$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/424f8058-950b-3da7-9d49-5b107b6ab80b.roa File: 424f8058-950b-3da7-9d49-5b107b6ab80b.roa (raw, json) Hash identifier: a62N2ov9H5DT3SvOJkb34m32rPwSXuZ6nxGRAha5d/c= Subject key identifier: 01:5C:70:50:57:F3:7F:75:0D:7F:F3:01:ED:4F:80:AD:BF:F6:E0:E1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E77323DB1A2E2A096CABA40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/424f8058-950b-3da7-9d49-5b107b6ab80b.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:32:3d:b1:a2:e2:a0:96:ca:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=134c6bac-932e-4e72-973d-25b34ad7f635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d3:ee:5b:92:c1:23:94:a1:24:a4:72:ef:73: 99:e8:7c:43:9b:9f:fb:e2:51:d4:60:61:2d:1d:54: bc:8e:62:27:a7:32:7c:23:a7:ae:97:6d:f0:76:63: d2:b5:b1:6c:87:13:bf:97:b0:47:cf:97:92:32:38: 31:f9:56:a2:f7:05:64:d2:27:1c:6b:06:82:ed:93: 43:14:e2:70:39:fc:a3:26:b6:49:5f:4d:98:38:3e: fe:ba:93:d9:d0:c7:d3:0c:0a:e2:45:e0:f5:1f:26: 88:b2:2c:1e:e6:eb:9e:a4:90:68:91:e0:6a:5f:b9: 51:c2:cb:a7:12:2e:41:38:ed:05:33:68:66:68:c0: 23:00:32:dc:a5:02:10:31:1f:e7:03:c1:d1:37:8b: 59:96:a7:b6:e9:70:c0:d6:95:4b:5e:e7:da:4b:29: 77:1e:bb:75:d7:8a:07:f9:ec:f7:56:48:6a:cc:55: 5e:52:75:d4:d2:cd:94:34:0d:e3:3c:03:50:e9:2b: c1:5d:a5:0f:bb:52:de:bb:11:d6:19:7c:09:52:bb: 44:0b:18:63:f0:bc:0a:fd:c8:e3:f8:66:b4:28:0d: 7e:0e:07:ff:9d:53:a0:7d:56:e7:6b:8c:6e:08:15: 00:05:9f:9d:64:3d:f4:08:02:cb:5f:11:cf:dc:85: dd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5C:70:50:57:F3:7F:75:0D:7F:F3:01:ED:4F:80:AD:BF:F6:E0:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/424f8058-950b-3da7-9d49-5b107b6ab80b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:6d:e0:92:c7:d3:f6:89:32:8a:2f:3f:a6:01:6e:55:cd:a3: b7:b4:81:83:ae:9e:86:bc:f2:cd:67:e4:97:c7:4f:b3:56:e0: dd:78:51:15:e7:15:85:fa:04:d4:dc:13:b5:8b:8c:b8:b3:aa: 8e:64:20:0b:25:4b:fd:67:04:60:7b:07:46:57:c3:13:ba:ba: 57:aa:1b:6d:27:ae:eb:bc:58:07:97:2b:05:1f:36:8d:f4:29: ab:26:cd:b8:29:b6:ef:f7:9f:de:b1:6c:76:63:2d:9c:eb:b5: e3:8c:ae:1f:96:4e:92:7c:5d:08:1c:29:75:90:c7:df:c7:98: 73:eb:06:72:e4:7f:c1:f8:5a:57:ce:1e:ef:93:0a:4f:43:2e: d9:aa:f0:fb:2d:55:37:10:6b:b7:b9:44:4d:58:ba:d1:63:55: ac:16:ba:e3:e2:90:e6:fc:b6:fd:9e:d8:a6:5c:d4:62:5a:5a: 4b:c5:08:95:72:46:4a:1d:9b:77:51:64:bb:b6:37:69:10:be: aa:a8:ae:6c:77:0a:d6:0f:f4:b0:56:9d:95:bc:f1:69:86:51: fb:34:81:9f:8b:d3:f2:f9:31:9f:97:a4:8d:60:2c:50:7b:25: 41:6f:89:fc:e1:12:0f:a4:a2:cf:46:0f:37:28:b6:92:21:cd: 48:3b:57:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdzI9saLioJbKukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MTM0YzZiYWMtOTMyZS00ZTcyLTk3M2QtMjViMzRhZDdmNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dPuW5LBI5ShJKRy73OZ6HxDm5/74lHUYGEt HVS8jmInpzJ8I6eul23wdmPStbFshxO/l7BHz5eSMjgx+Vai9wVk0iccawaC7ZND FOJwOfyjJrZJX02YOD7+upPZ0MfTDAriReD1HyaIsiwe5uuepJBokeBqX7lRwsun Ei5BOO0FM2hmaMAjADLcpQIQMR/nA8HRN4tZlqe26XDA1pVLXufaSyl3Hrt114oH +ez3VkhqzFVeUnXU0s2UNA3jPANQ6SvBXaUPu1LeuxHWGXwJUrtECxhj8LwK/cjj +Ga0KA1+Dgf/nVOgfVbna4xuCBUABZ+dZD30CALLXxHP3IXd6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFccFBX8391DX/zAe1PgK2/9uDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDI0ZjgwNTgtOTUwYi0z ZGE3LTlkNDktNWIxMDdiNmFiODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJt4JLH0/aJMoovP6YBblXNo7e0gYOunoa88s1n5JfHT7NW4N14URXn FYX6BNTcE7WLjLizqo5kIAslS/1nBGB7B0ZXwxO6uleqG20nruu8WAeXKwUfNo30 Kasmzbgptu/3n96xbHZjLZzrteOMrh+WTpJ8XQgcKXWQx9/HmHPrBnLkf8H4WlfO Hu+TCk9DLtmq8PstVTcQa7e5RE1YutFjVawWuuPikOb8tv2e2KZc1GJaWkvFCJVy Rkodm3dRZLu2N2kQvqqormx3CtYP9LBWnZW88WmGUfs0gZ+L0/L5MZ+XpI1gLFB7 JUFvifzhEg+kos9GDzcotpIhzUg7Vyw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:47:20 2025 by rpki-client