$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d/3dd9637d-2212-3e47-9d56-358d29bd5a95.roa File: 3dd9637d-2212-3e47-9d56-358d29bd5a95.roa (raw, json) Hash identifier: qcfKDdrl3PZX3LnBYja9I2ju1ZohO1vrDW14/P/yAi8= Subject key identifier: CE:A1:F6:AB:D4:F2:2E:85:1D:69:F3:03:C6:56:99:98:C2:0C:5E:4D Certificate issuer: /CN=99c6479d-ea0e-4777-ae74-d6c93fd3317d Certificate serial: 010D0C9F4328584B2CF71AB4371EAF85C1C38100 Authority key identifier: 14:AA:1B:5A:57:FB:49:05:5E:40:C1:62:EB:D5:15:9F:52:F5:AF:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d/3dd9637d-2212-3e47-9d56-358d29bd5a95.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 401239 IP address blocks: 143.223.84.0/23 maxlen: 23 143.223.84.0/24 maxlen: 24 143.223.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d/99c6479d-ea0e-4777-ae74-d6c93fd3317d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d/99c6479d-ea0e-4777-ae74-d6c93fd3317d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:1a:b4:37:1e:af:85:c1:c3:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99c6479d-ea0e-4777-ae74-d6c93fd3317d Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=09f9ccb8-820a-4558-aa94-0bbb1e961577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:73:8f:e4:d7:c4:46:9b:fa:6c:bc:e5:e3:08: 17:19:2d:3f:e8:39:1a:b5:53:cd:97:9b:32:b8:ec: 9a:7f:c6:93:66:af:0a:06:9c:c9:1d:3e:92:f1:01: f4:7a:dc:50:79:c8:49:b3:71:a1:59:32:4b:a0:96: 4e:ad:2a:0d:48:83:8d:d9:42:df:fc:a1:d3:6b:ed: b7:ad:ed:83:79:d0:87:22:70:e8:89:27:d9:be:90: db:ed:b0:25:cd:9c:57:dc:0b:6f:10:8c:82:b5:f2: a4:da:c4:57:0f:ca:21:1b:69:90:00:a2:49:b0:7b: 66:b2:9b:69:b9:d5:e4:90:ad:5e:7b:2d:96:47:3c: 6f:3c:91:57:24:54:c2:50:c4:91:ea:d9:ae:86:6f: fa:0c:cb:f4:03:97:18:c7:60:56:39:53:e5:b9:10: 3b:17:17:03:95:82:b6:66:c7:3e:10:d7:94:00:2f: f6:9d:14:6f:ec:f7:65:2d:5c:c8:62:d6:0d:0b:30: e2:25:99:e6:5d:5e:50:a7:da:c1:2a:dd:1b:9c:9d: 05:42:2a:54:64:d6:e7:b2:c3:ab:ed:f1:b9:5c:bc: 54:d9:eb:cc:46:f5:87:a8:65:19:d9:48:17:56:20: 65:48:5c:73:cc:4d:f6:9d:cb:3c:4c:6d:20:17:67: fb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A1:F6:AB:D4:F2:2E:85:1D:69:F3:03:C6:56:99:98:C2:0C:5E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d/3dd9637d-2212-3e47-9d56-358d29bd5a95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d/99c6479d-ea0e-4777-ae74-d6c93fd3317d.crl X509v3 Authority Key Identifier: keyid:14:AA:1B:5A:57:FB:49:05:5E:40:C1:62:EB:D5:15:9F:52:F5:AF:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d.cer sbgp-ipAddrBlock: critical IPv4: 143.223.