$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/73f12e71-41b1-305c-a3d0-7a474d834f1e.roa File: 73f12e71-41b1-305c-a3d0-7a474d834f1e.roa (raw, json) Hash identifier: 2xwvHen8fFlZou7XCd+2Xjxr2p4258TkVGuKFnE24bo= Subject key identifier: 74:77:A4:D5:9C:19:58:8D:7C:31:40:73:C7:9F:FF:31:E2:41:59:B5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B5EC478B3DA0B127F38E28900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/73f12e71-41b1-305c-a3d0-7a474d834f1e.roa Signing time: Tue 30 Sep 2025 21:09:33 +0000 ROA not before: Tue 30 Sep 2025 21:09:33 +0000 ROA not after: Mon 29 Dec 2025 22:09:33 +0000 asID: 401152 IP address blocks: 166.88.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:c4:78:b3:da:0b:12:7f:38:e2:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 30 21:09:33 2025 GMT Not After : Dec 29 22:09:33 2025 GMT Subject: CN=a77297a7-40e2-4ace-a0cf-daf538d6ef62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9f:a0:a2:30:d7:1a:b7:35:b5:0c:5d:53:6a: 43:49:18:46:df:8e:44:0a:05:f4:ca:49:04:02:41: 92:7a:4a:52:a0:4d:47:32:c4:32:a4:67:eb:96:69: d0:68:ed:4f:58:ac:4a:e1:21:19:17:0f:e6:af:86: 57:34:f0:74:0f:4a:07:ce:e1:f2:3d:ef:da:c7:97: 4f:f8:4c:81:d4:c5:3a:ee:ff:ee:8c:0e:61:87:30: 07:cb:db:5a:2a:96:d5:8e:1c:12:e3:60:e3:90:7b: a2:b7:d5:71:3b:82:ad:77:59:21:92:30:2d:7f:1e: 30:83:b5:52:a4:75:64:52:d7:78:49:df:d3:5e:21: 65:98:3c:d7:97:e9:20:54:b5:26:d1:87:c3:cf:c0: b0:51:78:a8:5a:49:73:4c:4f:e9:48:bf:2c:91:24: 54:cd:97:12:18:cf:39:64:3f:2f:57:8f:ba:74:12: 6e:ed:1f:4f:1c:78:9b:29:ed:73:77:c3:3d:8a:95: c9:6d:e7:dc:da:d1:61:a9:79:87:b2:22:ff:1d:da: 98:ed:c9:62:21:93:46:3f:8d:d8:31:aa:d7:d9:7b: b1:9d:92:31:51:3a:ab:c9:32:dc:62:ff:48:b5:7f: 53:42:21:9a:91:9d:b6:e7:45:c5:7d:7e:2b:68:46: 72:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:77:A4:D5:9C:19:58:8D:7C:31:40:73:C7:9F:FF:31:E2:41:59:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/73f12e71-41b1-305c-a3d0-7a474d834f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:db:80:2c:b3:0b:7b:77:02:ba:eb:8c:42:df:0f:d7:b2:d5: 2c:d2:80:7a:1f:ce:ab:37:ac:5b:68:44:96:67:8c:bc:91:97: 67:eb:d5:cb:0f:0e:51:cc:17:9f:71:00:b1:87:5e:b1:6b:f0: 30:21:67:b2:0e:6d:b6:86:0c:7d:c9:3c:61:4d:cb:73:ff:8a: 2d:49:2a:e6:b3:8c:5f:66:fd:58:d6:b0:9f:1b:45:10:e0:b7: 4d:26:9a:90:35:e2:d4:69:6a:71:ea:ec:f8:ad:a0:27:15:4e: 81:f4:56:21:62:34:86:20:ed:84:b9:b9:f7:f5:51:84:1a:99: b2:dc:47:9c:e6:71:d4:39:e7:1d:f6:45:a8:40:83:a2:34:f2: 98:1d:c8:cd:3a:ee:12:2f:94:19:98:9a:5c:97:fc:b8:6c:65: 2b:5e:4f:79:77:b5:ee:b2:26:90:cf:39:06:02:f1:bf:ce:18: 9e:b2:49:34:a1:fc:f7:fc:7f:34:ec:ec:c0:f3:67:a6:3b:28: 2e:36:fd:63:aa:46:c9:24:89:fe:5a:b6:bd:cb:0c:64:3c:37: fe:27:36:8d:8d:1a:65:18:6e:bd:f0:df:c2:07:77:12:21:10: 56:31:f6:22:62:13:6f:56:27:c4:4d:76:59:54:a8:f0:19:bc: f4:d5:60:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtexHiz2gsSfzjiiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkzMDIxMDkzM1oXDTI1MTIyOTIyMDkzM1owLzEtMCsGA1UEAxMk YTc3Mjk3YTctNDBlMi00YWNlLWEwY2YtZGFmNTM4ZDZlZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp+gojDXGrc1tQxdU2pDSRhG345ECgX0ykkE AkGSekpSoE1HMsQypGfrlmnQaO1PWKxK4SEZFw/mr4ZXNPB0D0oHzuHyPe/ax5dP +EyB1MU67v/ujA5hhzAHy9taKpbVjhwS42DjkHuit9VxO4Ktd1khkjAtfx4wg7VS pHVkUtd4Sd/TXiFlmDzXl+kgVLUm0YfDz8CwUXioWklzTE/pSL8skSRUzZcSGM85 ZD8vV4+6dBJu7R9PHHibKe1zd8M9ipXJbefc2tFhqXmHsiL/HdqY7cliIZNGP43Y MarX2XuxnZIxUTqryTLcYv9ItX9TQiGakZ2250XFfX4raEZyUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHR3pNWcGViNfDFAc8ef/zHiQVm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzNmMTJlNzEtNDFiMS0z MDVjLWEzZDAtN2E0NzRkODM0ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDbgCyzC3t3ArrrjELfD9ey1SzSgHofzqs3rFtoRJZnjLyRl2fr1csP DlHMF59xALGHXrFr8DAhZ7IObbaGDH3JPGFNy3P/ii1JKuazjF9m/VjWsJ8bRRDg t00mmpA14tRpanHq7PitoCcVToH0ViFiNIYg7YS5uff1UYQambLcR5zmcdQ55x32 RahAg6I08pgdyM067hIvlBmYmlyX/LhsZSteT3l3te6yJpDPOQYC8b/OGJ6ySTSh /Pf8fzTs7MDzZ6Y7KC42/WOqRskkif5atr3LDGQ8N/4nNo2NGmUYbr3w38IHdxIh EFYx9iJiE29WJ8RNdllUqPAZvPTVYLk= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:12 2025 by rpki-client