$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4127bbda-9a3a-3cfe-8c8a-a30bd9c168fb.roa File: 4127bbda-9a3a-3cfe-8c8a-a30bd9c168fb.roa (raw, json) Hash identifier: kJVINUa0CqssdPgEgYcPqZLiYFP9iUIzJNhmChEHOeI= Subject key identifier: 6F:E6:3E:38:B9:79:7A:5C:CD:EF:44:2B:20:59:D1:07:2C:A0:FC:F1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B7DECCEC41533C41553FEA580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4127bbda-9a3a-3cfe-8c8a-a30bd9c168fb.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 7385 IP address blocks: 166.88.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:ce:c4:15:33:c4:15:53:fe:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=72a5bd44-2206-4244-9af4-0b61666afa4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6c:a7:59:d6:98:93:cc:c5:0e:a5:cf:fa:6e: cc:17:81:23:1c:0b:85:2b:5b:1a:dc:1b:92:9b:3d: ac:25:46:e5:fd:9d:97:83:47:b7:42:a2:bf:f4:70: c8:da:5f:44:86:a7:39:3c:4b:17:cc:af:22:99:6e: 46:8e:da:21:c6:bd:61:ea:f4:ae:f3:95:a4:30:bc: 6f:7b:2c:b2:14:d1:26:3e:25:8d:d4:41:46:9e:09: c7:9e:b4:28:72:b7:db:52:59:9b:90:ea:f1:a6:1d: 94:98:85:70:1e:9c:4f:16:ea:d2:ab:cf:ab:d4:26: 0c:75:0a:5d:02:9b:3c:6e:56:2b:c6:ba:38:ae:30: cb:31:5f:65:cc:cf:ba:74:5b:50:eb:0c:0e:f9:eb: c8:7e:f9:25:a3:cc:4e:54:21:46:b4:68:57:6e:61: 63:a4:c1:73:60:59:5f:5b:d2:c3:29:94:eb:44:6e: ec:86:88:98:e9:f7:40:bb:79:9f:7e:97:ae:a4:e9: 93:c1:60:f2:63:fe:32:a0:59:7c:32:af:ce:43:f9: 57:15:ba:99:81:90:53:12:a3:11:a0:b2:59:ca:fa: 5a:2a:41:07:3f:43:ea:80:d0:a6:e9:83:18:b2:a1: d4:e3:06:37:2c:93:fa:3f:8c:e4:69:fe:8c:dd:56: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E6:3E:38:B9:79:7A:5C:CD:EF:44:2B:20:59:D1:07:2C:A0:FC:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4127bbda-9a3a-3cfe-8c8a-a30bd9c168fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:02:f7:e0:c6:f5:b6:f6:38:e2:5c:bb:e0:c4:c0:c3:97:b9: 12:2c:10:ce:56:1f:23:5a:41:1b:36:77:81:b8:fd:24:78:c7: bc:4c:b3:7a:d6:6e:df:59:2d:39:f2:f3:39:fd:ba:e7:2c:2f: 44:6f:f8:fc:99:a6:2e:1e:92:3c:39:06:ce:73:55:0b:96:b4: 58:11:24:60:be:31:24:38:35:91:52:66:6a:27:63:99:d5:90: 91:ca:16:21:23:d1:47:81:3d:69:11:d7:0b:7b:42:f2:2b:fe: 82:63:2e:a4:be:ea:46:fd:e0:79:fc:35:69:b5:81:40:4d:09: 6c:25:10:a7:de:8b:de:f6:7f:18:21:35:fd:91:44:84:71:58: 77:ca:03:f2:98:3a:75:2e:6a:40:45:05:07:85:2c:3d:19:ed: 8a:32:39:7c:f7:e5:06:89:63:ec:d3:77:5b:1f:46:23:4f:da: 18:4e:0f:c3:65:38:7e:c5:ea:4c:a4:ff:0a:aa:d2:bd:e3:f1: dc:9b:a1:f1:91:8b:3b:54:98:2b:20:e1:a9:68:64:1f:c2:cf: ca:98:4c:6e:0e:17:3a:67:a0:34:6d:72:37:c3:f9:6f:61:c0: f0:f6:55:65:77:16:a1:a7:3d:51:45:fe:43:64:08:f3:f6:31: 2b:ac:98:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97M7EFTPEFVP+pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NzJhNWJkNDQtMjIwNi00MjQ0LTlhZjQtMGI2MTY2NmFmYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2ynWdaYk8zFDqXP+m7MF4EjHAuFK1sa3BuS mz2sJUbl/Z2Xg0e3QqK/9HDI2l9Ehqc5PEsXzK8imW5Gjtohxr1h6vSu85WkMLxv eyyyFNEmPiWN1EFGngnHnrQocrfbUlmbkOrxph2UmIVwHpxPFurSq8+r1CYMdQpd Aps8blYrxro4rjDLMV9lzM+6dFtQ6wwO+evIfvklo8xOVCFGtGhXbmFjpMFzYFlf W9LDKZTrRG7shoiY6fdAu3mffpeupOmTwWDyY/4yoFl8Mq/OQ/lXFbqZgZBTEqMR oLJZyvpaKkEHP0PqgNCm6YMYsqHU4wY3LJP6P4zkaf6M3VZokQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/mPji5eXpcze9EKyBZ0QcsoPzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDEyN2JiZGEtOWEzYS0z Y2ZlLThjOGEtYTMwYmQ5YzE2OGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4C9+DG9bb2OOJcu+DEwMOXuRIsEM5WHyNaQRs2d4G4/SR4x7xMs3rW bt9ZLTny8zn9uucsL0Rv+PyZpi4ekjw5Bs5zVQuWtFgRJGC+MSQ4NZFSZmonY5nV kJHKFiEj0UeBPWkR1wt7QvIr/oJjLqS+6kb94Hn8NWm1gUBNCWwlEKfei972fxgh Nf2RRIRxWHfKA/KYOnUuakBFBQeFLD0Z7YoyOXz35QaJY+zTd1sfRiNP2hhOD8Nl OH7F6kyk/wqq0r3j8dybofGRiztUmCsg4aloZB/Cz8qYTG4OFzpnoDRtcjfD+W9h wPD2VWV3FqGnPVFF/kNkCPP2MSusmNw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:00:59 2025 by rpki-client