$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/603ba43e-70fb-3c07-bfa1-6ab9d10f3ed3.roa File: 603ba43e-70fb-3c07-bfa1-6ab9d10f3ed3.roa (raw, json) Hash identifier: AYPZE+eivPK52oTe7g0zSmF9AYDTd1u6BqHgW8pCNCU= Subject key identifier: 18:E3:CB:6E:91:09:78:10:13:C7:C3:28:85:21:34:16:10:7F:26:35 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E773292CCB42155851CE560 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/603ba43e-70fb-3c07-bfa1-6ab9d10f3ed3.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:32:92:cc:b4:21:55:85:1c:e5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=59c0fb6e-b5e3-44ce-a38f-beadb981a6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1d:55:0d:3e:f3:c7:9d:99:51:96:c7:1d:b1: be:0b:9f:8a:79:9a:ed:b3:b3:1a:a1:b0:94:a6:2e: 4d:16:4f:59:c4:c5:38:d1:6b:13:b9:1d:f5:6e:7d: cf:50:29:10:ab:fb:25:a1:6f:85:76:0e:d0:f1:f4: 10:77:89:58:0e:36:8c:59:72:c1:6e:aa:00:95:e3: 71:87:22:4c:87:dd:4e:f3:47:dc:00:23:eb:fb:81: 0b:15:50:1b:df:ca:51:79:59:ce:f3:ac:bd:0f:24: 86:aa:01:5e:f9:13:6c:09:cc:fa:23:9f:3b:76:67: 5d:27:8e:76:38:2e:b6:91:d2:e8:7d:56:7a:c4:d5: c4:a3:59:7c:49:72:05:b9:e0:b1:65:77:dd:5f:bf: 06:ef:0a:36:f5:c1:5f:95:17:20:8f:2c:d3:d0:df: ab:4f:01:49:7a:ac:20:71:32:4b:82:22:5e:a5:aa: 3e:ee:b5:b0:5e:a1:7a:f8:a9:58:39:f3:2c:21:14: d1:d3:9c:0f:47:c0:c9:ab:87:45:83:aa:de:94:99: 7f:07:a9:51:88:ac:9f:83:a5:ca:e7:1a:47:e6:bf: 42:a9:11:8b:3c:25:c4:2f:d3:9c:aa:ff:17:30:f6: d0:62:37:a0:ff:96:c7:22:78:1c:24:6d:eb:93:b1: c7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E3:CB:6E:91:09:78:10:13:C7:C3:28:85:21:34:16:10:7F:26:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/603ba43e-70fb-3c07-bfa1-6ab9d10f3ed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ec:50:76:9c:32:da:a5:ba:4f:8c:94:1a:7d:4f:65:4e:d0: 03:bc:3c:8b:fa:00:08:3b:14:5e:aa:39:fe:4e:a2:e1:be:4a: eb:5e:9d:5f:8b:ce:52:c2:66:ed:23:8f:7d:bc:d8:6f:74:76: 6f:4a:4d:a5:fb:14:f5:33:97:06:1c:a0:53:36:b4:f6:d1:4c: 74:8a:de:fd:fa:57:e7:fd:88:b0:42:92:9f:72:96:69:35:26: 4c:20:fe:f2:a4:09:15:36:0c:30:83:6e:23:48:de:be:ed:82: 0f:8e:22:5f:98:54:e4:1f:c1:e5:6a:99:ec:63:16:a4:89:d9: da:a4:ef:66:a0:f6:bc:3e:13:de:a6:39:4f:5b:72:41:c7:b4: f9:e5:9d:a4:f6:d8:08:64:ef:24:af:01:ae:9a:e9:62:aa:25: 62:20:47:75:a7:6a:40:87:31:4e:ff:36:e2:86:fc:71:86:d6: d0:9d:32:d1:60:49:1b:b1:13:f0:a4:19:6b:3a:0a:82:73:a7: 5b:9a:47:83:49:6b:60:97:9a:6e:41:76:8f:43:ce:f6:78:0e: d8:10:fc:aa:52:57:ce:10:74:b3:55:91:ee:c4:60:82:69:a1: c1:5d:62:bb:86:87:3d:2d:7e:58:64:7a:8f:49:7e:a3:7b:31: 77:ce:9e:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdzKSzLQhVYUc5WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NTljMGZiNmUtYjVlMy00NGNlLWEzOGYtYmVhZGI5ODFhNmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h1VDT7zx52ZUZbHHbG+C5+KeZrts7MaobCU pi5NFk9ZxMU40WsTuR31bn3PUCkQq/sloW+Fdg7Q8fQQd4lYDjaMWXLBbqoAleNx hyJMh91O80fcACPr+4ELFVAb38pReVnO86y9DySGqgFe+RNsCcz6I587dmddJ452 OC62kdLofVZ6xNXEo1l8SXIFueCxZXfdX78G7wo29cFflRcgjyzT0N+rTwFJeqwg cTJLgiJepao+7rWwXqF6+KlYOfMsIRTR05wPR8DJq4dFg6relJl/B6lRiKyfg6XK 5xpH5r9CqRGLPCXEL9Ocqv8XMPbQYjeg/5bHIngcJG3rk7HHXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjjy26RCXgQE8fDKIUhNBYQfyY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjAzYmE0M2UtNzBmYi0z YzA3LWJmYTEtNmFiOWQxMGYzZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplj1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLsUHacMtqluk+MlBp9T2VO0AO8PIv6AAg7FF6qOf5OouG+SutenV+L zlLCZu0jj3282G90dm9KTaX7FPUzlwYcoFM2tPbRTHSK3v36V+f9iLBCkp9ylmk1 Jkwg/vKkCRU2DDCDbiNI3r7tgg+OIl+YVOQfweVqmexjFqSJ2dqk72ag9rw+E96m OU9bckHHtPnlnaT22Ahk7ySvAa6a6WKqJWIgR3WnakCHMU7/NuKG/HGG1tCdMtFg SRuxE/CkGWs6CoJzp1uaR4NJa2CXmm5Bdo9DzvZ4DtgQ/KpSV84QdLNVke7EYIJp ocFdYruGhz0tflhkeo9JfqN7MXfOnlg= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:55 2025 by rpki-client