$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea280e98-a1a3-3afd-bd52-13c674f0529c.roa File: ea280e98-a1a3-3afd-bd52-13c674f0529c.roa (raw, json) Hash identifier: 2wOTfFTI5x6CcMN32uW4CvJ9WAfr5MnZRE55z4pi4HE= Subject key identifier: 8C:0B:44:3E:D8:05:76:03:9C:2D:53:4F:3C:4A:D0:BC:31:0C:27:67 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB727BA8BEABDFF3577AD5200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea280e98-a1a3-3afd-bd52-13c674f0529c.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 214238 IP address blocks: 166.88.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:ba:8b:ea:bd:ff:35:77:ad:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=524ae04e-eb32-4e53-91b8-2647fcf4f8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:38:93:61:2f:5e:c3:5d:44:7a:d9:e0:52:b9: 7c:59:5c:71:c6:0a:8f:b8:d0:43:64:cf:2f:a8:55: 6d:4d:64:47:64:27:8d:24:06:02:d6:43:08:9d:f5: 62:ba:63:f4:e3:33:39:31:22:9c:a2:72:be:13:86: 6f:fd:1e:76:20:84:e0:3d:d5:95:89:ac:00:6c:e9: db:fd:32:28:3d:38:b9:a1:ac:76:a5:f5:69:f6:46: 88:16:e6:9b:e0:52:5a:be:78:7f:d5:e1:1a:c1:f0: 9f:8b:ef:76:76:d6:a8:5b:41:ca:8e:88:12:99:86: 9d:c3:dc:68:21:f0:a7:d4:e5:5d:88:8b:93:23:93: 99:11:a8:da:13:32:f5:be:94:53:a7:29:15:f8:dd: 8d:b6:ea:b3:e7:60:4b:a8:f8:28:f4:de:23:f0:31: 84:0a:fa:f5:64:1c:e8:14:a0:97:e9:71:0c:2b:4f: 1e:b8:68:c7:fa:f5:29:b0:39:d4:28:a0:ff:c7:c6: 7f:46:23:c9:d0:3d:cf:3a:2a:64:01:da:4b:50:48: 2e:15:48:c9:95:a6:36:7c:fb:c1:32:22:67:82:0b: 17:47:f4:85:2e:68:5c:33:31:a8:49:b4:58:70:ac: 93:cc:32:d3:20:09:dd:ee:45:b2:c0:9a:ad:8b:1d: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0B:44:3E:D8:05:76:03:9C:2D:53:4F:3C:4A:D0:BC:31:0C:27:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea280e98-a1a3-3afd-bd52-13c674f0529c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:5d:30:a3:c3:71:fb:8d:6a:9d:ba:fd:0d:7e:ab:52:bc:a2: b2:d6:c0:9d:10:dc:86:7f:27:22:46:ba:1b:c6:4f:21:ac:0b: 4b:d9:f8:14:e9:b8:db:e1:e0:59:b2:0e:6f:86:4d:81:19:b7: 6a:60:5f:dc:4d:76:46:1d:a5:48:11:00:66:8c:2d:3a:b6:4d: 97:d9:4d:ea:da:55:c7:13:7e:13:a1:6c:76:ab:13:0e:63:d6: 9b:ba:c4:6d:4f:de:4e:1b:82:25:81:bf:76:56:fa:a0:3f:d5: 55:7d:3e:3a:20:bd:f6:b6:b9:39:ff:fc:bb:c1:cf:5b:a2:a1: 5e:ec:c9:ac:b9:ab:d9:39:67:02:f6:b7:3b:af:f6:e5:96:c8: 69:93:88:02:f7:77:1b:3b:f3:07:20:4b:38:1a:81:9b:aa:e8: ee:92:0a:1a:fe:53:30:15:aa:46:0a:a9:3d:df:d1:d8:e0:95: eb:f0:fb:62:4c:7a:52:d9:ec:c8:67:c8:12:f5:16:7c:6b:7a: a5:91:9a:d9:ac:9b:a9:75:e2:cd:86:b0:95:d9:02:4b:07:e9: 54:e5:98:79:b5:05:e4:93:05:b8:59:76:7d:26:1b:50:34:94: 5d:ef:0b:d1:37:bc:d9:b8:86:32:42:d6:ce:70:27:16:4f:c8: 1c:71:00:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7qL6r3/NXetUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk NTI0YWUwNGUtZWIzMi00ZTUzLTkxYjgtMjY0N2ZjZjRmOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jiTYS9ew11EetngUrl8WVxxxgqPuNBDZM8v qFVtTWRHZCeNJAYC1kMInfViumP04zM5MSKconK+E4Zv/R52IITgPdWViawAbOnb /TIoPTi5oax2pfVp9kaIFuab4FJavnh/1eEawfCfi+92dtaoW0HKjogSmYadw9xo IfCn1OVdiIuTI5OZEajaEzL1vpRTpykV+N2Ntuqz52BLqPgo9N4j8DGECvr1ZBzo FKCX6XEMK08euGjH+vUpsDnUKKD/x8Z/RiPJ0D3POipkAdpLUEguFUjJlaY2fPvB MiJnggsXR/SFLmhcMzGoSbRYcKyTzDLTIAnd7kWywJqtix0GvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwLRD7YBXYDnC1TTzxK0LwxDCdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWEyODBlOTgtYTFhMy0z YWZkLWJkNTItMTNjNjc0ZjA1MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5dMKPDcfuNap26/Q1+q1K8orLWwJ0Q3IZ/JyJGuhvGTyGsC0vZ+BTp uNvh4FmyDm+GTYEZt2pgX9xNdkYdpUgRAGaMLTq2TZfZTeraVccTfhOhbHarEw5j 1pu6xG1P3k4bgiWBv3ZW+qA/1VV9Pjogvfa2uTn//LvBz1uioV7syay5q9k5ZwL2 tzuv9uWWyGmTiAL3dxs78wcgSzgagZuq6O6SChr+UzAVqkYKqT3f0djglevw+2JM elLZ7MhnyBL1FnxreqWRmtmsm6l14s2GsJXZAksH6VTlmHm1BeSTBbhZdn0mG1A0 lF3vC9E3vNm4hjJC1s5wJxZPyBxxAFc= -----END CERTIFICATE-----Generated at Tue Nov 4 22:04:36 2025 by rpki-client