$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f1b42937-d12b-390c-a90f-f1b7e5e3a345.roa File: f1b42937-d12b-390c-a90f-f1b7e5e3a345.roa (raw, json) Hash identifier: BrmPFcDJGnPcAJrsg6rcWswqcJ4uaDEq0lZWlaX/lLY= Subject key identifier: 30:C4:C1:43:85:94:25:B3:7E:6A:DB:4B:22:61:04:84:DE:0F:92:4B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E77312F2D444E4C445DF9C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f1b42937-d12b-390c-a90f-f1b7e5e3a345.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:31:2f:2d:44:4e:4c:44:5d:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=0c1d0fa5-df4f-4d77-9990-17c5d1d6cd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:ee:26:3c:d2:79:b8:64:6a:8e:db:42:4f: 47:6a:c3:bf:0d:1f:d5:0a:ce:93:be:07:29:8a:10: 5f:b9:ca:63:b9:07:ec:d5:14:55:a6:b1:e8:25:c1: 1d:09:ae:6c:9c:ff:54:76:3b:95:4b:4f:95:d3:9f: b0:94:18:76:98:29:d9:08:b0:11:36:a5:0c:75:cc: 50:5e:36:10:6f:72:50:b7:a9:68:c3:3e:20:66:ea: 5e:ef:2b:76:20:97:93:6f:ca:4c:7b:eb:20:ee:eb: 94:75:06:d6:c0:e5:f0:a8:d5:04:bc:15:dc:36:3f: 65:68:8f:e4:8a:12:31:7d:7f:d9:7f:fe:0b:70:8f: 59:bb:6e:e7:d2:0d:ed:18:65:1b:7c:54:c2:e3:52: fc:52:6d:92:f2:47:13:02:53:7d:14:29:41:ae:a8: c9:39:7d:a2:81:d1:6c:95:2a:cd:6d:95:d8:15:56: 08:13:2c:eb:16:c9:4b:9c:6b:6f:d6:e2:7f:48:e3: 83:a3:cb:76:33:cb:02:09:4a:13:ed:29:e3:99:27: e0:36:c8:25:ee:20:6d:90:8f:a8:5e:2f:83:b1:55: d1:f4:00:60:63:4b:5c:e0:1d:12:28:65:e8:47:2a: 68:f5:ae:db:78:40:15:48:1b:bf:63:7d:cb:4e:90: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C4:C1:43:85:94:25:B3:7E:6A:DB:4B:22:61:04:84:DE:0F:92:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f1b42937-d12b-390c-a90f-f1b7e5e3a345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:cd:e3:38:3d:2b:1e:47:aa:af:4a:5d:5a:e6:55:af:af:91: e3:47:a7:8c:a1:49:2c:ba:e9:88:83:8d:a5:1b:11:a0:16:30: c3:2b:44:35:13:e0:6f:3a:3e:8c:3e:f8:8e:25:2b:0a:a5:84: 5f:cb:3f:a0:c6:2a:b7:39:49:1a:20:aa:e7:c0:59:22:ba:01: 76:0c:f4:d4:d9:82:2b:85:cc:78:1e:52:27:62:5d:97:a6:f1: a2:07:aa:95:08:50:95:2e:67:f7:7c:7a:63:f6:cd:bf:69:25: 7b:4f:50:2f:99:2e:a5:c8:8d:12:a3:97:c7:a8:fa:db:e5:a5: ff:90:b4:25:a2:5d:b4:f6:f2:f4:58:d8:85:83:27:76:16:b8: e9:83:35:19:13:21:0a:19:1f:42:b9:ea:57:fc:98:66:69:b3: bc:98:69:a3:2c:da:46:88:db:8b:21:93:78:5b:f2:32:94:db: 62:e9:f8:d1:aa:b6:be:d4:ba:09:bf:78:43:3d:0a:30:67:61: 36:60:f4:62:3f:d9:44:59:61:28:ed:97:4b:ab:2a:07:1f:e5: 48:78:4b:28:e5:16:db:c0:dd:e4:c0:1f:c4:e7:e9:2b:5a:cd: eb:1a:10:2f:ef:1e:5e:10:f8:26:a4:2a:68:ac:a1:f8:cb:a4: 16:63:8b:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdzEvLUROTERd+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MGMxZDBmYTUtZGY0Zi00ZDc3LTk5OTAtMTdjNWQxZDZjZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTnuJjzSebhkao7bQk9HasO/DR/VCs6Tvgcp ihBfucpjuQfs1RRVprHoJcEdCa5snP9UdjuVS0+V05+wlBh2mCnZCLARNqUMdcxQ XjYQb3JQt6lowz4gZupe7yt2IJeTb8pMe+sg7uuUdQbWwOXwqNUEvBXcNj9laI/k ihIxfX/Zf/4LcI9Zu27n0g3tGGUbfFTC41L8Um2S8kcTAlN9FClBrqjJOX2igdFs lSrNbZXYFVYIEyzrFslLnGtv1uJ/SOODo8t2M8sCCUoT7SnjmSfgNsgl7iBtkI+o Xi+DsVXR9ABgY0tc4B0SKGXoRypo9a7beEAVSBu/Y33LTpB/XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDEwUOFlCWzfmrbSyJhBITeD5JLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjFiNDI5MzctZDEyYi0z OTBjLWE5MGYtZjFiN2U1ZTNhMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfN4zg9Kx5Hqq9KXVrmVa+vkeNHp4yhSSy66YiDjaUbEaAWMMMrRDUT 4G86Pow++I4lKwqlhF/LP6DGKrc5SRogqufAWSK6AXYM9NTZgiuFzHgeUidiXZem 8aIHqpUIUJUuZ/d8emP2zb9pJXtPUC+ZLqXIjRKjl8eo+tvlpf+QtCWiXbT28vRY 2IWDJ3YWuOmDNRkTIQoZH0K56lf8mGZps7yYaaMs2kaI24shk3hb8jKU22Lp+NGq tr7Uugm/eEM9CjBnYTZg9GI/2URZYSjtl0urKgcf5Uh4SyjlFtvA3eTAH8Tn6Sta zesaEC/vHl4Q+CakKmisofjLpBZji/w= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:57 2025 by rpki-client