$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a504e16-0f45-333c-9eba-ce6c38966d2b.roa File: 9a504e16-0f45-333c-9eba-ce6c38966d2b.roa (raw, json) Hash identifier: 5pO8CSOO3a57hnDgLBfqhkgS0WLA0UjnjW+udUQYn6g= Subject key identifier: A4:35:7E:FD:C8:9C:BC:E2:F6:CA:0E:9A:28:BE:1E:1C:79:09:46:13 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E77303D66657A9A6AA654E8 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a504e16-0f45-333c-9eba-ce6c38966d2b.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:30:3d:66:65:7a:9a:6a:a6:54:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=e4c6cda8-fa37-41af-909b-d6561b29ddb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6a:c5:3f:94:9f:d3:19:c6:5d:ad:92:9c:70: 69:37:40:44:27:98:d9:56:f7:3f:1f:ee:f2:38:2a: 82:45:c1:59:1a:9d:93:81:29:9d:5f:df:e7:8f:e8: b7:50:7e:45:ad:c2:d9:df:fb:f0:a2:65:c1:45:5a: 0d:5c:ae:6f:53:46:cd:d2:8b:7d:1a:84:e3:a0:24: 81:45:2f:30:fd:f3:fa:71:b2:86:ae:d1:83:d2:9c: 9e:ca:9a:1b:d0:8a:e6:94:52:e9:7f:e9:62:de:14: 6d:b8:31:c6:f9:0b:e7:f8:30:7e:b7:41:22:87:3a: 09:1d:78:38:4c:7a:9c:33:b5:38:1e:a8:c4:43:d1: ec:3b:24:0a:2e:b5:ed:a9:a0:69:0d:70:a3:bb:fe: 9b:60:ae:f9:ef:79:d8:58:47:12:3f:60:9e:99:90: d5:f3:e8:c6:34:d6:81:0b:43:3e:8a:21:e0:94:56: 8e:f8:ee:69:c9:14:06:de:b1:9d:d8:1c:39:4f:c3: 49:6e:b1:76:b4:7e:1f:27:81:f6:0f:53:a7:00:06: 9d:dd:6b:35:45:b4:bd:f1:dc:33:b1:c7:ee:51:ec: 26:cd:ec:fd:aa:b8:bf:58:46:f1:36:5d:d5:70:e0: 85:b9:ce:f3:da:60:56:08:82:b9:3e:a3:c7:c9:db: 6a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:35:7E:FD:C8:9C:BC:E2:F6:CA:0E:9A:28:BE:1E:1C:79:09:46:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a504e16-0f45-333c-9eba-ce6c38966d2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ab:88:1d:7b:41:33:ba:a4:4e:ca:dd:5a:81:8d:0e:2a:bd: 65:fb:04:59:cb:95:a7:a6:d0:1a:b1:3e:8e:e9:16:f4:02:34: d1:58:b3:f4:a3:79:4e:90:2e:05:02:38:a3:94:12:a0:ab:77: 1c:e5:84:37:85:58:b1:e0:08:6e:25:ab:34:e8:59:ec:cd:a5: f8:c6:0f:db:d4:9b:c1:20:45:a9:e8:5c:e5:84:e5:db:7a:38: 4e:0a:69:a4:83:ce:91:89:56:6e:f0:59:c6:b0:54:16:45:4f: e9:84:e3:fd:02:28:32:b0:95:13:2f:49:74:06:6a:06:cd:50: 2a:c0:75:52:60:21:00:c6:26:d8:d5:ee:2a:87:c0:93:f8:62: 4b:6e:c2:bf:7f:c9:33:8c:7e:00:a2:e7:5c:9e:e1:3a:e7:1c: ba:7c:01:7b:11:09:27:7b:90:fe:54:e7:53:58:cb:33:ef:47: 48:53:a6:af:64:bb:97:4f:8e:be:35:fb:af:07:df:5f:e7:14: 54:68:bb:9e:63:44:48:c3:43:ca:98:59:04:99:94:36:bb:9a: f2:19:a6:91:eb:f7:5c:d6:c2:ad:a2:a4:58:0d:49:36:79:ad: 9f:ad:f7:cb:89:fd:e8:94:56:ba:f0:18:24:d6:fd:fa:ec:10: a4:cd:c2:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdzA9ZmV6mmqmVOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTRjNmNkYTgtZmEzNy00MWFmLTkwOWItZDY1NjFiMjlkZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2rFP5Sf0xnGXa2SnHBpN0BEJ5jZVvc/H+7y OCqCRcFZGp2TgSmdX9/nj+i3UH5FrcLZ3/vwomXBRVoNXK5vU0bN0ot9GoTjoCSB RS8w/fP6cbKGrtGD0pyeypob0IrmlFLpf+li3hRtuDHG+Qvn+DB+t0EihzoJHXg4 THqcM7U4HqjEQ9HsOyQKLrXtqaBpDXCju/6bYK7573nYWEcSP2CemZDV8+jGNNaB C0M+iiHglFaO+O5pyRQG3rGd2Bw5T8NJbrF2tH4fJ4H2D1OnAAad3Ws1RbS98dwz scfuUewmzez9qri/WEbxNl3VcOCFuc7z2mBWCIK5PqPHydtq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQ1fv3InLzi9soOmii+Hhx5CUYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWE1MDRlMTYtMGY0NS0z MzNjLTllYmEtY2U2YzM4OTY2ZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmriB17QTO6pE7K3VqBjQ4qvWX7BFnLlaem0BqxPo7pFvQCNNFYs/Sj eU6QLgUCOKOUEqCrdxzlhDeFWLHgCG4lqzToWezNpfjGD9vUm8EgRanoXOWE5dt6 OE4KaaSDzpGJVm7wWcawVBZFT+mE4/0CKDKwlRMvSXQGagbNUCrAdVJgIQDGJtjV 7iqHwJP4Yktuwr9/yTOMfgCi51ye4TrnHLp8AXsRCSd7kP5U51NYyzPvR0hTpq9k u5dPjr41+68H31/nFFRou55jREjDQ8qYWQSZlDa7mvIZppHr91zWwq2ipFgNSTZ5 rZ+t98uJ/eiUVrrwGCTW/frsEKTNwsk= -----END CERTIFICATE-----Generated at Mon Oct 20 06:45:45 2025 by rpki-client