$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea53b59b-6710-3b6b-8f50-28ee7277a5a0.roa File: ea53b59b-6710-3b6b-8f50-28ee7277a5a0.roa (raw, json) Hash identifier: fGiMxLVFk2c2c/R2znMJH2ihcy0VbNXVjB2WrVaX6nc= Subject key identifier: FC:4F:44:F7:F1:8B:60:64:2E:98:32:11:56:E0:96:93:F9:88:0D:47 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B10445DC79FC4B10214753200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea53b59b-6710-3b6b-8f50-28ee7277a5a0.roa Signing time: Tue 02 Sep 2025 18:18:23 +0000 ROA not before: Tue 02 Sep 2025 18:18:23 +0000 ROA not after: Mon 01 Dec 2025 19:18:23 +0000 asID: 401152 IP address blocks: 166.88.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:44:5d:c7:9f:c4:b1:02:14:75:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 18:18:23 2025 GMT Not After : Dec 1 19:18:23 2025 GMT Subject: CN=14543b4e-49f6-47e7-a85e-eed5d714560d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:fa:b6:1d:67:dc:29:f7:e1:d5:db:f2:2e: f2:e4:af:f2:82:64:8f:5e:05:ab:07:0a:ef:c8:a5: 51:75:c1:10:89:f9:fb:0d:e0:94:10:9f:05:0e:03: b1:6e:ba:a9:17:9d:5f:3b:68:5a:80:59:9b:81:7f: 01:1c:df:f3:0b:fb:2e:fa:de:ea:4f:73:99:96:75: 0b:af:95:83:3d:23:dd:1e:74:ed:b9:bf:92:e9:9c: 09:79:fe:80:ba:e8:89:b3:79:91:5b:de:f0:5e:4a: 76:66:47:44:04:85:a3:91:e2:bc:9e:e1:d7:7d:f9: 46:ba:aa:7c:b5:08:be:e1:bb:00:03:e6:e0:4e:ba: b3:a6:65:87:77:5b:a3:47:2e:93:65:41:60:d6:d4: ac:f5:cb:4f:c0:65:b3:6a:48:fb:33:a6:77:5a:cc: 13:11:29:d1:1c:1d:88:dd:85:1d:24:76:6d:9a:79: 80:35:e3:10:80:b9:cc:89:48:05:ca:f0:03:33:44: d9:c8:60:8f:03:38:50:de:63:34:0d:df:9d:fa:03: 88:98:b8:52:2a:39:2f:84:48:30:d6:cd:b7:51:d4: cf:60:f3:02:f6:ea:e3:87:9b:70:c5:bf:66:24:28: 52:36:b7:a3:87:39:5e:f5:a6:f4:48:dd:e1:f9:a0: 56:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4F:44:F7:F1:8B:60:64:2E:98:32:11:56:E0:96:93:F9:88:0D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea53b59b-6710-3b6b-8f50-28ee7277a5a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b9:6c:78:b4:8d:39:7d:ba:90:a8:14:f5:28:4e:17:c5:b5: 16:e1:f9:31:74:c9:61:9b:cd:95:17:c7:b4:e0:b2:2f:fb:9d: 4f:81:e4:0b:f1:21:13:08:b1:7d:ef:e1:46:5e:06:28:5b:ac: c6:1d:ff:bc:a9:6b:1a:fc:1b:2f:2c:a9:88:ce:94:64:45:e4: fa:19:a3:2e:0e:2e:5f:1b:2d:03:14:8d:ac:a1:19:94:83:fe: 24:61:65:d2:2d:57:ea:93:20:dc:3d:2b:33:ae:b2:d3:aa:88: 66:5c:00:5a:66:f7:f5:83:5c:2a:f7:74:7d:ac:f9:e2:67:2e: a1:02:df:d4:5f:f1:56:5b:b6:df:79:26:30:5e:e6:0e:f9:32: 3a:2d:93:01:f4:1d:9a:96:02:06:fb:5b:a5:18:21:a7:47:d9: 6f:76:18:69:85:93:92:ab:42:03:d7:77:b3:27:37:1c:d0:87: 1b:56:ae:89:d2:94:13:45:50:67:d6:36:24:c1:34:5e:88:4c: 31:c4:05:b0:6c:f1:23:3e:16:12:f5:fb:e5:64:51:e4:f5:2b: 41:47:89:ae:bd:96:62:64:41:50:a5:91:db:f9:b6:91:94:30: 25:85:fe:ec:c7:06:ad:c3:65:e6:37:ed:7b:fe:af:37:e6:9d: 68:e2:d4:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsQRF3Hn8SxAhR1MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwMjE4MTgyM1oXDTI1MTIwMTE5MTgyM1owLzEtMCsGA1UEAxMk MTQ1NDNiNGUtNDlmNi00N2U3LWE4NWUtZWVkNWQ3MTQ1NjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp776th1n3Cn34dXb8i7y5K/ygmSPXgWrBwrv yKVRdcEQifn7DeCUEJ8FDgOxbrqpF51fO2hagFmbgX8BHN/zC/su+t7qT3OZlnUL r5WDPSPdHnTtub+S6ZwJef6AuuiJs3mRW97wXkp2ZkdEBIWjkeK8nuHXfflGuqp8 tQi+4bsAA+bgTrqzpmWHd1ujRy6TZUFg1tSs9ctPwGWzakj7M6Z3WswTESnRHB2I 3YUdJHZtmnmANeMQgLnMiUgFyvADM0TZyGCPAzhQ3mM0Dd+d+gOImLhSKjkvhEgw 1s23UdTPYPMC9urjh5twxb9mJChSNrejhzle9ab0SN3h+aBWqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxPRPfxi2BkLpgyEVbglpP5iA1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWE1M2I1OWItNjcxMC0z YjZiLThmNTAtMjhlZTcyNzdhNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm5bHi0jTl9upCoFPUoThfFtRbh+TF0yWGbzZUXx7Tgsi/7nU+B5Avx IRMIsX3v4UZeBihbrMYd/7ypaxr8Gy8sqYjOlGRF5PoZoy4OLl8bLQMUjayhGZSD /iRhZdItV+qTINw9KzOustOqiGZcAFpm9/WDXCr3dH2s+eJnLqEC39Rf8VZbtt95 JjBe5g75MjotkwH0HZqWAgb7W6UYIadH2W92GGmFk5KrQgPXd7MnNxzQhxtWronS lBNFUGfWNiTBNF6ITDHEBbBs8SM+FhL1++VkUeT1K0FHia69lmJkQVClkdv5tpGU MCWF/uzHBq3DZeY37Xv+rzfmnWji1Kw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:58 2025 by rpki-client