$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09615d93-9545-3ffd-9d2e-b448e7c11885.roa File: 09615d93-9545-3ffd-9d2e-b448e7c11885.roa (raw, json) Hash identifier: CtVXYPUhRdowIgmrxpGcK91Z1Rm9gkl8ojPQc0BUCnU= Subject key identifier: 68:0C:85:79:38:E6:C7:70:27:3E:74:51:0F:F8:A6:3D:FF:D1:3C:BF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B328C6354DB0351655B7B8900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09615d93-9545-3ffd-9d2e-b448e7c11885.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 11404 IP address blocks: 166.88.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:63:54:db:03:51:65:5b:7b:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=096e37f7-7e1f-4b13-926c-ae667ef31582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:19:d3:ea:a9:1d:44:f7:1d:5e:db:46:af:16: 51:9e:f6:90:6c:bb:4e:60:66:9f:66:d7:aa:a4:4d: e7:07:f4:bd:64:73:95:fd:94:96:8b:13:85:89:fe: ea:6d:4c:14:d0:db:2c:ff:d6:16:27:5b:f0:ac:c3: 9a:e8:c8:32:18:b5:c8:27:3a:0b:ae:32:de:77:66: d8:d7:3b:c1:9b:17:3d:e7:71:0e:c4:30:e4:e7:b3: 84:d3:08:6a:0e:b9:4e:42:8d:41:f5:5e:0a:53:08: 62:df:1f:b3:21:bc:52:09:f9:61:69:7f:ae:98:ed: 0d:80:bd:b1:d7:f7:41:fb:82:6d:6c:ef:4d:12:ac: 63:a5:42:3b:07:f8:6a:52:64:5a:11:de:09:ad:a6: a5:5c:6a:3f:5c:84:a7:5e:1b:5d:49:de:68:18:51: d1:a6:bb:1c:81:9d:c5:7b:d0:c4:4f:97:00:bc:8c: 66:44:c2:20:88:20:b8:24:1c:29:70:ef:1d:e4:5a: a0:ac:34:30:40:c0:87:d6:08:96:78:18:75:78:50: 23:41:43:c2:f2:e9:3b:b6:fc:1b:57:c7:17:29:da: b9:78:93:11:0e:67:18:8a:a6:71:5a:e2:67:c9:60: b7:08:d5:9b:c3:06:eb:9c:64:94:a0:14:22:a9:08: 88:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:85:79:38:E6:C7:70:27:3E:74:51:0F:F8:A6:3D:FF:D1:3C:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09615d93-9545-3ffd-9d2e-b448e7c11885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c9:c0:08:c8:eb:14:88:82:c4:e1:09:16:ff:2e:85:9c:7c: 06:93:09:b1:5f:3b:38:89:17:90:90:8a:e1:6c:32:c9:49:17: b9:59:3f:18:f7:e7:bd:80:32:8f:74:4d:7c:dc:f5:40:56:63: a1:0b:3c:b5:22:59:98:32:70:38:90:af:41:09:9f:e8:9e:87: 73:9f:79:25:81:d6:10:46:05:36:ac:4d:10:f5:c4:4c:74:98: aa:8f:36:a6:b8:75:c5:08:5d:fe:22:b7:27:04:b0:b2:d1:c1: 0c:70:17:a9:ad:74:72:e4:4f:e2:58:e8:a3:b7:10:90:aa:8a: 4f:ed:36:69:c4:82:d9:14:2f:63:9f:a8:a0:86:79:59:4d:ed: 1b:74:70:67:11:39:a2:31:60:20:31:a5:1c:05:b9:c6:d1:9f: 26:91:c2:20:b2:f8:ab:08:a1:20:38:2a:73:00:da:4b:4b:27: fe:3d:5e:26:00:f2:e6:76:0c:77:9b:b7:d4:c4:00:d0:70:4d: cc:cb:a0:4f:ca:6c:bb:9e:50:c7:b6:d0:60:05:6d:05:a4:25: 2f:85:79:50:62:8f:9f:a5:f9:de:03:c9:d4:88:8f:06:4d:63: 63:74:80:28:c3:7b:f1:4a:ab:db:0d:41:e3:c5:36:02:f5:51: 60:3c:af:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjGNU2wNRZVt7iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MDk2ZTM3ZjctN2UxZi00YjEzLTkyNmMtYWU2NjdlZjMxNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhnT6qkdRPcdXttGrxZRnvaQbLtOYGafZteq pE3nB/S9ZHOV/ZSWixOFif7qbUwU0Nss/9YWJ1vwrMOa6MgyGLXIJzoLrjLed2bY 1zvBmxc953EOxDDk57OE0whqDrlOQo1B9V4KUwhi3x+zIbxSCflhaX+umO0NgL2x 1/dB+4JtbO9NEqxjpUI7B/hqUmRaEd4JraalXGo/XISnXhtdSd5oGFHRprscgZ3F e9DET5cAvIxmRMIgiCC4JBwpcO8d5FqgrDQwQMCH1giWeBh1eFAjQUPC8uk7tvwb V8cXKdq5eJMRDmcYiqZxWuJnyWC3CNWbwwbrnGSUoBQiqQiIqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgMhXk45sdwJz50UQ/4pj3/0Ty/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDk2MTVkOTMtOTU0NS0z ZmZkLTlkMmUtYjQ0OGU3YzExODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXJwAjI6xSIgsThCRb/LoWcfAaTCbFfOziJF5CQiuFsMslJF7lZPxj3 572AMo90TXzc9UBWY6ELPLUiWZgycDiQr0EJn+ieh3OfeSWB1hBGBTasTRD1xEx0 mKqPNqa4dcUIXf4itycEsLLRwQxwF6mtdHLkT+JY6KO3EJCqik/tNmnEgtkUL2Of qKCGeVlN7Rt0cGcROaIxYCAxpRwFucbRnyaRwiCy+KsIoSA4KnMA2ktLJ/49XiYA 8uZ2DHebt9TEANBwTczLoE/KbLueUMe20GAFbQWkJS+FeVBij5+l+d4DydSIjwZN Y2N0gCjDe/FKq9sNQePFNgL1UWA8r3g= -----END CERTIFICATE-----Generated at Wed Nov 5 05:05:06 2025 by rpki-client