$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38dc369f-4732-3662-b2e0-d13ecc0d8551.roa File: 38dc369f-4732-3662-b2e0-d13ecc0d8551.roa (raw, json) Hash identifier: acAHkIlQ7uixcyO2Y7CcTNpqgxF9/BQ1TMx+N4TW4Ic= Subject key identifier: 25:AB:02:26:02:A0:8C:1B:29:D4:02:10:C8:AA:EA:90:5F:51:81:8A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB727BAA111EDA0815A45A000 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38dc369f-4732-3662-b2e0-d13ecc0d8551.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 214238 IP address blocks: 166.88.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:ba:a1:11:ed:a0:81:5a:45:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=c4d3f855-d8f3-4654-848b-112d2aace74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:6d:79:e7:54:3c:6c:e8:96:68:da:b5:bb: 74:fb:fd:85:7f:74:c3:69:d8:db:d5:9a:f5:10:9f: 0c:c9:1a:e5:5b:05:cd:ef:cd:b1:c6:8c:be:23:e0: 06:10:10:81:6a:b5:8c:a6:cd:77:c1:85:af:55:ea: fd:5e:2c:ab:aa:0a:3e:e3:f2:d5:47:4d:0a:06:8c: 30:ad:82:82:b9:1e:1e:ad:02:5e:8c:31:6a:28:32: 77:20:42:6b:2e:7c:93:bf:66:59:9c:6b:71:f2:b4: 2a:37:bb:7b:b6:e1:e1:52:ed:cf:3f:23:7d:6e:77: fb:8d:aa:4c:fc:72:25:42:ad:9e:c5:d6:50:d0:e1: 00:fa:80:6b:44:86:04:57:e7:20:d9:d3:47:fc:ba: b8:08:82:11:ab:ff:d5:4f:c9:77:3a:65:af:be:42: 95:7f:7c:5b:1d:1a:72:7d:c2:ab:45:32:a0:ad:f7: 3e:80:f9:2e:d1:df:d8:50:3b:c7:3c:dc:06:4b:7f: 02:09:89:25:01:c8:bb:98:ab:1b:c6:49:a8:0b:e1: be:89:de:06:22:de:84:84:e6:b6:b1:2f:8b:b3:53: 54:3b:83:90:b5:b7:bd:7f:b3:49:f5:93:d3:0a:dc: 2a:50:72:db:27:5b:54:08:8f:8c:7d:9a:06:52:19: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AB:02:26:02:A0:8C:1B:29:D4:02:10:C8:AA:EA:90:5F:51:81:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38dc369f-4732-3662-b2e0-d13ecc0d8551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:03:3d:bb:24:4f:12:df:2f:26:06:02:99:8e:40:20:75:0f: d7:61:22:15:ee:21:c9:51:07:97:95:af:b6:a6:89:8d:d7:e8: 0c:90:21:20:b5:f3:c9:ee:9c:d8:b8:1d:64:26:c1:c7:be:e9: 15:da:78:93:e0:e5:29:81:17:ba:33:ef:11:cb:cf:4f:68:79: 28:4d:81:b8:45:19:aa:a2:e6:10:6b:43:bb:cb:df:cb:32:32: b6:7e:e5:b8:a3:f3:51:84:41:ec:85:fc:e2:45:4d:d3:c4:08: 5f:51:0f:2a:cc:35:ab:55:4c:ba:52:d6:38:57:67:35:3e:f2: 2e:62:db:6b:6c:23:13:17:3d:4f:d8:95:06:9d:23:e7:8f:91: ec:8e:10:b7:00:a1:40:74:d5:43:ec:23:bd:6d:8d:25:ac:37: 5f:a5:94:4c:1f:9e:ec:cd:3f:4c:46:6a:65:5e:e1:00:30:c9: b6:6f:f4:05:4a:0f:a3:7e:ed:6b:ad:74:e0:7c:8c:3a:b0:f5: 73:b3:c6:4e:22:0a:e5:1c:ea:a2:0f:44:3a:f5:c8:91:02:60: ec:b5:f8:36:d6:78:90:0d:29:7d:4d:5a:cb:69:f6:55:cb:25: 92:e9:86:27:29:9b:00:49:e4:88:23:a8:60:66:2d:6f:5c:02: da:e9:91:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7qhEe2ggVpFoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk YzRkM2Y4NTUtZDhmMy00NjU0LTg0OGItMTEyZDJhYWNlNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU1teedUPGzolmjatbt0+/2Ff3TDadjb1Zr1 EJ8MyRrlWwXN782xxoy+I+AGEBCBarWMps13wYWvVer9Xiyrqgo+4/LVR00KBoww rYKCuR4erQJejDFqKDJ3IEJrLnyTv2ZZnGtx8rQqN7t7tuHhUu3PPyN9bnf7japM /HIlQq2exdZQ0OEA+oBrRIYEV+cg2dNH/Lq4CIIRq//VT8l3OmWvvkKVf3xbHRpy fcKrRTKgrfc+gPku0d/YUDvHPNwGS38CCYklAci7mKsbxkmoC+G+id4GIt6EhOa2 sS+Ls1NUO4OQtbe9f7NJ9ZPTCtwqUHLbJ1tUCI+MfZoGUhkBgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWrAiYCoIwbKdQCEMiq6pBfUYGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzhkYzM2OWYtNDczMi0z NjYyLWIyZTAtZDEzZWNjMGQ4NTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMDPbskTxLfLyYGApmOQCB1D9dhIhXuIclRB5eVr7amiY3X6AyQISC1 88nunNi4HWQmwce+6RXaeJPg5SmBF7oz7xHLz09oeShNgbhFGaqi5hBrQ7vL38sy MrZ+5bij81GEQeyF/OJFTdPECF9RDyrMNatVTLpS1jhXZzU+8i5i22tsIxMXPU/Y lQadI+ePkeyOELcAoUB01UPsI71tjSWsN1+llEwfnuzNP0xGamVe4QAwybZv9AVK D6N+7WutdOB8jDqw9XOzxk4iCuUc6qIPRDr1yJECYOy1+DbWeJANKX1NWstp9lXL JZLphicpmwBJ5IgjqGBmLW9cAtrpkVY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:06:55 2025 by rpki-client