$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a2b883ff-658e-3dd9-9c02-7b22660b8274.roa File: a2b883ff-658e-3dd9-9c02-7b22660b8274.roa (raw, json) Hash identifier: LXNd1owTo2J7CBCbbQfcCZjQ2TCP0q4AVMYEKJ1J9BM= Subject key identifier: A9:27:84:39:59:6D:5C:D6:C2:B3:27:22:20:34:B0:2B:F6:CB:A6:7D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B6797FE2D2ED8AC3D8F68B0C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a2b883ff-658e-3dd9-9c02-7b22660b8274.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 44559 IP address blocks: 166.88.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:fe:2d:2e:d8:ac:3d:8f:68:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=5cebcfff-1042-4f87-b4f2-c7b77338c5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:a0:8b:12:23:eb:da:43:05:56:ef:a1:c2: 9c:9c:f5:d9:38:ba:85:85:c8:dc:e4:19:8b:e6:e3: 43:18:d8:73:a4:81:fd:07:76:09:89:43:a7:29:e7: 0e:a3:0e:9e:71:66:cd:3e:2e:35:51:a3:b9:f9:53: 46:7d:91:54:c9:4d:0a:96:a7:11:45:a8:f7:30:81: 3b:6b:f9:33:9c:f4:df:42:f6:60:67:af:e7:3e:16: ed:f9:58:39:f6:fb:01:13:4e:8e:95:a2:c4:14:5d: b3:5d:b0:c3:3c:be:4d:08:04:0e:3d:c7:9e:8a:d1: 7c:a9:e4:39:89:2a:51:66:84:49:c8:aa:52:1e:ac: 5d:80:a4:47:6f:9b:e6:41:a1:02:20:e0:73:85:61: f7:de:fc:e1:45:7a:ec:d6:bf:71:d3:65:b2:bc:82: 85:37:04:4b:ce:4e:90:8e:49:98:4b:00:59:f0:98: 92:19:d0:1f:75:43:c7:06:de:22:a1:40:c4:fd:70: 4f:30:05:32:ca:5a:c2:4a:02:d6:6a:04:1d:4a:63: 59:49:85:4f:55:fd:92:6c:a8:c2:b1:71:12:ef:62: f8:51:95:fb:da:e0:82:d1:ae:86:3a:66:96:ec:8d: ac:ad:50:b8:27:4a:19:18:07:8b:c5:39:0e:76:f8: 53:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:27:84:39:59:6D:5C:D6:C2:B3:27:22:20:34:B0:2B:F6:CB:A6:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a2b883ff-658e-3dd9-9c02-7b22660b8274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d0:87:9c:fc:f2:d1:e1:72:8c:11:4b:69:59:df:19:4d:ea: 7c:e0:38:5d:bc:b0:c0:97:c7:bd:dd:da:6b:00:d5:4a:78:82: 54:ae:0a:b4:1d:b6:16:8f:fe:07:4a:a2:5c:d3:f8:01:23:49: 22:15:12:fe:44:d3:86:89:54:65:c4:2d:d2:07:b7:85:73:10: 45:4b:e1:f4:45:19:04:c4:4d:94:a5:fd:a5:f2:ac:47:39:10: c3:1a:16:b2:8a:6d:d3:0f:b9:18:2e:ea:3c:1d:4d:c1:6f:a5: fb:f0:c1:5f:d9:db:6c:29:99:c2:0f:e2:b3:ae:9d:f4:16:9e: 44:49:30:a7:67:a5:89:b0:68:67:77:63:35:de:cf:37:06:6f: 91:0d:dc:c3:53:dd:8e:98:e5:b6:10:2e:07:19:e1:14:20:4d: 1c:33:97:c6:42:2c:d3:dd:55:52:2b:90:7f:f9:b6:27:d1:02: c5:f9:1a:9c:82:9f:69:7e:91:21:af:2e:f5:c8:46:0f:10:57: 2f:14:a5:09:8a:26:a8:ff:aa:58:9e:e1:a5:92:e4:a3:5b:4e: 81:36:b2:bf:25:95:d1:bd:00:00:64:f8:e7:87:45:28:2d:2a: 94:f2:7f:85:20:27:0c:fc:af:1f:c0:2c:80:2b:df:a9:33:5a: 45:7d:b7:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/4tLtisPY9osMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NWNlYmNmZmYtMTA0Mi00Zjg3LWI0ZjItYzdiNzczMzhjNWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW+gixIj69pDBVbvocKcnPXZOLqFhcjc5BmL 5uNDGNhzpIH9B3YJiUOnKecOow6ecWbNPi41UaO5+VNGfZFUyU0KlqcRRaj3MIE7 a/kznPTfQvZgZ6/nPhbt+Vg59vsBE06OlaLEFF2zXbDDPL5NCAQOPceeitF8qeQ5 iSpRZoRJyKpSHqxdgKRHb5vmQaECIOBzhWH33vzhRXrs1r9x02WyvIKFNwRLzk6Q jkmYSwBZ8JiSGdAfdUPHBt4ioUDE/XBPMAUyylrCSgLWagQdSmNZSYVPVf2SbKjC sXES72L4UZX72uCC0a6GOmaW7I2srVC4J0oZGAeLxTkOdvhTDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKknhDlZbVzWwrMnIiA0sCv2y6Z9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTJiODgzZmYtNjU4ZS0z ZGQ5LTljMDItN2IyMjY2MGI4Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplihMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXQh5z88tHhcowRS2lZ3xlN6nzgOF28sMCXx73d2msA1Up4glSuCrQd thaP/gdKolzT+AEjSSIVEv5E04aJVGXELdIHt4VzEEVL4fRFGQTETZSl/aXyrEc5 EMMaFrKKbdMPuRgu6jwdTcFvpfvwwV/Z22wpmcIP4rOunfQWnkRJMKdnpYmwaGd3 YzXezzcGb5EN3MNT3Y6Y5bYQLgcZ4RQgTRwzl8ZCLNPdVVIrkH/5tifRAsX5GpyC n2l+kSGvLvXIRg8QVy8UpQmKJqj/qlie4aWS5KNbToE2sr8lldG9AABk+OeHRSgt KpTyf4UgJwz8rx/ALIAr36kzWkV9txk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:39:22 2025 by rpki-client