$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa File: 09e21013-7b4b-34c1-82cf-d3a46658b996.roa (raw, json) Hash identifier: h4i70lhdO7ouzlqFVPnLauggFSsgBo4/Xr9n7HJqzlA= Subject key identifier: B6:0E:3C:D9:A4:D5:D5:5C:C3:68:3C:DB:34:0F:3E:D4:32:CE:59:74 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F43285849D85FAC0731011F24F6BBC980 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 143.223.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:ac:07:31:01:1f:24:f6:bb:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=53836e08-4dc2-473e-b92a-1409196a8538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:40:40:cf:e2:da:e7:78:0a:56:51:54:e9:85: 43:cd:d8:83:e2:3f:b6:ef:b3:d3:21:7b:91:69:da: f7:4f:53:7e:8a:1c:36:b5:df:a6:cf:f6:d8:50:3e: 3e:c2:f6:4c:c1:86:3d:13:c2:19:9e:42:be:fa:74: 78:a8:98:b6:5f:a1:44:cc:7a:96:a6:9d:65:9e:9a: 02:0b:ff:ec:ef:6e:c9:e1:5e:df:f7:69:c9:69:ef: ec:d9:47:4e:97:43:e9:b2:1b:22:5a:a5:2b:70:ca: 7b:ab:4c:30:2b:dd:2d:bf:91:c4:22:2b:df:6f:e3: a5:90:be:48:5f:13:99:bc:05:32:68:ad:1e:59:99: 92:cb:fe:c0:90:08:2b:ef:78:93:68:58:30:6a:62: ea:92:47:f1:a0:ff:cf:d3:2f:1d:60:72:7b:aa:ce: 66:af:0d:f0:9b:4e:9a:e0:49:f2:8f:a5:3a:04:82: 63:c5:79:29:de:13:2b:cb:1e:28:cd:33:77:cd:36: 7f:61:3f:43:51:ce:1c:ef:57:82:b6:f4:67:d9:08: 59:76:04:24:2e:ba:d3:3e:be:0e:f2:69:4d:6c:28: e0:40:09:db:0d:01:07:cd:2d:03:19:d2:50:bc:06: 9a:16:16:fa:e3:51:d7:ae:ca:f7:30:b2:a3:a3:3e: fa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0E:3C:D9:A4:D5:D5:5C:C3:68:3C:DB:34:0F:3E:D4:32:CE:59:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5b:1e:dd:49:3c:cb:13:3f:79:2a:e6:af:bd:70:a3:dd:e0: 40:99:49:fe:87:e7:04:09:ec:6a:66:1c:64:ff:b5:f3:34:dd: 39:0e:ee:9f:60:dc:c5:28:f8:03:03:4e:a1:62:e6:fb:c0:cb: fa:27:78:6f:48:26:f6:d6:8c:27:a6:00:6e:6d:24:5c:1a:53: 1f:5d:79:ac:b3:9a:18:04:e6:22:ad:6c:cc:68:54:43:c9:0b: bb:ee:e8:94:da:6a:ee:0a:7a:86:6e:53:17:95:5e:7d:07:11: f3:f1:2b:85:2f:c0:43:89:5b:a1:5f:bc:06:53:f2:5b:7c:77: 4d:bc:44:20:b1:a2:4f:6d:b1:6c:dc:0e:f6:eb:55:c5:10:16: 2e:73:33:4e:27:a2:77:ba:76:a7:4c:34:a9:b4:9f:f4:91:e5: d4:75:59:d2:6c:f7:44:02:95:1e:79:b4:01:ab:9f:6a:9a:db: a2:ad:86:e5:e0:11:e1:8f:e5:21:d8:89:bc:11:12:3e:1c:30: 8a:79:cc:df:f4:eb:2f:23:81:59:bc:7f:67:34:b3:40:84:d8: c8:47:7d:1b:cc:42:f4:f4:f8:8a:e8:10:5c:b0:ae:84:32:10: 05:23:f8:83:31:cb:44:f9:18:13:11:a0:17:2b:cb:cf:c7:9e: 40:5e:60:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6wHMQEfJPa7yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NTM4MzZlMDgtNGRjMi00NzNlLWI5MmEtMTQwOTE5NmE4NTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkBAz+La53gKVlFU6YVDzdiD4j+277PTIXuR adr3T1N+ihw2td+mz/bYUD4+wvZMwYY9E8IZnkK++nR4qJi2X6FEzHqWpp1lnpoC C//s727J4V7f92nJae/s2UdOl0PpshsiWqUrcMp7q0wwK90tv5HEIivfb+OlkL5I XxOZvAUyaK0eWZmSy/7AkAgr73iTaFgwamLqkkfxoP/P0y8dYHJ7qs5mrw3wm06a 4Enyj6U6BIJjxXkp3hMryx4ozTN3zTZ/YT9DUc4c71eCtvRn2QhZdgQkLrrTPr4O 8mlNbCjgQAnbDQEHzS0DGdJQvAaaFhb641HXrsr3MLKjoz76WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYOPNmk1dVcw2g82zQPPtQyzll0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMDllMjEwMTMtN2I0Yi0z NGMxLTgyY2YtZDNhNDY2NThiOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlbHt1JPMsTP3kq5q+9cKPd4ECZSf6H5wQJ7GpmHGT/tfM03TkO7p9g 3MUo+AMDTqFi5vvAy/oneG9IJvbWjCemAG5tJFwaUx9deayzmhgE5iKtbMxoVEPJ C7vu6JTaau4KeoZuUxeVXn0HEfPxK4UvwEOJW6FfvAZT8lt8d028RCCxok9tsWzc DvbrVcUQFi5zM04none6dqdMNKm0n/SR5dR1WdJs90QClR55tAGrn2qa26KthuXg EeGP5SHYibwREj4cMIp5zN/06y8jgVm8f2c0s0CE2MhHfRvMQvT0+IroEFywroQy EAUj+IMxy0T5GBMRoBcry8/HnkBeYMQ= -----END CERTIFICATE-----Generated at Sat Jun 14 06:35:15 2025 by rpki-client