$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8ed6f021-568d-3bf7-bd18-0d07f76e302e.roa File: 8ed6f021-568d-3bf7-bd18-0d07f76e302e.roa (raw, json) Hash identifier: 9cIVRJ0jiiITvos0fJAWBW9tb+1KSwboyC+p0Sg8G2Q= Subject key identifier: A5:80:FD:70:3D:14:DA:3B:8C:11:CE:34:CD:15:19:5C:79:AF:09:B4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BA554918605FD656A50BC3D98 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8ed6f021-568d-3bf7-bd18-0d07f76e302e.roa Signing time: Sun 26 Oct 2025 03:46:28 +0000 ROA not before: Sun 26 Oct 2025 03:46:28 +0000 ROA not after: Sat 24 Jan 2026 04:46:28 +0000 asID: 2711 IP address blocks: 166.88.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:54:91:86:05:fd:65:6a:50:bc:3d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 26 03:46:28 2025 GMT Not After : Jan 24 04:46:28 2026 GMT Subject: CN=1c0648ac-9af4-4297-bdf5-45b24bf2da3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d4:5b:2f:71:a4:35:a8:76:55:68:0e:f4:a1: ef:b5:34:31:c2:ea:62:a3:ed:b8:bc:78:35:cd:33: 5f:b3:33:38:db:60:52:79:a7:d9:10:c0:6b:27:d0: d9:de:54:55:fb:13:e3:4d:18:89:85:8a:02:2b:82: 16:10:d1:b0:76:f3:0c:2f:bd:57:f2:dd:27:02:95: 9b:2e:0f:83:14:b4:15:38:42:83:42:e1:94:43:03: 6c:1d:37:f8:b6:02:6c:28:0b:68:55:9a:50:d7:94: 16:0b:34:f3:d8:c8:d1:14:95:5f:04:0b:a4:48:5d: ca:36:c2:5b:c0:0e:fb:02:cc:a1:66:d3:c5:71:cd: 15:9e:5c:2d:9e:5a:b2:bb:92:a7:28:38:7b:da:e1: 3f:9d:a4:8a:a6:3f:8c:66:fe:b1:15:88:c5:fe:78: 00:89:61:b3:9e:36:69:32:50:c8:81:5a:b3:97:8c: a9:d9:a2:da:8a:41:30:0a:56:d1:50:77:2d:24:27: 43:46:a7:50:b9:7b:5d:d6:26:1c:22:de:69:e2:9a: 59:71:b0:1f:d7:cb:05:3f:0b:88:aa:d0:55:be:c2: 4b:86:fb:93:5c:c7:5c:60:e1:e9:94:5c:a9:a1:d4: 66:4d:e8:ca:b5:d9:ed:a9:9a:00:28:02:f8:17:9b: 2d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:80:FD:70:3D:14:DA:3B:8C:11:CE:34:CD:15:19:5C:79:AF:09:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8ed6f021-568d-3bf7-bd18-0d07f76e302e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:69:4e:07:1d:5d:9e:0e:4c:cf:ef:3e:32:0b:75:b0:d6:b7: 59:b3:fc:47:9b:4f:f2:1f:8f:c8:a8:e9:74:20:cf:44:25:ba: bb:84:c3:28:88:c0:1d:2d:36:38:45:74:4d:c3:53:ab:4e:61: 76:c4:52:31:d9:ed:95:da:1a:c4:b3:c1:c7:a4:2a:f1:e4:74: 3c:41:2f:be:8b:d0:94:70:1a:2c:04:4b:0a:6a:a8:a5:a4:ff: d9:70:18:27:a8:b6:b5:f0:c2:34:c9:74:b2:ed:28:d9:5b:be: fe:41:e2:69:4d:7a:a7:4e:69:b0:92:81:e4:75:5c:67:2c:04: 46:91:59:3c:74:d4:77:64:6d:18:8d:a6:b6:d8:21:39:8c:2c: 39:aa:52:24:c0:27:be:e8:c9:84:01:cb:a7:52:6f:54:2a:79: 79:a7:d3:cb:b5:65:ea:9d:97:4f:56:46:77:f1:a0:57:c1:aa: 76:f4:6a:f5:6d:5a:cd:6c:9e:fa:90:57:41:b4:35:b1:9e:13: af:2c:d9:d0:32:85:46:b3:f0:fe:c3:2e:e4:a4:48:d5:63:34: 1e:10:61:aa:1a:3a:31:40:c0:78:5b:a2:57:69:79:95:e3:aa: 18:7c:1b:b1:75:ae:66:6a:5a:3f:50:ed:26:a7:a4:b5:cc:82: d0:0f:69:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulVJGGBf1lalC8PZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyNjAzNDYyOFoXDTI2MDEyNDA0NDYyOFowLzEtMCsGA1UEAxMk MWMwNjQ4YWMtOWFmNC00Mjk3LWJkZjUtNDViMjRiZjJkYTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNRbL3GkNah2VWgO9KHvtTQxwupio+24vHg1 zTNfszM422BSeafZEMBrJ9DZ3lRV+xPjTRiJhYoCK4IWENGwdvMML71X8t0nApWb Lg+DFLQVOEKDQuGUQwNsHTf4tgJsKAtoVZpQ15QWCzTz2MjRFJVfBAukSF3KNsJb wA77AsyhZtPFcc0Vnlwtnlqyu5KnKDh72uE/naSKpj+MZv6xFYjF/ngAiWGznjZp MlDIgVqzl4yp2aLaikEwClbRUHctJCdDRqdQuXtd1iYcIt5p4ppZcbAf18sFPwuI qtBVvsJLhvuTXMdcYOHplFypodRmTejKtdntqZoAKAL4F5stTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWA/XA9FNo7jBHONM0VGVx5rwm0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGVkNmYwMjEtNTY4ZC0z YmY3LWJkMTgtMGQwN2Y3NmUzMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9pTgcdXZ4OTM/vPjILdbDWt1mz/EebT/Ifj8io6XQgz0QluruEwyiI wB0tNjhFdE3DU6tOYXbEUjHZ7ZXaGsSzwcekKvHkdDxBL76L0JRwGiwESwpqqKWk /9lwGCeotrXwwjTJdLLtKNlbvv5B4mlNeqdOabCSgeR1XGcsBEaRWTx01HdkbRiN prbYITmMLDmqUiTAJ77oyYQBy6dSb1QqeXmn08u1Zeqdl09WRnfxoFfBqnb0avVt Ws1snvqQV0G0NbGeE68s2dAyhUaz8P7DLuSkSNVjNB4QYaoaOjFAwHhboldpeZXj qhh8G7F1rmZqWj9Q7SanpLXMgtAPaZU= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:06 2025 by rpki-client