$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6e0bde34-3303-3d20-b23f-9933014ae203.roa File: 6e0bde34-3303-3d20-b23f-9933014ae203.roa (raw, json) Hash identifier: HAJu9HifOi5XsdaDGyOPGlsfSoy6mWA29Q7eoH3xOtY= Subject key identifier: 71:AF:B8:4B:6A:0D:02:7C:41:E2:5B:E6:0B:E7:BC:97:99:C2:01:25 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB727BA104D0800C4C746F800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6e0bde34-3303-3d20-b23f-9933014ae203.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 214238 IP address blocks: 166.88.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:ba:10:4d:08:00:c4:c7:46:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=57fdf86d-355c-4d77-9637-506503edce64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:eb:87:36:99:ca:db:41:9f:5e:9b:dd:7d:5a: 03:63:34:ec:66:e2:b1:dd:4a:7a:b0:90:02:51:e8: 1f:34:61:14:52:6e:1d:ee:8f:f0:6a:9c:b0:c9:e1: 83:04:24:98:b0:b9:24:aa:5d:e7:14:a7:c6:58:cc: 65:1c:19:79:a3:ba:c6:67:92:36:2f:eb:50:4b:9e: 8f:04:16:ef:61:e1:6f:cb:58:2b:15:e2:06:c0:8a: 80:5d:a0:90:3c:99:73:11:b5:9b:99:8b:35:f0:13: 61:5a:c5:42:95:e1:7c:24:3a:6f:ed:ea:09:48:1c: ed:40:35:bd:b9:56:eb:2f:14:71:db:a9:b8:e2:4f: 9a:64:45:e4:b1:c4:79:8f:48:39:55:41:85:35:3c: 35:96:64:ed:62:23:35:c2:5c:78:0b:eb:90:3b:66: a9:b6:9f:4b:d6:38:b2:b2:ff:1e:6c:27:33:23:e3: 30:32:2a:1e:5f:96:46:1c:9c:0d:d9:40:93:d1:23: 88:3d:98:d6:bb:a8:24:1b:bf:49:13:58:cc:dd:49: 63:38:00:c6:57:ff:60:cd:44:22:09:0a:ea:a2:cf: 7b:ec:40:d4:fa:c9:f3:f9:29:d7:63:a8:33:3b:f8: fd:9a:6e:7f:95:61:3e:9a:e7:1a:c5:07:95:92:3b: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AF:B8:4B:6A:0D:02:7C:41:E2:5B:E6:0B:E7:BC:97:99:C2:01:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6e0bde34-3303-3d20-b23f-9933014ae203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8b:58:7d:15:86:52:d7:5c:86:78:b9:19:f5:bb:12:a3:51: 91:bb:4a:cf:49:77:29:1f:84:37:13:10:70:b1:f7:8a:95:57: 2c:fc:06:66:f5:ae:24:ad:45:ab:88:6f:a2:ca:3a:d8:7e:55: 71:80:f8:ae:39:78:63:17:e5:df:40:f9:10:eb:c0:32:0d:bd: fb:27:62:e4:08:16:5a:d7:0c:ac:8b:81:a2:08:6e:67:aa:c0: 3e:1b:bf:76:10:c9:29:c6:62:c1:81:13:df:be:68:e8:78:81: 12:0c:e2:fb:42:3a:46:da:32:de:53:ab:ff:2d:e9:bf:9d:f2: 2e:cc:ae:4a:95:ec:84:da:d2:1f:0e:b2:77:a7:43:54:15:43: 29:02:f2:e8:e0:16:c4:46:36:da:26:bf:99:b2:36:94:5b:d4: e3:ac:21:cf:27:f0:6a:6a:06:8a:27:b0:38:ab:cb:ff:54:d6: 38:ac:5a:23:ee:b9:00:44:32:e7:8c:48:08:1f:11:61:78:2d: dc:bd:7d:00:b7:d2:11:02:58:ca:7b:e5:27:a4:c5:3c:dc:dd: 5f:29:06:ae:a5:73:a1:d1:64:06:b6:a0:7d:d5:18:f2:c3:74: e5:6d:b1:61:18:d9:d3:53:8f:15:2f:6f:16:71:60:8e:8e:4d: 17:b9:30:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7oQTQgAxMdG+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk NTdmZGY4NmQtMzU1Yy00ZDc3LTk2MzctNTA2NTAzZWRjZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+uHNpnK20GfXpvdfVoDYzTsZuKx3Up6sJAC UegfNGEUUm4d7o/wapywyeGDBCSYsLkkql3nFKfGWMxlHBl5o7rGZ5I2L+tQS56P BBbvYeFvy1grFeIGwIqAXaCQPJlzEbWbmYs18BNhWsVCleF8JDpv7eoJSBztQDW9 uVbrLxRx26m44k+aZEXkscR5j0g5VUGFNTw1lmTtYiM1wlx4C+uQO2aptp9L1jiy sv8ebCczI+MwMioeX5ZGHJwN2UCT0SOIPZjWu6gkG79JE1jM3UljOADGV/9gzUQi CQrqos977EDU+snz+SnXY6gzO/j9mm5/lWE+mucaxQeVkjsErQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGvuEtqDQJ8QeJb5gvnvJeZwgElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNmUwYmRlMzQtMzMwMy0z ZDIwLWIyM2YtOTkzMzAxNGFlMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmLWH0VhlLXXIZ4uRn1uxKjUZG7Ss9JdykfhDcTEHCx94qVVyz8Bmb1 riStRauIb6LKOth+VXGA+K45eGMX5d9A+RDrwDINvfsnYuQIFlrXDKyLgaIIbmeq wD4bv3YQySnGYsGBE9++aOh4gRIM4vtCOkbaMt5Tq/8t6b+d8i7MrkqV7ITa0h8O snenQ1QVQykC8ujgFsRGNtomv5myNpRb1OOsIc8n8GpqBoonsDiry/9U1jisWiPu uQBEMueMSAgfEWF4Ldy9fQC30hECWMp75SekxTzc3V8pBq6lc6HRZAa2oH3VGPLD dOVtsWEY2dNTjxUvbxZxYI6OTRe5MEE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:59:52 2025 by rpki-client