$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/abdbbf38-0577-32af-bbb8-12606a7d7973.roa File: abdbbf38-0577-32af-bbb8-12606a7d7973.roa (raw, json) Hash identifier: XjZ7+tj5zRRoO5UNKLjFKmB1A5WXGTTPNSgcxvK4+iw= Subject key identifier: B6:23:DD:18:4E:46:A1:45:02:D4:4E:02:1B:8F:A7:D2:AE:E7:AF:C5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E7732702070C2E7FB452180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/abdbbf38-0577-32af-bbb8-12606a7d7973.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:32:70:20:70:c2:e7:fb:45:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=2d5f2067-006d-4ef1-978c-b1e16329b272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9c:59:9b:40:b3:a4:53:bc:1a:9b:16:b3:69: a0:21:eb:14:80:39:dc:42:1b:46:98:e8:12:16:d5: c5:44:fc:2a:63:6b:4f:2c:b4:65:bb:63:a2:3d:11: 47:50:bb:ff:0b:36:11:71:33:43:b6:5f:6a:ba:76: fd:6a:30:50:71:65:94:0a:79:56:c3:e1:27:9c:78: 0c:ca:89:97:f1:85:d9:8a:8e:d6:50:89:bd:4d:8c: 99:32:81:f4:98:07:6e:05:5c:81:be:04:0a:86:76: bc:d7:5b:36:1f:cd:f7:35:06:5e:16:ae:74:99:d6: a3:a2:cd:77:c1:23:4b:c5:f8:d0:0e:2a:af:9f:cf: 8f:cb:ef:31:17:ab:44:70:1c:6f:6e:ec:d8:67:84: fc:e0:ee:f9:e3:2b:ba:f8:f8:f4:ac:ae:c6:c4:1e: 63:5e:4e:94:7a:63:21:67:58:ca:af:ce:83:4e:07: b4:fa:b4:0b:22:82:ba:40:4e:73:4f:30:58:2e:6f: f3:ca:b6:ba:04:06:11:7d:2c:26:6f:c6:be:87:5d: 95:69:8f:2e:58:da:3b:01:fd:b8:f3:b6:94:b2:4e: 5b:44:3b:82:bb:3a:26:85:13:d6:91:7b:93:fa:20: a4:0b:fc:c5:cc:d0:e5:be:e5:e0:2f:55:46:4a:af: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:23:DD:18:4E:46:A1:45:02:D4:4E:02:1B:8F:A7:D2:AE:E7:AF:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/abdbbf38-0577-32af-bbb8-12606a7d7973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:bd:1b:64:61:cc:92:2e:01:c4:95:a8:ae:80:fb:3b:7d:a4: 35:bf:5c:98:3c:f0:d4:9b:e0:a3:25:8f:38:aa:3f:de:31:5c: f1:9e:94:1a:56:82:04:2e:da:41:38:e3:dd:db:87:bd:29:18: 0a:bf:cb:d2:1d:34:99:de:4c:2f:03:9a:6c:af:5a:ba:2e:06: d4:96:68:c3:51:39:16:a6:8d:6c:c6:27:9b:4e:e8:e0:a4:91: d2:17:e4:da:1e:ac:4b:a2:e8:f7:18:68:3b:30:6f:e0:7e:a5: 01:ab:7e:bc:9e:7c:02:d8:3d:19:20:fe:96:20:6c:27:7d:43: dd:51:26:df:5b:e2:80:2c:eb:48:5d:a9:5a:bb:f5:b5:0c:44: f8:b8:dc:19:9b:e2:2a:f0:e9:8e:7a:0e:08:f3:f8:4c:db:0b: 91:f2:30:27:f1:01:23:3c:44:b2:3b:b6:89:30:ea:94:2a:d9: 1d:21:3c:13:90:d3:18:4e:4d:47:1f:14:34:03:13:15:a0:98: 77:41:c1:dc:7b:00:89:8d:1f:40:f5:36:38:83:82:78:a0:53: b8:da:b4:c2:55:09:fe:46:7d:60:9f:72:d8:e1:2a:10:c0:0d: 6a:61:a3:fc:dd:52:a7:79:a1:d4:d9:7e:63:81:25:a0:23:35: fd:88:c0:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdzJwIHDC5/tFIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MmQ1ZjIwNjctMDA2ZC00ZWYxLTk3OGMtYjFlMTYzMjliMjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZxZm0CzpFO8GpsWs2mgIesUgDncQhtGmOgS FtXFRPwqY2tPLLRlu2OiPRFHULv/CzYRcTNDtl9qunb9ajBQcWWUCnlWw+EnnHgM yomX8YXZio7WUIm9TYyZMoH0mAduBVyBvgQKhna811s2H833NQZeFq50mdajos13 wSNLxfjQDiqvn8+Py+8xF6tEcBxvbuzYZ4T84O754yu6+Pj0rK7GxB5jXk6UemMh Z1jKr86DTge0+rQLIoK6QE5zTzBYLm/zyra6BAYRfSwmb8a+h12VaY8uWNo7Af24 87aUsk5bRDuCuzomhRPWkXuT+iCkC/zFzNDlvuXgL1VGSq89XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYj3RhORqFFAtROAhuPp9Ku56/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWJkYmJmMzgtMDU3Ny0z MmFmLWJiYjgtMTI2MDZhN2Q3OTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi9G2RhzJIuAcSVqK6A+zt9pDW/XJg88NSb4KMljziqP94xXPGelBpW ggQu2kE4493bh70pGAq/y9IdNJneTC8DmmyvWrouBtSWaMNRORamjWzGJ5tO6OCk kdIX5NoerEui6PcYaDswb+B+pQGrfryefALYPRkg/pYgbCd9Q91RJt9b4oAs60hd qVq79bUMRPi43Bmb4irw6Y56Dgjz+EzbC5HyMCfxASM8RLI7tokw6pQq2R0hPBOQ 0xhOTUcfFDQDExWgmHdBwdx7AImNH0D1NjiDgnigU7jatMJVCf5GfWCfctjhKhDA DWpho/zdUqd5odTZfmOBJaAjNf2IwIw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:59 2025 by rpki-client