$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a6283152-28d7-315e-abf3-bdbc4b8ab413.roa File: a6283152-28d7-315e-abf3-bdbc4b8ab413.roa (raw, json) Hash identifier: vIGUQ190FSS/xZjsRSGRhovbiI9jCSBNs9uhY4t9fqc= Subject key identifier: 52:A6:5E:82:81:4A:3C:AB:45:E6:F5:50:4F:9D:66:00:51:C4:68:96 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B7DECCE7F30C2419118F3FCE8 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a6283152-28d7-315e-abf3-bdbc4b8ab413.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 7385 IP address blocks: 166.88.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:ce:7f:30:c2:41:91:18:f3:fc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=15c050c1-e37b-4757-960a-e18b66c78ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ad:d3:69:a3:d7:42:63:fa:93:b5:b6:16:aa: 05:8a:c9:96:5f:59:3d:7d:0c:7c:56:db:6f:92:74: ce:56:14:96:66:3d:32:73:82:9e:42:95:25:9b:0a: 97:58:3c:b2:bb:b2:0a:c1:42:2a:31:31:1c:f8:f2: f6:16:33:a7:36:2e:cc:29:b8:e2:46:51:4e:e1:c7: 03:96:b5:b3:f7:0b:18:bd:22:d8:57:60:0b:54:a3: 4f:57:e6:30:1c:89:06:7b:34:2e:53:d6:d4:3c:38: 11:87:a9:ae:d1:61:a5:4e:3f:4d:56:36:98:3f:ab: af:e9:7e:92:3e:8c:27:76:f1:65:e7:2f:67:c7:40: a1:9d:cf:e0:b1:77:fc:a7:fa:c1:b3:74:07:1c:9d: 2d:c5:01:fb:3f:a1:62:be:4f:09:e6:ee:40:d1:a5: fd:5d:06:f3:23:b0:57:21:db:56:d1:bc:3f:55:34: 3d:3e:83:4c:63:7f:53:21:34:fd:0e:21:54:c2:1a: e9:e7:ae:29:92:37:e8:94:82:b3:6a:dd:09:dd:1f: 6f:ca:fd:b3:f3:09:80:99:33:b7:4e:e2:7c:2a:a3: 8d:07:db:45:c2:6e:85:db:2e:fd:90:66:96:3f:85: c6:3e:d0:96:06:63:c1:06:13:de:27:ff:7e:e5:07: 01:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A6:5E:82:81:4A:3C:AB:45:E6:F5:50:4F:9D:66:00:51:C4:68:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a6283152-28d7-315e-abf3-bdbc4b8ab413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:57:76:c6:9b:50:7a:dc:be:f7:4f:ff:4e:34:de:19:45:6f: 95:88:24:b5:53:bb:91:06:32:2b:a7:ef:6e:60:0f:c0:52:de: 70:aa:8b:a4:26:c9:b8:ec:37:6b:06:8a:3c:a1:2d:bc:1c:12: 00:89:c8:86:05:f2:9b:ec:68:89:cf:31:f2:81:9c:fe:9b:cb: 15:bb:eb:e8:e7:dc:54:21:65:1d:b6:1e:0a:35:1c:08:a8:6e: c2:1e:08:32:3e:5d:ce:f4:9a:3b:ed:d4:d4:0e:30:1c:86:c0: 17:50:75:d3:88:f3:d2:6a:0b:2f:b5:12:cf:d4:b7:20:a0:5a: 03:08:14:f8:66:20:3c:71:cf:08:17:7b:be:74:ab:46:b6:87: f8:fc:e4:86:17:79:14:ab:94:64:8f:97:93:82:52:f9:88:b5: cd:51:3c:3e:d4:55:22:11:17:b5:68:50:35:76:bc:8d:91:6f: 90:6d:d6:d1:62:6b:41:a0:d9:29:f5:5a:99:43:09:0e:06:29: fb:c3:0e:6a:cb:8c:2c:de:7b:b3:63:4c:0f:e6:6e:86:b7:58: d2:9d:71:01:1a:de:65:dd:32:7c:ce:4a:84:e5:ef:18:5c:8d: d0:29:91:f7:ec:8f:d9:40:06:c3:69:02:59:99:3a:83:7b:08: 2a:fc:a6:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97M5/MMJBkRjz/OgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MTVjMDUwYzEtZTM3Yi00NzU3LTk2MGEtZTE4YjY2Yzc4YmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm63TaaPXQmP6k7W2FqoFismWX1k9fQx8Vttv knTOVhSWZj0yc4KeQpUlmwqXWDyyu7IKwUIqMTEc+PL2FjOnNi7MKbjiRlFO4ccD lrWz9wsYvSLYV2ALVKNPV+YwHIkGezQuU9bUPDgRh6mu0WGlTj9NVjaYP6uv6X6S PowndvFl5y9nx0Chnc/gsXf8p/rBs3QHHJ0txQH7P6Fivk8J5u5A0aX9XQbzI7BX IdtW0bw/VTQ9PoNMY39TITT9DiFUwhrp564pkjfolIKzat0J3R9vyv2z8wmAmTO3 TuJ8KqONB9tFwm6F2y79kGaWP4XGPtCWBmPBBhPeJ/9+5QcBowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKmXoKBSjyrReb1UE+dZgBRxGiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTYyODMxNTItMjhkNy0z MTVlLWFiZjMtYmRiYzRiOGFiNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdXdsabUHrcvvdP/0403hlFb5WIJLVTu5EGMiun725gD8BS3nCqi6Qm ybjsN2sGijyhLbwcEgCJyIYF8pvsaInPMfKBnP6byxW76+jn3FQhZR22Hgo1HAio bsIeCDI+Xc70mjvt1NQOMByGwBdQddOI89JqCy+1Es/UtyCgWgMIFPhmIDxxzwgX e750q0a2h/j85IYXeRSrlGSPl5OCUvmItc1RPD7UVSIRF7VoUDV2vI2Rb5Bt1tFi a0Gg2Sn1WplDCQ4GKfvDDmrLjCzee7NjTA/mboa3WNKdcQEa3mXdMnzOSoTl7xhc jdApkffsj9lABsNpAlmZOoN7CCr8poY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:16 2025 by rpki-client