$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/086cdc67-ce11-3dd1-a491-f10620f83f14.roa File: 086cdc67-ce11-3dd1-a491-f10620f83f14.roa (raw, json) Hash identifier: 7m1yT6OoLW+fP95Uh2896Qf/Hj1J4MM9UONLE0uiIM4= Subject key identifier: 50:84:B5:3D:03:77:20:37:0A:56:F3:D7:74:BE:20:15:6C:7F:03:47 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584B99D7B0ACAA5E8D804AFC9A80 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/086cdc67-ce11-3dd1-a491-f10620f83f14.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 143.223.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:b0:ac:aa:5e:8d:80:4a:fc:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ad7d1dbb-6ee2-4f25-a7c4-56364f19f6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:c6:93:72:e2:9b:f8:2a:20:f9:13:2a:0a: ff:4f:ae:af:d0:7c:5d:0e:d3:8b:d6:66:56:e9:e8: b1:d5:d4:25:88:3e:8f:c1:e6:1c:10:a9:6f:d0:c9: ba:ae:55:8c:e6:b2:fe:6f:f1:4c:f6:8e:27:f8:20: 63:8f:8a:57:91:9a:fc:bf:19:12:68:6b:cd:b1:45: f4:7c:3f:ab:42:6f:c4:4d:86:8c:b0:a9:2b:0a:ae: 46:4e:46:cb:6b:37:6f:82:65:3e:7b:20:f7:0c:f0: a3:18:4b:d6:1a:26:cb:0b:7f:4b:64:c9:3c:52:cc: 45:46:6c:5e:3d:fc:58:99:64:69:6c:cf:61:05:d2: 5a:79:23:e5:37:03:b7:de:03:1a:b0:aa:b9:40:6e: 31:52:08:44:02:f2:12:78:75:60:62:74:d9:37:d2: 9c:c2:a8:18:32:04:73:78:3d:97:22:e6:82:8c:41: 12:46:57:38:9f:71:b3:70:55:2e:0f:4d:b4:37:15: 26:f4:ed:69:47:89:ba:ae:36:24:47:06:1a:de:0d: 22:52:a4:84:1d:63:e0:b0:72:e5:50:4f:45:36:9b: 0c:26:db:f2:c0:6f:d9:7c:d8:55:0f:0e:7d:53:d9: b0:d0:e0:8c:4b:f9:0a:99:ed:43:71:58:67:6a:a5: 82:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:84:B5:3D:03:77:20:37:0A:56:F3:D7:74:BE:20:15:6C:7F:03:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/086cdc67-ce11-3dd1-a491-f10620f83f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:43:2a:2f:64:43:a5:b2:c7:10:64:62:be:ab:e8:63:c5:7d: 60:f9:d2:62:8f:22:cc:01:c6:97:9c:0e:83:34:12:d0:6b:e9: c5:46:80:05:72:94:be:f7:4f:7c:40:91:ba:56:17:da:77:bd: 4d:b3:f5:51:bc:98:35:64:15:99:62:62:fa:40:5b:2d:f1:4b: fd:15:dd:d5:4b:13:d0:34:93:8a:10:5a:cd:78:2a:78:e0:db: c6:a5:3a:97:2b:f9:a8:1e:4a:51:e4:33:15:f7:b3:72:99:46: 5a:c3:de:f7:09:35:15:46:e0:28:1c:d5:ae:30:53:33:be:22: 9b:ec:d4:1f:41:16:f3:1a:b5:1f:14:39:6a:ec:54:17:b8:98: 89:7c:30:12:30:80:be:43:df:12:de:64:8b:4e:03:0e:c4:6c: a5:50:2a:cc:1d:60:81:86:09:63:96:b0:3c:91:5a:66:66:1e: 14:fe:00:7c:0a:16:5c:2a:93:ed:ea:da:ab:57:64:7b:4d:80: cd:b0:c3:e7:d6:75:14:56:32:25:8f:32:5c:c9:aa:f7:42:32: 62:fc:64:5f:6a:a8:83:d5:56:67:38:da:10:be:d8:06:69:d4: 46:b4:2c:87:3f:ab:79:e3:e7:30:b4:2b:8e:d3:1b:d7:a7:f7: f0:f9:2a:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17Csql6NgEr8moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YWQ3ZDFkYmItNmVlMi00ZjI1LWE3YzQtNTYzNjRmMTlmNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHzGk3Lim/gqIPkTKgr/T66v0HxdDtOL1mZW 6eix1dQliD6PweYcEKlv0Mm6rlWM5rL+b/FM9o4n+CBjj4pXkZr8vxkSaGvNsUX0 fD+rQm/ETYaMsKkrCq5GTkbLazdvgmU+eyD3DPCjGEvWGibLC39LZMk8UsxFRmxe PfxYmWRpbM9hBdJaeSPlNwO33gMasKq5QG4xUghEAvISeHVgYnTZN9KcwqgYMgRz eD2XIuaCjEESRlc4n3GzcFUuD020NxUm9O1pR4m6rjYkRwYa3g0iUqSEHWPgsHLl UE9FNpsMJtvywG/ZfNhVDw59U9mw0OCMS/kKme1DcVhnaqWCCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCEtT0DdyA3Clbz13S+IBVsfwNHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMDg2Y2RjNjctY2UxMS0z ZGQxLWE0OTEtZjEwNjIwZjgzZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdDKi9kQ6WyxxBkYr6r6GPFfWD50mKPIswBxpecDoM0EtBr6cVGgAVy lL73T3xAkbpWF9p3vU2z9VG8mDVkFZliYvpAWy3xS/0V3dVLE9A0k4oQWs14Knjg 28alOpcr+ageSlHkMxX3s3KZRlrD3vcJNRVG4Cgc1a4wUzO+Ipvs1B9BFvMatR8U OWrsVBe4mIl8MBIwgL5D3xLeZItOAw7EbKVQKswdYIGGCWOWsDyRWmZmHhT+AHwK Flwqk+3q2qtXZHtNgM2ww+fWdRRWMiWPMlzJqvdCMmL8ZF9qqIPVVmc42hC+2AZp 1Ea0LIc/q3nj5zC0K47TG9en9/D5Kkc= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:55 2025 by rpki-client