$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/086cdc67-ce11-3dd1-a491-f10620f83f14.roa File: 086cdc67-ce11-3dd1-a491-f10620f83f14.roa (raw, json) Hash identifier: lhTWNafzf2d2Fs7CwKP6B4Ry7SqZR93T2pvVBbuPW0s= Subject key identifier: 5D:96:93:DE:23:DA:3A:E1:77:EA:78:C3:F3:DC:5B:AA:74:CA:3A:E9 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584AB91BB560E2FCA0D4071AA180 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/086cdc67-ce11-3dd1-a491-f10620f83f14.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 16509 IP address blocks: 143.223.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:b5:60:e2:fc:a0:d4:07:1a:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=aff2f5ed-9e47-4d5f-a21e-cb77e352b42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:20:ef:bf:b0:b1:e4:2e:5c:ac:1e:27:8b:5c: 7f:6b:9b:91:1f:9f:bd:a5:2d:05:cb:0a:ee:56:71: 84:c3:b4:0a:89:f4:d7:0f:ba:a9:f2:fd:54:05:2d: 69:31:c2:56:e1:db:cd:dd:33:1a:fc:38:2f:82:ae: 25:12:17:f1:bf:3c:71:95:7c:0c:93:fc:e4:fa:17: 30:a5:3c:65:90:f5:0c:0c:53:66:96:28:fa:4c:a8: fd:e5:67:64:33:8f:15:e0:a6:2d:53:06:b6:1a:ad: 9c:a7:4f:29:f6:b4:ff:64:7f:c2:cd:69:e7:2c:85: 9f:fe:cb:94:f2:22:20:fa:ed:fc:b5:e4:38:d4:5e: 48:67:71:af:0f:ca:fa:fd:2c:30:26:59:17:43:c9: 14:6f:b0:aa:42:81:87:7e:a5:02:de:1b:37:38:65: 80:e5:32:7d:0e:3d:39:8a:12:1e:2d:87:9a:fb:c9: 96:f8:db:88:1f:5b:c9:51:34:21:6e:0a:22:54:c7: 97:91:d1:f4:6b:97:7d:7f:60:50:89:a1:20:39:26: 19:10:63:c1:ea:27:bd:6b:dc:68:9c:ca:f2:30:a1: 52:e7:7a:be:70:f1:44:4a:35:b2:7a:7e:99:f3:c2: 15:52:62:fb:2b:ce:57:b5:07:b6:37:03:ce:42:64: 31:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:96:93:DE:23:DA:3A:E1:77:EA:78:C3:F3:DC:5B:AA:74:CA:3A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/086cdc67-ce11-3dd1-a491-f10620f83f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:67:b8:16:4c:92:43:66:b2:01:6d:a2:a6:ea:a1:2b:70:52: 35:55:88:88:c7:fb:ae:81:6e:fe:31:ce:7d:92:00:7b:a4:c4: cd:bf:b3:bf:56:d7:b1:24:6b:d3:be:a2:c9:f6:fc:cb:3d:0a: 81:cb:f2:34:ac:96:29:9d:a0:4d:c0:1a:7b:38:cf:ed:51:70: 72:b2:1f:86:b7:65:8c:47:79:ce:50:24:63:4a:4b:5f:5a:22: cd:81:ba:b2:06:0c:7c:70:cf:78:f0:03:fa:8a:ed:33:00:75: 16:8f:01:24:99:38:4d:99:a3:c7:9a:d2:a5:b1:e8:02:e2:af: 88:23:6d:5b:48:f3:81:4f:ab:39:13:04:ff:a5:8c:48:ea:0a: 87:f8:3c:25:04:5e:53:6b:4a:7c:5f:e9:0d:03:98:32:f4:8d: 6c:31:55:f2:61:0e:9c:a2:72:73:84:92:04:78:aa:d0:5f:e5: 64:2e:63:96:04:9c:6f:95:03:dc:e1:97:ed:a0:b2:87:62:2e: 2e:4a:39:f1:13:c1:6a:54:f9:80:17:d6:24:1c:e4:82:4b:f3: e6:94:eb:33:b5:0c:c7:78:2c:bb:5b:7b:86:07:a8:e9:f2:99: ac:79:cc:18:db:1d:64:48:89:bf:75:1b:d7:32:e4:a2:91:5c: 7b:83:04:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G7Vg4vyg1AcaoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YWZmMmY1ZWQtOWU0Ny00ZDVmLWEyMWUtY2I3N2UzNTJiNDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSDvv7Cx5C5crB4ni1x/a5uRH5+9pS0Fywru VnGEw7QKifTXD7qp8v1UBS1pMcJW4dvN3TMa/Dgvgq4lEhfxvzxxlXwMk/zk+hcw pTxlkPUMDFNmlij6TKj95WdkM48V4KYtUwa2Gq2cp08p9rT/ZH/CzWnnLIWf/suU 8iIg+u38teQ41F5IZ3GvD8r6/SwwJlkXQ8kUb7CqQoGHfqUC3hs3OGWA5TJ9Dj05 ihIeLYea+8mW+NuIH1vJUTQhbgoiVMeXkdH0a5d9f2BQiaEgOSYZEGPB6ie9a9xo nMryMKFS53q+cPFESjWyen6Z88IVUmL7K85XtQe2NwPOQmQxewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2Wk94j2jrhd+p4w/PcW6p0yjrpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMDg2Y2RjNjctY2UxMS0z ZGQxLWE0OTEtZjEwNjIwZjgzZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZnuBZMkkNmsgFtoqbqoStwUjVViIjH+66Bbv4xzn2SAHukxM2/s79W 17Eka9O+osn2/Ms9CoHL8jSslimdoE3AGns4z+1RcHKyH4a3ZYxHec5QJGNKS19a Is2BurIGDHxwz3jwA/qK7TMAdRaPASSZOE2Zo8ea0qWx6ALir4gjbVtI84FPqzkT BP+ljEjqCof4PCUEXlNrSnxf6Q0DmDL0jWwxVfJhDpyicnOEkgR4qtBf5WQuY5YE nG+VA9zhl+2gsodiLi5KOfETwWpU+YAX1iQc5IJL8+aU6zO1DMd4LLtbe4YHqOny max5zBjbHWRIib91G9cy5KKRXHuDBNk= -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:11 2025 by rpki-client