$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/884fdebd-f528-38e0-a719-5ec8933f2048.roa File: 884fdebd-f528-38e0-a719-5ec8933f2048.roa (raw, json) Hash identifier: Q0Cu8B5lkdJ6q2hkXHjRgo7n6LyR5IetWqYnqeesgoA= Subject key identifier: 32:58:20:E1:03:8D:21:14:E0:C5:57:FC:4B:CD:4E:2C:7A:90:8F:86 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E773229185A9C165CA736A0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/884fdebd-f528-38e0-a719-5ec8933f2048.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:32:29:18:5a:9c:16:5c:a7:36:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=fefb84f4-9b0d-4fe0-965c-5c0f8909bb39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f5:84:28:9c:76:a1:67:26:25:52:e8:96:72: 74:b9:ae:6d:d9:cb:f0:59:7e:a5:3c:6e:c7:b8:51: da:80:b1:aa:71:fb:b3:72:0f:37:fe:9f:17:aa:53: 99:57:f5:d6:40:89:60:a4:5e:d2:cb:a0:d1:9d:ca: 51:95:12:e7:65:ec:8b:7f:18:b1:0a:b1:93:8c:1b: 8e:55:ae:a6:f8:41:83:18:90:53:16:b1:bc:82:3d: 11:ac:ef:61:c8:8b:01:5a:2a:39:7b:76:fb:a3:cd: 3b:f2:0b:b8:b5:55:be:4a:71:04:e4:d5:77:29:4c: 8b:26:d8:30:fb:30:eb:62:2c:f2:64:48:56:69:1b: 12:30:02:bf:b3:f4:bc:8f:a3:10:5c:56:2c:ad:d1: 44:10:a3:80:34:c7:f6:7e:b1:4d:c7:c1:b0:b6:fc: 06:05:d4:31:5b:3a:a8:dd:32:86:77:bf:65:a1:53: 07:b3:12:0d:18:c2:66:6a:b6:4c:f2:f8:a3:9e:5f: 7a:80:48:74:6e:48:9d:07:9b:f4:33:58:f6:4a:82: d7:74:a4:30:3c:0a:99:68:62:cb:0d:3d:9a:79:ae: 4c:df:5a:c8:f2:a6:21:7f:e4:b2:49:de:15:b5:29: 40:80:8f:1d:10:5a:b3:a7:7b:10:bc:25:e0:df:0b: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:58:20:E1:03:8D:21:14:E0:C5:57:FC:4B:CD:4E:2C:7A:90:8F:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/884fdebd-f528-38e0-a719-5ec8933f2048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ee:07:ec:a5:f6:74:84:7b:6b:6e:92:15:60:8b:d2:18:bb: d3:68:cc:72:eb:7e:e1:75:85:17:9c:93:b9:71:96:49:2f:ec: cd:e0:d7:0b:35:0b:6d:12:4f:69:b5:1b:05:42:aa:e5:1a:0b: 1f:dc:5e:81:e8:10:37:70:7a:8d:ea:3e:66:d7:b0:00:4d:cc: 1f:ca:aa:65:c1:a9:0a:48:f0:98:81:55:09:bb:44:19:80:c4: 01:ab:4c:44:8b:cd:1a:c6:40:ac:57:c3:c6:03:43:73:70:b7: ed:b6:be:51:2a:cf:87:d8:ee:aa:a4:f5:01:01:b6:6d:2f:90: 1d:d0:4a:af:de:b4:cb:6b:a0:63:aa:30:09:6b:98:01:a1:90: 74:4f:5a:cf:0f:68:93:12:18:4a:be:d7:ff:c3:a1:8d:c2:e3: 3d:9b:63:03:ac:81:c8:96:0b:89:e3:e0:8e:ac:db:27:16:c1: e4:86:3b:f4:0c:9f:af:7d:4c:c6:9e:59:48:fa:86:48:1f:29: bd:9e:19:f6:c6:8c:a9:1b:9c:d1:6f:9c:12:63:82:5f:01:46: 32:54:72:3f:d0:0d:23:f1:0d:00:6a:2e:c7:69:14:24:6c:03: a2:c1:14:ce:ce:fc:ef:35:ca:9c:ad:be:0b:2c:bd:bb:9f:5c: f4:bc:17:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdzIpGFqcFlynNqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmVmYjg0ZjQtOWIwZC00ZmUwLTk2NWMtNWMwZjg5MDliYjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfWEKJx2oWcmJVLolnJ0ua5t2cvwWX6lPG7H uFHagLGqcfuzcg83/p8XqlOZV/XWQIlgpF7Sy6DRncpRlRLnZeyLfxixCrGTjBuO Va6m+EGDGJBTFrG8gj0RrO9hyIsBWio5e3b7o8078gu4tVW+SnEE5NV3KUyLJtgw +zDrYizyZEhWaRsSMAK/s/S8j6MQXFYsrdFEEKOANMf2frFNx8GwtvwGBdQxWzqo 3TKGd79loVMHsxINGMJmarZM8vijnl96gEh0bkidB5v0M1j2SoLXdKQwPAqZaGLL DT2aea5M31rI8qYhf+SySd4VtSlAgI8dEFqzp3sQvCXg3wuJVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJYIOEDjSEU4MVX/EvNTix6kI+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODg0ZmRlYmQtZjUyOC0z OGUwLWE3MTktNWVjODkzM2YyMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7uB+yl9nSEe2tukhVgi9IYu9NozHLrfuF1hReck7lxlkkv7M3g1ws1 C20ST2m1GwVCquUaCx/cXoHoEDdweo3qPmbXsABNzB/KqmXBqQpI8JiBVQm7RBmA xAGrTESLzRrGQKxXw8YDQ3Nwt+22vlEqz4fY7qqk9QEBtm0vkB3QSq/etMtroGOq MAlrmAGhkHRPWs8PaJMSGEq+1//DoY3C4z2bYwOsgciWC4nj4I6s2ycWweSGO/QM n699TMaeWUj6hkgfKb2eGfbGjKkbnNFvnBJjgl8BRjJUcj/QDSPxDQBqLsdpFCRs A6LBFM7O/O81ypytvgssvbufXPS8F0s= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:37 2025 by rpki-client