$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d5816c95-27da-3909-a321-ada4bf2376a3.roa File: d5816c95-27da-3909-a321-ada4bf2376a3.roa (raw, json) Hash identifier: zNgbYELQ4PmjQ9WShrHlmVF53tP4Blpkvs+zkQQok8w= Subject key identifier: E7:CB:89:80:5D:53:4E:9D:CA:02:8C:77:9D:4C:80:19:9B:2D:57:33 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E77325ECBBC40956AF8C780 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d5816c95-27da-3909-a321-ada4bf2376a3.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:32:5e:cb:bc:40:95:6a:f8:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=751b3ad7-1469-468b-a248-d907f2195410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:86:6b:35:de:2d:fe:ab:85:ba:c3:88:8c: 4a:52:d6:ad:00:0b:22:1e:f1:c5:02:a0:8b:41:27: e3:38:83:2f:a8:a1:ab:20:b7:c8:f9:e3:b4:76:5b: 11:76:31:c7:76:34:74:d2:ad:4f:af:cb:33:cf:fc: 4d:29:fa:00:d2:59:a5:4e:67:d2:9c:4c:da:98:64: 58:e2:87:cc:d8:1a:27:19:68:f8:ee:b3:22:d2:5e: 58:64:b7:bc:5f:37:19:e1:91:bf:ae:48:5c:31:a5: f8:45:8c:af:3f:29:d0:08:e3:64:39:54:17:b8:4e: 2d:b8:6a:4c:50:e8:9d:08:fc:12:82:8e:21:ea:53: 1f:d5:ea:e9:98:86:d6:62:b8:a5:8c:30:ff:9a:da: 04:8c:f2:97:8f:72:48:99:7a:ea:00:f5:d7:47:ed: 7b:93:0b:69:ab:4d:a8:90:5e:01:51:42:27:84:8c: b6:72:ca:5a:c6:59:db:2c:42:60:a0:70:9c:8d:f8: f3:b5:0e:e5:5f:ca:47:67:a9:ac:b1:f1:63:79:28: 23:76:64:65:ea:0e:14:bb:00:54:bd:b2:9a:bd:2b: a1:89:2e:e2:af:1d:60:08:da:d4:c6:7f:7d:82:c5: 66:75:f6:94:75:16:6d:e8:49:69:ab:87:38:55:cf: c4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CB:89:80:5D:53:4E:9D:CA:02:8C:77:9D:4C:80:19:9B:2D:57:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d5816c95-27da-3909-a321-ada4bf2376a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6e:e0:75:20:df:bd:cd:08:91:ad:42:c0:16:df:6f:6e:f8: f1:12:ec:22:11:fd:df:ec:66:c7:ae:9e:e6:5e:78:00:d8:1b: 41:2b:c3:87:4d:c7:1c:d8:37:fb:b6:e8:56:ef:7b:75:2c:4c: d6:e4:03:ef:14:3d:be:f4:0e:9a:44:56:4c:3e:4b:23:c8:54: 30:f8:df:2b:f4:00:86:39:3b:19:4d:16:2f:6c:6e:0e:c4:13: a9:dd:f4:86:3b:ff:29:c6:e1:0e:9b:df:f4:1a:c9:b0:2a:77: a1:81:5d:55:19:23:8c:24:76:62:8c:60:c1:66:6c:b3:4f:98: d3:f7:36:55:3b:af:e4:aa:2f:81:4c:9c:ba:d1:e0:76:88:a4: a6:aa:9f:93:17:25:a5:6f:f3:82:97:5c:e5:6b:bb:a7:7c:f5: 5f:01:5a:60:9a:ce:94:9b:c2:12:7f:c0:6a:fd:8b:b1:cb:eb: 41:ab:ca:6c:85:5e:4f:4c:be:33:7b:8f:e0:e4:2d:5c:d7:ad: 40:19:99:ab:c2:35:81:93:61:66:5a:ad:84:32:0e:dc:80:10: 41:c7:45:ee:82:6e:07:63:f9:5d:8b:6d:31:fa:2e:be:0d:e0: 8a:3c:a9:04:7d:5c:bb:7d:11:4c:5e:12:5e:22:a9:5f:8d:fa: 08:27:95:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdzJey7xAlWr4x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NzUxYjNhZDctMTQ2OS00NjhiLWEyNDgtZDkwN2YyMTk1NDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4+GazXeLf6rhbrDiIxKUtatAAsiHvHFAqCL QSfjOIMvqKGrILfI+eO0dlsRdjHHdjR00q1Pr8szz/xNKfoA0lmlTmfSnEzamGRY 4ofM2BonGWj47rMi0l5YZLe8XzcZ4ZG/rkhcMaX4RYyvPynQCONkOVQXuE4tuGpM UOidCPwSgo4h6lMf1erpmIbWYriljDD/mtoEjPKXj3JImXrqAPXXR+17kwtpq02o kF4BUUInhIy2cspaxlnbLEJgoHCcjfjztQ7lX8pHZ6mssfFjeSgjdmRl6g4UuwBU vbKavSuhiS7irx1gCNrUxn99gsVmdfaUdRZt6Elpq4c4Vc/ERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfLiYBdU06dygKMd51MgBmbLVczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDU4MTZjOTUtMjdkYS0z OTA5LWEzMjEtYWRhNGJmMjM3NmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRu4HUg373NCJGtQsAW329u+PES7CIR/d/sZseunuZeeADYG0Erw4dN xxzYN/u26Fbve3UsTNbkA+8UPb70DppEVkw+SyPIVDD43yv0AIY5OxlNFi9sbg7E E6nd9IY7/ynG4Q6b3/QaybAqd6GBXVUZI4wkdmKMYMFmbLNPmNP3NlU7r+SqL4FM nLrR4HaIpKaqn5MXJaVv84KXXOVru6d89V8BWmCazpSbwhJ/wGr9i7HL60GrymyF Xk9MvjN7j+DkLVzXrUAZmavCNYGTYWZarYQyDtyAEEHHRe6Cbgdj+V2LbTH6Lr4N 4Io8qQR9XLt9EUxeEl4iqV+N+ggnlY0= -----END CERTIFICATE-----Generated at Sat Oct 11 08:42:50 2025 by rpki-client