$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bde60255-3067-31d9-ad0f-bdde0e359a8a.roa File: bde60255-3067-31d9-ad0f-bdde0e359a8a.roa (raw, json) Hash identifier: MYGzx7ZCepw8appWsMT+qnwfvKDqf98VgyXRoF+QRso= Subject key identifier: 3D:DB:5E:44:76:9F:63:5B:F4:9D:3A:B6:9E:3E:F4:68:7D:E9:2D:B8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B758CAD85FC0FFC15CD2E20C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bde60255-3067-31d9-ad0f-bdde0e359a8a.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 7018 IP address blocks: 166.88.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:ad:85:fc:0f:fc:15:cd:2e:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=fb65b921-fea4-45d1-b9b7-06955d187814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:b4:e0:65:6b:bb:3e:fc:c4:e5:b2:d3:59: d9:85:ef:67:ba:f6:fa:f1:2a:8b:0d:87:15:ec:11: e5:90:54:45:76:63:a1:df:11:c0:16:33:28:9c:ca: 81:36:2f:58:73:2e:46:82:d9:3c:e6:eb:37:f5:26: 06:da:73:b8:a0:5c:92:f6:7b:05:14:4b:c5:1c:63: a5:14:97:bb:6b:8b:b4:43:65:a9:da:4f:12:d0:32: f6:9a:36:30:87:70:9b:35:b3:3d:5d:df:94:90:36: c1:b3:8f:d1:a1:5f:8a:c0:d4:ee:a3:26:df:75:59: 39:57:3e:0a:c2:50:c0:20:59:db:d6:a2:63:85:e5: d6:84:67:5b:98:a4:a2:2b:be:90:26:c8:a9:72:0b: 31:5b:c2:db:83:cd:0b:97:36:98:e1:0b:e7:34:a2: 3e:2d:37:26:a0:be:ad:48:06:0d:6c:12:76:72:66: ce:fd:4c:f2:77:5e:0e:07:51:d0:b8:a0:7b:18:52: 87:a7:6e:1a:5f:97:c4:39:1d:62:4c:b1:16:78:14: 02:d3:5f:55:e7:7f:5e:d6:83:37:1e:44:d8:27:f2: 81:64:78:70:02:47:c9:8c:8f:17:4e:56:e1:2d:ce: fd:d5:8d:f5:62:65:a4:7f:69:13:0d:a0:7d:74:85: 4a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DB:5E:44:76:9F:63:5B:F4:9D:3A:B6:9E:3E:F4:68:7D:E9:2D:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bde60255-3067-31d9-ad0f-bdde0e359a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:8a:3e:45:ad:67:a1:47:94:19:90:c7:9f:a2:3c:01:af:dc: 0e:06:24:98:1c:68:d9:14:91:bb:b3:dc:81:48:76:32:e8:1a: cc:91:ae:78:51:76:50:11:a2:e3:01:23:53:54:1e:45:9c:d3: 85:9a:34:84:22:07:ef:4c:27:59:5e:5f:8c:5a:2a:9b:cf:2f: 95:98:54:4d:51:34:ea:ab:9c:09:64:43:0b:31:e8:a7:d9:14: 28:80:3f:81:1a:73:6f:8a:3c:89:b6:a8:6d:b4:2e:ec:2e:c7: da:e5:e9:24:83:9d:ef:c5:08:37:ff:45:77:65:c0:47:5d:71: 30:db:7f:9e:7b:3d:de:4b:73:c5:da:9b:70:b2:06:60:8c:be: 1e:27:84:be:d6:11:63:ce:64:55:25:67:c1:bd:5d:c2:21:de: 43:3b:28:87:00:68:85:6b:7a:b4:96:09:ff:e6:d8:69:5c:a0: 30:af:3d:43:4c:1b:a4:cf:1e:26:92:11:d6:a1:83:8a:95:50: 0c:f9:d8:c8:3b:a1:98:27:0b:3c:49:1b:72:59:c6:0c:0d:9e: 1a:2d:79:2f:5d:f4:a4:9c:b6:7a:16:41:c9:fd:d3:41:61:57: 14:62:22:8e:c0:7c:65:43:67:00:a3:7d:ae:20:a5:7e:67:76: a8:2a:0f:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jK2F/A/8Fc0uIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk ZmI2NWI5MjEtZmVhNC00NWQxLWI5YjctMDY5NTVkMTg3ODE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCi04GVruz78xOWy01nZhe9nuvb68SqLDYcV 7BHlkFRFdmOh3xHAFjMonMqBNi9Ycy5Ggtk85us39SYG2nO4oFyS9nsFFEvFHGOl FJe7a4u0Q2Wp2k8S0DL2mjYwh3CbNbM9Xd+UkDbBs4/RoV+KwNTuoybfdVk5Vz4K wlDAIFnb1qJjheXWhGdbmKSiK76QJsipcgsxW8Lbg80LlzaY4QvnNKI+LTcmoL6t SAYNbBJ2cmbO/Uzyd14OB1HQuKB7GFKHp24aX5fEOR1iTLEWeBQC019V539e1oM3 HkTYJ/KBZHhwAkfJjI8XTlbhLc791Y31YmWkf2kTDaB9dIVKNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3bXkR2n2Nb9J06tp4+9Gh96S24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmRlNjAyNTUtMzA2Ny0z MWQ5LWFkMGYtYmRkZTBlMzU5YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOKPkWtZ6FHlBmQx5+iPAGv3A4GJJgcaNkUkbuz3IFIdjLoGsyRrnhR dlARouMBI1NUHkWc04WaNIQiB+9MJ1leX4xaKpvPL5WYVE1RNOqrnAlkQwsx6KfZ FCiAP4Eac2+KPIm2qG20Luwux9rl6SSDne/FCDf/RXdlwEddcTDbf557Pd5Lc8Xa m3CyBmCMvh4nhL7WEWPOZFUlZ8G9XcIh3kM7KIcAaIVrerSWCf/m2GlcoDCvPUNM G6TPHiaSEdahg4qVUAz52Mg7oZgnCzxJG3JZxgwNnhoteS9d9KSctnoWQcn900Fh VxRiIo7AfGVDZwCjfa4gpX5ndqgqDxU= -----END CERTIFICATE-----Generated at Sat Oct 11 08:46:52 2025 by rpki-client