$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aefab7c6-978e-3f5e-bea7-39ea1fc69317.roa File: aefab7c6-978e-3f5e-bea7-39ea1fc69317.roa (raw, json) Hash identifier: 9eYibh8+7Wb/RHxC3I6lEC5Z9zZxA4hy7XVw83wU/HA= Subject key identifier: 92:FE:07:CE:45:EA:0A:A5:56:D5:E5:13:61:C3:DE:88:09:91:5C:7F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E7730D53C498DC5C7565880 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aefab7c6-978e-3f5e-bea7-39ea1fc69317.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:30:d5:3c:49:8d:c5:c7:56:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=4e7574d8-5590-4c93-bcc6-397cbe826462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a2:21:44:6b:99:91:c2:ac:8c:ab:ac:ec:8a: d1:38:dc:27:d7:02:da:97:8a:7b:29:66:14:73:66: 21:19:6e:05:10:40:f6:cc:fb:c9:fe:7e:ec:27:78: 84:ff:cb:95:b6:0c:21:0e:cc:06:85:77:01:3e:bd: da:e8:30:64:77:39:50:13:d1:9b:cc:e8:7d:fe:79: 93:f6:f9:87:0f:a0:d3:8d:6c:a7:a4:6c:e9:d2:60: 18:8e:1b:c2:1d:df:d4:91:30:7f:7e:1e:f0:1c:2b: 9b:6c:66:8c:af:87:9d:b7:f3:8a:62:b3:48:66:26: 30:8e:74:4a:81:ab:a6:59:cd:bf:84:17:40:f6:78: 18:c6:01:bc:6e:07:1a:fc:50:d2:32:ae:0f:09:62: 8d:bd:c9:b4:11:2c:8b:e8:7c:f8:02:2c:69:68:3a: 89:3e:b6:8c:34:46:a2:12:61:04:5a:59:a9:72:a2: 20:f0:83:c8:77:ce:b3:0d:9f:b1:21:54:6d:88:39: a6:43:6d:f3:e0:33:98:55:d4:6c:9d:a0:24:f8:b0: 0d:48:de:2a:b2:e4:36:3e:bc:13:ac:ea:8d:b3:8e: a1:42:dc:34:10:44:1f:d2:81:9d:de:fc:1a:75:bc: 1c:41:4f:6c:ac:cb:49:5a:2e:3e:73:9b:4f:ae:5c: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FE:07:CE:45:EA:0A:A5:56:D5:E5:13:61:C3:DE:88:09:91:5C:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aefab7c6-978e-3f5e-bea7-39ea1fc69317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:66:64:f9:4d:82:e3:a1:22:0e:73:a6:72:2e:70:2b:0f:41: 06:5a:9a:6c:73:e1:aa:95:24:11:e9:d9:11:b9:ee:1e:1d:e4: c3:a9:8d:b0:ca:15:9e:83:4e:b5:a2:03:e2:6b:0a:10:83:b8: 18:d9:6f:3d:69:b4:8c:cc:0a:ca:9a:fd:e7:3b:bd:07:60:79: e6:e2:7c:1c:34:00:14:d2:18:33:d2:0b:b8:e2:72:89:d1:01: 0d:80:9b:65:67:f3:bc:96:0d:d1:59:49:02:12:ca:af:91:ea: d4:51:29:c2:16:a9:fb:c0:91:e8:04:3e:2a:b3:a2:f4:0a:0a: 96:43:b8:6c:3d:8c:65:0e:95:a2:22:99:97:b2:9c:37:06:1c: be:29:bd:62:2a:55:68:a3:90:ec:ec:57:6e:49:34:7d:33:76: da:07:15:07:3f:5a:26:8d:43:9f:ef:2e:5f:19:09:29:47:43: 80:54:09:68:ba:a3:a7:e1:8e:83:5b:45:49:24:0f:79:86:7a: 8e:ea:38:92:ae:ba:f4:19:71:e3:96:9e:04:6d:3a:b1:77:ce: 5d:33:a2:c2:5f:48:50:ab:83:c9:51:91:e4:3e:02:21:be:c2: 6b:d4:b5:3c:33:09:bb:65:f2:12:dc:3e:1e:6e:ef:59:56:9c: d5:4d:93:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdzDVPEmNxcdWWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NGU3NTc0ZDgtNTU5MC00YzkzLWJjYzYtMzk3Y2JlODI2NDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaIhRGuZkcKsjKus7IrRONwn1wLal4p7KWYU c2YhGW4FEED2zPvJ/n7sJ3iE/8uVtgwhDswGhXcBPr3a6DBkdzlQE9GbzOh9/nmT 9vmHD6DTjWynpGzp0mAYjhvCHd/UkTB/fh7wHCubbGaMr4edt/OKYrNIZiYwjnRK gaumWc2/hBdA9ngYxgG8bgca/FDSMq4PCWKNvcm0ESyL6Hz4AixpaDqJPraMNEai EmEEWlmpcqIg8IPId86zDZ+xIVRtiDmmQ23z4DOYVdRsnaAk+LANSN4qsuQ2PrwT rOqNs46hQtw0EEQf0oGd3vwadbwcQU9srMtJWi4+c5tPrlxd0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJL+B85F6gqlVtXlE2HD3ogJkVx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWVmYWI3YzYtOTc4ZS0z ZjVlLWJlYTctMzllYTFmYzY5MzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtmZPlNguOhIg5zpnIucCsPQQZammxz4aqVJBHp2RG57h4d5MOpjbDK FZ6DTrWiA+JrChCDuBjZbz1ptIzMCsqa/ec7vQdgeebifBw0ABTSGDPSC7jiconR AQ2Am2Vn87yWDdFZSQISyq+R6tRRKcIWqfvAkegEPiqzovQKCpZDuGw9jGUOlaIi mZeynDcGHL4pvWIqVWijkOzsV25JNH0zdtoHFQc/WiaNQ5/vLl8ZCSlHQ4BUCWi6 o6fhjoNbRUkkD3mGeo7qOJKuuvQZceOWngRtOrF3zl0zosJfSFCrg8lRkeQ+AiG+ wmvUtTwzCbtl8hLcPh5u71lWnNVNkyA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:48 2025 by rpki-client