$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a81d3859-e56e-359a-a68c-26e4398628ee.roa File: a81d3859-e56e-359a-a68c-26e4398628ee.roa (raw, json) Hash identifier: 4i1FfZOS7ipYcKu0oBJLNO440+3e9YR2DZUBckTX7Kk= Subject key identifier: 2C:F0:36:1F:FA:43:4D:BC:71:9A:4E:A7:97:B7:7C:28:22:DA:8E:22 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B6797FDF446AD02CA9A646C80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a81d3859-e56e-359a-a68c-26e4398628ee.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 44559 IP address blocks: 166.88.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:fd:f4:46:ad:02:ca:9a:64:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=bb1ad452-1f8f-46e1-b999-ee0ab4ddf37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7a:39:5a:f6:36:c8:11:17:c4:c6:e0:b3:93: 9c:d6:22:47:47:56:7d:e5:39:d5:5d:b4:4f:61:db: 38:05:13:3d:5e:72:29:d6:51:7c:3f:bd:7f:ec:00: e0:c9:f5:49:d0:90:2b:91:b1:b8:ea:01:bb:c7:a0: b2:18:da:f7:4c:a8:bc:8c:e4:a5:07:89:2e:75:98: 86:04:52:99:ab:c6:a7:21:86:ac:dc:6b:00:2a:9e: 17:93:7a:56:80:b9:28:fa:03:84:ca:09:94:d2:e4: 74:ac:03:fd:be:45:ed:e8:02:c9:da:31:c8:10:44: 1b:ab:90:02:75:4a:e3:a2:92:64:5e:44:56:cd:f0: b9:be:7b:30:05:0f:e7:21:3b:ee:5b:f4:f2:86:d6: ce:cd:ad:41:47:2f:71:c0:67:75:f3:24:84:f6:e5: 4a:f3:5f:a9:14:13:b9:e7:6f:5b:8e:bf:3f:60:f1: e8:e7:43:8c:f7:ca:92:e2:50:e2:7c:e8:78:e8:ae: 54:97:8a:c0:6d:b6:d7:76:76:00:5b:91:f8:80:dc: ef:42:d2:0d:b4:04:14:ba:88:21:e9:74:e2:67:5a: cc:fa:99:e0:32:4b:fd:6e:fc:4c:3e:3f:10:05:48: fd:94:47:98:72:2c:24:29:d4:be:8f:5d:c6:49:bf: dc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F0:36:1F:FA:43:4D:BC:71:9A:4E:A7:97:B7:7C:28:22:DA:8E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a81d3859-e56e-359a-a68c-26e4398628ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ab:41:b4:82:6d:2c:b6:1b:9d:1a:cf:33:39:f3:15:6b:ef: a3:40:11:2f:6a:a0:1a:13:34:37:50:60:88:01:fa:74:a8:1c: de:08:2b:d7:44:34:f3:d3:11:f5:eb:39:64:ef:82:ea:52:3c: 95:6d:cd:ef:ad:bf:1a:45:18:6d:04:df:26:e9:f2:10:8b:ac: c4:70:8c:eb:15:e9:b9:f6:7f:4c:f6:61:6d:c5:04:df:9b:c5: 36:73:85:bc:d0:d4:19:90:67:1b:82:ba:cd:21:3d:64:c8:27: 4f:a4:79:8b:68:bb:a1:37:1a:39:88:bc:05:76:93:ce:4c:6d: 96:10:ca:92:c7:2b:05:52:de:d0:42:da:cc:f8:1c:97:ef:7c: 57:50:36:31:ab:6d:82:77:ff:8c:24:ed:9a:75:fd:8e:f5:89: 73:50:2a:bc:37:3b:04:b4:3d:b5:09:17:13:a8:d2:1d:74:2b: e3:3c:30:b9:d6:50:51:45:47:42:35:d4:f0:83:28:58:f6:9f: dc:0a:df:48:d4:58:a7:00:4b:ce:92:e2:72:2e:3f:c6:2c:08: 34:e0:7f:37:07:4d:08:4c:28:7f:50:06:16:21:a0:e6:6a:cf: 18:82:dc:4f:61:6b:a2:db:f6:8b:d8:30:10:0e:16:55:fb:bd: 86:5a:c2:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/30Rq0CyppkbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YmIxYWQ0NTItMWY4Zi00NmUxLWI5OTktZWUwYWI0ZGRmMzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgno5WvY2yBEXxMbgs5Oc1iJHR1Z95TnVXbRP Yds4BRM9XnIp1lF8P71/7ADgyfVJ0JArkbG46gG7x6CyGNr3TKi8jOSlB4kudZiG BFKZq8anIYas3GsAKp4Xk3pWgLko+gOEygmU0uR0rAP9vkXt6ALJ2jHIEEQbq5AC dUrjopJkXkRWzfC5vnswBQ/nITvuW/TyhtbOza1BRy9xwGd18ySE9uVK81+pFBO5 529bjr8/YPHo50OM98qS4lDifOh46K5Ul4rAbbbXdnYAW5H4gNzvQtINtAQUuogh 6XTiZ1rM+pngMkv9bvxMPj8QBUj9lEeYciwkKdS+j13GSb/cfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzwNh/6Q028cZpOp5e3fCgi2o4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTgxZDM4NTktZTU2ZS0z NTlhLWE2OGMtMjZlNDM5ODYyOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABirQbSCbSy2G50azzM58xVr76NAES9qoBoTNDdQYIgB+nSoHN4IK9dE NPPTEfXrOWTvgupSPJVtze+tvxpFGG0E3ybp8hCLrMRwjOsV6bn2f0z2YW3FBN+b xTZzhbzQ1BmQZxuCus0hPWTIJ0+keYtou6E3GjmIvAV2k85MbZYQypLHKwVS3tBC 2sz4HJfvfFdQNjGrbYJ3/4wk7Zp1/Y71iXNQKrw3OwS0PbUJFxOo0h10K+M8MLnW UFFFR0I11PCDKFj2n9wK30jUWKcAS86S4nIuP8YsCDTgfzcHTQhMKH9QBhYhoOZq zxiC3E9ha6Lb9ovYMBAOFlX7vYZawto= -----END CERTIFICATE-----Generated at Mon Oct 20 01:58:32 2025 by rpki-client