$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cac960f3-379f-3f46-87fc-cac684ed4ff5.roa File: cac960f3-379f-3f46-87fc-cac684ed4ff5.roa (raw, json) Hash identifier: LvnWlHhNAjVbgY11kXyktlkImqg97FWeb5UiQYVwOyw= Subject key identifier: 33:10:2F:AD:29:83:D6:28:09:55:1F:E3:06:29:3B:6A:49:32:82:F1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B35570938399B7C79FA881D40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cac960f3-379f-3f46-87fc-cac684ed4ff5.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 7018 IP address blocks: 166.88.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:09:38:39:9b:7c:79:fa:88:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=c9b16b6a-670c-4880-bbd8-e781395f7c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b3:b5:1a:79:0b:d1:8b:c1:57:f2:f2:c0:d2: 9f:c2:82:a6:44:35:53:22:27:7a:d1:ff:9a:0e:c1: 24:f7:91:80:a5:ff:58:52:c5:6b:aa:04:76:04:df: a6:6c:45:64:05:49:f2:a6:8d:fa:48:65:bf:d8:1f: 88:cc:f6:a8:ed:bd:74:a2:e6:34:a2:67:da:e2:2f: 1b:25:99:ed:c9:d9:f3:c1:9e:ee:37:07:44:aa:14: d8:aa:ca:f1:63:07:7a:51:62:c6:85:db:73:77:71: 2d:24:d1:b2:31:f4:cb:bb:9b:c7:b0:cf:94:bb:ec: 8c:88:e2:26:a1:d8:19:9c:de:58:26:ed:cc:ef:51: 67:e4:f7:26:95:2a:3e:79:28:ba:b3:8f:ad:a2:e3: 23:1c:2e:d5:bd:b8:be:3d:c9:c5:9e:b9:95:36:78: e9:24:d1:7e:6e:9c:27:ed:8a:b6:ca:4b:98:d6:73: 56:ea:a7:ae:2c:ca:62:f9:69:6d:c0:ef:b5:78:0f: 75:ef:4e:22:41:9d:a7:a2:50:52:02:ef:23:c6:7d: 86:40:14:3b:b0:b3:3d:a1:44:2d:61:2f:b5:10:f5: 69:71:c5:53:e7:a1:b3:8b:f2:94:6b:a2:3c:62:4d: 1f:63:c1:fa:28:26:70:a0:e9:00:c7:a3:92:85:6c: d9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:10:2F:AD:29:83:D6:28:09:55:1F:E3:06:29:3B:6A:49:32:82:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cac960f3-379f-3f46-87fc-cac684ed4ff5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:35:cf:b6:ff:1e:e3:63:a4:a0:e8:0d:d4:7b:48:f4:f2:af: dd:e5:4d:6d:ae:ca:ef:07:ba:46:8c:47:71:55:4e:d7:df:84: c4:a2:65:1e:0f:f5:de:f6:28:ff:1e:e9:12:25:f7:06:2c:f6: 24:64:81:39:6e:f2:e8:c3:6c:4d:16:33:07:51:03:8a:f8:a9: f1:a8:dc:a7:a5:e2:66:02:cf:bc:6d:c0:0d:cc:6b:77:b6:07: 7d:76:b4:91:c4:01:8b:7f:40:95:55:60:7f:c8:a4:1d:0e:bc: 97:6d:44:34:96:8c:49:8d:c6:e8:00:c2:6b:b0:1b:b6:b1:63: 23:04:c9:c0:3d:69:f8:5d:63:34:54:77:55:b2:9b:d5:79:c4: 73:17:83:10:65:a6:7a:89:48:77:4e:3a:80:a8:17:15:a5:04: 79:13:5f:2d:76:65:d4:fd:91:aa:5b:df:25:7e:4d:64:d5:88: 9f:2c:95:ad:a9:a9:53:2e:76:c0:2f:55:4d:7d:1f:4b:97:56: cf:e7:78:e4:45:3d:23:9c:2c:ec:5f:42:10:bd:ec:a9:53:6a: ae:66:66:95:d9:30:33:fa:a6:5d:1b:01:06:95:fc:95:af:4a: 5e:e7:73:e7:13:f4:4e:59:a3:2b:ea:9b:5f:c3:2a:ee:00:05: 2e:1b:c8:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vwk4OZt8efqIHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YzliMTZiNmEtNjcwYy00ODgwLWJiZDgtZTc4MTM5NWY3YzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobO1GnkL0YvBV/LywNKfwoKmRDVTIid60f+a DsEk95GApf9YUsVrqgR2BN+mbEVkBUnypo36SGW/2B+IzPao7b10ouY0omfa4i8b JZntydnzwZ7uNwdEqhTYqsrxYwd6UWLGhdtzd3EtJNGyMfTLu5vHsM+Uu+yMiOIm odgZnN5YJu3M71Fn5PcmlSo+eSi6s4+touMjHC7Vvbi+PcnFnrmVNnjpJNF+bpwn 7Yq2ykuY1nNW6qeuLMpi+WltwO+1eA91704iQZ2nolBSAu8jxn2GQBQ7sLM9oUQt YS+1EPVpccVT56Gzi/KUa6I8Yk0fY8H6KCZwoOkAx6OShWzZ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMQL60pg9YoCVUf4wYpO2pJMoLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2FjOTYwZjMtMzc5Zi0z ZjQ2LTg3ZmMtY2FjNjg0ZWQ0ZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc1z7b/HuNjpKDoDdR7SPTyr93lTW2uyu8HukaMR3FVTtffhMSiZR4P 9d72KP8e6RIl9wYs9iRkgTlu8ujDbE0WMwdRA4r4qfGo3Kel4mYCz7xtwA3Ma3e2 B312tJHEAYt/QJVVYH/IpB0OvJdtRDSWjEmNxugAwmuwG7axYyMEycA9afhdYzRU d1Wym9V5xHMXgxBlpnqJSHdOOoCoFxWlBHkTXy12ZdT9kapb3yV+TWTViJ8sla2p qVMudsAvVU19H0uXVs/neORFPSOcLOxfQhC97KlTaq5mZpXZMDP6pl0bAQaV/JWv Sl7nc+cT9E5Zoyvqm1/DKu4ABS4byBE= -----END CERTIFICATE-----Generated at Sat Oct 11 08:45:48 2025 by rpki-client