$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79b44bb2-af12-3bb6-83c1-fa639f6b8d2e.roa File: 79b44bb2-af12-3bb6-83c1-fa639f6b8d2e.roa (raw, json) Hash identifier: t0bjAqj51BxGF/XvhZj+YW+ZgpJ71rIQ2hYBv3lUKKE= Subject key identifier: 32:02:A3:7E:F2:66:D7:0F:CF:AA:A1:D6:C8:F8:C8:7C:A5:5D:FA:59 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E77305297F5EE41F54AFC80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79b44bb2-af12-3bb6-83c1-fa639f6b8d2e.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:30:52:97:f5:ee:41:f5:4a:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=0431dac9-707a-4854-933e-a67d8e63e4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:00:8b:bd:80:94:34:ee:49:79:c3:37:e6: 73:50:26:3f:07:c8:6a:3d:7e:2b:ad:ee:98:99:86: 7f:d7:7f:f4:70:96:e9:29:b2:7b:14:03:1d:55:d1: b2:02:77:5a:5b:cf:76:af:13:78:6c:5f:51:ca:7b: 8f:91:f1:be:e1:01:bd:13:98:fc:ee:10:20:e0:ce: 40:9b:7f:c4:7f:c5:25:e5:f5:05:9e:d8:db:22:47: 52:c7:f8:48:c4:50:e9:8f:fb:e3:f0:01:96:e6:c4: 75:6f:85:5a:38:e7:da:85:8d:bb:26:25:00:ba:2e: ba:f9:5a:dd:77:88:5c:3e:8f:f7:ad:94:ba:54:30: 63:58:5b:dd:46:d1:9c:cc:2d:b2:7d:81:9f:5d:70: 28:10:2e:1b:ed:7e:68:18:2e:a4:57:a1:7c:a0:6d: ff:dd:19:d5:97:e1:0c:fe:4d:db:83:6f:54:79:eb: 0a:8a:93:57:15:33:10:e1:00:44:93:fc:44:77:29: f0:17:d9:cc:05:69:db:f3:93:33:be:aa:3a:c8:a9: a8:bb:f1:2b:9b:55:39:94:21:91:7e:95:64:25:a6: e6:ce:22:c3:76:ec:5f:99:47:67:92:8a:86:66:0b: 03:a3:78:17:81:25:1f:d4:bd:4e:0e:b7:fb:dd:d0: 07:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:02:A3:7E:F2:66:D7:0F:CF:AA:A1:D6:C8:F8:C8:7C:A5:5D:FA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79b44bb2-af12-3bb6-83c1-fa639f6b8d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:8d:8f:6f:1d:3c:f8:e3:1b:89:ca:33:64:c5:7b:de:ec:ee: f1:8e:6e:4e:3e:d2:e8:31:ef:20:c0:f3:ea:40:d5:06:98:92: 68:7e:5b:69:76:6b:ca:ef:b7:0e:f4:70:d4:39:5f:47:60:bb: 6b:cb:e9:29:89:5e:cd:ed:b8:33:2e:8a:c9:27:ab:47:92:bb: 99:4e:c7:c6:4e:b7:df:21:51:49:a4:f5:ad:bf:79:8e:d6:98: ff:a5:f5:b7:87:d9:fd:27:c6:f1:eb:28:ec:6c:be:77:74:54: 18:64:2c:aa:24:31:66:dd:95:d3:be:56:05:7d:33:a0:f9:75: 88:b6:84:c9:67:35:88:72:9f:65:63:bb:fd:a6:58:76:ba:46: 93:1a:5c:97:4d:e4:d0:97:2a:40:88:d1:a8:e9:1f:23:81:13: f4:50:17:1a:4f:83:15:6a:2d:03:b4:e3:aa:f5:1b:73:34:31: 51:63:69:00:16:2b:07:a7:3f:87:66:d3:57:65:d9:0f:ed:36: 55:a4:2f:dc:7e:5e:08:7a:bb:1f:9d:24:84:e2:aa:27:8c:64: d1:52:60:5f:3d:8a:6a:10:f6:cf:9e:51:92:7a:a6:58:06:e5: 57:42:ae:9d:dd:10:14:55:26:35:78:19:52:df:7c:3f:5f:4e: 21:66:c4:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdzBSl/XuQfVK/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MDQzMWRhYzktNzA3YS00ODU0LTkzM2UtYTY3ZDhlNjNlNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9wAi72AlDTuSXnDN+ZzUCY/B8hqPX4rre6Y mYZ/13/0cJbpKbJ7FAMdVdGyAndaW892rxN4bF9RynuPkfG+4QG9E5j87hAg4M5A m3/Ef8Ul5fUFntjbIkdSx/hIxFDpj/vj8AGW5sR1b4VaOOfahY27JiUAui66+Vrd d4hcPo/3rZS6VDBjWFvdRtGczC2yfYGfXXAoEC4b7X5oGC6kV6F8oG3/3RnVl+EM /k3bg29UeesKipNXFTMQ4QBEk/xEdynwF9nMBWnb85Mzvqo6yKmou/Erm1U5lCGR fpVkJabmziLDduxfmUdnkoqGZgsDo3gXgSUf1L1ODrf73dAHvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDICo37yZtcPz6qh1sj4yHylXfpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzliNDRiYjItYWYxMi0z YmI2LTgzYzEtZmE2MzlmNmI4ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWNj28dPPjjG4nKM2TFe97s7vGObk4+0ugx7yDA8+pA1QaYkmh+W2l2 a8rvtw70cNQ5X0dgu2vL6SmJXs3tuDMuisknq0eSu5lOx8ZOt98hUUmk9a2/eY7W mP+l9beH2f0nxvHrKOxsvnd0VBhkLKokMWbdldO+VgV9M6D5dYi2hMlnNYhyn2Vj u/2mWHa6RpMaXJdN5NCXKkCI0ajpHyOBE/RQFxpPgxVqLQO046r1G3M0MVFjaQAW KwenP4dm01dl2Q/tNlWkL9x+Xgh6ux+dJITiqieMZNFSYF89imoQ9s+eUZJ6plgG 5VdCrp3dEBRVJjV4GVLffD9fTiFmxGk= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:46 2025 by rpki-client