$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4df722d3-5faa-3ebe-ab00-e19da5ece3d8.roa File: 4df722d3-5faa-3ebe-ab00-e19da5ece3d8.roa (raw, json) Hash identifier: KOTdHRYUpkgtspTCajFf0q+yLzgIipP76mFpuL0C0f0= Subject key identifier: A6:C2:F8:AB:F2:9B:9C:5C:7F:86:CE:43:D9:62:B0:42:4C:24:44:4F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B94422CFD5AE6162FE048C340 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4df722d3-5faa-3ebe-ab00-e19da5ece3d8.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 401152 IP address blocks: 166.88.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:2c:fd:5a:e6:16:2f:e0:48:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=22b644d0-4efd-40f6-8e03-15e8f7b7bc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:41:b0:3f:b5:63:e7:ab:03:b3:63:99:cf: 0f:14:16:ed:3d:fa:3c:b5:d9:87:fe:03:cd:e1:2e: 32:c1:0d:bf:9b:25:08:70:03:b0:df:e6:62:1f:67: 0f:49:4f:20:f2:db:ff:8f:cc:3a:ed:25:ad:c9:be: 73:5a:a4:e8:54:36:f7:97:3b:df:6b:50:8a:18:24: 62:98:df:6a:a9:3e:ba:2a:66:bc:c5:da:57:e6:aa: d3:54:72:f1:55:44:dd:38:5b:10:d7:04:73:89:44: 82:7f:a1:6b:31:06:92:c4:ef:03:e5:f9:31:7a:0c: f7:02:94:61:d4:8f:ef:4c:87:e0:3a:4e:19:81:15: 67:f5:a9:da:93:fa:c4:22:44:f5:50:4f:81:0f:24: 89:17:8d:c8:16:66:dc:29:f9:07:4c:76:59:02:90: ae:a9:53:ca:62:53:9a:34:39:11:64:52:71:59:59: b8:ea:f2:62:34:ab:9e:6b:96:17:f2:10:e6:7c:f2: 2d:8b:2b:a7:52:16:5c:6c:54:c8:6c:19:35:0a:53: 66:95:ea:e3:af:76:13:5b:13:a2:a9:be:8c:5e:ae: af:27:56:6f:c2:88:07:ac:84:d3:b8:b3:43:be:29: df:39:4f:72:2a:5b:61:16:9d:1f:51:a7:84:1a:dc: 11:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C2:F8:AB:F2:9B:9C:5C:7F:86:CE:43:D9:62:B0:42:4C:24:44:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4df722d3-5faa-3ebe-ab00-e19da5ece3d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:17:1f:dd:b6:43:1c:e2:ea:4b:2b:66:c8:59:6c:32:db:81: c6:5c:00:b1:aa:9e:37:d1:fd:29:47:5b:93:a8:2f:ea:0e:c0: a0:7d:1a:94:06:eb:d7:1b:b9:da:f6:be:e4:f9:c4:fa:1f:91: 5f:d6:0b:87:7b:94:4d:d5:71:d6:5d:51:a2:59:3b:71:0c:32: 03:04:42:ea:85:6c:28:26:02:e2:19:8c:3b:5f:6a:85:22:93: 5c:82:78:b1:c2:0b:7b:f9:e5:c7:a4:0f:dd:9d:ef:2d:05:56: ac:e8:b1:98:e9:64:0f:84:6f:64:4e:dc:2f:9c:aa:54:b2:bf: df:3d:a0:5e:f1:16:6c:e4:ba:c3:fd:0e:47:25:c2:1a:8f:e8: ba:85:c9:b9:99:87:f9:37:d9:60:6b:23:58:95:e4:96:15:b5: 6e:b8:59:a7:ea:34:9c:e9:2d:a8:94:b1:76:ef:84:b9:65:6b: 72:34:94:e5:bd:ad:26:22:33:85:e0:11:e1:5a:0a:04:40:e0: c8:40:02:5f:25:c8:cf:35:e9:4f:c9:15:36:7a:99:64:25:f9: 81:86:74:ac:04:86:4e:3c:8e:54:32:42:d7:c3:10:5d:13:1e: 27:8f:3f:23:b5:bc:69:4e:ca:de:d5:19:da:9e:0a:41:6d:c5: a4:86:0a:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiz9WuYWL+BIw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk MjJiNjQ0ZDAtNGVmZC00MGY2LThlMDMtMTVlOGY3YjdiYzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3VBsD+1Y+erA7Njmc8PFBbtPfo8tdmH/gPN 4S4ywQ2/myUIcAOw3+ZiH2cPSU8g8tv/j8w67SWtyb5zWqToVDb3lzvfa1CKGCRi mN9qqT66Kma8xdpX5qrTVHLxVUTdOFsQ1wRziUSCf6FrMQaSxO8D5fkxegz3ApRh 1I/vTIfgOk4ZgRVn9anak/rEIkT1UE+BDySJF43IFmbcKfkHTHZZApCuqVPKYlOa NDkRZFJxWVm46vJiNKuea5YX8hDmfPItiyunUhZcbFTIbBk1ClNmlerjr3YTWxOi qb6MXq6vJ1ZvwogHrITTuLNDvinfOU9yKlthFp0fUaeEGtwRNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbC+Kvym5xcf4bOQ9lisEJMJERPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGRmNzIyZDMtNWZhYS0z ZWJlLWFiMDAtZTE5ZGE1ZWNlM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQXH922Qxzi6ksrZshZbDLbgcZcALGqnjfR/SlHW5OoL+oOwKB9GpQG 69cbudr2vuT5xPofkV/WC4d7lE3VcdZdUaJZO3EMMgMEQuqFbCgmAuIZjDtfaoUi k1yCeLHCC3v55cekD92d7y0FVqzosZjpZA+Eb2RO3C+cqlSyv989oF7xFmzkusP9 DkclwhqP6LqFybmZh/k32WBrI1iV5JYVtW64WafqNJzpLaiUsXbvhLlla3I0lOW9 rSYiM4XgEeFaCgRA4MhAAl8lyM816U/JFTZ6mWQl+YGGdKwEhk48jlQyQtfDEF0T HiePPyO1vGlOyt7VGdqeCkFtxaSGCqI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:10:27 2025 by rpki-client