$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65d0bd11-c0b0-3566-8862-ebc008462b68.roa File: 65d0bd11-c0b0-3566-8862-ebc008462b68.roa (raw, json) Hash identifier: OY1TZZAyNfsM2APaBJcJYOfLzQrI2ZVk7C9XijDAkSQ= Subject key identifier: 00:79:D7:45:50:76:4B:96:7F:1E:B5:89:AA:76:4D:02:7F:59:05:DB Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E7733016277B5E95A401428 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65d0bd11-c0b0-3566-8862-ebc008462b68.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:33:01:62:77:b5:e9:5a:40:14:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=c1342517-3360-476a-8aaa-c8b2690d854b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:77:50:ef:0f:c7:e6:c6:cf:d8:17:00:86:eb: 66:38:a7:5d:39:7c:a8:a7:86:53:53:f2:71:8d:87: 6c:ef:8a:88:6b:52:89:c4:63:ec:b4:7e:fc:32:78: 7a:b3:f5:1d:af:84:90:52:07:f5:33:64:96:51:57: 7e:b2:b0:f7:6c:3c:d0:79:85:ab:34:0d:47:00:0f: 2c:a8:e7:1d:bc:5a:13:d2:dc:d1:95:5c:cd:8b:59: 53:10:44:0b:28:41:89:71:71:c8:0a:ab:99:65:0d: ea:ea:32:22:ce:c0:03:d3:e8:74:18:8a:be:9f:e4: 9a:39:cd:43:5a:ab:77:f9:9e:90:cb:82:24:9b:8e: 00:3e:8f:8a:f7:82:f6:dc:d3:cd:40:07:3b:23:e1: c6:99:46:b7:54:d9:b5:bf:b3:7c:e0:85:01:70:13: 5b:c7:a4:78:38:7d:a6:22:20:c2:21:65:80:b1:31: 48:f2:27:2b:8f:a9:26:7d:47:df:f2:c2:0f:6e:84: f9:c2:a2:29:c0:4c:86:47:88:b1:bc:09:e9:5f:cd: 18:66:f7:cc:bf:07:46:dc:cc:23:19:a1:2d:16:df: e0:77:be:cd:7d:06:f9:d2:da:2e:a0:05:b3:01:a5: cc:1e:a4:26:b4:b6:c0:9e:0b:b4:08:f9:ab:25:91: df:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:79:D7:45:50:76:4B:96:7F:1E:B5:89:AA:76:4D:02:7F:59:05:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65d0bd11-c0b0-3566-8862-ebc008462b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:56:0f:f3:07:9d:a4:bb:0b:e6:63:6f:fc:9e:4c:71:21:00: 24:ab:45:50:91:4f:c7:4b:a1:05:b0:13:1f:07:65:ec:45:72: 21:e1:31:69:28:01:07:a6:90:97:8b:da:f6:29:36:fc:43:6a: 65:c7:0e:9f:9b:d2:40:6c:80:c4:0b:e6:c2:77:17:02:a8:22: 25:2d:e0:9f:82:31:c3:63:82:a2:b0:15:51:7d:1b:f0:e5:a6: db:59:c0:f2:f4:cf:cb:3b:3e:2f:33:22:59:ad:d2:bc:45:86: 51:cf:57:e4:9a:6d:82:5d:23:f9:e0:f4:94:c6:03:b5:43:a5: 60:e3:5d:3c:45:b7:c2:34:95:4b:65:19:3e:bd:e6:e3:d4:1f: bc:1b:3f:63:4a:1b:b1:f1:47:c1:f5:87:9a:c1:51:65:b2:a1: c6:53:cc:40:6a:f6:30:7e:8c:33:52:44:91:56:d8:01:1d:e6: c7:87:33:84:7a:a4:5f:4b:b0:04:71:6f:ff:c3:2e:94:d2:92: ea:ba:ed:1b:3e:00:4e:44:0f:b7:cb:3f:bf:6d:54:84:e5:ce: 9f:eb:8c:fd:7d:44:da:32:83:47:a8:14:86:fd:f5:59:58:c8: ea:1a:69:ab:55:cc:15:fc:27:37:68:f2:96:6f:84:8b:36:2f: 47:d5:7a:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdzMBYne16VpAFCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YzEzNDI1MTctMzM2MC00NzZhLThhYWEtYzhiMjY5MGQ4NTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HdQ7w/H5sbP2BcAhutmOKddOXyop4ZTU/Jx jYds74qIa1KJxGPstH78Mnh6s/Udr4SQUgf1M2SWUVd+srD3bDzQeYWrNA1HAA8s qOcdvFoT0tzRlVzNi1lTEEQLKEGJcXHICquZZQ3q6jIizsAD0+h0GIq+n+SaOc1D Wqt3+Z6Qy4Ikm44APo+K94L23NPNQAc7I+HGmUa3VNm1v7N84IUBcBNbx6R4OH2m IiDCIWWAsTFI8icrj6kmfUff8sIPboT5wqIpwEyGR4ixvAnpX80YZvfMvwdG3Mwj GaEtFt/gd77NfQb50touoAWzAaXMHqQmtLbAngu0CPmrJZHfLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAB510VQdkuWfx61iap2TQJ/WQXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjVkMGJkMTEtYzBiMC0z NTY2LTg4NjItZWJjMDA4NDYyYjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplj/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJWD/MHnaS7C+Zjb/yeTHEhACSrRVCRT8dLoQWwEx8HZexFciHhMWko AQemkJeL2vYpNvxDamXHDp+b0kBsgMQL5sJ3FwKoIiUt4J+CMcNjgqKwFVF9G/Dl pttZwPL0z8s7Pi8zIlmt0rxFhlHPV+SabYJdI/ng9JTGA7VDpWDjXTxFt8I0lUtl GT695uPUH7wbP2NKG7HxR8H1h5rBUWWyocZTzEBq9jB+jDNSRJFW2AEd5seHM4R6 pF9LsARxb//DLpTSkuq67Rs+AE5ED7fLP79tVITlzp/rjP19RNoyg0eoFIb99VlY yOoaaatVzBX8Jzdo8pZvhIs2L0fVemw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:58 2025 by rpki-client