$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f95846f5-5b98-3f6a-bc9e-f04598b42be3.roa File: f95846f5-5b98-3f6a-bc9e-f04598b42be3.roa (raw, json) Hash identifier: c5rBsGc/HcKPQwtdrIixbNYRM3ZaE11CUgevkdBsECU= Subject key identifier: F0:FE:F6:F5:AD:3C:13:A8:8B:D5:9D:3D:D1:A7:24:07:B5:1F:45:2E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B1086C9C2BF8FDEAB7A018AC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f95846f5-5b98-3f6a-bc9e-f04598b42be3.roa Signing time: Tue 02 Sep 2025 20:32:13 +0000 ROA not before: Tue 02 Sep 2025 20:32:13 +0000 ROA not after: Mon 01 Dec 2025 21:32:13 +0000 asID: 401152 IP address blocks: 166.88.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:86:c9:c2:bf:8f:de:ab:7a:01:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 20:32:13 2025 GMT Not After : Dec 1 21:32:13 2025 GMT Subject: CN=411d0cb8-ad09-454a-aaa0-c649d79f3acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2d:1d:22:fb:ed:e8:2d:e5:66:3a:c4:3c:c6: 8a:96:b9:0f:47:15:90:63:1c:8c:73:1e:03:50:78: f4:d4:b5:4a:58:77:56:a6:aa:b8:41:42:c0:59:1f: f7:e6:2f:0f:f5:37:ac:a0:75:09:da:35:01:65:3d: 5d:3a:10:b7:0a:2f:5b:ba:28:f6:91:43:e9:f9:33: 9e:1c:f0:92:f6:54:b0:f7:f7:1d:5b:6f:d8:7e:6a: 08:e5:a3:9a:a7:96:07:4b:b7:7f:9e:8e:67:e2:3c: 1e:68:39:8d:6d:a8:96:0b:dd:33:a6:55:e8:8d:f7: e4:2f:bf:99:b8:04:47:e1:f6:e1:74:91:94:ce:d4: a4:49:e4:ec:c2:d7:28:29:7e:6a:1c:63:85:2a:24: 70:31:8a:b8:f7:8b:2d:2f:a9:76:3c:19:98:58:2d: 3e:65:b2:9e:c9:d1:ce:3b:ea:a9:58:65:ea:32:21: 5c:23:da:a8:b5:2d:05:a6:3c:65:1f:65:98:d4:94: d8:ef:41:5c:b8:a1:54:26:d0:6e:bf:11:57:12:ee: 9d:37:4e:cc:f5:89:c2:6f:e4:3f:94:cd:ed:d4:b9: 2f:09:8b:2e:28:c3:9f:a6:2e:bf:95:dc:8c:69:bc: 3c:54:95:9f:7c:c4:28:04:f2:c0:f0:01:5d:75:95: 3b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FE:F6:F5:AD:3C:13:A8:8B:D5:9D:3D:D1:A7:24:07:B5:1F:45:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f95846f5-5b98-3f6a-bc9e-f04598b42be3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:06:b1:db:ee:ac:84:f2:69:04:14:bd:f3:14:68:ed:2a:36: 03:ee:33:7b:2b:5d:19:74:70:b1:f2:42:10:cc:fa:26:f6:e5: e3:d1:09:1c:6e:5c:a6:7c:f1:64:42:b5:d4:8c:a3:37:90:bc: 30:97:73:f0:ae:16:ca:2f:0e:17:c3:c4:e8:43:fa:61:44:28: f0:49:76:81:78:10:e3:02:4c:51:a4:24:bb:35:4c:dc:e9:1a: 02:d1:1d:cb:4d:87:43:c4:2e:e4:54:61:97:ee:96:12:d2:91: 09:e1:d5:41:89:a3:a3:05:cb:8f:34:01:26:d3:13:a3:77:de: bd:d5:75:c1:1d:3e:6a:da:7f:00:53:93:46:37:6b:5e:24:a7: 6c:bd:8d:f9:85:2f:7a:6e:f9:15:c2:f7:0e:31:6d:04:d3:fa: 6c:65:87:62:74:0d:f1:ec:3d:73:db:6f:fb:72:55:27:1d:4f: 61:9f:01:70:81:88:af:be:61:ab:74:83:d4:b9:0c:2f:43:f2: 62:73:ce:dd:1c:16:e6:28:e4:1e:e9:8b:c1:5a:52:b8:43:26: 58:d0:18:5a:ec:df:87:0d:c6:7e:24:10:ce:ba:cc:6b:1a:4f: 13:54:73:53:08:30:af:a5:d0:3d:a6:56:4d:35:9d:af:be:20: 19:15:3f:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsQhsnCv4/eq3oBisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwMjIwMzIxM1oXDTI1MTIwMTIxMzIxM1owLzEtMCsGA1UEAxMk NDExZDBjYjgtYWQwOS00NTRhLWFhYTAtYzY0OWQ3OWYzYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS0dIvvt6C3lZjrEPMaKlrkPRxWQYxyMcx4D UHj01LVKWHdWpqq4QULAWR/35i8P9TesoHUJ2jUBZT1dOhC3Ci9buij2kUPp+TOe HPCS9lSw9/cdW2/YfmoI5aOap5YHS7d/no5n4jweaDmNbaiWC90zplXojffkL7+Z uARH4fbhdJGUztSkSeTswtcoKX5qHGOFKiRwMYq494stL6l2PBmYWC0+ZbKeydHO O+qpWGXqMiFcI9qotS0FpjxlH2WY1JTY70FcuKFUJtBuvxFXEu6dN07M9YnCb+Q/ lM3t1LkvCYsuKMOfpi6/ldyMabw8VJWffMQoBPLA8AFddZU72QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPD+9vWtPBOoi9WdPdGnJAe1H0UuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjk1ODQ2ZjUtNWI5OC0z ZjZhLWJjOWUtZjA0NTk4YjQyYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMGsdvurITyaQQUvfMUaO0qNgPuM3srXRl0cLHyQhDM+ib25ePRCRxu XKZ88WRCtdSMozeQvDCXc/CuFsovDhfDxOhD+mFEKPBJdoF4EOMCTFGkJLs1TNzp GgLRHctNh0PELuRUYZfulhLSkQnh1UGJo6MFy480ASbTE6N33r3VdcEdPmrafwBT k0Y3a14kp2y9jfmFL3pu+RXC9w4xbQTT+mxlh2J0DfHsPXPbb/tyVScdT2GfAXCB iK++Yat0g9S5DC9D8mJzzt0cFuYo5B7pi8FaUrhDJljQGFrs34cNxn4kEM66zGsa TxNUc1MIMK+l0D2mVk01na++IBkVP2M= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:12 2025 by rpki-client