$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/affc919c-d028-3bf5-a7a5-d969bdde1a8b.roa File: affc919c-d028-3bf5-a7a5-d969bdde1a8b.roa (raw, json) Hash identifier: DwN9zBXgBiBYbKMq89gpWuw9XOY02oIaIFHRZvPghGw= Subject key identifier: BA:99:E3:D8:4C:78:EB:DD:95:46:A5:CC:9F:7A:92:B1:CF:C1:29:25 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E7730F86D0DB945751FC348 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/affc919c-d028-3bf5-a7a5-d969bdde1a8b.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:30:f8:6d:0d:b9:45:75:1f:c3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=7ddc05a3-78e5-4b82-a925-f0368800ecea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2f:6c:c4:a7:cd:58:fd:1a:1a:27:15:aa:fe: 8e:06:e8:49:87:06:40:e8:4f:f5:36:b8:b4:d2:63: 87:f6:17:ba:67:24:db:be:16:c5:17:11:cb:f1:4a: 1e:43:10:47:4f:32:b8:72:5a:35:f6:a4:06:76:2c: 05:34:82:11:4b:4a:21:fa:36:c1:d0:d3:60:b4:7f: 21:80:19:88:64:ed:ca:2f:51:91:91:b5:95:bb:a0: 1d:6e:9f:33:e8:17:2e:f9:ae:45:60:52:72:f1:83: f1:84:f5:6d:c2:12:5d:35:6b:d0:0a:e9:5f:9f:f5: 85:d7:18:5b:e3:f8:8a:36:30:2e:af:cf:f0:55:43: ae:ce:1d:d4:0e:59:c7:15:10:fd:80:d7:ce:76:1b: da:1b:1e:7b:60:31:a0:83:cb:c3:7d:86:b3:38:7a: 5d:2d:dd:9d:3c:02:fc:aa:43:41:4f:bf:b1:b0:77: 28:9a:9e:05:42:ee:ea:11:60:37:31:df:86:ea:a5: b1:68:10:9d:48:46:9e:96:76:c8:69:83:98:63:a4: b3:54:21:08:b0:1a:c5:94:6e:a4:14:b9:2e:4b:bf: dd:64:8e:99:49:81:21:8c:13:4f:86:cf:0d:6a:8c: 4d:05:24:58:02:97:9f:84:ff:cf:80:6b:5b:70:0c: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:99:E3:D8:4C:78:EB:DD:95:46:A5:CC:9F:7A:92:B1:CF:C1:29:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/affc919c-d028-3bf5-a7a5-d969bdde1a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:2b:b9:df:dd:d4:0a:a3:d6:f3:c0:65:b9:f0:15:9d:25:fb: 32:51:cf:2d:87:c1:db:d9:8a:83:3e:76:39:5e:26:92:02:82: df:a5:78:9c:1d:5f:a2:53:6f:42:66:48:4c:67:b5:c7:45:67: 5a:5d:bc:49:b7:cc:2c:06:7e:7b:68:ed:03:86:a6:1d:c8:be: dc:b2:5f:a6:07:06:59:11:19:b3:b1:ac:67:ec:89:4c:2b:0e: bb:e8:07:44:59:4c:1d:c4:6a:75:1a:d0:ad:4a:3b:8b:cb:f7: b1:e2:6c:37:3a:0b:20:4c:5b:af:06:a6:c8:7a:60:46:3c:b4: 94:70:78:a2:f3:e3:ca:91:16:f4:90:c3:30:51:82:c4:9a:e5: 5c:cd:16:c8:0e:ba:a5:04:0d:d2:e3:f3:e6:b5:07:cf:b5:30: f3:59:ed:b2:15:12:1f:5e:b6:8f:9a:e3:ce:95:b7:fe:15:d6: 61:81:a4:58:ff:2d:5c:d6:2c:6a:c1:7c:34:19:0b:ea:29:c7: bf:a2:60:3d:92:03:64:55:6b:6d:a1:8a:9d:f5:e3:63:08:9d: 55:89:b4:f3:05:67:69:ca:58:2d:e0:ad:6b:a3:37:17:aa:67: 8e:e2:ba:5e:03:9f:3b:95:83:40:02:55:a7:6d:7e:a8:8c:54: 3b:80:2c:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdzD4bQ25RXUfw0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk N2RkYzA1YTMtNzhlNS00YjgyLWE5MjUtZjAzNjg4MDBlY2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly9sxKfNWP0aGicVqv6OBuhJhwZA6E/1Nri0 0mOH9he6ZyTbvhbFFxHL8UoeQxBHTzK4clo19qQGdiwFNIIRS0oh+jbB0NNgtH8h gBmIZO3KL1GRkbWVu6Adbp8z6Bcu+a5FYFJy8YPxhPVtwhJdNWvQCulfn/WF1xhb 4/iKNjAur8/wVUOuzh3UDlnHFRD9gNfOdhvaGx57YDGgg8vDfYazOHpdLd2dPAL8 qkNBT7+xsHcomp4FQu7qEWA3Md+G6qWxaBCdSEaelnbIaYOYY6SzVCEIsBrFlG6k FLkuS7/dZI6ZSYEhjBNPhs8NaoxNBSRYApefhP/PgGtbcAxtiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqZ49hMeOvdlUalzJ96krHPwSklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWZmYzkxOWMtZDAyOC0z YmY1LWE3YTUtZDk2OWJkZGUxYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAErud/d1Aqj1vPAZbnwFZ0l+zJRzy2HwdvZioM+djleJpICgt+leJwd X6JTb0JmSExntcdFZ1pdvEm3zCwGfnto7QOGph3IvtyyX6YHBlkRGbOxrGfsiUwr DrvoB0RZTB3EanUa0K1KO4vL97HibDc6CyBMW68Gpsh6YEY8tJRweKLz48qRFvSQ wzBRgsSa5VzNFsgOuqUEDdLj8+a1B8+1MPNZ7bIVEh9eto+a486Vt/4V1mGBpFj/ LVzWLGrBfDQZC+opx7+iYD2SA2RVa22hip3142MInVWJtPMFZ2nKWC3grWujNxeq Z47iul4DnzuVg0ACVadtfqiMVDuALAs= -----END CERTIFICATE-----Generated at Sat Oct 11 08:42:58 2025 by rpki-client