$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a0d7533-6720-3617-8935-0cfdc8fb6a4c.roa File: 3a0d7533-6720-3617-8935-0cfdc8fb6a4c.roa (raw, json) Hash identifier: 6/60MW/4BageC9VT6Sd+fWpm7i7HkcpyU5sZzjWy6MY= Subject key identifier: DC:BB:94:64:E8:20:4C:CA:76:42:4A:81:73:BE:A6:DF:D2:BD:43:72 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B758CAD3DE5A504875AFA6B80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a0d7533-6720-3617-8935-0cfdc8fb6a4c.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 7018 IP address blocks: 166.88.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:ad:3d:e5:a5:04:87:5a:fa:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=5b53025f-c12d-47e2-81a0-bca748d5bc21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:d1:88:89:e9:e7:63:fe:cf:7f:9f:e8:cf: 33:06:82:79:6f:6c:79:f2:8b:e0:94:4b:2e:ce:e9: fd:0e:91:dc:f9:a6:22:95:f5:d9:08:37:b4:9c:55: 22:8e:1b:12:ca:83:9e:12:98:c9:42:f3:70:2b:7c: 08:53:15:b6:6c:7f:bc:d8:a7:1b:c7:02:2d:39:d1: 7f:e6:66:56:90:2c:4c:38:97:06:38:1b:2a:3d:94: 36:5e:85:e7:fd:ce:5a:cf:af:71:a4:d0:b4:2c:d3: b0:38:c7:1b:97:41:89:06:b5:af:dd:85:23:87:43: c1:d8:c6:d1:ab:06:45:bb:38:e2:ad:de:9f:40:40: 36:3e:9c:01:e1:ba:1a:24:98:67:b1:f2:21:5d:26: de:6c:6b:e1:2c:2b:e8:4c:eb:3a:25:40:18:e8:d2: 82:fd:b4:4f:61:b2:9b:ea:28:d9:2a:7b:10:f3:82: f9:2e:00:b9:90:be:94:77:d8:be:8d:db:e4:0f:36: 8e:21:61:d2:bf:f3:f2:8f:40:02:1b:ca:0b:55:17: b2:72:b7:53:a0:9c:8c:dd:46:4d:73:d8:75:cb:f3: 96:1a:70:bc:f9:5f:94:96:2d:00:4e:38:5d:90:9b: ed:85:08:d9:7e:23:7b:2c:c6:3d:55:da:95:8b:84: 2e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BB:94:64:E8:20:4C:CA:76:42:4A:81:73:BE:A6:DF:D2:BD:43:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a0d7533-6720-3617-8935-0cfdc8fb6a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e7:2f:90:f7:35:47:3b:e1:c6:98:14:c1:be:d3:cf:d8:63: d2:89:6a:70:dc:55:89:d8:27:82:f6:b3:c5:ed:b3:dd:21:a0: fc:3a:ce:e3:9c:f9:12:53:db:f6:f9:09:ed:a1:3b:a9:b4:76: d1:26:cb:5b:c8:15:66:58:8a:ca:00:80:88:74:24:ac:ce:c1: eb:ba:37:33:7e:a0:d6:8c:06:8e:82:21:7d:f9:11:28:6c:bd: ef:2a:0a:ff:84:b9:cf:e3:b6:24:41:97:35:e9:c7:64:6e:29: c3:2a:3a:ec:14:37:7d:8f:83:2a:32:e4:b6:27:62:80:ce:88: fd:79:91:6f:05:dd:47:00:b9:f2:16:79:04:73:62:fd:47:cf: 56:22:f8:aa:4b:d8:97:45:90:45:c0:26:86:75:7b:62:d5:74: f6:03:c4:70:85:37:8a:38:1c:9e:dc:b3:72:0d:0e:34:be:82: 66:a8:93:e4:6e:5f:d8:a9:c1:b0:9f:5d:97:07:f4:64:f1:0f: c6:81:99:92:90:c9:3d:33:17:a4:e7:4d:82:ea:aa:2f:6f:24: 33:b1:dc:67:d3:7b:3f:ea:30:65:a1:31:62:d0:6a:6a:2f:c0: 35:03:1f:72:e4:46:fc:1a:c2:e3:bd:65:e0:f4:40:29:cd:cc: 8b:c9:13:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jK095aUEh1r6a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk NWI1MzAyNWYtYzEyZC00N2UyLTgxYTAtYmNhNzQ4ZDViYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRHRiInp52P+z3+f6M8zBoJ5b2x58ovglEsu zun9DpHc+aYilfXZCDe0nFUijhsSyoOeEpjJQvNwK3wIUxW2bH+82KcbxwItOdF/ 5mZWkCxMOJcGOBsqPZQ2XoXn/c5az69xpNC0LNOwOMcbl0GJBrWv3YUjh0PB2MbR qwZFuzjird6fQEA2PpwB4boaJJhnsfIhXSbebGvhLCvoTOs6JUAY6NKC/bRPYbKb 6ijZKnsQ84L5LgC5kL6Ud9i+jdvkDzaOIWHSv/Pyj0ACG8oLVReycrdToJyM3UZN c9h1y/OWGnC8+V+Uli0ATjhdkJvthQjZfiN7LMY9VdqVi4QurwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNy7lGToIEzKdkJKgXO+pt/SvUNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2EwZDc1MzMtNjcyMC0z NjE3LTg5MzUtMGNmZGM4ZmI2YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvnL5D3NUc74caYFMG+08/YY9KJanDcVYnYJ4L2s8Xts90hoPw6zuOc +RJT2/b5Ce2hO6m0dtEmy1vIFWZYisoAgIh0JKzOweu6NzN+oNaMBo6CIX35EShs ve8qCv+Euc/jtiRBlzXpx2RuKcMqOuwUN32Pgyoy5LYnYoDOiP15kW8F3UcAufIW eQRzYv1Hz1Yi+KpL2JdFkEXAJoZ1e2LVdPYDxHCFN4o4HJ7cs3INDjS+gmaok+Ru X9ipwbCfXZcH9GTxD8aBmZKQyT0zF6TnTYLqqi9vJDOx3GfTez/qMGWhMWLQamov wDUDH3LkRvwawuO9ZeD0QCnNzIvJExI= -----END CERTIFICATE-----Generated at Sat Oct 11 08:46:51 2025 by rpki-client