$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff53e4b0-d180-376e-a5f2-888ce5cf0a80.roa File: ff53e4b0-d180-376e-a5f2-888ce5cf0a80.roa (raw, json) Hash identifier: QwS4H+TvlaDHfQfFo3QX+q1ryRa/DOU+dcd28I5C3kc= Subject key identifier: 67:3C:42:8A:9A:D2:2A:A5:C7:BD:AE:D1:C0:30:58:44:62:98:FD:D7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B663205175B369113A1E5A780 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff53e4b0-d180-376e-a5f2-888ce5cf0a80.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 16509 IP address blocks: 166.88.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:05:17:5b:36:91:13:a1:e5:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=ad321851-3b24-4a69-8d2a-2a8e34479107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:7c:a5:e4:64:56:01:db:2d:3e:8a:6a:84: d6:36:56:69:01:a5:a6:7d:7e:14:e6:d8:4a:ef:f4: 3c:c5:96:95:13:3a:7e:a6:23:86:62:9d:59:a7:7f: dc:d0:d2:0a:50:38:4b:ef:39:8b:8d:74:6f:80:ab: 38:9e:29:10:af:0c:fe:7c:aa:41:e3:1b:10:91:62: e7:34:cc:b4:5c:08:77:12:40:a0:cd:ef:9c:dc:28: 1d:76:7c:18:62:bf:9f:84:6e:9b:2e:00:a0:06:7c: 79:63:8c:cf:0a:4e:16:41:0a:e4:11:d4:b0:0f:f1: 2b:8d:e4:fe:d3:7b:a9:4f:f3:83:4b:1f:f7:c6:0f: ee:7d:85:1c:06:96:f8:bf:3e:b4:7a:da:7a:a0:e6: b0:d9:7a:b5:1d:6f:b7:09:80:4c:77:b7:56:8d:47: 23:6b:e4:5d:2f:ab:56:ce:d5:55:3e:d4:4b:72:5a: 18:f3:4f:ad:6d:3a:37:82:52:ee:b9:e0:51:0f:d0: 2d:78:d1:b5:44:e5:9d:a7:88:0e:db:d5:75:bc:cc: 96:62:fc:20:56:22:9d:15:3e:29:7d:cb:e6:93:b0: ff:21:4a:1b:ad:d0:d7:8e:55:22:a1:41:af:d0:41: 99:23:11:28:ea:95:6a:74:50:c0:91:73:b1:63:ce: 1a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3C:42:8A:9A:D2:2A:A5:C7:BD:AE:D1:C0:30:58:44:62:98:FD:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff53e4b0-d180-376e-a5f2-888ce5cf0a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a3:dc:38:1a:e0:bb:60:f1:16:70:9f:f0:ad:a7:ee:e4:48: a3:43:c3:89:03:5d:b6:f2:b2:25:21:ea:90:e2:49:8c:ba:b0: 9f:0c:b9:4e:7f:57:f5:ed:bb:86:67:35:41:b2:6f:6b:0b:69: 96:ad:1b:71:28:84:d5:61:62:8a:6d:cb:87:4f:7f:9f:7e:2e: b8:5e:39:cf:63:72:ff:9e:b9:0f:c1:25:87:2d:27:2d:4d:db: 8a:00:5c:6a:a4:24:9a:9b:17:12:b7:4b:98:02:cb:fc:b5:b2: 87:5b:f4:19:cf:4c:05:e2:55:f8:8d:46:8f:49:53:48:04:e6: 9c:09:e8:fa:28:5a:1e:d3:29:c5:3d:ce:54:5f:cb:48:05:19: 54:cc:e2:f9:4e:c4:22:59:a0:42:51:d9:73:f7:2d:49:83:ca: 2c:a5:cf:f1:2c:b5:df:33:28:b5:91:66:45:1d:05:b7:18:22: 08:59:89:a4:20:0e:b1:07:90:2b:c4:70:d9:fb:78:de:db:f4: b0:1d:59:96:bf:30:72:13:01:f2:d3:05:2c:e1:60:ea:c4:f0: 8c:df:a2:48:1c:9b:b7:61:17:dc:02:7b:3f:d4:15:75:26:34: 6f:9f:e3:18:2f:1c:be:72:57:d2:d9:18:37:d9:2a:e0:0a:c9: a2:b1:01:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgUXWzaRE6Hlp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YWQzMjE4NTEtM2IyNC00YTY5LThkMmEtMmE4ZTM0NDc5MTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzV8peRkVgHbLT6KaoTWNlZpAaWmfX4U5thK 7/Q8xZaVEzp+piOGYp1Zp3/c0NIKUDhL7zmLjXRvgKs4nikQrwz+fKpB4xsQkWLn NMy0XAh3EkCgze+c3CgddnwYYr+fhG6bLgCgBnx5Y4zPCk4WQQrkEdSwD/ErjeT+ 03upT/ODSx/3xg/ufYUcBpb4vz60etp6oOaw2Xq1HW+3CYBMd7dWjUcja+RdL6tW ztVVPtRLcloY80+tbTo3glLuueBRD9AteNG1ROWdp4gO29V1vMyWYvwgViKdFT4p fcvmk7D/IUobrdDXjlUioUGv0EGZIxEo6pVqdFDAkXOxY84a9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGc8Qoqa0iqlx72u0cAwWERimP3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmY1M2U0YjAtZDE4MC0z NzZlLWE1ZjItODg4Y2U1Y2YwYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWj3Dga4Ltg8RZwn/Ctp+7kSKNDw4kDXbbysiUh6pDiSYy6sJ8MuU5/ V/Xtu4ZnNUGyb2sLaZatG3EohNVhYopty4dPf59+LrheOc9jcv+euQ/BJYctJy1N 24oAXGqkJJqbFxK3S5gCy/y1sodb9BnPTAXiVfiNRo9JU0gE5pwJ6PooWh7TKcU9 zlRfy0gFGVTM4vlOxCJZoEJR2XP3LUmDyiylz/Estd8zKLWRZkUdBbcYIghZiaQg DrEHkCvEcNn7eN7b9LAdWZa/MHITAfLTBSzhYOrE8Izfokgcm7dhF9wCez/UFXUm NG+f4xgvHL5yV9LZGDfZKuAKyaKxATA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:45:46 2025 by rpki-client