$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be97de63-470f-3120-a737-89e073586c92.roa File: be97de63-470f-3120-a737-89e073586c92.roa (raw, json) Hash identifier: hyK4gCDHDaC/4Q8wTRMN6ipln3KkgpDuhkycunJUcMg= Subject key identifier: 9B:CF:8A:11:9F:F3:F1:35:39:A5:B3:C2:EE:94:CC:46:2F:1E:A3:A6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B56D737A4BF698AE239794520 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be97de63-470f-3120-a737-89e073586c92.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 149440 IP address blocks: 166.88.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:37:a4:bf:69:8a:e2:39:79:45:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=cd8f7e1c-56e2-4b36-a1f7-92396b1ec8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:09:76:5a:53:3b:3a:34:1a:94:d1:76:5c: 2a:cd:3b:0c:d1:79:5e:e4:8b:4c:fb:0c:1c:f6:54: b6:11:86:54:0d:4b:36:65:ec:f5:59:90:e1:6c:3f: 87:bc:4c:b4:c5:4e:43:ff:45:cf:41:9a:80:25:f3: d9:48:ca:b8:05:53:61:7a:8c:d8:6f:7f:e9:a0:db: 69:66:1f:e2:13:f2:e8:52:ba:9d:06:18:59:ab:38: cf:14:55:4a:c5:f7:7a:14:c7:eb:3f:54:c5:e3:11: fc:ce:82:9b:65:e5:6c:dd:f2:aa:63:20:8d:a1:21: d5:6a:c1:e0:4e:d6:62:9e:54:51:ca:bb:77:96:11: 05:20:e1:3d:94:12:6a:90:03:60:f4:c3:fe:0d:67: 92:03:8c:a8:80:e3:4d:78:e8:65:1d:25:fb:cc:22: 25:47:6b:ba:12:58:a2:86:8f:38:93:ad:46:32:19: c8:74:e2:1e:da:2a:7f:13:9e:aa:39:18:ff:4c:05: 87:bd:5c:eb:f2:cd:80:c4:98:9f:d4:e9:fd:26:da: 40:28:41:89:88:9d:d6:de:2b:d7:a9:43:bc:a7:b5: f2:89:51:d7:45:91:22:e2:19:de:86:37:2e:9a:56: b9:a9:57:36:4e:d7:76:eb:f7:91:80:b7:65:02:55: 4e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CF:8A:11:9F:F3:F1:35:39:A5:B3:C2:EE:94:CC:46:2F:1E:A3:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be97de63-470f-3120-a737-89e073586c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:3c:52:22:20:b9:cd:18:79:35:f3:9d:35:29:13:14:8b:0e: b1:cc:7e:02:17:d7:f1:52:ac:b8:50:b3:27:f5:df:8a:86:0e: fe:6b:e2:73:8c:d7:b8:de:c9:f5:d7:90:08:aa:cf:d1:b0:a8: 21:3a:48:12:78:3b:d0:08:60:c0:0e:ca:f2:00:12:0b:2a:7e: d3:ac:11:6c:ff:1d:d6:05:69:b2:6f:a0:29:10:ee:fd:fc:9c: 1e:23:6e:61:d0:1c:15:56:9e:c3:c1:55:bc:22:b6:b5:5e:fe: 07:f8:47:de:32:d5:88:25:f5:ee:5c:d2:c9:5f:9c:73:9a:c5: cf:0c:ab:a0:d1:cf:5f:ec:88:1e:60:cb:eb:fd:0c:f7:ad:ec: 98:0e:01:6f:8f:20:94:d8:31:87:80:54:05:0e:95:dc:c4:4c: 36:f9:eb:2f:27:ec:89:52:61:ed:5d:a2:47:59:73:7e:56:ec: c7:37:60:5a:09:19:4f:b4:f3:66:0f:ac:e7:88:0e:32:ba:1f: 1c:13:7c:bb:4f:bd:23:b8:ef:cf:7e:15:60:42:32:aa:bc:1c: 97:7c:2f:b3:3e:b8:40:07:bf:a4:45:cf:9c:19:79:fd:88:be: cf:d1:8a:fd:b6:97:a4:78:2a:21:aa:d1:36:da:76:cd:75:84: 66:99:07:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zekv2mK4jl5RSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk Y2Q4ZjdlMWMtNTZlMi00YjM2LWExZjctOTIzOTZiMWVjOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxIJdlpTOzo0GpTRdlwqzTsM0Xle5ItM+wwc 9lS2EYZUDUs2Zez1WZDhbD+HvEy0xU5D/0XPQZqAJfPZSMq4BVNheozYb3/poNtp Zh/iE/LoUrqdBhhZqzjPFFVKxfd6FMfrP1TF4xH8zoKbZeVs3fKqYyCNoSHVasHg TtZinlRRyrt3lhEFIOE9lBJqkANg9MP+DWeSA4yogONNeOhlHSX7zCIlR2u6Elii ho84k61GMhnIdOIe2ip/E56qORj/TAWHvVzr8s2AxJif1On9JtpAKEGJiJ3W3ivX qUO8p7XyiVHXRZEi4hnehjcumla5qVc2Ttd26/eRgLdlAlVOjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvPihGf8/E1OaWzwu6UzEYvHqOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmU5N2RlNjMtNDcwZi0z MTIwLWE3MzctODllMDczNTg2YzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg8UiIguc0YeTXznTUpExSLDrHMfgIX1/FSrLhQsyf134qGDv5r4nOM 17jeyfXXkAiqz9GwqCE6SBJ4O9AIYMAOyvIAEgsqftOsEWz/HdYFabJvoCkQ7v38 nB4jbmHQHBVWnsPBVbwitrVe/gf4R94y1Ygl9e5c0slfnHOaxc8Mq6DRz1/siB5g y+v9DPet7JgOAW+PIJTYMYeAVAUOldzETDb56y8n7IlSYe1dokdZc35W7Mc3YFoJ GU+082YPrOeIDjK6HxwTfLtPvSO4789+FWBCMqq8HJd8L7M+uEAHv6RFz5wZef2I vs/Riv22l6R4KiGq0Tbads11hGaZB1M= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:52 2025 by rpki-client