$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7941b22e-3222-34af-bc8b-a5717613bf1e.roa File: 7941b22e-3222-34af-bc8b-a5717613bf1e.roa (raw, json) Hash identifier: BHGhXUv9rpzjAItEt3JjcTQcEzQlZSQQ1N7P/U5ED0Q= Subject key identifier: 19:BC:65:20:DC:4D:09:E8:E5:85:8E:0A:BD:BC:07:8A:53:57:27:6D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B56D738DD93B6498676F68380 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7941b22e-3222-34af-bc8b-a5717613bf1e.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 149440 IP address blocks: 166.88.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:38:dd:93:b6:49:86:76:f6:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=654bc7ef-b398-4e5f-ab80-d1c573470b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7b:4b:ca:d9:dc:e7:25:4d:92:32:81:31:3f: 6f:83:62:ab:cb:81:5c:46:bd:f3:21:5a:bb:fd:ad: e4:97:60:23:7a:1e:2a:65:89:b6:1b:7c:06:94:0c: cb:e2:b7:4c:9d:49:c5:12:78:73:12:3a:cf:97:ca: 42:83:16:fe:f7:ff:99:ad:c7:57:d9:71:97:e0:6c: b3:b4:1a:ed:48:51:e5:76:99:e4:03:ef:67:1c:a7: 01:d7:d9:ae:aa:b0:95:fa:48:bb:e2:b2:9d:17:f7: 2e:4e:fa:2e:71:be:ef:96:43:56:68:58:33:3b:a0: d5:eb:dc:3e:39:dd:2c:d7:96:9f:d9:35:7c:b1:a8: 2b:de:76:49:f3:45:3c:96:6b:b1:e3:00:e7:0a:3d: 83:74:09:05:7f:17:bf:f9:d7:e1:d0:6b:32:08:57: 4a:30:96:33:19:3c:de:bc:54:6a:c2:a0:7f:04:af: 82:09:02:36:b3:e6:99:64:3c:bb:2f:18:50:e6:a0: 41:86:0f:a8:d3:f5:58:f0:d8:cd:13:bf:4d:0d:ca: 27:b5:a3:77:75:6c:70:1f:0e:3c:53:79:87:25:f2: dd:b4:47:21:ff:36:23:ef:db:ec:31:cf:b1:cb:06: ff:a4:61:1b:16:f9:62:fd:2e:56:e6:2f:eb:e3:89: e7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BC:65:20:DC:4D:09:E8:E5:85:8E:0A:BD:BC:07:8A:53:57:27:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7941b22e-3222-34af-bc8b-a5717613bf1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:91:da:a5:9f:68:7c:b8:64:b1:75:7b:f1:21:8f:cb:38:78: 0b:78:de:37:27:8d:cd:4f:0d:4f:98:d2:16:f7:ed:f8:b4:c5: db:01:79:60:5d:99:11:2e:b3:7c:70:59:c6:38:ae:ca:8b:d6: 36:1e:71:57:7d:df:76:d0:e9:8d:bf:bf:f3:09:f0:5d:67:02: b2:ac:26:fb:05:29:61:28:5f:f7:08:49:15:17:84:78:d3:97: b6:56:49:73:30:ed:fc:d2:e9:92:30:e4:fc:2c:ec:d5:1b:4e: 43:3b:65:bb:3b:4d:67:27:b5:38:d3:c4:99:93:ab:09:97:87: 0d:d4:29:1f:af:6b:dd:69:50:8c:4b:dc:b8:48:84:47:11:03: 8e:80:d1:6d:9b:55:0f:70:63:f9:27:48:97:63:14:3b:1f:a1: f5:18:ec:4a:2b:1e:47:31:f3:b4:5b:11:59:2d:4a:8e:56:85: b8:e5:da:8f:1d:33:f2:c5:6c:9a:7d:e4:0c:84:a1:1d:06:3d: 26:a9:c2:35:d6:df:78:3a:2d:ba:25:ed:de:74:39:85:03:76: d7:fe:56:b2:dc:0f:f4:6d:40:b6:36:2e:29:3b:04:b1:2e:0f: db:e9:35:e3:64:be:76:af:d9:60:85:eb:bf:e8:49:a9:ec:69: 88:8c:3a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zjdk7ZJhnb2g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NjU0YmM3ZWYtYjM5OC00ZTVmLWFiODAtZDFjNTczNDcwYjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3tLytnc5yVNkjKBMT9vg2Kry4FcRr3zIVq7 /a3kl2Ajeh4qZYm2G3wGlAzL4rdMnUnFEnhzEjrPl8pCgxb+9/+ZrcdX2XGX4Gyz tBrtSFHldpnkA+9nHKcB19muqrCV+ki74rKdF/cuTvoucb7vlkNWaFgzO6DV69w+ Od0s15af2TV8sagr3nZJ80U8lmux4wDnCj2DdAkFfxe/+dfh0GsyCFdKMJYzGTze vFRqwqB/BK+CCQI2s+aZZDy7LxhQ5qBBhg+o0/VY8NjNE79NDcontaN3dWxwHw48 U3mHJfLdtEch/zYj79vsMc+xywb/pGEbFvli/S5W5i/r44nnlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBm8ZSDcTQno5YWOCr28B4pTVydtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzk0MWIyMmUtMzIyMi0z NGFmLWJjOGItYTU3MTc2MTNiZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiR2qWfaHy4ZLF1e/Ehj8s4eAt43jcnjc1PDU+Y0hb37fi0xdsBeWBd mREus3xwWcY4rsqL1jYecVd933bQ6Y2/v/MJ8F1nArKsJvsFKWEoX/cISRUXhHjT l7ZWSXMw7fzS6ZIw5Pws7NUbTkM7Zbs7TWcntTjTxJmTqwmXhw3UKR+va91pUIxL 3LhIhEcRA46A0W2bVQ9wY/knSJdjFDsfofUY7EorHkcx87RbEVktSo5Whbjl2o8d M/LFbJp95AyEoR0GPSapwjXW33g6Lbol7d50OYUDdtf+VrLcD/RtQLY2Lik7BLEu D9vpNeNkvnav2WCF67/oSansaYiMOoc= -----END CERTIFICATE-----Generated at Sat Oct 11 08:44:27 2025 by rpki-client