$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ca78c3d-baa3-3fa5-a6dc-2d701ed84150.roa File: 4ca78c3d-baa3-3fa5-a6dc-2d701ed84150.roa (raw, json) Hash identifier: BT+0BkSkLKUwhBhwWokeW33uXOETrJ7ChnvWdnnI864= Subject key identifier: 6D:A6:A3:40:7A:5A:19:93:37:75:D5:2F:51:40:61:39:84:40:79:D7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B99D7FCB186C0EB7EAD3141E0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ca78c3d-baa3-3fa5-a6dc-2d701ed84150.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 26383 IP address blocks: 166.88.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fc:b1:86:c0:eb:7e:ad:31:41:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9d1805a0-95ee-4d5b-a1c2-ef334d6699b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:73:07:90:d4:4c:5a:2c:83:ad:bc:cb:6e:34: 5f:8f:f8:b0:f4:37:72:bf:d4:7e:6b:5e:17:56:65: 4d:c5:79:f2:e6:1e:43:00:19:04:78:a5:5f:7a:7b: 4a:f3:53:32:b5:a6:d2:a1:af:2a:d8:fc:f6:0a:75: 64:00:6a:97:c9:d7:06:aa:63:bd:fd:81:1d:b9:a6: 9e:c2:dd:53:ba:4d:ce:a2:eb:33:2f:e7:dd:e9:a6: f4:fa:3f:0e:cc:e9:b6:23:c4:3d:c4:1e:d2:18:8e: 66:6f:c6:c0:e6:8d:91:55:53:7f:d0:8e:c2:8a:4b: bc:ac:2b:a8:33:0c:9f:fd:b9:d3:2f:94:10:4b:da: 59:2d:6a:a8:e1:d6:cb:ab:47:fc:c4:5b:83:e5:98: 35:ca:63:5a:4d:dc:be:23:6c:83:f0:a9:26:68:87: 88:4d:a4:6e:88:79:68:4f:9c:c7:a1:3d:86:fd:e9: 53:dc:75:65:f6:2d:86:f7:c2:69:59:4e:8f:a4:ee: 16:d1:57:c4:7b:07:26:04:42:24:8c:94:1e:60:45: fa:8f:33:9f:82:cc:4f:5e:4b:7f:cc:e6:20:5a:5c: 15:0c:46:ca:f8:79:1a:bb:9b:f8:d6:77:b8:6e:9e: f9:39:df:85:ca:13:a1:0b:1a:80:67:be:50:99:5c: a1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A6:A3:40:7A:5A:19:93:37:75:D5:2F:51:40:61:39:84:40:79:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ca78c3d-baa3-3fa5-a6dc-2d701ed84150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5f:e1:cd:50:0c:9e:a4:ee:eb:c6:10:69:fd:6a:8a:d4:91: 09:af:d9:ef:8f:90:6d:8d:f5:68:7f:c1:08:40:1f:79:5a:e2: 6c:fd:de:96:1e:53:02:4b:61:53:32:15:7d:37:98:a3:ec:77: 2a:95:2d:40:0c:82:95:77:ea:d3:34:56:61:8f:7d:05:b2:14: ce:85:8c:c0:e1:ef:74:c3:ed:a1:07:8c:4c:e6:80:89:8a:2b: 72:b6:11:16:90:fe:2c:fd:28:bf:8b:14:e9:cf:c1:fd:7a:8b: c7:34:4b:10:9f:7e:e3:e7:b0:8f:92:ab:1a:63:7b:bc:e9:25: 6f:20:a9:ac:d8:11:01:9a:96:ed:8f:2e:58:22:51:17:2e:00: 72:60:4e:16:fa:3a:4b:d7:c5:dd:42:33:f6:d3:2c:14:fa:65: 1b:ed:20:f9:59:78:c5:3e:aa:92:7b:4f:ee:1b:23:bd:c4:54: 2c:1f:5b:e1:91:88:8c:32:b6:6c:cc:43:14:6c:ba:9d:e9:d2: ca:44:be:d6:78:44:cc:39:76:0f:60:09:31:ad:dd:ae:0e:4b: 2a:f2:1c:41:5d:90:42:5a:46:70:cf:e9:27:5b:5b:0e:84:97: ca:f1:91:fa:47:56:1c:a2:a9:67:96:82:5b:dc:7d:c5:4e:e6: cc:51:3a:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1/yxhsDrfq0xQeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OWQxODA1YTAtOTVlZS00ZDViLWExYzItZWYzMzRkNjY5OWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHMHkNRMWiyDrbzLbjRfj/iw9Ddyv9R+a14X VmVNxXny5h5DABkEeKVfentK81MytabSoa8q2Pz2CnVkAGqXydcGqmO9/YEduaae wt1Tuk3OouszL+fd6ab0+j8OzOm2I8Q9xB7SGI5mb8bA5o2RVVN/0I7Ciku8rCuo Mwyf/bnTL5QQS9pZLWqo4dbLq0f8xFuD5Zg1ymNaTdy+I2yD8KkmaIeITaRuiHlo T5zHoT2G/elT3HVl9i2G98JpWU6PpO4W0VfEewcmBEIkjJQeYEX6jzOfgsxPXkt/ zOYgWlwVDEbK+Hkau5v41ne4bp75Od+FyhOhCxqAZ75QmVyh+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2mo0B6WhmTN3XVL1FAYTmEQHnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGNhNzhjM2QtYmFhMy0z ZmE1LWE2ZGMtMmQ3MDFlZDg0MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpf4c1QDJ6k7uvGEGn9aorUkQmv2e+PkG2N9Wh/wQhAH3la4mz93pYe UwJLYVMyFX03mKPsdyqVLUAMgpV36tM0VmGPfQWyFM6FjMDh73TD7aEHjEzmgImK K3K2ERaQ/iz9KL+LFOnPwf16i8c0SxCffuPnsI+Sqxpje7zpJW8gqazYEQGalu2P LlgiURcuAHJgThb6OkvXxd1CM/bTLBT6ZRvtIPlZeMU+qpJ7T+4bI73EVCwfW+GR iIwytmzMQxRsup3p0spEvtZ4RMw5dg9gCTGt3a4OSyryHEFdkEJaRnDP6SdbWw6E l8rxkfpHVhyiqWeWglvcfcVO5sxROr0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:15:37 2025 by rpki-client