$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f591fc32-59fe-3da5-aa04-79d9dad46f38.roa File: f591fc32-59fe-3da5-aa04-79d9dad46f38.roa (raw, json) Hash identifier: f/CTP8CkVKjBf8TyQHHn6/fGLQP0vhznPjp9ITeIkDY= Subject key identifier: B1:60:3F:18:1B:F3:1E:6B:04:60:E8:69:1C:89:A1:90:17:44:E5:4F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E7732A6570A3B3383010100 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f591fc32-59fe-3da5-aa04-79d9dad46f38.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 166.88.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:32:a6:57:0a:3b:33:83:01:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=66f1eb56-93af-40e6-b18e-5dd6e4629eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4f:c0:80:a3:ca:78:93:aa:9f:49:4a:75:c0: bb:9f:1f:eb:9c:0b:de:79:92:e0:8b:da:db:ba:06: 3c:95:2b:f5:78:5d:60:13:09:8a:12:d6:48:a5:10: 81:6b:5c:96:b4:0f:0b:31:ac:b1:81:a7:e1:21:e2: cf:51:9d:4b:88:6e:8f:2c:0c:61:1b:94:51:46:5c: 94:61:fa:5e:46:55:ed:19:c8:fb:d9:08:84:d1:0e: 1f:d3:2b:e9:f6:3c:3d:d7:37:88:1f:08:4b:0e:09: 4f:fa:10:fc:7e:7b:b6:50:47:f1:a6:54:b4:cd:ef: 9b:3a:63:03:6c:59:01:3a:a5:9d:70:b3:4f:bf:35: 6e:49:6f:3d:81:6e:b8:cb:53:23:e3:52:62:e5:ca: 55:09:68:75:91:ff:a4:f8:c7:d0:4a:6c:da:7e:42: 38:a9:9a:51:0c:93:59:8a:d3:d7:be:83:15:ca:dd: e3:2a:8e:f9:7e:25:e8:4a:81:44:c8:7d:d5:05:37: 61:26:69:70:58:c4:fb:33:dc:73:1d:54:00:b2:b1: e1:37:b8:81:48:a1:56:6b:f5:07:3c:1a:3e:64:e3: c6:aa:5e:f6:cb:87:58:b1:8c:d8:ad:34:b3:cc:f5: 51:c9:9f:17:43:6b:ce:51:93:41:ea:aa:82:de:78: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:60:3F:18:1B:F3:1E:6B:04:60:E8:69:1C:89:A1:90:17:44:E5:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f591fc32-59fe-3da5-aa04-79d9dad46f38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:86:d5:a5:d0:eb:e0:62:e1:90:bf:84:d4:47:fe:9b:a6:6e: a4:39:f3:92:f6:7f:f0:72:34:fc:09:5c:c4:8a:05:bc:74:65: 21:2a:78:fa:94:43:69:81:ba:63:39:dc:63:54:84:7a:d5:69: 67:74:43:57:f0:fa:40:f3:18:db:64:7a:d3:3d:35:e7:2b:23: ed:a0:e9:20:f0:95:ea:91:a7:a5:03:63:df:97:ea:8b:f0:f9: 03:35:7a:13:a2:57:b5:dc:39:50:fb:c1:1c:52:ce:2f:4e:46: e5:16:5a:44:0c:9a:6b:0e:ad:20:5d:f5:6e:35:34:12:62:92: bc:2a:ed:fe:94:05:4c:9a:3e:fc:3b:7a:d5:d3:f2:21:d0:75: ad:ee:be:a6:3e:c2:45:6c:a3:d5:9f:d3:24:a1:32:6e:64:fc: 27:45:93:49:01:ac:12:d8:43:cf:d6:78:23:20:2a:72:be:4f: 46:96:d5:f5:1d:fd:8c:a4:9a:ea:48:38:1a:13:64:40:fa:2c: 98:82:b2:f4:da:35:cc:d8:36:94:06:61:5a:81:b9:06:1a:1f: 89:2a:da:c6:1d:24:e1:9a:a9:f7:67:8c:0a:ae:3e:5c:2c:65: c2:7f:ce:29:dd:f1:cc:e2:cc:36:b4:4d:48:c2:bd:e9:4b:df: e5:04:fb:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdzKmVwo7M4MBAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NjZmMWViNTYtOTNhZi00MGU2LWIxOGUtNWRkNmU0NjI5ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk/AgKPKeJOqn0lKdcC7nx/rnAveeZLgi9rb ugY8lSv1eF1gEwmKEtZIpRCBa1yWtA8LMayxgafhIeLPUZ1LiG6PLAxhG5RRRlyU YfpeRlXtGcj72QiE0Q4f0yvp9jw91zeIHwhLDglP+hD8fnu2UEfxplS0ze+bOmMD bFkBOqWdcLNPvzVuSW89gW64y1Mj41Ji5cpVCWh1kf+k+MfQSmzafkI4qZpRDJNZ itPXvoMVyt3jKo75fiXoSoFEyH3VBTdhJmlwWMT7M9xzHVQAsrHhN7iBSKFWa/UH PBo+ZOPGql72y4dYsYzYrTSzzPVRyZ8XQ2vOUZNB6qqC3njukwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFgPxgb8x5rBGDoaRyJoZAXROVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjU5MWZjMzItNTlmZS0z ZGE1LWFhMDQtNzlkOWRhZDQ2ZjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplj2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuG1aXQ6+Bi4ZC/hNRH/pumbqQ585L2f/ByNPwJXMSKBbx0ZSEqePqU Q2mBumM53GNUhHrVaWd0Q1fw+kDzGNtketM9NecrI+2g6SDwleqRp6UDY9+X6ovw +QM1ehOiV7XcOVD7wRxSzi9ORuUWWkQMmmsOrSBd9W41NBJikrwq7f6UBUyaPvw7 etXT8iHQda3uvqY+wkVso9Wf0yShMm5k/CdFk0kBrBLYQ8/WeCMgKnK+T0aW1fUd /YykmupIOBoTZED6LJiCsvTaNczYNpQGYVqBuQYaH4kq2sYdJOGaqfdnjAquPlws ZcJ/zind8czizDa0TUjCvelL3+UE+5s= -----END CERTIFICATE-----Generated at Wed Nov 5 09:10:30 2025 by rpki-client