$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/68ecb551-9f1d-3522-9d43-efcc630d6d1e.roa File: 68ecb551-9f1d-3522-9d43-efcc630d6d1e.roa (raw, json) Hash identifier: HUpjvKQX/oTEGR5yYQQ3ZHlC4z/2tLujre2jn8mAnz0= Subject key identifier: D4:7B:D0:31:91:F9:A1:AB:0F:AB:F2:1F:4E:08:30:4D:CD:D2:95:20 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B94422D2B718688098FD41180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/68ecb551-9f1d-3522-9d43-efcc630d6d1e.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 401152 IP address blocks: 166.88.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:2d:2b:71:86:88:09:8f:d4:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=c7743e42-23d0-4ba6-95e8-d68448cc24e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3f:79:88:ee:f4:38:ad:ad:be:b9:13:cb:13: 11:07:f6:c7:78:9d:b7:6e:a8:3c:18:3e:96:56:56: 16:b4:fd:06:9a:47:a4:c5:66:19:b5:63:6d:e8:4e: 30:08:d3:f1:4b:16:0d:58:3e:61:1a:31:d2:b0:8a: 24:9b:62:b3:00:d5:c4:cc:a0:d1:88:3a:a6:fc:4e: e7:d9:44:b8:aa:69:7c:d8:92:07:78:7d:3f:ed:e1: ad:d8:b4:a7:c5:df:2b:0f:a8:b2:f6:13:47:e7:c9: 3f:f5:81:9a:91:ec:c3:ae:f6:6f:bf:68:34:c8:dd: 1c:b1:64:09:5c:b2:4b:01:ed:bd:d8:4f:da:92:a6: 11:a8:fa:de:26:b1:37:2e:b1:af:b7:e7:d1:69:f0: ad:b4:73:07:ca:4d:cc:10:d6:6b:8b:c0:50:8a:81: 3d:59:e3:42:26:d5:2a:6a:63:b3:ab:38:ca:c2:d1: 19:38:67:2b:e8:cc:4e:1c:4e:96:d8:9b:4e:f6:2e: ea:c4:2f:4c:e9:1c:27:0d:c5:ef:40:5d:4f:cb:77: a6:46:18:e0:14:bb:cb:be:25:69:1a:42:78:12:44: ed:2e:45:bd:96:1a:e1:24:4d:2b:ab:1d:4f:b7:93: d3:29:f7:8f:49:51:18:22:38:e6:ed:b8:18:85:25: 04:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7B:D0:31:91:F9:A1:AB:0F:AB:F2:1F:4E:08:30:4D:CD:D2:95:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/68ecb551-9f1d-3522-9d43-efcc630d6d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:0c:18:2d:06:77:87:77:5c:7d:3a:a1:74:8a:9b:42:91:2c: 45:56:12:49:a6:76:7c:91:f5:19:ba:3a:2e:2f:3a:d3:dd:3f: 4c:cc:1c:60:27:71:29:0c:06:f5:a1:40:c7:5a:54:d0:48:d9: ea:47:e6:f2:bf:6b:aa:ef:a9:0b:62:e3:f3:6b:8c:35:74:a3: d5:2c:f8:5d:f5:2f:0b:d1:78:a4:07:a9:48:d2:f5:32:1e:66: 61:7d:d0:0f:28:52:03:90:36:d7:41:e9:01:1b:5e:a4:d4:d0: e3:fd:2d:8c:33:d5:8d:a6:e9:c7:2f:d7:cd:b8:7d:91:eb:50: 83:30:e7:7e:d3:6a:16:00:0d:38:66:f4:f0:22:37:32:bc:44: b1:f6:b4:0d:36:8a:21:73:75:86:3f:fe:c3:49:66:1e:57:00: 5e:7f:f8:aa:62:81:66:10:bb:e1:5b:1a:d6:55:19:07:4f:de: 1a:9a:9b:e7:30:71:1d:25:34:ec:36:2e:16:54:39:18:34:cc: 8e:a7:59:36:9f:46:79:fa:c6:ba:88:3d:41:54:ac:fd:07:5a: 83:25:5d:fe:f7:09:50:78:20:43:9a:29:04:4a:9b:06:15:a1: 16:87:1c:38:18:db:5e:82:de:47:db:bb:e9:a0:4e:c4:0f:77: 2a:c2:27:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQi0rcYaICY/UEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk Yzc3NDNlNDItMjNkMC00YmE2LTk1ZTgtZDY4NDQ4Y2MyNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD95iO70OK2tvrkTyxMRB/bHeJ23bqg8GD6W VlYWtP0GmkekxWYZtWNt6E4wCNPxSxYNWD5hGjHSsIokm2KzANXEzKDRiDqm/E7n 2US4qml82JIHeH0/7eGt2LSnxd8rD6iy9hNH58k/9YGakezDrvZvv2g0yN0csWQJ XLJLAe292E/akqYRqPreJrE3LrGvt+fRafCttHMHyk3MENZri8BQioE9WeNCJtUq amOzqzjKwtEZOGcr6MxOHE6W2JtO9i7qxC9M6RwnDcXvQF1Py3emRhjgFLvLviVp GkJ4EkTtLkW9lhrhJE0rqx1Pt5PTKfePSVEYIjjm7bgYhSUEwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNR70DGR+aGrD6vyH04IME3N0pUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjhlY2I1NTEtOWYxZC0z NTIyLTlkNDMtZWZjYzYzMGQ2ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8MGC0Gd4d3XH06oXSKm0KRLEVWEkmmdnyR9Rm6Oi4vOtPdP0zMHGAn cSkMBvWhQMdaVNBI2epH5vK/a6rvqQti4/NrjDV0o9Us+F31LwvReKQHqUjS9TIe ZmF90A8oUgOQNtdB6QEbXqTU0OP9LYwz1Y2m6ccv1824fZHrUIMw537TahYADThm 9PAiNzK8RLH2tA02iiFzdYY//sNJZh5XAF5/+KpigWYQu+FbGtZVGQdP3hqam+cw cR0lNOw2LhZUORg0zI6nWTafRnn6xrqIPUFUrP0HWoMlXf73CVB4IEOaKQRKmwYV oRaHHDgY216C3kfbu+mgTsQPdyrCJxA= -----END CERTIFICATE-----Generated at Mon Oct 20 23:35:49 2025 by rpki-client