$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/920a3a74-1c6d-372f-82da-078e1b30b2a7.roa File: 920a3a74-1c6d-372f-82da-078e1b30b2a7.roa (raw, json) Hash identifier: NyzNhIXzsiS+Yl12QhocV2ZrHHdkJoFPgVoqgEbeYWE= Subject key identifier: C6:E4:2C:95:46:2E:2F:DC:F3:EE:EE:91:2E:92:5E:E4:AC:39:B6:55 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B52A75EF55033FAD276EC3060 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/920a3a74-1c6d-372f-82da-078e1b30b2a7.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 209854 IP address blocks: 166.88.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:5e:f5:50:33:fa:d2:76:ec:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=ff682c31-45f6-4501-ad27-756e9a507bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:d3:bb:8c:9b:cb:9a:c4:60:bb:bf:34:70: ec:82:e6:55:22:5d:af:79:6d:0b:5f:52:b9:22:f2: ae:c7:71:a3:0f:46:7c:71:49:48:c2:95:29:55:66: 8f:09:6b:9e:ef:37:49:60:f9:49:5a:cc:27:d6:5b: 6f:11:c6:a5:5c:cb:64:4f:a7:8e:3a:75:30:6f:a8: a6:3d:31:ea:1e:0a:96:12:70:45:5b:59:33:1f:ff: fd:60:3e:f5:3d:61:35:bb:62:1b:a3:e1:e6:94:53: 26:8d:19:fa:13:82:84:35:a5:3b:14:dd:3c:66:4f: 31:a7:56:e3:3e:87:ab:00:9f:15:1f:e3:bd:96:6a: 50:76:d3:66:38:71:cf:df:57:9c:40:18:b7:8d:43: f6:85:88:0f:8c:5b:d4:05:36:3c:f3:e2:78:c6:1a: f6:c0:35:ac:2b:f8:ac:ff:8a:32:ff:40:56:90:ad: be:c7:72:eb:f9:08:10:84:c2:c5:ae:eb:77:24:39: d9:bc:91:7e:20:87:17:09:1b:52:90:c3:69:d1:78: 9a:e6:f2:e7:08:d9:8f:ea:84:9a:39:1c:e0:ae:6f: b0:03:7b:a4:68:1c:b0:aa:f5:14:31:78:ef:83:28: 71:d0:5e:29:8e:4a:4a:3f:0c:b2:8f:03:e6:31:23: b9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E4:2C:95:46:2E:2F:DC:F3:EE:EE:91:2E:92:5E:E4:AC:39:B6:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/920a3a74-1c6d-372f-82da-078e1b30b2a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:87:0b:c7:62:38:5c:db:b8:5b:76:c7:14:7a:0b:1d:88:cc: 62:22:04:64:9a:b4:2e:8b:be:16:2f:23:c9:cc:7a:6e:59:5c: c8:7c:7c:c8:a2:ee:24:3b:c7:fd:14:a0:76:57:fe:cf:76:7b: 48:f7:e3:f3:9f:6e:8f:52:be:06:41:cb:ea:ed:d5:3b:c5:ce: 91:be:64:47:31:39:59:57:77:37:c1:e9:5e:0e:8e:28:69:2e: 36:2e:84:91:16:03:92:e9:aa:c1:33:7c:22:6d:cc:70:d9:63: 37:8d:db:67:e0:b5:77:ee:f8:da:af:ae:fe:b1:5e:89:a3:c1: 40:6a:b4:ff:28:03:92:e5:4e:5a:25:97:97:c8:a9:bd:3e:4f: 81:d6:05:71:a1:32:69:fb:48:20:56:c1:7d:26:c0:bd:67:19: c8:c0:4b:f3:58:72:6a:94:58:50:ef:48:23:3d:b6:26:b8:15: d6:bf:b4:1a:a2:c6:56:7a:df:dd:b0:ac:8f:82:54:8f:f5:6a: 0d:11:b1:b6:9c:3d:a4:9b:59:96:ba:71:fa:80:c6:98:b4:45: a5:6c:c5:8a:f2:6e:19:32:5c:f1:55:f8:41:1c:16:72:e8:08: 58:20:27:31:c5:71:f4:56:e9:d1:ec:cd:f2:21:f5:27:76:52: 31:a0:0d:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp171UDP60nbsMGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZmY2ODJjMzEtNDVmNi00NTAxLWFkMjctNzU2ZTlhNTA3YmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8rTu4yby5rEYLu/NHDsguZVIl2veW0LX1K5 IvKux3GjD0Z8cUlIwpUpVWaPCWue7zdJYPlJWswn1ltvEcalXMtkT6eOOnUwb6im PTHqHgqWEnBFW1kzH//9YD71PWE1u2Ibo+HmlFMmjRn6E4KENaU7FN08Zk8xp1bj PoerAJ8VH+O9lmpQdtNmOHHP31ecQBi3jUP2hYgPjFvUBTY88+J4xhr2wDWsK/is /4oy/0BWkK2+x3Lr+QgQhMLFrut3JDnZvJF+IIcXCRtSkMNp0Xia5vLnCNmP6oSa ORzgrm+wA3ukaBywqvUUMXjvgyhx0F4pjkpKPwyyjwPmMSO5UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbkLJVGLi/c8+7ukS6SXuSsObZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTIwYTNhNzQtMWM2ZC0z NzJmLTgyZGEtMDc4ZTFiMzBiMmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKHC8diOFzbuFt2xxR6Cx2IzGIiBGSatC6LvhYvI8nMem5ZXMh8fMii 7iQ7x/0UoHZX/s92e0j34/Ofbo9SvgZBy+rt1TvFzpG+ZEcxOVlXdzfB6V4Ojihp LjYuhJEWA5LpqsEzfCJtzHDZYzeN22fgtXfu+Nqvrv6xXomjwUBqtP8oA5LlTlol l5fIqb0+T4HWBXGhMmn7SCBWwX0mwL1nGcjAS/NYcmqUWFDvSCM9tia4Fda/tBqi xlZ6392wrI+CVI/1ag0RsbacPaSbWZa6cfqAxpi0RaVsxYrybhkyXPFV+EEcFnLo CFggJzHFcfRW6dHszfIh9Sd2UjGgDc8= -----END CERTIFICATE-----Generated at Sun Oct 19 20:47:11 2025 by rpki-client