$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/907e1b0c-1f61-3fdf-bc58-a2eee123cfdc.roa File: 907e1b0c-1f61-3fdf-bc58-a2eee123cfdc.roa (raw, json) Hash identifier: 40/MZEYobPCST/S6rFpcyhEIh6qhlISyW3VOTJR+Gss= Subject key identifier: 8A:34:26:C7:72:D2:C7:5C:21:43:87:92:7E:DB:88:09:8B:7B:58:37 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B94422CC2C798D3A5BBEBA808 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/907e1b0c-1f61-3fdf-bc58-a2eee123cfdc.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 401152 IP address blocks: 166.88.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:2c:c2:c7:98:d3:a5:bb:eb:a8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=3900c3fd-c76e-410e-b0cc-9c25bc735168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:0f:65:f5:cf:96:9b:38:e0:48:9e:9e:24: 98:52:91:65:45:94:67:7d:29:a8:15:77:e6:d7:84: a3:d0:17:75:5d:ba:7a:bc:ff:53:e8:c7:db:3e:bf: 13:4e:f2:7c:3d:70:39:82:f9:e5:75:95:df:17:9d: f3:ff:f2:e9:96:e9:d7:64:f7:af:03:c8:33:3e:6b: 22:b7:b5:b5:54:19:14:82:41:eb:48:7a:da:73:a6: 4f:37:1b:a4:3d:26:78:50:15:a4:6b:58:a5:c0:5b: 27:d3:2e:71:29:6b:68:7f:34:ff:1d:3e:c2:4a:91: 41:92:86:d1:3a:91:0a:78:18:c5:a6:68:48:99:80: 62:50:9e:c3:1e:9e:a6:a5:ad:38:b1:44:42:7f:55: 01:b0:38:67:57:45:0d:5f:5c:c8:19:30:ca:77:60: f1:8b:24:6b:37:d1:73:9d:23:60:e4:d3:3a:f0:a3: 9d:fd:14:73:ee:f6:b1:a3:96:af:fb:9f:f5:56:5b: 24:c4:fd:a6:44:5a:19:7a:c5:83:69:ae:9f:dc:8f: 8b:13:6b:e1:57:9b:38:ce:bd:6e:2d:cc:91:55:5b: 61:3a:fc:fc:7e:e3:fc:81:00:d6:06:2f:57:78:85: 4a:7b:e4:35:88:91:4d:c1:d1:a9:62:2b:f8:2c:ae: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:34:26:C7:72:D2:C7:5C:21:43:87:92:7E:DB:88:09:8B:7B:58:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/907e1b0c-1f61-3fdf-bc58-a2eee123cfdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:f8:3a:81:ad:60:31:93:b5:91:67:db:bc:58:cb:d5:7f:1e: d6:62:6f:c6:0a:5d:36:c5:73:dc:1e:fc:cc:f9:c4:39:e2:05: a7:d1:97:8e:b2:a8:09:77:c9:88:41:e6:c4:ac:87:8a:4f:c2: 7b:4e:30:33:04:0d:43:d3:26:42:20:ca:aa:99:0b:10:3b:bd: 34:52:31:e2:fd:af:16:72:3e:42:fa:04:09:4c:f5:8e:b0:ab: e7:55:bb:40:2f:13:a2:6a:cc:f0:a9:e1:db:e6:e9:7e:44:36: d3:1b:af:24:80:8b:d9:25:ac:ca:e8:25:34:9d:8c:f2:db:de: 4b:8a:d3:e2:cb:87:cd:39:15:81:71:01:67:ca:93:34:de:a6: 5f:0b:0f:aa:f1:10:43:25:9c:fb:e8:13:6b:6b:64:48:36:ac: 24:8b:cf:f6:de:5c:44:19:3e:5f:ff:ae:cb:5b:f9:da:bf:af: b8:b4:ae:02:5d:b9:da:7e:25:69:ec:fb:ce:3f:88:e4:2b:49: 59:65:56:ec:38:09:cf:1e:7d:68:53:25:cb:c9:d7:b9:6c:73: f7:1d:f6:d4:42:ef:41:aa:60:a3:0c:56:94:e8:dc:86:2a:bf: d1:a2:86:d3:ee:f7:0b:d8:fc:49:12:65:06:a7:8a:3b:4b:d3: 56:73:f5:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQizCx5jTpbvrqAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk MzkwMGMzZmQtYzc2ZS00MTBlLWIwY2MtOWMyNWJjNzM1MTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqsPZfXPlps44EieniSYUpFlRZRnfSmoFXfm 14Sj0Bd1Xbp6vP9T6MfbPr8TTvJ8PXA5gvnldZXfF53z//LplunXZPevA8gzPmsi t7W1VBkUgkHrSHrac6ZPNxukPSZ4UBWka1ilwFsn0y5xKWtofzT/HT7CSpFBkobR OpEKeBjFpmhImYBiUJ7DHp6mpa04sURCf1UBsDhnV0UNX1zIGTDKd2DxiyRrN9Fz nSNg5NM68KOd/RRz7vaxo5av+5/1VlskxP2mRFoZesWDaa6f3I+LE2vhV5s4zr1u LcyRVVthOvz8fuP8gQDWBi9XeIVKe+Q1iJFNwdGpYiv4LK5HHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo0Jsdy0sdcIUOHkn7biAmLe1g3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTA3ZTFiMGMtMWY2MS0z ZmRmLWJjNTgtYTJlZWUxMjNjZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKT4OoGtYDGTtZFn27xYy9V/HtZib8YKXTbFc9we/Mz5xDniBafRl46y qAl3yYhB5sSsh4pPwntOMDMEDUPTJkIgyqqZCxA7vTRSMeL9rxZyPkL6BAlM9Y6w q+dVu0AvE6JqzPCp4dvm6X5ENtMbrySAi9klrMroJTSdjPLb3kuK0+LLh805FYFx AWfKkzTepl8LD6rxEEMlnPvoE2trZEg2rCSLz/beXEQZPl//rstb+dq/r7i0rgJd udp+JWns+84/iOQrSVllVuw4Cc8efWhTJcvJ17lsc/cd9tRC70GqYKMMVpTo3IYq v9GihtPu9wvY/EkSZQanijtL01Zz9bE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:07:26 2025 by rpki-client