$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/086cdc67-ce11-3dd1-a491-f10620f83f14.roa File: 086cdc67-ce11-3dd1-a491-f10620f83f14.roa (raw, json) Hash identifier: ZK92nagIx+mDGf3CI1Jxp1dcuFFMMSL6FCY+OYlQDS8= Subject key identifier: 23:AA:A7:E2:B2:AD:E1:34:A7:17:91:D3:09:A2:DE:3F:FC:04:F3:DD Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584D59EA7B81084FB63015232B00 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/086cdc67-ce11-3dd1-a491-f10620f83f14.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 143.223.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:7b:81:08:4f:b6:30:15:23:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=d127ee05-bc20-476e-83d2-073356696bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2c:ab:df:c9:67:cc:99:e9:03:3f:42:90:7d: 78:5d:50:3d:8d:8f:60:b8:d5:6e:e2:62:26:d3:9c: 1a:8a:ce:d5:ba:76:b5:7b:18:bc:a3:35:c7:94:bb: aa:5c:75:e1:4e:6b:74:aa:5b:01:d7:97:8f:2d:54: 6f:6f:68:e1:f0:0c:d3:77:7d:59:02:b7:a6:db:1c: 12:e8:c1:65:31:69:b9:b4:15:05:c3:dc:d1:56:84: 53:43:2e:d8:31:de:7e:bd:5e:38:c5:dc:83:9c:f3: 29:a4:f4:c4:f9:17:4f:66:a4:6e:43:fa:f4:91:6d: b1:0d:3b:27:27:ec:0c:76:2a:8e:a3:0e:24:33:87: 29:e1:f7:a4:db:23:e6:e7:39:86:6f:52:af:77:ce: ae:c1:82:d0:96:d3:7f:53:e3:74:18:6a:14:d3:6c: bd:12:dc:8c:f3:a4:f2:0f:27:cd:d8:cb:53:ab:ba: f3:47:db:4b:c1:c1:44:68:06:50:a1:a9:b2:07:5b: 6d:66:c7:aa:f5:75:16:7a:ae:10:c8:97:29:cb:bd: a9:cd:0d:92:a6:52:56:a8:0b:9f:1c:eb:9c:9f:5e: f6:c3:84:1f:be:55:0b:7e:cb:1e:68:f7:fd:6d:44: 6f:93:98:4f:5d:c1:b2:64:b2:2d:dd:03:48:e3:52: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AA:A7:E2:B2:AD:E1:34:A7:17:91:D3:09:A2:DE:3F:FC:04:F3:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/086cdc67-ce11-3dd1-a491-f10620f83f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:69:25:65:99:fb:e6:00:fa:03:5d:3b:56:5b:fa:93:66:48: 73:0a:c6:f8:10:cd:56:16:19:e6:ad:51:f2:f2:49:63:02:2a: 4f:9f:27:32:20:89:10:cb:19:3c:b6:69:1f:53:c5:67:01:28: 28:8d:7a:df:f7:33:82:08:5d:13:6a:56:57:50:0a:2b:91:6d: 0e:da:f5:9c:91:73:2c:ce:49:ae:60:4f:47:ad:fd:9a:83:f1: 32:d6:6e:dc:a0:25:91:24:a8:eb:bc:bd:d3:cb:4a:88:93:5f: a7:be:0f:b0:48:3f:9c:44:c4:7f:d5:94:f4:a5:5a:22:88:bd: 77:87:5b:24:e1:3f:42:8d:0e:36:ed:3f:d5:bd:8b:d7:61:a5: 96:22:15:05:32:f5:6c:92:ca:1b:3c:eb:f5:54:b1:04:60:a7: 11:b0:30:d7:35:63:cd:9e:f8:fa:fe:96:0d:65:d7:5a:ef:97: 09:6e:e7:5e:68:3d:1a:eb:d4:9b:6c:8a:44:8b:a4:95:69:46: ba:2d:5b:60:bb:57:b7:76:6e:81:8c:d3:c5:c2:b5:3f:6e:ae: e1:ec:17:22:df:e8:8f:78:56:c6:ec:ed:25:b8:01:43:b7:af: 85:1c:4c:36:c1:82:b6:72:5d:10:bd:29:52:02:67:74:0a:74: 8b:b1:97:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nuBCE+2MBUjKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZDEyN2VlMDUtYmMyMC00NzZlLTgzZDItMDczMzU2Njk2YmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiyr38lnzJnpAz9CkH14XVA9jY9guNVu4mIm 05wais7Vuna1exi8ozXHlLuqXHXhTmt0qlsB15ePLVRvb2jh8AzTd31ZArem2xwS 6MFlMWm5tBUFw9zRVoRTQy7YMd5+vV44xdyDnPMppPTE+RdPZqRuQ/r0kW2xDTsn J+wMdiqOow4kM4cp4fek2yPm5zmGb1Kvd86uwYLQltN/U+N0GGoU02y9EtyM86Ty DyfN2MtTq7rzR9tLwcFEaAZQoamyB1ttZseq9XUWeq4QyJcpy72pzQ2SplJWqAuf HOucn172w4QfvlULfsseaPf9bURvk5hPXcGyZLIt3QNI41Jo7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOqp+KyreE0pxeR0wmi3j/8BPPdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMDg2Y2RjNjctY2UxMS0z ZGQxLWE0OTEtZjEwNjIwZjgzZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1pJWWZ++YA+gNdO1Zb+pNmSHMKxvgQzVYWGeatUfLySWMCKk+fJzIg iRDLGTy2aR9TxWcBKCiNet/3M4IIXRNqVldQCiuRbQ7a9ZyRcyzOSa5gT0et/ZqD 8TLWbtygJZEkqOu8vdPLSoiTX6e+D7BIP5xExH/VlPSlWiKIvXeHWyThP0KNDjbt P9W9i9dhpZYiFQUy9WySyhs86/VUsQRgpxGwMNc1Y82e+Pr+lg1l11rvlwlu515o PRrr1JtsikSLpJVpRrotW2C7V7d2boGM08XCtT9uruHsFyLf6I94Vsbs7SW4AUO3 r4UcTDbBgrZyXRC9KVICZ3QKdIuxl6E= -----END CERTIFICATE-----Generated at Fri Apr 17 13:21:50 2026 by rpki-client