$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f85b6e53-8343-3d5d-b664-5dbc60e32f0d.roa File: f85b6e53-8343-3d5d-b664-5dbc60e32f0d.roa (raw, json) Hash identifier: 9+MHs7wfdQEgDeVcm2/Pwgx/LU4eW3qxjI2BYWA0nNU= Subject key identifier: B4:84:B3:64:32:12:04:C2:49:C8:CD:69:EA:DC:14:61:D4:3C:5D:A8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B6797FE3BD92844CB567C7980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f85b6e53-8343-3d5d-b664-5dbc60e32f0d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 44559 IP address blocks: 166.88.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:fe:3b:d9:28:44:cb:56:7c:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=69fcbaf6-83b8-48e0-ace9-e8a44c5872ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:27:50:cf:47:58:ae:97:96:77:8e:29:6c: aa:48:34:27:4e:20:79:6e:42:f4:5d:42:2a:75:a5: 35:39:31:ce:62:31:e1:6f:5f:5d:5b:50:9f:c0:84: f7:54:84:42:19:21:e8:c1:2a:57:1a:0d:54:09:57: d6:2a:fa:fb:ce:83:95:26:cb:00:95:3f:c0:03:cb: 23:fa:65:96:fa:41:16:f8:a4:58:00:5c:e3:c9:01: c9:28:4c:13:c9:55:7c:d8:f7:2b:a2:8c:1f:e3:fb: 70:44:4f:1c:9f:12:d6:2a:34:df:a7:44:20:8c:f9: a1:99:f1:2d:a6:71:0a:3b:f8:6f:ac:e2:f4:1f:f3: 7f:24:6e:9e:d6:ae:30:30:93:e0:b7:b7:2d:1e:da: f0:93:7e:d6:c8:28:03:08:91:ed:d8:2f:36:09:8e: 21:7a:b0:e7:5e:59:71:13:32:ca:0a:46:55:39:58: 62:1f:5c:bb:d2:88:38:54:04:91:c2:22:1c:e6:02: 36:1f:f9:96:f0:18:20:78:b3:bc:bd:fa:d4:f7:b7: d6:93:ef:24:b8:78:13:2d:42:90:1e:d3:ed:14:c6: 43:94:4d:02:ff:da:2a:35:17:3f:67:a9:f1:de:71: 4e:a4:03:03:df:0c:60:26:6b:c4:f9:2f:32:17:f6: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:84:B3:64:32:12:04:C2:49:C8:CD:69:EA:DC:14:61:D4:3C:5D:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f85b6e53-8343-3d5d-b664-5dbc60e32f0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:27:20:64:80:ec:d5:ff:2b:52:4b:92:68:0c:a6:7d:fe:7a: 70:01:49:2c:dc:30:03:ec:93:27:d8:67:93:20:86:ba:0b:ce: 57:a5:38:50:1e:0e:83:fe:b6:93:db:94:81:9e:21:d7:68:21: 62:c1:a6:c1:22:3f:82:d5:b5:86:bf:6b:fa:ba:03:85:9f:cb: 76:57:c2:44:0d:c2:3c:e6:b2:9f:e2:71:3e:18:bd:c4:ad:f4: 5c:f6:6b:94:6d:cd:94:cb:bf:59:3e:63:2e:2d:0d:47:39:da: 82:27:82:37:07:d7:15:64:05:2e:aa:bd:56:74:7a:1a:f5:06: 42:fe:e6:f9:c6:3a:35:16:f2:0b:c4:9b:58:8b:5d:c9:2c:d0: ad:c3:ca:fe:70:00:fa:a1:1e:56:f0:3b:b7:8b:ee:40:e0:8f: f8:d2:e1:85:31:7f:71:41:2e:fa:98:e8:f2:7d:92:d3:c0:f6: 17:12:1c:28:27:17:ec:6b:60:a7:1c:1c:c3:f3:c7:ab:0c:22: ec:d6:50:2d:e1:44:7b:af:0a:04:6c:9c:19:26:4c:69:8e:da: 48:82:c4:37:56:1b:6e:6f:33:c4:24:da:2a:96:14:52:33:43: 5b:14:43:b8:07:21:bf:74:84:93:05:d1:a5:d0:3f:c0:00:66: 31:9e:28:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/472ShEy1Z8eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NjlmY2JhZjYtODNiOC00OGUwLWFjZTktZThhNDRjNTg3MmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlInUM9HWK6XlneOKWyqSDQnTiB5bkL0XUIq daU1OTHOYjHhb19dW1CfwIT3VIRCGSHowSpXGg1UCVfWKvr7zoOVJssAlT/AA8sj +mWW+kEW+KRYAFzjyQHJKEwTyVV82Pcroowf4/twRE8cnxLWKjTfp0QgjPmhmfEt pnEKO/hvrOL0H/N/JG6e1q4wMJPgt7ctHtrwk37WyCgDCJHt2C82CY4herDnXllx EzLKCkZVOVhiH1y70og4VASRwiIc5gI2H/mW8BggeLO8vfrU97fWk+8kuHgTLUKQ HtPtFMZDlE0C/9oqNRc/Z6nx3nFOpAMD3wxgJmvE+S8yF/akdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSEs2QyEgTCScjNaercFGHUPF2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjg1YjZlNTMtODM0My0z ZDVkLWI2NjQtNWRiYzYwZTMyZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsnIGSA7NX/K1JLkmgMpn3+enABSSzcMAPskyfYZ5MghroLzlelOFAe DoP+tpPblIGeIddoIWLBpsEiP4LVtYa/a/q6A4Wfy3ZXwkQNwjzmsp/icT4YvcSt 9Fz2a5RtzZTLv1k+Yy4tDUc52oIngjcH1xVkBS6qvVZ0ehr1BkL+5vnGOjUW8gvE m1iLXcks0K3Dyv5wAPqhHlbwO7eL7kDgj/jS4YUxf3FBLvqY6PJ9ktPA9hcSHCgn F+xrYKccHMPzx6sMIuzWUC3hRHuvCgRsnBkmTGmO2kiCxDdWG25vM8Qk2iqWFFIz Q1sUQ7gHIb90hJMF0aXQP8AAZjGeKIs= -----END CERTIFICATE-----Generated at Tue Nov 4 20:47:12 2025 by rpki-client