$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e2bffba3-38d5-3484-b5e2-cb718b096f6a.roa File: e2bffba3-38d5-3484-b5e2-cb718b096f6a.roa (raw, json) Hash identifier: NqlgGftyVPeDEU0WIjmipFnKurjZPuWk5TZAHQdrmZU= Subject key identifier: 3E:F3:30:0D:FE:A6:A2:48:E4:E6:2C:2F:92:83:6B:FA:2D:F3:70:E6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BBB757EB9E5704B942491C9E8 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e2bffba3-38d5-3484-b5e2-cb718b096f6a.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 214238 IP address blocks: 166.88.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:7e:b9:e5:70:4b:94:24:91:c9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=92a44995-6da2-46b4-b638-4b76bd4923db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:66:75:34:05:f7:f1:d9:3c:b4:56:e1:ea:17: 9a:19:8a:d8:95:6b:71:21:9c:e0:86:af:b4:a9:80: c9:aa:c0:da:3a:9e:f3:72:12:29:f6:fc:52:b3:82: d9:82:54:e6:6d:b4:7e:31:b2:f4:c1:5b:bf:a5:ee: 63:a2:38:1d:57:50:92:f3:d4:5e:bd:06:be:b5:f2: dd:67:8d:c3:4b:0f:2e:ed:db:eb:38:fd:65:8a:33: 09:02:5b:3f:ba:2f:0f:4b:33:43:83:2a:42:9b:ce: 37:b0:2b:35:68:8a:86:2b:cc:a9:b1:27:a6:ec:26: 7d:10:d3:7d:56:8d:b1:bf:68:e9:ec:4c:05:89:bb: 86:73:5c:ec:a4:51:89:6b:56:c2:1f:26:79:9f:61: 60:54:e2:ce:f2:c9:92:7e:fc:c3:2c:cd:2a:50:9e: 9d:26:3b:99:a6:e8:1d:7f:cd:6c:1a:23:18:1e:62: f8:8f:df:16:49:ee:c4:52:a2:dd:4f:74:a4:f1:76: 66:52:24:10:72:f7:24:d2:75:25:d6:07:85:17:e2: 67:bb:4b:90:21:8b:2f:1e:72:d8:a7:03:b2:0c:19: 46:0e:3f:a7:e9:e1:0f:80:56:e2:82:86:e7:ba:05: ff:ee:5f:91:26:ad:23:9a:bc:3a:d6:b6:bf:a7:7d: c4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F3:30:0D:FE:A6:A2:48:E4:E6:2C:2F:92:83:6B:FA:2D:F3:70:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e2bffba3-38d5-3484-b5e2-cb718b096f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:00:ff:ab:92:f7:1f:ea:0f:de:8d:ac:3e:3c:e9:9d:60:d4: d3:69:6e:0d:3b:5f:c4:92:8e:3d:0a:a2:f7:38:30:95:b1:c5: fa:ed:87:d7:e4:33:a1:1e:75:f7:18:cf:bb:cc:e1:82:49:f7: 66:c2:2e:05:1e:2a:4e:bf:4f:25:5b:6a:da:03:aa:59:42:ae: da:06:48:bb:90:f9:f2:d3:55:f7:36:73:36:61:90:62:b5:71: 83:71:b0:4b:59:91:8c:32:4b:23:39:e9:dc:62:c0:99:f0:b8: 7d:5c:d6:75:c5:f7:08:e6:79:42:5e:43:d4:2f:68:ed:4d:66: f9:a0:7d:c4:28:01:06:f3:cd:ea:69:28:19:3a:6e:e7:0c:90: ee:02:05:50:bf:7b:fe:58:f7:37:7c:6d:a0:be:b7:47:dd:6e: 1f:86:48:c9:3b:9d:60:5d:ab:3a:a2:2c:d7:5f:08:0a:cb:8a: dd:b6:14:d0:95:55:83:d6:ad:6a:ad:0d:d2:8f:b9:cf:3c:a2: 64:73:7f:05:61:9f:0e:aa:c9:51:af:74:f9:69:59:c1:51:83: 7e:8b:7f:b6:83:2d:bd:9b:04:6e:82:ce:a9:72:f7:35:9e:3e: 6e:b8:0a:d6:95:a5:a2:dc:df:6f:af:f4:6f:80:00:28:d8:14: 9e:fe:dd:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dX655XBLlCSRyegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk OTJhNDQ5OTUtNmRhMi00NmI0LWI2MzgtNGI3NmJkNDkyM2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGZ1NAX38dk8tFbh6heaGYrYlWtxIZzghq+0 qYDJqsDaOp7zchIp9vxSs4LZglTmbbR+MbL0wVu/pe5jojgdV1CS89RevQa+tfLd Z43DSw8u7dvrOP1lijMJAls/ui8PSzNDgypCm843sCs1aIqGK8ypsSem7CZ9ENN9 Vo2xv2jp7EwFibuGc1zspFGJa1bCHyZ5n2FgVOLO8smSfvzDLM0qUJ6dJjuZpugd f81sGiMYHmL4j98WSe7EUqLdT3Sk8XZmUiQQcvck0nUl1geFF+Jnu0uQIYsvHnLY pwOyDBlGDj+n6eEPgFbigobnugX/7l+RJq0jmrw61ra/p33EmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7zMA3+pqJI5OYsL5KDa/ot83DmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZTJiZmZiYTMtMzhkNS0z NDg0LWI1ZTItY2I3MThiMDk2ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcA/6uS9x/qD96NrD486Z1g1NNpbg07X8SSjj0Kovc4MJWxxfrth9fk M6EedfcYz7vM4YJJ92bCLgUeKk6/TyVbatoDqllCrtoGSLuQ+fLTVfc2czZhkGK1 cYNxsEtZkYwySyM56dxiwJnwuH1c1nXF9wjmeUJeQ9QvaO1NZvmgfcQoAQbzzepp KBk6bucMkO4CBVC/e/5Y9zd8baC+t0fdbh+GSMk7nWBdqzqiLNdfCArLit22FNCV VYPWrWqtDdKPuc88omRzfwVhnw6qyVGvdPlpWcFRg36Lf7aDLb2bBG6Czqly9zWe Pm64CtaVpaLc32+v9G+AACjYFJ7+3eA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:12:50 2025 by rpki-client