$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8cf2c059-9b2d-3354-8dc1-e206c9286fe7.roa File: 8cf2c059-9b2d-3354-8dc1-e206c9286fe7.roa (raw, json) Hash identifier: sogB8zMqHQ9DV+2Fqy1usCWPdGQQJtFI5rZKUzTssxE= Subject key identifier: 13:48:F7:3E:67:E7:95:06:52:E7:E8:DA:4E:D6:40:2A:43:C9:7B:CD Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB727B73B88602BA68F653780 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8cf2c059-9b2d-3354-8dc1-e206c9286fe7.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 214238 IP address blocks: 166.88.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b7:3b:88:60:2b:a6:8f:65:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=7e11f570-fb82-47c3-8cbc-5923d1aa9ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:0d:40:69:df:7a:8c:2c:15:70:16:9a:f8: 00:01:7c:f3:1d:d7:23:48:fd:69:53:65:f2:46:83: 16:98:80:f2:fe:ff:c2:0d:f5:37:c9:1c:6a:5a:63: b6:c7:3f:25:4c:f1:31:ce:31:13:8c:24:69:a3:54: 03:1a:52:1c:40:4d:7a:cd:4c:3c:21:8f:a6:a7:9b: e5:49:0e:78:0f:40:fe:13:8a:c6:3e:1e:01:e3:ce: 49:6c:c6:12:30:b5:a2:fe:a9:08:35:2a:9c:c5:9d: 28:53:2f:26:c3:8d:a3:c6:70:64:7f:58:e6:23:ed: a1:0e:61:fe:b5:8f:c3:af:a9:d6:ce:e3:aa:00:07: b0:ae:55:b3:88:c9:06:2a:74:a7:9e:ef:a6:78:ff: a0:df:f3:92:a7:2f:78:8c:46:69:97:a3:ad:de:74: 12:12:0b:1c:90:b8:3b:90:4d:51:82:13:f6:32:50: 1c:fd:21:5e:f1:3c:d2:b7:9e:64:10:1a:73:64:49: 84:3c:51:24:ff:f8:c3:28:ca:e4:34:0d:ea:23:b6: ab:50:04:ef:7c:23:cb:4a:60:c3:a0:62:82:4f:a1: a4:30:34:6f:d2:97:09:e6:f7:29:6e:bc:98:32:f1: 96:be:73:9c:af:b1:9b:45:d6:8a:1e:4f:96:7a:92: e4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:48:F7:3E:67:E7:95:06:52:E7:E8:DA:4E:D6:40:2A:43:C9:7B:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8cf2c059-9b2d-3354-8dc1-e206c9286fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:50:95:06:e0:03:b3:fb:6e:e6:07:94:02:45:a5:a7:36:a8: c5:5e:6c:fa:0c:83:9d:bf:d3:19:dd:14:5b:81:7c:53:36:a2: ac:a3:35:c1:9b:89:33:9a:a9:30:50:50:ff:92:3f:8c:28:5d: c3:03:94:2e:d6:d8:df:39:15:c1:16:41:f8:ac:2d:01:66:6e: 31:d9:ae:e8:b5:36:74:76:18:5d:25:c0:98:97:d4:40:39:7d: 23:ec:4e:5a:29:a7:f1:56:b1:f0:59:e8:23:fa:f7:30:9b:ea: eb:8c:61:57:23:53:31:b4:3c:1b:63:ad:6c:e8:04:d9:ae:ba: 49:c8:38:0c:fe:7e:47:d9:5a:62:dc:b9:2a:79:9d:3b:aa:99: 2b:c9:f2:ad:3a:3c:72:19:9e:5a:f4:1c:29:0f:14:4f:b9:33: d7:fa:f3:6f:97:7b:09:19:d1:1b:93:ea:0c:a0:e1:cc:e5:10: 8e:2a:88:7f:8b:c5:45:58:90:f8:1e:e9:75:8a:d7:47:4b:a6: c0:8f:38:42:55:fb:d1:58:37:98:63:02:9b:14:68:63:1d:71: a1:b6:f1:ee:ca:48:8b:48:be:a7:84:8c:2b:17:05:46:ac:01: 07:a7:a8:43:e7:c2:e8:28:e8:f8:a8:4d:39:f6:2f:e1:73:00: aa:f3:91:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7c7iGArpo9lN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk N2UxMWY1NzAtZmI4Mi00N2MzLThjYmMtNTkyM2QxYWE5YWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidsNQGnfeowsFXAWmvgAAXzzHdcjSP1pU2Xy RoMWmIDy/v/CDfU3yRxqWmO2xz8lTPExzjETjCRpo1QDGlIcQE16zUw8IY+mp5vl SQ54D0D+E4rGPh4B485JbMYSMLWi/qkINSqcxZ0oUy8mw42jxnBkf1jmI+2hDmH+ tY/Dr6nWzuOqAAewrlWziMkGKnSnnu+meP+g3/OSpy94jEZpl6Ot3nQSEgsckLg7 kE1RghP2MlAc/SFe8TzSt55kEBpzZEmEPFEk//jDKMrkNA3qI7arUATvfCPLSmDD oGKCT6GkMDRv0pcJ5vcpbryYMvGWvnOcr7GbRdaKHk+WepLkFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNI9z5n55UGUufo2k7WQCpDyXvNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGNmMmMwNTktOWIyZC0z MzU0LThkYzEtZTIwNmM5Mjg2ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJQlQbgA7P7buYHlAJFpac2qMVebPoMg52/0xndFFuBfFM2oqyjNcGb iTOaqTBQUP+SP4woXcMDlC7W2N85FcEWQfisLQFmbjHZrui1NnR2GF0lwJiX1EA5 fSPsTlopp/FWsfBZ6CP69zCb6uuMYVcjUzG0PBtjrWzoBNmuuknIOAz+fkfZWmLc uSp5nTuqmSvJ8q06PHIZnlr0HCkPFE+5M9f682+XewkZ0RuT6gyg4czlEI4qiH+L xUVYkPge6XWK10dLpsCPOEJV+9FYN5hjApsUaGMdcaG28e7KSItIvqeEjCsXBUas AQenqEPnwugo6PioTTn2L+FzAKrzkcU= -----END CERTIFICATE-----Generated at Wed Nov 5 13:25:07 2025 by rpki-client