$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f99da8d7-0f58-32ed-a4ba-57191e4d1241.roa File: f99da8d7-0f58-32ed-a4ba-57191e4d1241.roa (raw, json) Hash identifier: kfbz9vEVz6wVkuAYi0yc1cF56wRZrkZJls/3RZoTC8s= Subject key identifier: 6A:D1:5F:3C:C2:51:4B:F0:9A:EF:2E:0C:B3:E4:86:06:43:0E:13:69 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B48E201892D026810110EFB40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f99da8d7-0f58-32ed-a4ba-57191e4d1241.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 149440 IP address blocks: 166.88.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:01:89:2d:02:68:10:11:0e:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=514f49e3-3c36-4da3-863b-e4def23add8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:12:b0:a4:a8:1c:a8:e5:81:1c:fb:dd:39: 44:46:39:f4:96:45:80:6c:17:d9:46:e7:c7:2c:81: c1:34:d8:9e:c8:8f:87:1d:90:32:c3:04:e4:b3:4a: a0:04:cd:6a:89:ca:3c:a7:49:1d:44:b4:4c:37:b3: de:85:94:d1:3c:fa:e5:90:c6:3d:89:bc:f6:c2:ef: 6f:16:28:90:a3:cb:3a:c7:b8:f2:b5:9e:4b:12:a4: 70:a5:12:ab:09:f3:da:d3:af:09:d9:0a:5d:85:c3: ab:35:b5:7c:1f:fb:24:ee:7a:88:eb:00:86:fd:43: fd:56:ff:d6:25:dc:48:bd:e1:c3:10:ac:88:8b:28: 53:98:ea:77:af:2a:a0:b6:93:61:af:e7:b3:62:c4: 9e:34:a0:fe:d8:3b:05:33:b4:fe:d0:87:59:1f:ee: 85:8e:0e:ff:e5:eb:2d:51:91:d4:d1:91:0e:6e:11: 10:e0:8a:a2:24:b8:aa:cf:aa:d5:1f:a0:a1:e1:61: 32:1b:2c:2b:87:c5:22:c4:5f:b7:86:b6:ac:67:cb: e1:27:a5:ea:41:86:3a:2a:57:db:18:0c:c9:b8:0a: e3:36:e8:a8:3e:6e:a0:ac:e2:91:96:4f:c1:2d:c0: ee:f9:47:29:8b:90:2c:e3:83:23:90:1a:70:71:c5: d9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D1:5F:3C:C2:51:4B:F0:9A:EF:2E:0C:B3:E4:86:06:43:0E:13:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f99da8d7-0f58-32ed-a4ba-57191e4d1241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:4c:34:0d:ad:70:c8:e0:fb:0f:14:5f:0f:5e:b0:15:3a:e7: d8:fc:48:55:61:1e:12:a9:50:9d:0e:24:3e:74:ce:69:04:8b: 50:d7:f2:1e:bc:f2:7e:f5:04:45:6b:f1:03:11:f4:09:7d:1e: c4:31:18:b0:8f:ea:43:ce:ec:9f:73:f9:f5:0a:29:cc:a2:79: 5d:93:61:02:32:d3:58:2a:03:b7:8a:db:d0:a4:20:c5:95:1d: 65:5c:0d:4b:90:c2:11:ee:71:f9:74:5d:da:ea:79:4e:e3:18: 5e:2f:e4:6f:e3:c4:7d:42:90:c0:e4:99:16:71:24:ab:41:0b: 84:39:3d:d0:0e:e2:2d:e8:a6:04:00:93:ee:54:4d:c4:ef:d3: a7:8f:45:8e:89:70:b6:3e:a1:3f:29:bf:8d:05:57:f7:b9:1e: 5b:49:28:f9:36:20:f3:2c:3f:11:93:9d:27:22:87:bd:4f:22: ea:9c:06:ed:cf:66:49:40:23:ad:0d:18:5d:ec:da:ee:85:06: 98:b0:e9:f6:d2:b2:9f:a7:08:fb:e0:75:74:72:11:0b:1c:85: e9:5a:0a:85:67:09:69:7a:76:7b:44:6a:a6:7e:c0:36:fb:d5: 0f:69:37:da:41:01:cf:cb:05:c4:f4:ef:9c:26:c1:e6:fb:7b: 68:01:95:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gGJLQJoEBEO+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTE0ZjQ5ZTMtM2MzNi00ZGEzLTg2M2ItZTRkZWYyM2FkZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJYSsKSoHKjlgRz73TlERjn0lkWAbBfZRufH LIHBNNieyI+HHZAywwTks0qgBM1qico8p0kdRLRMN7PehZTRPPrlkMY9ibz2wu9v FiiQo8s6x7jytZ5LEqRwpRKrCfPa068J2QpdhcOrNbV8H/sk7nqI6wCG/UP9Vv/W JdxIveHDEKyIiyhTmOp3ryqgtpNhr+ezYsSeNKD+2DsFM7T+0IdZH+6Fjg7/5est UZHU0ZEObhEQ4IqiJLiqz6rVH6Ch4WEyGywrh8UixF+3hrasZ8vhJ6XqQYY6Klfb GAzJuArjNuioPm6grOKRlk/BLcDu+Ucpi5As44MjkBpwccXZiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrRXzzCUUvwmu8uDLPkhgZDDhNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjk5ZGE4ZDctMGY1OC0z MmVkLWE0YmEtNTcxOTFlNGQxMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVMNA2tcMjg+w8UXw9esBU659j8SFVhHhKpUJ0OJD50zmkEi1DX8h68 8n71BEVr8QMR9Al9HsQxGLCP6kPO7J9z+fUKKcyieV2TYQIy01gqA7eK29CkIMWV HWVcDUuQwhHucfl0XdrqeU7jGF4v5G/jxH1CkMDkmRZxJKtBC4Q5PdAO4i3opgQA k+5UTcTv06ePRY6JcLY+oT8pv40FV/e5HltJKPk2IPMsPxGTnScih71PIuqcBu3P ZklAI60NGF3s2u6FBpiw6fbSsp+nCPvgdXRyEQschelaCoVnCWl6dntEaqZ+wDb7 1Q9pN9pBAc/LBcT075wmweb7e2gBlZE= -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:39 2025 by rpki-client