$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a520a56c-1748-36c0-8ed8-3ec3f8e97a1c.roa File: a520a56c-1748-36c0-8ed8-3ec3f8e97a1c.roa (raw, json) Hash identifier: XgfU0DrR1sUChiVhV3GhkRNVGtQFAeo/yfc8TNlzRCU= Subject key identifier: C4:E0:0A:66:A1:98:A3:4C:6A:FC:BE:52:7E:B0:FF:92:B4:6A:48:6F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BBD4408BC5795E58AE6136980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a520a56c-1748-36c0-8ed8-3ec3f8e97a1c.roa Signing time: Mon 03 Nov 2025 17:32:33 +0000 ROA not before: Mon 03 Nov 2025 17:32:33 +0000 ROA not after: Sun 01 Feb 2026 17:32:33 +0000 asID: 30456 IP address blocks: 166.88.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:44:08:bc:57:95:e5:8a:e6:13:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 3 17:32:33 2025 GMT Not After : Feb 1 17:32:33 2026 GMT Subject: CN=684cb751-fff0-4a33-9377-b386282a4c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:3a:86:59:f2:47:ff:28:b9:0f:36:62:be: 5f:84:b1:94:a4:10:18:d7:1d:68:44:1e:5d:91:73: 21:74:ae:36:12:c9:43:f4:c8:6c:fc:d7:f7:22:86: 37:3c:7d:39:6a:92:f4:aa:86:ba:b1:b4:c4:2b:a4: f8:0e:91:38:1f:fb:dd:b5:19:10:9a:58:c6:12:24: 8e:80:f0:c0:93:4b:a4:83:41:b7:54:a4:ab:7a:fb: 60:50:c7:c6:b7:0b:48:86:24:34:c1:6f:39:8e:ac: 65:fd:9d:5d:21:70:91:7c:fd:df:20:a9:49:79:18: 2b:b3:44:10:e2:1a:0a:d3:ff:d4:91:a4:ce:8e:7e: 06:36:8d:b4:78:8a:b2:dc:79:7b:c2:5e:dc:81:2c: 0f:0b:de:8e:9f:88:03:14:b6:95:35:af:fa:2b:6e: 53:80:e9:34:39:cb:1c:1d:3f:54:e1:c9:2c:88:d4: 56:59:a8:82:50:0f:0e:5c:4a:0c:bd:9f:b6:1b:d1: bf:03:e3:9f:42:bb:c6:1e:7e:c6:65:9d:e2:e8:95: 4c:32:10:f1:39:83:1a:83:fa:68:00:42:c7:44:4c: 94:7d:f4:19:e6:87:1d:2b:89:16:a5:da:e9:f1:3a: 88:e7:7b:19:47:b4:da:79:da:aa:50:11:b2:da:c9: b7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E0:0A:66:A1:98:A3:4C:6A:FC:BE:52:7E:B0:FF:92:B4:6A:48:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a520a56c-1748-36c0-8ed8-3ec3f8e97a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:cb:07:00:c7:98:b8:28:ad:ba:05:1b:77:71:dd:3d:1d:aa: 90:12:a7:88:8c:f0:5a:ba:56:68:28:d7:d7:d4:1a:63:6c:b3: 74:55:01:90:ed:cf:f6:84:3a:8f:3b:de:9a:f7:77:cf:90:2c: dd:2e:9a:50:88:6b:85:53:3e:bc:ab:f7:8b:06:58:ca:92:c4: 8e:51:62:8f:10:e3:7f:5f:e1:8a:5c:b4:a3:78:cc:87:63:93: 04:57:3c:6f:58:6d:61:3c:fc:2a:78:7b:39:b2:fb:e2:ac:63: c5:26:9b:48:31:52:24:bf:64:5b:a0:35:49:49:4b:ba:e9:46: 49:4d:af:32:f9:d7:18:c1:5b:83:49:b9:0e:7f:17:92:20:44: 56:0a:db:8b:7d:d5:6f:e4:49:3a:ae:3e:d4:a2:ce:98:a3:e8: 8b:5f:a0:d1:37:36:c4:ac:39:d3:e3:91:6c:86:db:02:07:0b: db:18:97:9e:39:01:bc:0d:f9:2d:2d:e8:e3:2c:69:b0:eb:da: 23:a8:eb:97:9c:dd:e9:f1:c4:41:e1:b2:3a:9d:47:c0:b7:8a: 35:ab:d5:b7:68:9c:85:8b:01:60:07:8e:31:93:bb:15:81:cc: 7e:aa:36:9c:d8:7f:85:87:ca:7e:a5:b1:03:c4:4f:85:6a:53: 5f:ac:8d:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu9RAi8V5XliuYTaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMzE3MzIzM1oXDTI2MDIwMTE3MzIzM1owLzEtMCsGA1UEAxMk Njg0Y2I3NTEtZmZmMC00YTMzLTkzNzctYjM4NjI4MmE0YzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa06hlnyR/8ouQ82Yr5fhLGUpBAY1x1oRB5d kXMhdK42EslD9Mhs/Nf3IoY3PH05apL0qoa6sbTEK6T4DpE4H/vdtRkQmljGEiSO gPDAk0ukg0G3VKSrevtgUMfGtwtIhiQ0wW85jqxl/Z1dIXCRfP3fIKlJeRgrs0QQ 4hoK0//UkaTOjn4GNo20eIqy3Hl7wl7cgSwPC96On4gDFLaVNa/6K25TgOk0Ocsc HT9U4cksiNRWWaiCUA8OXEoMvZ+2G9G/A+OfQrvGHn7GZZ3i6JVMMhDxOYMag/po AELHREyUffQZ5ocdK4kWpdrp8TqI53sZR7TaedqqUBGy2sm3fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTgCmahmKNMavy+Un6w/5K0akhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTUyMGE1NmMtMTc0OC0z NmMwLThlZDgtM2VjM2Y4ZTk3YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTLBwDHmLgorboFG3dx3T0dqpASp4iM8Fq6Vmgo19fUGmNss3RVAZDt z/aEOo873pr3d8+QLN0umlCIa4VTPryr94sGWMqSxI5RYo8Q439f4YpctKN4zIdj kwRXPG9YbWE8/Cp4ezmy++KsY8Umm0gxUiS/ZFugNUlJS7rpRklNrzL51xjBW4NJ uQ5/F5IgRFYK24t91W/kSTquPtSizpij6ItfoNE3NsSsOdPjkWyG2wIHC9sYl545 AbwN+S0t6OMsabDr2iOo65ec3enxxEHhsjqdR8C3ijWr1bdonIWLAWAHjjGTuxWB zH6qNpzYf4WHyn6lsQPET4VqU1+sjak= -----END CERTIFICATE-----Generated at Wed Nov 5 01:07:19 2025 by rpki-client