$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d1a5790-e5b1-3a29-958e-37dc61e0eedc.roa File: 8d1a5790-e5b1-3a29-958e-37dc61e0eedc.roa (raw, json) Hash identifier: rb2rBoTVcUVISubxGF6CNpRdvkDigyyWS6OWUbCrxdU= Subject key identifier: 04:5D:79:29:1B:3A:F0:AC:8C:01:27:3A:38:48:20:47:42:1C:DB:04 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E773176C19D55EEF3208980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d1a5790-e5b1-3a29-958e-37dc61e0eedc.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:31:76:c1:9d:55:ee:f3:20:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=ecca06b6-6799-46d7-864c-a5901d621969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:87:6b:e0:06:3c:ce:19:2e:da:81:80:22:82: 44:0b:fd:4f:9b:6a:c3:6b:ef:f5:a3:f8:3d:16:ce: 4e:39:4d:92:06:3e:cc:31:58:cb:46:1d:28:45:6b: 6d:b3:e0:5e:3a:93:e1:8c:40:c8:ae:b2:ab:04:8e: 8a:14:1e:f0:e8:c9:03:68:2c:74:eb:5a:0a:63:9c: dc:7a:fc:ce:2c:6b:af:86:4d:09:85:a8:aa:3d:0e: 8d:be:0d:be:14:5c:4a:73:1a:83:53:57:9b:91:59: 86:81:a5:0a:22:1b:63:01:ed:67:8b:53:0c:d3:11: 63:c4:80:67:13:6a:a4:c6:a8:3b:1b:0b:89:ec:75: 5a:4c:75:53:59:c8:fe:47:ab:39:9d:15:af:90:29: eb:f2:bf:5a:bb:7c:16:ed:b1:60:b9:70:ec:81:45: a6:8d:17:73:4f:b5:19:4f:86:5b:85:c5:04:8a:70: 24:c0:c0:59:4c:aa:f1:3b:eb:c2:f0:e4:05:15:52: e6:f0:f4:e7:2f:4f:a3:66:93:58:74:68:ad:d1:95: 20:3a:14:e4:ce:04:62:be:41:5a:98:80:eb:51:61: a7:41:0d:7f:2c:60:d0:8a:12:06:b0:44:b1:22:6b: c9:f2:45:9e:a1:15:bc:fa:2f:eb:cb:59:c3:28:1b: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5D:79:29:1B:3A:F0:AC:8C:01:27:3A:38:48:20:47:42:1C:DB:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d1a5790-e5b1-3a29-958e-37dc61e0eedc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:8d:46:f4:f5:24:55:5d:b4:13:c3:43:6a:3f:c1:9a:30:87: 9e:fb:cb:b4:0a:94:3a:97:32:81:e5:c3:cc:4a:57:15:bd:ec: e8:b7:68:0f:66:d1:84:68:6e:51:03:e0:30:47:82:ab:a8:28: 41:bf:d2:af:28:76:d7:7f:b6:5d:0f:7c:9c:fc:8b:20:4d:21: e5:36:0f:13:66:ee:93:db:40:d3:ba:89:a6:55:ae:d8:49:15: 4e:b2:c1:f0:ef:f9:38:db:da:b5:73:66:cc:42:45:b2:bf:3f: 87:82:f7:da:f1:30:e2:6b:f3:d5:85:e0:da:2b:df:af:85:d6: 32:d2:4f:3e:d7:37:df:04:e1:cf:c2:56:05:5b:3e:52:fe:df: 4a:81:7c:19:ea:e1:94:27:e7:db:d0:cb:05:e3:80:cf:f2:b1: 8b:d2:2d:34:4f:64:1c:5f:2f:68:52:43:b8:cd:32:ae:3f:1f: 83:0b:99:63:e2:18:10:a8:01:3d:f7:9d:f7:24:12:94:00:4e: 50:8d:70:fa:0c:fe:32:75:d7:d1:1c:59:10:a5:a3:3c:34:1c: 38:e5:a7:b2:fd:70:b4:c8:d7:5b:ca:7d:eb:02:72:39:67:d9: da:47:33:18:b6:c4:3e:de:d8:b3:0c:8b:15:02:09:97:7a:2e: 2f:8a:44:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdzF2wZ1V7vMgiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZWNjYTA2YjYtNjc5OS00NmQ3LTg2NGMtYTU5MDFkNjIxOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYdr4AY8zhku2oGAIoJEC/1Pm2rDa+/1o/g9 Fs5OOU2SBj7MMVjLRh0oRWtts+BeOpPhjEDIrrKrBI6KFB7w6MkDaCx061oKY5zc evzOLGuvhk0JhaiqPQ6Nvg2+FFxKcxqDU1ebkVmGgaUKIhtjAe1ni1MM0xFjxIBn E2qkxqg7GwuJ7HVaTHVTWcj+R6s5nRWvkCnr8r9au3wW7bFguXDsgUWmjRdzT7UZ T4ZbhcUEinAkwMBZTKrxO+vC8OQFFVLm8PTnL0+jZpNYdGit0ZUgOhTkzgRivkFa mIDrUWGnQQ1/LGDQihIGsESxImvJ8kWeoRW8+i/ry1nDKBuAaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARdeSkbOvCsjAEnOjhIIEdCHNsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGQxYTU3OTAtZTViMS0z YTI5LTk1OGUtMzdkYzYxZTBlZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6NRvT1JFVdtBPDQ2o/wZowh577y7QKlDqXMoHlw8xKVxW97Oi3aA9m 0YRoblED4DBHgquoKEG/0q8odtd/tl0PfJz8iyBNIeU2DxNm7pPbQNO6iaZVrthJ FU6ywfDv+Tjb2rVzZsxCRbK/P4eC99rxMOJr89WF4Nor36+F1jLSTz7XN98E4c/C VgVbPlL+30qBfBnq4ZQn59vQywXjgM/ysYvSLTRPZBxfL2hSQ7jNMq4/H4MLmWPi GBCoAT33nfckEpQATlCNcPoM/jJ119EcWRClozw0HDjlp7L9cLTI11vKfesCcjln 2dpHMxi2xD7e2LMMixUCCZd6Li+KRBY= -----END CERTIFICATE-----Generated at Tue Oct 21 03:56:55 2025 by rpki-client