$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cc969586-fe65-3f17-854e-da91cff33a5e.roa File: cc969586-fe65-3f17-854e-da91cff33a5e.roa (raw, json) Hash identifier: kOB6W1QWyjQ8Qf8F9a0O35nP8/1CEiUYfALQCJc+/3s= Subject key identifier: 54:4C:16:A4:6A:B1:23:FB:E1:52:77:EF:9F:94:44:E4:55:8B:83:54 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB727B834E4DF33C8BBD32100 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cc969586-fe65-3f17-854e-da91cff33a5e.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 214238 IP address blocks: 166.88.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b8:34:e4:df:33:c8:bb:d3:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=a9ed590e-8e99-45ee-9a6d-9ae0ababe27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:60:ee:d5:66:3f:47:ff:b4:ba:4d:32:6f:83: 3c:cf:58:d9:07:28:b4:bf:eb:d4:a1:cd:a7:b1:39: a7:25:ca:e5:eb:a1:ce:06:07:11:ec:6b:01:e6:da: 88:cd:53:e2:6d:3d:b8:35:56:4f:ce:eb:00:df:b0: a3:94:7b:fa:17:ae:38:d8:42:59:10:d3:03:b7:98: cf:db:85:51:61:f5:17:b0:5b:2f:a6:6c:9b:45:cb: c6:00:97:7e:2f:0c:9b:2e:19:3a:98:29:8b:6c:d9: 4f:8c:dd:c2:63:10:d7:ee:29:9b:63:3b:2b:f3:25: d6:b8:91:a4:b1:04:86:fc:ae:e3:04:07:63:f3:c5: 7e:e2:ba:bb:11:d9:4d:1f:aa:d2:18:cf:80:c8:88: a4:4a:3d:04:19:f8:54:8a:f3:f3:22:15:0d:3f:ca: 6f:dd:99:1d:0f:4c:f9:c5:be:0c:34:3a:e7:01:ae: d3:f7:46:52:ea:4b:ac:88:d9:2f:02:53:01:c7:50: 7f:94:53:56:0a:26:fe:dc:3d:9f:43:10:ce:35:18: de:63:91:12:1d:ca:8a:ae:7a:f3:95:2a:34:ba:e5: b7:f6:74:b7:dc:03:8c:3d:10:0d:3e:56:76:2e:39: 0b:0c:24:9a:51:3c:d4:40:6f:48:a3:aa:9c:cb:f1: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4C:16:A4:6A:B1:23:FB:E1:52:77:EF:9F:94:44:E4:55:8B:83:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cc969586-fe65-3f17-854e-da91cff33a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:aa:01:79:75:36:5f:e9:c9:a9:f0:19:29:f8:18:7b:ba:45: f0:0c:78:82:3e:2d:03:84:da:ae:ba:97:1e:13:01:6b:80:42: 08:64:48:56:6e:b0:8e:9f:40:ad:55:83:2d:63:70:9d:32:c7: 35:2b:ac:46:9d:13:14:20:d5:63:3b:3d:f3:be:03:1d:65:99: 38:91:a7:af:9e:6b:46:cb:1a:d8:44:1e:25:06:7b:18:46:a6: 77:8b:44:32:ca:41:c1:6b:ef:89:56:fa:66:b0:a5:4e:32:c7: 62:1f:67:15:95:fe:28:6b:73:34:dc:fa:6e:d8:20:e9:7b:f0: 0c:e3:01:23:9a:af:35:7d:fc:72:47:ec:8e:8e:4a:d2:1a:df: bd:a9:f5:fd:5a:04:98:e9:91:39:d1:51:a8:1a:e4:69:17:d6: 61:2c:ef:3f:b1:05:fb:ac:7b:e5:d9:6d:ba:4e:b2:bb:d1:5c: 8b:b7:76:c1:d8:70:9a:b3:4e:97:75:cb:6b:43:25:93:08:55: a4:85:8d:1a:a0:3d:91:cd:22:1c:f1:50:05:9b:06:d7:99:fe: 98:32:f9:47:c8:bb:44:38:03:2b:63:0d:f8:8f:06:2d:f2:5d: 01:e4:33:58:e4:f9:6e:8c:14:34:04:05:c4:9f:80:72:5f:eb: 96:17:f2:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7g05N8zyLvTIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk YTllZDU5MGUtOGU5OS00NWVlLTlhNmQtOWFlMGFiYWJlMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2Du1WY/R/+0uk0yb4M8z1jZByi0v+vUoc2n sTmnJcrl66HOBgcR7GsB5tqIzVPibT24NVZPzusA37CjlHv6F6442EJZENMDt5jP 24VRYfUXsFsvpmybRcvGAJd+LwybLhk6mCmLbNlPjN3CYxDX7imbYzsr8yXWuJGk sQSG/K7jBAdj88V+4rq7EdlNH6rSGM+AyIikSj0EGfhUivPzIhUNP8pv3ZkdD0z5 xb4MNDrnAa7T90ZS6kusiNkvAlMBx1B/lFNWCib+3D2fQxDONRjeY5ESHcqKrnrz lSo0uuW39nS33AOMPRANPlZ2LjkLDCSaUTzUQG9Io6qcy/H0EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRMFqRqsSP74VJ375+URORVi4NUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2M5Njk1ODYtZmU2NS0z ZjE3LTg1NGUtZGE5MWNmZjMzYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmqAXl1Nl/pyanwGSn4GHu6RfAMeII+LQOE2q66lx4TAWuAQghkSFZu sI6fQK1Vgy1jcJ0yxzUrrEadExQg1WM7PfO+Ax1lmTiRp6+ea0bLGthEHiUGexhG pneLRDLKQcFr74lW+mawpU4yx2IfZxWV/ihrczTc+m7YIOl78AzjASOarzV9/HJH 7I6OStIa372p9f1aBJjpkTnRUaga5GkX1mEs7z+xBfuse+XZbbpOsrvRXIu3dsHY cJqzTpd1y2tDJZMIVaSFjRqgPZHNIhzxUAWbBteZ/pgy+UfIu0Q4AytjDfiPBi3y XQHkM1jk+W6MFDQEBcSfgHJf65YX8to= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:55 2025 by rpki-client