$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa File: 654a5901-d2ef-3c77-9fec-fb93802aa967.roa (raw, json) Hash identifier: vupm7ffHB3ws2WyIvF3k3qUP6ZIKXckmvA8+BDLYy9Y= Subject key identifier: EC:C3:27:AE:57:50:8F:5C:E7:EA:91:2D:41:11:42:B8:7F:C8:9D:1C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B56D7368BF3180EDE553B6E80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 212238 IP address blocks: 166.88.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:36:8b:f3:18:0e:de:55:3b:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=2d5b4e2f-0a09-4deb-b3b0-6d3dd76419de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:d4:fe:ff:98:64:b6:70:5e:9c:cd:00:0e: b2:03:27:c5:fb:6a:cf:a1:73:6d:2f:13:ef:32:0f: 7f:19:26:10:aa:08:a4:74:9c:96:c0:b7:68:a2:97: 90:45:aa:25:70:56:cc:e5:21:3a:68:63:d6:97:0f: ac:9d:ff:30:99:ce:36:c4:a1:dc:69:ff:bf:b9:5c: e0:8c:25:4c:b5:31:27:d6:a3:cf:6f:d6:f3:3f:67: d4:7e:af:f1:d8:b9:ce:56:66:73:e3:8f:c9:96:ec: 39:3d:29:86:ea:20:37:85:7a:0c:93:d0:9e:e4:98: 0d:63:eb:ba:58:dc:45:2b:18:f4:89:e1:d0:3c:77: 9f:7d:53:59:ae:6c:79:aa:9a:b4:40:38:0a:a2:1e: ba:6f:15:2b:5b:3d:b0:c6:fd:e2:7b:f3:ba:2b:4d: 48:48:2d:51:63:13:d4:52:c5:b7:95:b1:5c:01:93: 30:e1:50:ec:cb:dd:41:87:da:a4:0e:a0:f7:8d:13: 9b:a1:19:48:ae:ae:50:5e:d5:c9:27:29:1c:c3:3a: a9:26:e0:22:66:ce:53:9f:3a:d6:8e:42:0a:37:5e: 72:46:be:e8:da:de:20:b0:2c:51:0e:19:ed:15:b4: d7:8d:a9:78:a4:2e:c9:c8:90:35:11:43:68:ca:a8: 56:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C3:27:AE:57:50:8F:5C:E7:EA:91:2D:41:11:42:B8:7F:C8:9D:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e2:94:9b:00:4d:87:e4:9f:0f:d2:0b:9e:8a:51:b3:8c:85: 44:e6:e5:19:8f:66:93:4d:6d:86:12:4f:07:97:60:4e:6a:b4: 83:9d:8d:53:fe:fe:97:2b:b6:87:0e:e4:a3:c4:52:f3:ad:b5: 01:5c:07:22:c7:ca:7d:cb:59:24:94:18:34:c7:4b:45:21:d8: fa:4f:e5:58:3e:f7:7b:7f:f9:c6:2b:71:44:99:79:2b:86:35: 3a:cb:42:32:7b:64:68:74:77:47:a2:de:b2:1e:63:ac:9c:62: 1e:2b:98:df:0a:51:32:6b:a4:fa:8d:03:2f:85:80:d8:28:78: 0f:66:5b:91:84:bf:ab:48:cc:f1:e1:77:5a:9d:0e:20:48:dd: ef:80:a0:24:b4:34:fe:01:de:35:18:e3:76:e1:e0:7c:6f:3f: 4d:09:79:f3:71:46:95:f9:b8:96:83:f0:41:a1:66:b4:4a:9a: 4f:12:69:b2:0e:fe:dd:5c:7f:11:26:7b:14:07:70:08:89:52: 7b:2c:76:4c:cf:09:33:c8:f4:b9:a6:b9:2a:ab:24:41:59:b0: 0f:c4:a6:6b:9e:ae:db:9d:79:b5:9c:b8:2a:bf:18:1a:53:3b: 7a:b6:87:f9:ee:a8:d3:47:16:b6:0a:ae:9f:d2:74:73:6f:b1: 8c:fe:6c:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zaL8xgO3lU7boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MmQ1YjRlMmYtMGEwOS00ZGViLWIzYjAtNmQzZGQ3NjQxOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSXU/v+YZLZwXpzNAA6yAyfF+2rPoXNtLxPv Mg9/GSYQqgikdJyWwLdoopeQRaolcFbM5SE6aGPWlw+snf8wmc42xKHcaf+/uVzg jCVMtTEn1qPPb9bzP2fUfq/x2LnOVmZz44/Jluw5PSmG6iA3hXoMk9Ce5JgNY+u6 WNxFKxj0ieHQPHeffVNZrmx5qpq0QDgKoh66bxUrWz2wxv3ie/O6K01ISC1RYxPU UsW3lbFcAZMw4VDsy91Bh9qkDqD3jROboRlIrq5QXtXJJykcwzqpJuAiZs5TnzrW jkIKN15yRr7o2t4gsCxRDhntFbTXjal4pC7JyJA1EUNoyqhWHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzDJ65XUI9c5+qRLUERQrh/yJ0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjU0YTU5MDEtZDJlZi0z Yzc3LTlmZWMtZmI5MzgwMmFhOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/ilJsATYfknw/SC56KUbOMhUTm5RmPZpNNbYYSTweXYE5qtIOdjVP+ /pcrtocO5KPEUvOttQFcByLHyn3LWSSUGDTHS0Uh2PpP5Vg+93t/+cYrcUSZeSuG NTrLQjJ7ZGh0d0ei3rIeY6ycYh4rmN8KUTJrpPqNAy+FgNgoeA9mW5GEv6tIzPHh d1qdDiBI3e+AoCS0NP4B3jUY43bh4HxvP00JefNxRpX5uJaD8EGhZrRKmk8SabIO /t1cfxEmexQHcAiJUnssdkzPCTPI9LmmuSqrJEFZsA/EpmuertudebWcuCq/GBpT O3q2h/nuqNNHFrYKrp/SdHNvsYz+bNM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:28 2025 by rpki-client