$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa File: 86f61352-45a4-3d85-9f07-9a73694b819e.roa (raw, json) Hash identifier: 7j61FExhK4NbVtDmaCRUqrH1MCTzJYbkX4iYOk+w/Pk= Subject key identifier: 31:D4:96:1D:25:3D:86:D2:EC:E4:97:13:67:6A:67:AB:CC:99:D1:AA Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B663204CC02CB2344799B5D80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 9312 IP address blocks: 166.88.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:04:cc:02:cb:23:44:79:9b:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=3c5bf0a0-970b-4ae5-be1d-556507a58f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f5:53:52:df:39:f5:54:0d:f5:03:18:7f:73: e4:6b:6e:2e:a2:66:b3:d3:ba:09:88:b5:9e:4a:ee: a7:13:79:b8:50:6a:0a:82:90:c3:38:a0:ad:e6:40: 7e:b6:d0:c1:4c:2c:69:32:39:95:82:19:d4:77:7c: de:7c:0a:19:92:e2:3c:e5:af:96:82:bf:96:91:00: 8d:d7:3b:43:81:c0:05:af:17:d1:63:b4:ae:ab:96: 70:d5:30:be:cb:8e:09:89:ed:00:42:90:a1:49:f3: 54:80:8f:ab:12:4c:c1:98:16:59:72:76:d3:fa:76: 71:1f:fd:5a:60:88:9a:25:4b:5d:5a:1a:5e:6b:02: e0:5f:10:72:57:5c:36:17:56:2f:80:da:d9:d9:67: 60:11:31:e0:97:71:2c:f2:bc:d7:b5:a6:9f:c4:5a: 22:59:56:b6:2f:71:56:e9:1d:ab:65:a3:6b:1e:c8: 92:98:67:9e:28:5c:cc:b7:16:5d:cf:8e:a0:7e:6d: c8:61:ec:53:db:61:0a:80:19:aa:82:9e:89:cc:60: dc:4b:32:ab:29:64:8f:44:e2:65:f8:c7:66:43:9a: 56:f6:3f:43:1b:ee:9b:19:7a:b5:6f:f5:0d:bd:4f: d8:8b:78:3b:52:b4:1c:bb:36:ea:ba:bb:0a:d9:74: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D4:96:1D:25:3D:86:D2:EC:E4:97:13:67:6A:67:AB:CC:99:D1:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:10:e6:a0:7f:ef:40:96:55:58:24:fc:48:28:21:71:88:23: 42:2f:0b:3e:e4:28:4d:a8:97:24:92:a6:74:ee:d2:97:61:cc: b8:0b:cc:69:ab:53:6c:d1:a0:1e:24:2c:60:e5:0d:bb:0e:53: bd:a0:96:90:fb:cb:4e:ba:91:03:e5:14:d6:eb:da:ce:ef:e2: 5a:6a:35:57:38:d3:18:e2:a8:1e:66:c9:43:c9:31:c1:c5:ef: 5f:c3:52:ec:79:93:b1:2e:8e:a3:76:bf:ed:c2:73:6b:31:3d: 22:b9:c2:c2:0a:bc:8d:10:4b:57:1f:c3:b2:62:20:83:83:1a: 27:5b:51:5d:20:84:d3:1c:10:ed:3d:5b:1a:7c:24:f7:55:e3: c7:81:e5:15:15:b7:e0:96:7b:a7:be:a8:bf:8c:e4:0c:55:80: 87:11:44:25:c0:b6:c8:3a:7c:68:4c:b5:43:ef:3b:50:2c:da: 94:c5:67:5c:74:02:8d:ab:4c:28:77:78:57:90:96:48:cc:45: 91:20:af:4c:b8:ae:6e:58:89:08:0b:63:57:7d:b0:06:3b:55: 4d:d3:4b:cc:d9:ec:28:56:09:54:f5:5f:f8:4c:61:9b:5f:3d: 7b:d8:7e:0e:0f:29:ae:3b:f4:48:23:d2:e5:1c:30:2c:ad:57: f6:06:9d:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgTMAssjRHmbXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk M2M1YmYwYTAtOTcwYi00YWU1LWJlMWQtNTU2NTA3YTU4ZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfVTUt859VQN9QMYf3Pka24uomaz07oJiLWe Su6nE3m4UGoKgpDDOKCt5kB+ttDBTCxpMjmVghnUd3zefAoZkuI85a+Wgr+WkQCN 1ztDgcAFrxfRY7Suq5Zw1TC+y44Jie0AQpChSfNUgI+rEkzBmBZZcnbT+nZxH/1a YIiaJUtdWhpeawLgXxByV1w2F1YvgNrZ2WdgETHgl3Es8rzXtaafxFoiWVa2L3FW 6R2rZaNrHsiSmGeeKFzMtxZdz46gfm3IYexT22EKgBmqgp6JzGDcSzKrKWSPROJl +MdmQ5pW9j9DG+6bGXq1b/UNvU/Yi3g7UrQcuzbqursK2XRtuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHUlh0lPYbS7OSXE2dqZ6vMmdGqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODZmNjEzNTItNDVhNC0z ZDg1LTlmMDctOWE3MzY5NGI4MTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4Q5qB/70CWVVgk/EgoIXGII0IvCz7kKE2olySSpnTu0pdhzLgLzGmr U2zRoB4kLGDlDbsOU72glpD7y066kQPlFNbr2s7v4lpqNVc40xjiqB5myUPJMcHF 71/DUux5k7EujqN2v+3Cc2sxPSK5wsIKvI0QS1cfw7JiIIODGidbUV0ghNMcEO09 Wxp8JPdV48eB5RUVt+CWe6e+qL+M5AxVgIcRRCXAtsg6fGhMtUPvO1As2pTFZ1x0 Ao2rTCh3eFeQlkjMRZEgr0y4rm5YiQgLY1d9sAY7VU3TS8zZ7ChWCVT1X/hMYZtf PXvYfg4PKa479Egj0uUcMCytV/YGneE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:41:38 2025 by rpki-client