$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa File: 5ffd159f-4992-32fc-a662-70d42206aa8c.roa (raw, json) Hash identifier: x68V996Vscnp9mPguWv6LyKP/18i0niQl8ZYREsk0Uw= Subject key identifier: 41:59:B4:47:B6:AE:2D:81:AD:C0:A9:15:20:8D:0A:55:5F:AB:5D:99 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B2A2C459293AC1D3FE397FC00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 149440 IP address blocks: 166.88.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:45:92:93:ac:1d:3f:e3:97:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=5ed556cf-6992-4caa-befa-55360fc6dd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:42:97:bb:9c:41:13:a0:ba:d8:bb:79:88:3d: 7d:e8:4f:2d:0a:4a:c6:cd:74:35:5c:c9:99:bf:44: b1:80:90:0f:67:16:d1:80:f5:b4:17:b7:30:9a:53: cf:0f:7f:13:ed:0c:e0:0f:df:1b:2d:8d:15:98:ce: fd:99:fc:37:41:c5:10:a0:1d:73:92:b1:05:7e:b1: 05:c2:1e:44:bf:12:43:bc:ac:26:7d:63:4e:32:e6: 3f:63:05:15:6d:c0:30:b9:20:1e:28:91:98:53:41: 3f:bc:12:0b:c5:18:5a:03:a4:45:66:d8:84:b4:85: b3:05:44:77:4a:74:7b:55:8e:81:c7:ec:23:44:2b: ff:70:bc:ae:be:0a:99:e7:d0:b1:13:be:3b:36:38: 79:6a:32:f7:12:85:48:2c:22:17:14:47:fa:d6:3b: 6f:71:8d:16:1a:66:db:1a:e9:f8:73:52:f7:6f:17: 72:7d:c0:28:5a:40:2f:2f:e9:1e:e2:28:4a:99:71: b0:6c:83:06:68:5a:ff:d2:e6:e1:f7:97:4c:a2:4d: 9c:6c:2e:a4:26:b1:0e:c3:5e:20:91:4b:8e:31:7b: ad:09:d2:92:4d:22:8b:55:4b:fc:14:b0:97:94:24: 53:87:57:d5:c5:4a:ff:79:a3:9e:cd:8d:2f:22:a6: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:59:B4:47:B6:AE:2D:81:AD:C0:A9:15:20:8D:0A:55:5F:AB:5D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d6:c0:2a:3b:eb:4e:d0:f3:5f:81:a6:ba:08:8e:46:43:15: 90:fb:4d:33:83:82:d5:70:b2:26:06:7f:f5:11:fd:db:71:6a: e8:ee:5c:5a:77:a1:7d:80:28:8e:3c:c8:71:e9:6e:5e:1e:ba: bc:cf:01:0b:58:98:6d:57:6a:ab:52:33:a2:13:7c:ee:a8:3b: 2b:4f:74:93:95:62:b0:e3:51:b5:a2:36:75:8d:8c:e3:65:f7: ef:65:46:9e:6c:c8:6a:59:0d:8a:c9:86:50:9f:67:60:2c:4c: 68:91:e5:86:c8:48:f1:ce:be:07:e8:9b:4b:26:92:24:d7:68: 22:70:6e:b7:4b:6b:09:b0:5a:77:f8:de:e4:42:bb:9a:34:48: fe:b7:a2:1c:7a:99:16:81:f3:4d:3a:12:d7:12:e7:88:e4:2c: a6:ee:2a:44:bc:e7:53:ee:d1:e9:f0:7d:9a:b4:ab:61:8b:17: 83:7d:44:9f:f2:56:f9:14:f9:93:2d:59:2e:f2:61:7d:83:f9: cc:32:27:cc:09:9f:bd:b5:24:69:c6:6c:e5:ed:57:da:44:2e: 35:09:86:c9:c2:33:55:9d:45:63:10:4b:f3:2a:a0:b6:5b:b2: 43:c5:50:f1:62:be:5f:31:b4:2e:11:ab:f9:0c:98:30:20:ac: 67:0b:2e:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEWSk6wdP+OX/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NWVkNTU2Y2YtNjk5Mi00Y2FhLWJlZmEtNTUzNjBmYzZkZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80KXu5xBE6C62Lt5iD196E8tCkrGzXQ1XMmZ v0SxgJAPZxbRgPW0F7cwmlPPD38T7QzgD98bLY0VmM79mfw3QcUQoB1zkrEFfrEF wh5EvxJDvKwmfWNOMuY/YwUVbcAwuSAeKJGYU0E/vBILxRhaA6RFZtiEtIWzBUR3 SnR7VY6Bx+wjRCv/cLyuvgqZ59CxE747Njh5ajL3EoVILCIXFEf61jtvcY0WGmbb Gun4c1L3bxdyfcAoWkAvL+ke4ihKmXGwbIMGaFr/0ubh95dMok2cbC6kJrEOw14g kUuOMXutCdKSTSKLVUv8FLCXlCRTh1fVxUr/eaOezY0vIqaBNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFZtEe2ri2BrcCpFSCNClVfq12ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWZmZDE1OWYtNDk5Mi0z MmZjLWE2NjItNzBkNDIyMDZhYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbWwCo7607Q81+BproIjkZDFZD7TTODgtVwsiYGf/UR/dtxaujuXFp3 oX2AKI48yHHpbl4eurzPAQtYmG1XaqtSM6ITfO6oOytPdJOVYrDjUbWiNnWNjONl 9+9lRp5syGpZDYrJhlCfZ2AsTGiR5YbISPHOvgfom0smkiTXaCJwbrdLawmwWnf4 3uRCu5o0SP63ohx6mRaB8006EtcS54jkLKbuKkS851Pu0enwfZq0q2GLF4N9RJ/y VvkU+ZMtWS7yYX2D+cwyJ8wJn721JGnGbOXtV9pELjUJhsnCM1WdRWMQS/MqoLZb skPFUPFivl8xtC4Rq/kMmDAgrGcLLig= -----END CERTIFICATE-----Generated at Sat Oct 11 08:46:49 2025 by rpki-client