$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/efdaa2df-4b6a-3563-932c-06cc33cbb21a.roa File: efdaa2df-4b6a-3563-932c-06cc33cbb21a.roa (raw, json) Hash identifier: 8oxaZZhFYzNv3tMju91bUStxM82yYdk8PAhbWKKxspE= Subject key identifier: 9B:BB:53:99:6F:5F:E5:68:C3:CD:48:1B:1B:26:DE:DD:4A:8F:B1:1F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4A47312199CBD8873E9CC180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/efdaa2df-4b6a-3563-932c-06cc33cbb21a.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 26383 IP address blocks: 166.88.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:31:21:99:cb:d8:87:3e:9c:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=50758f82-71e1-458b-ab87-5e9c7676227a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a9:cc:10:08:45:0d:cc:ac:0f:30:b5:b0:0d: c2:7c:7b:47:6f:dc:49:db:98:63:06:77:df:b2:42: 23:ba:9f:3e:fb:6b:81:2e:35:0f:90:94:7e:96:ce: 36:ae:17:6d:59:c9:c4:6c:47:52:7c:75:b0:81:ec: 6b:25:47:17:26:d3:1d:70:9b:a2:63:47:11:2b:ac: 5f:ce:d7:b7:cc:02:52:7a:8d:13:6f:f0:18:0a:eb: 67:77:72:eb:70:cd:7f:95:da:f6:6a:2a:e1:7a:35: 8f:11:46:f5:a3:43:0a:2e:25:ee:b5:19:70:da:7c: 8b:b2:5b:ac:57:0a:bd:87:d4:4e:48:d9:53:bd:10: 48:69:b3:25:0f:70:eb:88:f0:54:c5:b1:e8:ef:62: c6:d1:0f:da:f3:98:ce:e8:d2:e5:73:ce:3e:96:39: 31:18:b7:b1:06:28:cb:28:78:d7:62:6d:80:df:a5: 48:0e:46:ee:9b:47:ba:6d:96:ba:cd:85:48:51:bc: d3:7b:ae:31:a8:9a:74:01:93:4e:06:78:ba:bb:e9: 00:ac:8d:56:4b:3e:34:a2:c5:12:d4:37:c3:95:c5: 8e:a0:14:e9:18:75:13:04:a2:cd:a4:6e:1c:0c:96: fe:ba:4c:b7:22:3f:bc:28:0f:56:78:84:39:46:3d: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BB:53:99:6F:5F:E5:68:C3:CD:48:1B:1B:26:DE:DD:4A:8F:B1:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/efdaa2df-4b6a-3563-932c-06cc33cbb21a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:e5:e5:f3:3b:81:64:4d:7d:31:7e:c9:0d:d5:a0:81:e8:9e: 32:08:04:29:34:3b:25:cd:b2:24:23:8f:ee:70:87:1a:5a:aa: 2d:c7:a3:00:61:d4:63:2b:68:ea:f0:80:b4:88:e7:c8:f0:88: 08:99:c8:d6:d2:13:50:8e:5c:29:4b:01:a3:ee:69:e8:f2:ee: 27:5f:2d:6a:0e:fc:7a:03:a1:25:b3:a2:1b:f0:b6:ca:e4:0d: 15:5a:33:8a:32:b1:66:7c:21:06:83:94:ca:34:08:34:58:a8: 2f:21:08:27:44:74:86:9d:b3:d9:1d:bc:ad:21:09:f6:44:df: a2:53:b6:8f:45:8c:07:74:0c:cc:44:d1:85:29:10:c2:90:d2: 58:46:76:f6:8f:f2:4d:ae:50:58:74:1e:b0:6f:36:40:80:a9: f2:e8:33:09:c9:83:39:c0:ea:e9:50:bd:92:97:5c:85:7c:2e: 4e:fa:1d:51:c8:5e:b4:80:de:c1:aa:f6:5d:d4:9a:dd:6d:29: ce:6c:be:bc:0a:99:e2:fc:9a:12:54:23:27:21:3b:01:8d:49: 68:53:98:34:34:a2:b5:c2:41:90:d6:fa:c1:c3:46:74:5a:73: 5b:59:38:2a:ff:7b:3c:d1:77:5a:1f:03:b5:70:41:d1:2d:8a: d9:3d:8e:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRzEhmcvYhz6cwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NTA3NThmODItNzFlMS00NThiLWFiODctNWU5Yzc2NzYyMjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6nMEAhFDcysDzC1sA3CfHtHb9xJ25hjBnff skIjup8++2uBLjUPkJR+ls42rhdtWcnEbEdSfHWwgexrJUcXJtMdcJuiY0cRK6xf zte3zAJSeo0Tb/AYCutnd3LrcM1/ldr2airhejWPEUb1o0MKLiXutRlw2nyLslus Vwq9h9ROSNlTvRBIabMlD3DriPBUxbHo72LG0Q/a85jO6NLlc84+ljkxGLexBijL KHjXYm2A36VIDkbum0e6bZa6zYVIUbzTe64xqJp0AZNOBni6u+kArI1WSz40osUS 1DfDlcWOoBTpGHUTBKLNpG4cDJb+uky3Ij+8KA9WeIQ5Rj2rSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJu7U5lvX+Vow81IGxsm3t1Kj7EfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWZkYWEyZGYtNGI2YS0z NTYzLTkzMmMtMDZjYzMzY2JiMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrl5fM7gWRNfTF+yQ3VoIHonjIIBCk0OyXNsiQjj+5whxpaqi3HowBh 1GMraOrwgLSI58jwiAiZyNbSE1COXClLAaPuaejy7idfLWoO/HoDoSWzohvwtsrk DRVaM4oysWZ8IQaDlMo0CDRYqC8hCCdEdIads9kdvK0hCfZE36JTto9FjAd0DMxE 0YUpEMKQ0lhGdvaP8k2uUFh0HrBvNkCAqfLoMwnJgznA6ulQvZKXXIV8Lk76HVHI XrSA3sGq9l3Umt1tKc5svrwKmeL8mhJUIychOwGNSWhTmDQ0orXCQZDW+sHDRnRa c1tZOCr/ezzRd1ofA7VwQdEtitk9jl4= -----END CERTIFICATE-----Generated at Sat Oct 11 08:43:03 2025 by rpki-client