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:8f:1f:b0:58:ad:48:9b:6f:30:bb:d1:91:5f:e0:19:6a:4f: 98:ed:76:22:fd:ec:3f:b5:3f:39:74:dd:1c:32:92:6f:4a:11: a2:55:c8:d8:d7:23:05:cb:9b:26:be:0d:cb:ba:6d:2e:df:1c: 8e:45:b0:8a:8d:89:24:16:38:a1:05:62:00:b7:a7:60:15:4a: 87:2c:5d:19:32:37:5e:f1:af:75:5e:19:83:66:37:49:e4:1a: a3:04:88:1f:79:57:74:62:54:b0:0f:cd:9e:30:d0:03:8b:eb: 33:f8:bc:fe:8e:58:8c:23:40:8d:06:37:17:4f:4f:20:21:73: 86:c2:22:70:83:1a:4f:f1:4c:2f:1e:b6:b8:17:2f:95:46:40: 7d:d4:6a:30:4b:ab:da:4d:4e:a8:b1:02:6c:fd:f0:ec:42:e4: 3b:da:b1:db:fe:f1:11:72:5f:6a:b0:be:b6:15:2d:ac:d9:d5: df:ff:17:89:04:aa:67:c5:3f:d6:b5:c9:1b:2b:c9:9b:19:a7: c5:a2:fc:7a:70:ac:9a:c7:da:92:87:9b:59:d9:88:0a:61:dc: 05:97:6e:50:01:8b:d9:7b:3a:bf:f2:c6:72:d3:d9:27:a3:13: 39:fa:c8:19:4b:d9:68:d6:c3:0c:44:ee:ae:58:b7:af:e0:c7: a8:31:6b:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9xq0Nx6vhcHDgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljNjQ3OWQtZWEwZS00Nzc3LWFlNzQtZDZjOTNmZDMz MTdkMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MDlmOWNjYjgtODIwYS00NTU4LWFhOTQtMGJiYjFlOTYxNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnOP5NfERpv6bLzl4wgXGS0/6DkatVPNl5sy uOyaf8aTZq8KBpzJHT6S8QH0etxQechJs3GhWTJLoJZOrSoNSION2ULf/KHTa+23 re2DedCHInDoiSfZvpDb7bAlzZxX3AtvEIyCtfKk2sRXD8ohG2mQAKJJsHtmsptp udXkkK1eey2WRzxvPJFXJFTCUMSR6tmuhm/6DMv0A5cYx2BWOVPluRA7FxcDlYK2 Zsc+ENeUAC/2nRRv7PdlLVzIYtYNCzDiJZnmXV5Qp9rBKt0bnJ0FQipUZNbnssOr 7fG5XLxU2evMRvWHqGUZ2UgXViBlSFxzzE32ncs8TG0gF2f7pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6h9qvU8i6FHWnzA8ZWmZjCDF5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OWM2 NDc5ZC1lYTBlLTQ3NzctYWU3NC1kNmM5M2ZkMzMxN2QvM2RkOTYzN2QtMjIxMi0z ZTQ3LTlkNTYtMzU4ZDI5YmQ1YTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTljNjQ3OWQtZWEwZS00Nzc3LWFl NzQtZDZjOTNmZDMzMTdkLzk5YzY0NzlkLWVhMGUtNDc3Ny1hZTc0LWQ2YzkzZmQz MzE3ZC5jcmwwHwYDVR0jBBgwFoAUFKobWlf7SQVeQMFi69UVn1L1r88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OWM2NDc5ZC1lYTBlLTQ3NzctYWU3NC1kNmM5 M2ZkMzMxN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBj99UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6PH7BYrUibbzC70ZFf4BlqT5jtdiL97D+1Pzl03Rwykm9KEaJVyNjX IwXLmya+Dcu6bS7fHI5FsIqNiSQWOKEFYgC3p2AVSocsXRkyN17xr3VeGYNmN0nk GqMEiB95V3RiVLAPzZ4w0AOL6zP4vP6OWIwjQI0GNxdPTyAhc4bCInCDGk/xTC8e trgXL5VGQH3UajBLq9pNTqixAmz98OxC5Dvasdv+8RFyX2qwvrYVLazZ1d//F4kE qmfFP9a1yRsryZsZp8Wi/HpwrJrH2pKHm1nZiAph3AWXblABi9l7Or/yxnLT2Sej Ezn6yBlL2WjWwwxE7q5Yt6/gx6gxa5g= -----END CERTIFICATE-----Generated at Wed Nov 5 17:26:59 2025 by rpki-client