$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fbd66666-4251-3b9e-ad0b-f8a300000e5b.roa File: fbd66666-4251-3b9e-ad0b-f8a300000e5b.roa (raw, json) Hash identifier: yjZkZxjAPVyVW3B0u96AzCA+6AW2UbfAPfLu3diKxbw= Subject key identifier: 6E:61:D1:4B:FB:40:5B:7E:D0:16:DE:F9:59:3C:86:05:81:2E:3B:41 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B0FA6BFA6F2C702C682F74340 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fbd66666-4251-3b9e-ad0b-f8a300000e5b.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 8881 IP address blocks: 168.93.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:bf:a6:f2:c7:02:c6:82:f7:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=05d93f9c-1f17-4dc3-a64d-56af71957480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:72:18:a7:0f:aa:ea:b9:db:9d:1e:bc:55: f5:c2:e4:4d:b1:26:c1:c3:4b:5e:68:39:d2:e0:c8: 63:a2:ae:8b:1d:a4:a7:9c:bb:48:9a:7f:25:34:a5: 31:b0:b3:d3:80:5c:e0:e7:19:02:6c:4e:a2:ec:1a: 54:0e:97:0b:02:46:ea:46:00:b7:8d:6d:72:58:2e: 81:9a:69:54:3a:61:ca:df:c7:49:68:f5:98:ea:cc: 42:ef:f1:fc:fe:80:5a:99:5c:0d:04:0b:95:96:d1: 31:38:38:17:6c:f5:c7:5f:41:cf:02:c9:24:48:bf: 7c:d3:5c:fd:1d:7c:d1:55:b0:47:93:69:8f:a4:c5: aa:e1:e4:82:40:8b:2a:4e:f1:e3:b7:85:61:01:c1: 2a:89:16:b8:95:62:9e:0c:c5:25:6b:5b:bb:ff:5d: 6a:cb:cf:5c:5a:b5:f9:22:e1:d0:c2:de:ec:65:10: e6:66:75:2b:ec:1b:2f:f1:d5:8e:dd:f6:d6:da:dc: d2:82:2a:c0:de:8e:27:80:60:d3:45:5c:d5:33:bb: d5:48:03:b0:15:6e:99:59:aa:b5:57:3f:76:6a:26: a5:14:a1:87:cd:4d:ba:f7:ef:94:31:60:c6:61:88: 87:79:a7:c6:1d:6a:00:5d:14:7f:4d:08:5b:36:e3: 6b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:61:D1:4B:FB:40:5B:7E:D0:16:DE:F9:59:3C:86:05:81:2E:3B:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fbd66666-4251-3b9e-ad0b-f8a300000e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8d:12:c2:64:4b:18:e0:17:61:76:46:6f:2f:18:3d:fe:8f: 3b:9f:fe:4e:72:dc:5a:2b:f6:b6:3d:a3:e3:f8:65:02:f1:9c: 8a:8a:32:d3:ff:76:06:20:0f:5b:d2:14:8c:3a:e8:af:2d:b2: 86:e3:0e:67:aa:ed:cd:f2:1c:ce:44:34:89:d9:59:fe:59:5d: 3d:57:43:42:8d:79:9b:7c:30:34:c0:e0:3c:d7:76:54:ce:cf: e7:f6:2a:9e:a0:a6:f0:63:8b:8e:ea:38:0d:c5:6c:ad:85:8d: dc:52:6e:9c:29:7d:cf:14:38:b1:f1:53:53:2e:47:60:64:f0: 81:5f:fb:4d:26:30:41:cf:43:69:f1:e0:f0:c4:67:27:f6:84: 95:ea:10:8c:d3:b2:b4:86:6b:56:82:a9:e0:33:d5:33:d9:42: 4b:a0:a0:a7:05:4b:95:09:a1:f8:31:48:22:d6:72:1b:e5:b8: ca:ad:bb:c8:1e:5a:1a:93:bc:b6:d1:b8:c2:be:aa:1d:72:c9: b1:f1:9e:6a:ce:08:b3:c8:98:70:49:23:9d:22:a6:7a:a5:74: a6:23:e2:24:62:be:05:54:da:2e:3e:ae:a7:7b:79:00:0a:96: 20:a5:b9:d2:8e:f7:e6:85:7b:ec:e7:2b:a9:46:23:d9:ce:b2: 3e:95:d6:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpr+m8scCxoL3Q0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk MDVkOTNmOWMtMWYxNy00ZGMzLWE2NGQtNTZhZjcxOTU3NDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh51yGKcPquq5250evFX1wuRNsSbBw0teaDnS 4Mhjoq6LHaSnnLtImn8lNKUxsLPTgFzg5xkCbE6i7BpUDpcLAkbqRgC3jW1yWC6B mmlUOmHK38dJaPWY6sxC7/H8/oBamVwNBAuVltExODgXbPXHX0HPAskkSL9801z9 HXzRVbBHk2mPpMWq4eSCQIsqTvHjt4VhAcEqiRa4lWKeDMUla1u7/11qy89cWrX5 IuHQwt7sZRDmZnUr7Bsv8dWO3fbW2tzSgirA3o4ngGDTRVzVM7vVSAOwFW6ZWaq1 Vz92aialFKGHzU269++UMWDGYYiHeafGHWoAXRR/TQhbNuNrdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5h0Uv7QFt+0Bbe+Vk8hgWBLjtBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmJkNjY2NjYtNDI1MS0z YjllLWFkMGItZjhhMzAwMDAwZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIONEsJkSxjgF2F2Rm8vGD3+jzuf/k5y3For9rY9o+P4ZQLxnIqKMtP/ dgYgD1vSFIw66K8tsobjDmeq7c3yHM5ENInZWf5ZXT1XQ0KNeZt8MDTA4DzXdlTO z+f2Kp6gpvBji47qOA3FbK2FjdxSbpwpfc8UOLHxU1MuR2Bk8IFf+00mMEHPQ2nx 4PDEZyf2hJXqEIzTsrSGa1aCqeAz1TPZQkugoKcFS5UJofgxSCLWchvluMqtu8ge WhqTvLbRuMK+qh1yybHxnmrOCLPImHBJI50ipnqldKYj4iRivgVU2i4+rqd7eQAK liCludKO9+aFe+znK6lGI9nOsj6V1og= -----END CERTIFICATE-----Generated at Sat Oct 11 08:47:21 2025 by rpki-client