$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c1607fd7-b68e-3ad9-ae3f-a87c6673159a.roa File: c1607fd7-b68e-3ad9-ae3f-a87c6673159a.roa (raw, json) Hash identifier: MJ4CRjMv0GiWCtQW/euU7x0TQ4U5je5If7JcmHKLeCg= Subject key identifier: FC:13:AF:86:2B:97:F2:85:8A:41:FC:BB:86:B7:19:5F:55:56:9B:38 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4D11EFB210ACDD06032DD880 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c1607fd7-b68e-3ad9-ae3f-a87c6673159a.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 26383 IP address blocks: 166.88.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:ef:b2:10:ac:dd:06:03:2d:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=0b9d7d4d-43c5-4e36-9440-0f3d8553a45c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e8:46:cf:9b:59:b8:60:16:31:42:2b:e9:98: a4:3f:f4:1d:3a:41:4a:e2:67:68:09:db:36:56:9c: c5:31:0e:70:d2:77:05:b5:d7:0c:1c:e1:99:7d:b2: 50:f0:4f:37:c4:a5:40:93:62:93:97:a8:1d:be:c0: 5c:ad:3d:34:7e:43:30:9e:52:b3:43:c8:12:cc:f1: d1:80:f9:a3:1e:b8:77:ff:1c:84:bf:7d:0d:fb:10: 20:9c:5d:53:b4:69:f5:58:cc:03:15:c4:e2:3c:b8: d2:35:f6:84:73:44:26:63:ce:bb:8d:10:73:dc:b1: 00:aa:29:d3:a3:d3:a0:ba:1c:38:97:b0:4b:3b:3d: 3e:ae:e2:19:4d:b3:d2:19:e5:ae:f4:c6:d3:6c:e8: df:b1:f1:2f:28:7d:f8:15:fb:c4:10:64:6e:74:6e: ed:58:5e:24:3c:f5:8c:78:4e:78:63:af:ac:b9:45: 36:ef:39:61:b6:6a:b9:7f:e6:4b:5b:76:b9:82:1e: d3:1f:6d:d7:bb:36:10:80:49:4a:24:05:78:f4:e7: 6c:56:84:9a:55:4b:0a:21:d7:a9:0d:fc:ec:ba:fa: 72:f3:ce:6a:8f:d3:04:b9:6e:4c:51:e3:d7:4d:0c: af:40:09:11:4d:43:32:af:53:9f:ed:c4:6c:8d:78: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:13:AF:86:2B:97:F2:85:8A:41:FC:BB:86:B7:19:5F:55:56:9B:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c1607fd7-b68e-3ad9-ae3f-a87c6673159a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:db:61:c1:29:8c:c6:a4:61:00:d8:6f:4c:fa:ef:2f:22:10: bd:1d:36:77:6c:bd:56:b1:ac:d7:f0:9f:0b:77:cd:28:46:4e: c0:36:ff:65:53:cf:8a:16:56:35:7b:45:36:ff:b7:c4:aa:a6: 35:d0:2d:96:26:e6:62:78:45:a6:f5:ef:16:0e:cc:d4:bb:1a: 1d:50:96:b0:02:45:c0:84:3b:bc:79:dc:81:7c:80:20:00:7b: 4b:4e:d6:2e:7f:f8:77:af:88:cc:83:d0:e2:f2:c5:1d:e5:bf: d8:c4:9a:3d:97:39:3d:aa:9e:17:59:91:e0:93:14:db:19:59: 17:d1:7f:b7:7b:98:3d:c5:d6:80:a1:26:bc:23:d0:01:a1:1c: 92:aa:6d:49:75:71:4f:5c:fe:c4:35:54:27:3d:64:a1:d8:18: fc:12:2f:a2:fd:99:f7:14:99:ac:8f:bb:03:ec:b1:53:fe:de: 64:4e:bb:28:0d:3d:45:9e:f1:61:c9:3a:2c:11:f1:f3:4d:6f: 82:0a:35:2c:94:f8:33:aa:71:1e:da:2f:ec:ea:ea:ce:60:17: db:82:00:4e:1a:fc:ed:38:ad:9c:c2:3f:ef:3c:19:dc:76:5b: 10:dd:e5:d1:55:25:75:c7:82:ae:e6:59:f1:f5:27:c4:f6:bd: 97:66:80:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEe+yEKzdBgMt2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MGI5ZDdkNGQtNDNjNS00ZTM2LTk0NDAtMGYzZDg1NTNhNDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOhGz5tZuGAWMUIr6ZikP/QdOkFK4mdoCds2 VpzFMQ5w0ncFtdcMHOGZfbJQ8E83xKVAk2KTl6gdvsBcrT00fkMwnlKzQ8gSzPHR gPmjHrh3/xyEv30N+xAgnF1TtGn1WMwDFcTiPLjSNfaEc0QmY867jRBz3LEAqinT o9Oguhw4l7BLOz0+ruIZTbPSGeWu9MbTbOjfsfEvKH34FfvEEGRudG7tWF4kPPWM eE54Y6+suUU27zlhtmq5f+ZLW3a5gh7TH23XuzYQgElKJAV49OdsVoSaVUsKIdep Dfzsuvpy885qj9MEuW5MUePXTQyvQAkRTUMyr1Of7cRsjXhlaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwTr4Yrl/KFikH8u4a3GV9VVps4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzE2MDdmZDctYjY4ZS0z YWQ5LWFlM2YtYTg3YzY2NzMxNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplj9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLbYcEpjMakYQDYb0z67y8iEL0dNndsvVaxrNfwnwt3zShGTsA2/2VT z4oWVjV7RTb/t8SqpjXQLZYm5mJ4Rab17xYOzNS7Gh1QlrACRcCEO7x53IF8gCAA e0tO1i5/+HeviMyD0OLyxR3lv9jEmj2XOT2qnhdZkeCTFNsZWRfRf7d7mD3F1oCh Jrwj0AGhHJKqbUl1cU9c/sQ1VCc9ZKHYGPwSL6L9mfcUmayPuwPssVP+3mROuygN PUWe8WHJOiwR8fNNb4IKNSyU+DOqcR7aL+zq6s5gF9uCAE4a/O04rZzCP+88Gdx2 WxDd5dFVJXXHgq7mWfH1J8T2vZdmgEM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:42:59 2025 by rpki-client