$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd433ea6-1e1c-3b26-9bc8-f97e6a051f42.roa File: cd433ea6-1e1c-3b26-9bc8-f97e6a051f42.roa (raw, json) Hash identifier: kgUxtKGv8GzQzwc2M+nlw6LumWX3QHpqQvU8csgR7e8= Subject key identifier: 0D:F9:F3:53:53:1F:8C:3E:F3:DA:DB:6B:4A:2D:9D:60:A3:A7:25:AF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B52A75EE4835B7FCCBDDAD5C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd433ea6-1e1c-3b26-9bc8-f97e6a051f42.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 209854 IP address blocks: 166.88.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:5e:e4:83:5b:7f:cc:bd:da:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=34361bd8-2744-48cd-bec0-deb6092173aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:40:ff:bc:23:20:10:15:73:d9:e7:06:43:fb: d8:73:30:3c:0a:5f:26:93:2b:84:47:65:cb:ef:a9: 99:a6:97:cc:1f:13:76:66:47:cb:a8:e3:69:22:99: ed:1a:3b:37:1c:fb:54:ac:19:c4:ec:5e:08:a8:89: a5:40:70:5b:bf:b5:9b:42:38:d3:5b:e7:a6:bd:e9: fa:f4:a7:5e:6b:43:1a:6c:b1:f2:20:38:9d:45:b0: 34:99:d4:22:7d:c9:8d:52:27:18:db:39:db:e1:6b: 46:f5:db:07:4c:98:ab:b9:10:6c:ec:55:6d:4a:da: fe:69:9c:e7:ce:b1:7a:b0:cb:c0:65:b7:72:11:1f: dd:56:20:04:47:c2:44:56:d7:1f:cc:91:c5:4f:b1: 8a:f5:a4:e6:c0:f1:7b:f7:61:c4:10:a3:df:24:31: a7:d6:3e:58:c3:16:76:6c:ba:c7:07:7c:ac:76:46: 3a:fd:12:43:88:91:13:7d:16:dc:29:91:97:89:9f: 85:16:af:28:1f:a3:e0:e7:a5:7a:c7:d3:27:66:bb: 13:28:30:1a:7f:53:16:ae:0b:69:0e:05:04:12:d4: 92:46:67:04:46:85:c4:bb:f6:32:d8:27:97:83:f5: 2e:6b:ee:d1:cc:41:26:36:8b:52:ed:1a:85:e4:a1: a1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F9:F3:53:53:1F:8C:3E:F3:DA:DB:6B:4A:2D:9D:60:A3:A7:25:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd433ea6-1e1c-3b26-9bc8-f97e6a051f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d0:19:68:60:10:e3:1c:53:a7:62:4e:60:df:72:77:95:38: 0a:0e:d4:2e:52:b6:26:65:6e:0c:fa:d1:d0:c8:52:ae:13:99: d1:86:ba:6b:69:5c:3e:29:06:09:86:69:31:77:69:6d:03:aa: e9:b4:5f:c7:94:b9:dc:7b:0e:c6:ac:88:30:35:fa:36:73:4f: 11:a7:9b:c7:e4:41:e8:7a:de:1f:f4:9f:ab:17:d7:1b:ef:81: 44:d3:e2:97:6e:ba:4e:b8:47:ad:29:d5:0d:05:09:16:60:31: cc:ae:4b:db:b6:63:81:68:44:bc:39:e6:d7:39:cd:d3:e1:01: 81:85:60:84:71:89:e3:e0:87:5c:3f:d4:31:de:61:15:ab:af: 83:b2:6d:01:96:18:c3:59:56:10:3a:f5:ab:25:b4:83:18:23: 98:80:d4:6e:f2:56:5b:f4:a3:c5:cc:59:7c:ed:bf:20:85:68: 5e:fe:85:0d:48:d7:f5:fc:20:10:f5:38:38:a1:b9:2d:9b:59: dd:76:f2:ec:a2:fd:85:fc:ee:16:e6:68:29:b7:5b:13:d8:1c: 44:56:6c:09:4f:d5:6b:68:59:59:34:a5:87:8e:9f:37:cc:e9: f9:19:58:6e:83:55:bd:2f:41:7c:b7:33:30:db:2c:aa:3f:2b: 8d:89:21:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp17kg1t/zL3a1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MzQzNjFiZDgtMjc0NC00OGNkLWJlYzAtZGViNjA5MjE3M2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00D/vCMgEBVz2ecGQ/vYczA8Cl8mkyuER2XL 76mZppfMHxN2ZkfLqONpIpntGjs3HPtUrBnE7F4IqImlQHBbv7WbQjjTW+emven6 9Kdea0MabLHyIDidRbA0mdQifcmNUicY2znb4WtG9dsHTJiruRBs7FVtStr+aZzn zrF6sMvAZbdyER/dViAER8JEVtcfzJHFT7GK9aTmwPF792HEEKPfJDGn1j5YwxZ2 bLrHB3ysdkY6/RJDiJETfRbcKZGXiZ+FFq8oH6Pg56V6x9MnZrsTKDAaf1MWrgtp DgUEEtSSRmcERoXEu/Yy2CeXg/Uua+7RzEEmNotS7RqF5KGhWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3581NTH4w+89rba0otnWCjpyWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2Q0MzNlYTYtMWUxYy0z YjI2LTliYzgtZjk3ZTZhMDUxZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHQGWhgEOMcU6diTmDfcneVOAoO1C5StiZlbgz60dDIUq4TmdGGumtp XD4pBgmGaTF3aW0Dqum0X8eUudx7DsasiDA1+jZzTxGnm8fkQeh63h/0n6sX1xvv gUTT4pduuk64R60p1Q0FCRZgMcyuS9u2Y4FoRLw55tc5zdPhAYGFYIRxiePgh1w/ 1DHeYRWrr4OybQGWGMNZVhA69asltIMYI5iA1G7yVlv0o8XMWXztvyCFaF7+hQ1I 1/X8IBD1ODihuS2bWd128uyi/YX87hbmaCm3WxPYHERWbAlP1WtoWVk0pYeOnzfM 6fkZWG6DVb0vQXy3MzDbLKo/K42JIQc= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:55 2025 by rpki-client