$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed9aebad-8491-3b8e-aa59-03a05e5a0ada.roa File: ed9aebad-8491-3b8e-aa59-03a05e5a0ada.roa (raw, json) Hash identifier: dzx8Tr8eZGMGBaZD8AYD4GGBUMBzxTK4gy+OSfj5ObI= Subject key identifier: 34:74:AC:5B:40:13:A8:35:BD:24:E1:42:41:E5:59:C1:D8:C2:CC:AE Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B758CAD2C90F53CD713B44380 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed9aebad-8491-3b8e-aa59-03a05e5a0ada.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 7018 IP address blocks: 166.88.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:ad:2c:90:f5:3c:d7:13:b4:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=a8fe7676-8e4d-4b7c-8dbf-ab97510be01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:4c:5c:fe:80:f8:da:83:5f:32:85:00:c1: 0a:85:5d:bd:e4:c4:04:94:bc:59:a4:80:93:c9:8f: 2c:8d:c4:28:17:94:46:c7:76:ee:1f:e1:de:2a:2e: 19:58:40:f5:41:70:56:b2:27:e4:fa:2f:0e:52:f4: 5e:4c:00:93:d6:40:d5:b5:26:d6:5f:46:a8:aa:98: cd:02:38:07:a9:94:31:8f:71:57:49:c3:5a:24:03: 57:e5:17:26:53:9e:35:56:61:2e:ab:98:0b:1c:8a: 7e:dd:84:09:25:e6:cb:27:d8:09:68:64:94:85:00: d7:21:20:73:26:3f:36:49:a0:78:d2:e8:ae:7b:52: ad:80:ec:c3:e0:dc:35:64:ef:d6:fb:c0:d7:ba:2f: 68:38:16:30:df:7a:37:56:10:cf:cf:6f:dd:2a:ba: 41:93:0f:ab:b0:70:44:67:24:90:08:bb:f1:81:2d: f7:4c:49:8a:37:dc:bf:8d:47:13:39:e0:91:71:2b: 49:27:de:04:b0:4d:d3:cf:62:b4:b5:5a:1b:88:d6: 8c:85:2e:06:e2:4f:11:16:62:c3:08:b7:5c:de:a3: ce:4e:28:9d:f4:4a:18:ed:c0:95:6e:00:ce:57:2e: 74:da:dc:27:63:99:3a:ad:d1:59:bf:9a:5c:b7:7a: e9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:74:AC:5B:40:13:A8:35:BD:24:E1:42:41:E5:59:C1:D8:C2:CC:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed9aebad-8491-3b8e-aa59-03a05e5a0ada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:22:bb:a1:51:57:3b:76:fe:57:8f:14:11:5f:26:0b:d8:df: f5:64:74:b7:49:a9:b1:a7:8c:cd:06:28:4e:e9:40:4c:22:be: 75:38:32:5a:1e:64:8a:47:b1:e2:0a:ff:82:24:81:4d:78:76: cb:74:3d:b4:64:12:9b:50:fe:07:0a:ce:97:1e:dd:aa:77:16: c9:1e:ac:b8:ae:07:ca:09:78:60:89:a7:f6:f8:0c:23:5d:51: 5f:3e:66:8c:77:94:20:ac:8b:35:ed:4c:2c:58:d9:70:eb:3d: 55:83:52:f1:e7:80:40:cc:2b:0a:4f:49:8f:da:15:cb:66:5c: df:81:64:6a:e0:4e:d0:de:52:b2:3e:71:e7:99:b3:98:7b:b4: 29:fb:61:0c:9a:2c:ca:fd:1a:3f:d5:3e:42:b5:e8:5d:ed:5e: c2:2a:e6:b6:fe:79:ac:75:a7:2e:a0:3a:b6:06:92:78:48:24: 47:35:1e:34:db:b6:82:eb:2e:5e:bb:f7:77:dc:32:38:4f:ca: 87:a0:74:35:e0:b9:1e:bf:a1:76:ba:4b:17:3e:20:b2:cc:eb: 2d:68:b8:04:ab:8f:07:60:b9:5b:57:76:2e:40:ca:82:d4:9a: eb:59:30:7f:dd:89:14:87:78:67:ac:3b:88:a0:fa:1a:dd:c9: b1:f9:d0:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jK0skPU81xO0Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk YThmZTc2NzYtOGU0ZC00YjdjLThkYmYtYWI5NzUxMGJlMDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkpMXP6A+NqDXzKFAMEKhV295MQElLxZpICT yY8sjcQoF5RGx3buH+HeKi4ZWED1QXBWsifk+i8OUvReTACT1kDVtSbWX0aoqpjN AjgHqZQxj3FXScNaJANX5RcmU541VmEuq5gLHIp+3YQJJebLJ9gJaGSUhQDXISBz Jj82SaB40uiue1KtgOzD4Nw1ZO/W+8DXui9oOBYw33o3VhDPz2/dKrpBkw+rsHBE ZySQCLvxgS33TEmKN9y/jUcTOeCRcStJJ94EsE3Tz2K0tVobiNaMhS4G4k8RFmLD CLdc3qPOTiid9EoY7cCVbgDOVy502twnY5k6rdFZv5pct3rprQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR0rFtAE6g1vSThQkHlWcHYwsyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWQ5YWViYWQtODQ5MS0z YjhlLWFhNTktMDNhMDVlNWEwYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMiu6FRVzt2/lePFBFfJgvY3/VkdLdJqbGnjM0GKE7pQEwivnU4Mloe ZIpHseIK/4IkgU14dst0PbRkEptQ/gcKzpce3ap3FskerLiuB8oJeGCJp/b4DCNd UV8+Zox3lCCsizXtTCxY2XDrPVWDUvHngEDMKwpPSY/aFctmXN+BZGrgTtDeUrI+ ceeZs5h7tCn7YQyaLMr9Gj/VPkK16F3tXsIq5rb+eax1py6gOrYGknhIJEc1HjTb toLrLl6793fcMjhPyoegdDXguR6/oXa6Sxc+ILLM6y1ouASrjwdguVtXdi5AyoLU mutZMH/diRSHeGesO4ig+hrdybH50IM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:45:55 2025 by rpki-client