$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea280e98-a1a3-3afd-bd52-13c674f0529c.roa File: ea280e98-a1a3-3afd-bd52-13c674f0529c.roa (raw, json) Hash identifier: rftb3rpMIMiHJIE7Xf2NPAV1I95xeLbOb3Bi5XysSM0= Subject key identifier: 0F:F1:AD:E3:BE:4E:8D:A9:AC:4B:FC:3F:41:C1:F4:8D:2A:46:2C:AF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AD66B9D1782FBC8287693E680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea280e98-a1a3-3afd-bd52-13c674f0529c.roa Signing time: Wed 13 Aug 2025 01:00:32 +0000 ROA not before: Wed 13 Aug 2025 01:00:32 +0000 ROA not after: Tue 11 Nov 2025 02:00:32 +0000 asID: 214238 IP address blocks: 166.88.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:6b:9d:17:82:fb:c8:28:76:93:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 13 01:00:32 2025 GMT Not After : Nov 11 02:00:32 2025 GMT Subject: CN=f94e80bc-5761-4b0d-bc43-b12176b75d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c6:21:54:e1:94:e5:2a:fe:80:e4:7c:0c:e6: 5f:24:2a:d7:9d:ad:0a:1f:bb:43:b1:ea:ef:56:ea: 6f:1c:37:b3:29:7e:59:28:64:a2:f6:92:d0:ca:da: 05:20:bd:65:c7:92:ba:a1:56:0e:10:4e:ae:0f:90: 74:2e:c1:f0:dc:d9:b6:bf:df:d1:ee:24:8b:b0:ad: 7a:2d:fa:b5:a4:73:86:59:04:11:39:4a:34:bf:c7: ef:e9:e1:30:7f:7e:c4:bc:df:06:01:94:24:35:62: fc:7c:83:dc:57:33:66:8c:32:e7:09:0c:e6:bb:2b: fd:1a:b7:86:16:dc:b2:36:65:92:69:4e:5a:45:94: 44:54:0b:ac:cf:d4:e7:cb:1a:1c:90:b4:d0:63:d9: 41:b3:e0:a0:58:77:ec:4a:8d:39:61:9a:36:06:70: b6:4e:58:2e:07:7f:b9:5f:0f:23:8d:81:89:fa:71: 45:d1:48:e8:fa:9b:a8:6f:8f:5f:2c:2f:c8:e4:ae: d4:25:02:1d:61:28:4d:ab:ad:bd:b9:a3:31:c1:48: f0:2a:47:7d:f5:77:d8:33:96:c6:1b:f5:a9:c0:73: 4f:46:f7:b6:13:a6:70:f1:45:49:f4:5c:c7:2c:80: bf:b0:4d:57:96:b4:71:c2:51:28:09:e5:4e:29:0c: 74:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F1:AD:E3:BE:4E:8D:A9:AC:4B:FC:3F:41:C1:F4:8D:2A:46:2C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea280e98-a1a3-3afd-bd52-13c674f0529c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d4:de:59:0d:2f:8f:5a:58:9b:38:eb:0f:44:d0:f6:74:a4: 08:5d:35:8f:4b:3b:eb:9a:63:08:74:66:1a:1e:07:16:9c:4a: 01:f8:94:eb:55:8b:41:a5:fa:72:5c:da:c7:2a:8e:df:ac:00: 2d:69:c2:74:99:c9:07:63:9b:a1:2f:8e:bf:17:24:f0:90:ed: a4:43:39:a2:21:6e:44:46:d0:80:d1:c6:74:c3:f7:b0:3f:e9: 05:c3:02:fb:4b:22:02:bc:20:c0:0a:81:59:28:0c:5f:a4:0e: bb:86:c1:9b:43:2d:47:6a:b9:32:86:82:29:9a:c6:42:68:31: bc:16:24:e7:8f:23:89:90:2c:c5:5e:8e:c4:32:23:4f:07:70: 29:ac:ee:c2:83:e7:91:1c:03:11:fb:72:ba:51:ca:4e:73:a4: 3c:c7:f1:5a:13:c7:61:ce:cf:84:8f:d3:2b:88:68:88:fd:4c: f1:0c:42:f9:e3:66:45:16:c7:20:84:aa:a1:1b:06:3f:7f:5c: d4:0f:33:82:bf:c8:1c:e6:91:a8:35:13:15:64:40:e7:5b:a8: 7d:41:4a:7f:2e:79:43:a5:a4:ba:a7:54:6a:15:03:40:70:96: 5d:ef:49:49:8b:b4:71:81:65:22:7a:97:89:25:42:68:4c:9a: 2b:43:be:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErWa50XgvvIKHaT5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgxMzAxMDAzMloXDTI1MTExMTAyMDAzMlowLzEtMCsGA1UEAxMk Zjk0ZTgwYmMtNTc2MS00YjBkLWJjNDMtYjEyMTc2Yjc1ZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMYhVOGU5Sr+gOR8DOZfJCrXna0KH7tDserv VupvHDezKX5ZKGSi9pLQytoFIL1lx5K6oVYOEE6uD5B0LsHw3Nm2v9/R7iSLsK16 Lfq1pHOGWQQROUo0v8fv6eEwf37EvN8GAZQkNWL8fIPcVzNmjDLnCQzmuyv9GreG FtyyNmWSaU5aRZREVAusz9TnyxockLTQY9lBs+CgWHfsSo05YZo2BnC2TlguB3+5 Xw8jjYGJ+nFF0Ujo+puob49fLC/I5K7UJQIdYShNq629uaMxwUjwKkd99XfYM5bG G/WpwHNPRve2E6Zw8UVJ9FzHLIC/sE1XlrRxwlEoCeVOKQx0UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/xreO+To2prEv8P0HB9I0qRiyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWEyODBlOTgtYTFhMy0z YWZkLWJkNTItMTNjNjc0ZjA1MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/U3lkNL49aWJs46w9E0PZ0pAhdNY9LO+uaYwh0ZhoeBxacSgH4lOtV i0Gl+nJc2scqjt+sAC1pwnSZyQdjm6Evjr8XJPCQ7aRDOaIhbkRG0IDRxnTD97A/ 6QXDAvtLIgK8IMAKgVkoDF+kDruGwZtDLUdquTKGgimaxkJoMbwWJOePI4mQLMVe jsQyI08HcCms7sKD55EcAxH7crpRyk5zpDzH8VoTx2HOz4SP0yuIaIj9TPEMQvnj ZkUWxyCEqqEbBj9/XNQPM4K/yBzmkag1ExVkQOdbqH1BSn8ueUOlpLqnVGoVA0Bw ll3vSUmLtHGBZSJ6l4klQmhMmitDvuI= -----END CERTIFICATE-----Generated at Fri Oct 24 03:14:45 2025 by rpki-client