7C:C5:CF:0B:1A:2C:AA:C6:42:B0:A4:AD:81:FE:E6:0C:B0:8F:AD:C5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B52A75F19A1BE300E4200A6C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36a6681a-5e49-3f2e-b5af-4b56292fb840.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 209854 IP address blocks: 166.88.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:5f:19:a1:be:30:0e:42:00:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=ac74f782-7d75-4e04-9a49-381c6d7ef6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:8c:94:85:73:25:b7:fe:99:8f:83:c7:d1: e8:46:71:be:d4:b8:d8:5a:6f:23:ef:90:cd:05:d5: e6:5a:b1:f5:a7:79:69:b4:00:f7:88:9e:ee:74:7d: e1:19:3d:c9:cc:8e:9f:ac:53:86:14:3a:d6:2a:32: 7c:08:be:fd:5e:13:e7:c6:f8:a2:a3:2b:5d:bf:d1: 03:8d:98:42:17:a6:7e:64:c5:1e:91:0e:30:a2:7e: 62:10:5c:72:63:36:48:f3:ff:80:d1:1d:e0:10:ef: a4:bf:dd:93:b3:d3:6a:93:6b:ca:a9:57:ba:f3:8e: 5d:92:9b:b4:a0:5b:29:6f:52:5b:cf:1f:05:08:07: 9f:c1:e3:03:00:8a:86:7c:d1:29:3b:ae:08:f4:0e: be:01:d6:2f:88:33:90:fb:4b:26:fe:de:a1:3e:18: 55:57:f4:0b:f2:0d:bf:51:a0:ca:3f:9a:5a:19:7a: 06:8b:e5:85:19:eb:ef:82:c4:11:cd:b2:6d:08:a6: 57:b4:c4:97:68:14:0a:b1:cb:65:23:4c:d9:eb:28: 09:29:36:de:28:8a:49:16:6c:76:9a:80:b9:1d:b5: b4:cb:6d:80:bf:e7:3e:29:a8:7d:8a:25:fb:7b:ca: 13:ee:0a:ac:e6:ec:09:55:f6:b5:02:b9:33:1b:a4: ed:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C5:CF:0B:1A:2C:AA:C6:42:B0:A4:AD:81:FE:E6:0C:B0:8F:AD:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36a6681a-5e49-3f2e-b5af-4b56292fb840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:81:b8:7a:77:82:25:42:b6:b0:a8:fe:15:66:a1:c1:d4:72: ba:ee:3d:15:bd:ce:47:b4:df:4a:95:f6:f4:67:a0:14:ba:11: 82:f6:2f:ae:da:dc:00:bf:34:a4:e2:e5:05:8c:c6:2d:a0:ec: 00:cb:0d:10:02:82:bf:b3:2b:4f:90:47:b2:f3:fb:63:21:8d: d6:ff:b5:31:29:30:fe:2f:b1:a5:fd:00:c2:cb:f6:6b:29:06: 94:89:22:2c:81:c4:ad:3f:c9:c8:ea:35:73:10:95:e9:5f:d4: 5a:2f:e1:8e:c4:e9:1c:32:21:2d:31:75:e9:d8:0d:19:6f:e9: 4a:fa:01:36:8c:99:70:d9:0e:de:62:0d:8b:bd:f7:ab:4d:bb: e1:b0:30:bb:77:74:d3:8d:8e:55:7f:8b:b8:63:4a:4b:d8:5a: b5:b5:15:81:02:7f:3b:17:67:6d:b4:69:a1:e5:68:0a:ce:c2: a5:8a:9a:80:50:e9:f1:10:99:f0:cd:04:28:c5:e0:0b:d8:34: 2b:ed:e9:4e:17:22:c8:12:3b:0e:89:4f:26:f4:4a:9d:52:fb: b6:4c:39:01:e3:28:09:18:27:cb:55:da:1f:04:e2:1f:5b:31: e5:68:e8:6f:d6:4e:83:66:cb:36:86:d2:f1:d3:b6:6a:29:5f: e9:2f:4d:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp18Zob4wDkIApsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YWM3NGY3ODItN2Q3NS00ZTA0LTlhNDktMzgxYzZkN2VmNmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAOMlIVzJbf+mY+Dx9HoRnG+1LjYWm8j75DN BdXmWrH1p3lptAD3iJ7udH3hGT3JzI6frFOGFDrWKjJ8CL79XhPnxviioytdv9ED jZhCF6Z+ZMUekQ4won5iEFxyYzZI8/+A0R3gEO+kv92Ts9Nqk2vKqVe6845dkpu0 oFspb1Jbzx8FCAefweMDAIqGfNEpO64I9A6+AdYviDOQ+0sm/t6hPhhVV/QL8g2/ UaDKP5paGXoGi+WFGevvgsQRzbJtCKZXtMSXaBQKsctlI0zZ6ygJKTbeKIpJFmx2 moC5HbW0y22Av+c+Kah9iiX7e8oT7gqs5uwJVfa1ArkzG6Tt8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzFzwsaLKrGQrCkrYH+5gywj63FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzZhNjY4MWEtNWU0OS0z ZjJlLWI1YWYtNGI1NjI5MmZiODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqBuHp3giVCtrCo/hVmocHUcrruPRW9zke030qV9vRnoBS6EYL2L67a 3AC/NKTi5QWMxi2g7ADLDRACgr+zK0+QR7Lz+2Mhjdb/tTEpMP4vsaX9AMLL9msp BpSJIiyBxK0/ycjqNXMQlelf1Fov4Y7E6RwyIS0xdenYDRlv6Ur6ATaMmXDZDt5i DYu996tNu+GwMLt3dNONjlV/i7hjSkvYWrW1FYECfzsXZ220aaHlaArOwqWKmoBQ 6fEQmfDNBCjF4AvYNCvt6U4XIsgSOw6JTyb0Sp1S+7ZMOQHjKAkYJ8tV2h8E4h9b MeVo6G/WToNmyzaG0vHTtmopX+kvTRY= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:39 2025 by rpki-client