$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/0d5c86c2-6106-3417-af37-0063e2ac2681.roa File: 0d5c86c2-6106-3417-af37-0063e2ac2681.roa (raw, json) Hash identifier: ka+qCYd0l868eoe4dBPLWmjG8l/eqqmfh8cmT3qvVqg= Subject key identifier: 14:45:36:F1:60:AE:C6:31:8A:74:42:6D:55:0D:57:3C:61:50:02:36 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584AB91BA5C02F682918761D7F00 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/0d5c86c2-6106-3417-af37-0063e2ac2681.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 23280 IP address blocks: 143.223.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:a5:c0:2f:68:29:18:76:1d:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=d16fc1c3-3946-403d-b5f7-78adfb408cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:90:17:93:1d:31:17:d2:b5:ef:4f:ad:7a:12: 26:59:09:b6:51:4d:d1:be:97:4a:9d:e4:83:8f:7c: 7e:bb:ca:7a:a5:a6:68:22:79:33:48:72:20:b9:81: 0a:51:45:d2:50:3b:ef:49:0e:7f:fc:59:60:ab:b4: 66:44:7e:b7:84:a7:19:fa:90:b9:61:9b:41:4f:91: 88:f1:a0:d1:4d:6f:89:e2:9b:14:36:31:7e:b2:13: 16:e6:e3:de:c3:b8:c3:08:24:f2:0a:11:c4:68:31: 8d:49:9f:2b:9c:f8:7a:a8:a7:28:df:95:1a:00:cc: 0b:cc:69:e6:ef:d8:9f:95:db:9c:d4:72:44:84:89: 5e:ce:da:e8:5b:72:52:02:f5:bb:d4:47:47:20:9c: c2:17:bb:7c:f9:04:7d:f5:83:91:0b:df:cf:e1:6d: 79:d6:e7:2b:18:15:b7:44:4c:2c:3d:ba:7c:f2:92: 33:28:13:71:ec:54:58:a6:cb:79:da:e6:4d:2f:c2: f6:3e:07:12:47:3b:f5:57:16:f2:8d:74:9a:df:36: bb:94:f0:80:16:84:cc:a7:b3:ba:3f:20:ea:a4:35: 8c:94:7a:9e:50:ce:27:95:b4:79:e5:39:ee:56:b6: ec:ec:1e:91:06:ee:dd:6b:e4:1d:3c:07:43:91:1d: d1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:45:36:F1:60:AE:C6:31:8A:74:42:6D:55:0D:57:3C:61:50:02:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/0d5c86c2-6106-3417-af37-0063e2ac2681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:f5:b2:f9:52:df:d3:7a:88:05:c9:10:96:d2:95:d7:d0:37: eb:40:6f:bd:80:73:3a:38:1f:67:49:2c:80:5b:c8:81:20:da: 48:e3:d9:48:17:0e:8f:d8:fd:14:d5:cf:64:d9:2b:a0:67:2d: d0:32:e2:4d:70:d1:a3:32:7a:1e:07:30:5f:c2:d8:a3:02:2a: 47:35:b9:85:bc:18:40:bf:a8:fb:3b:ef:0d:b1:ff:cb:9d:cd: b3:ea:1e:e8:83:83:28:12:46:ff:a5:99:2b:1f:73:10:15:8f: b6:a0:3f:20:40:79:7b:5e:33:77:11:d8:98:df:45:15:16:f8: 68:5e:3b:e0:70:75:97:53:21:77:96:87:21:2f:97:27:0d:cf: 0a:ec:4e:c3:72:6f:d4:1c:17:be:6b:f1:fc:b6:ee:84:9c:81: 64:68:6b:4b:38:51:88:da:58:74:8a:d7:bf:ff:b0:50:d2:dd: 87:92:87:3c:4c:0f:4d:7f:7f:42:7a:0c:59:5b:10:dd:29:06: 53:9c:7a:c5:1a:10:ca:9f:96:74:8b:cf:34:43:40:f6:57:2e: 1b:86:2c:9b:0c:39:4e:1c:7b:6c:89:7a:ff:a3:df:c1:70:52: 3f:51:50:f3:c3:3c:65:34:57:0e:6d:cd:db:79:3a:5f:e4:22: da:26:58:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G6XAL2gpGHYdfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZDE2ZmMxYzMtMzk0Ni00MDNkLWI1ZjctNzhhZGZiNDA4Y2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZAXkx0xF9K170+tehImWQm2UU3RvpdKneSD j3x+u8p6paZoInkzSHIguYEKUUXSUDvvSQ5//Flgq7RmRH63hKcZ+pC5YZtBT5GI 8aDRTW+J4psUNjF+shMW5uPew7jDCCTyChHEaDGNSZ8rnPh6qKco35UaAMwLzGnm 79iflduc1HJEhIleztroW3JSAvW71EdHIJzCF7t8+QR99YORC9/P4W151ucrGBW3 REwsPbp88pIzKBNx7FRYpst52uZNL8L2PgcSRzv1VxbyjXSa3za7lPCAFoTMp7O6 PyDqpDWMlHqeUM4nlbR55TnuVrbs7B6RBu7da+QdPAdDkR3RcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRFNvFgrsYxinRCbVUNVzxhUAI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMGQ1Yzg2YzItNjEwNi0z NDE3LWFmMzctMDA2M2UyYWMyNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv1svlS39N6iAXJEJbSldfQN+tAb72Aczo4H2dJLIBbyIEg2kjj2UgX Do/Y/RTVz2TZK6BnLdAy4k1w0aMyeh4HMF/C2KMCKkc1uYW8GEC/qPs77w2x/8ud zbPqHuiDgygSRv+lmSsfcxAVj7agPyBAeXteM3cR2JjfRRUW+GheO+BwdZdTIXeW hyEvlycNzwrsTsNyb9QcF75r8fy27oScgWRoa0s4UYjaWHSK17//sFDS3YeShzxM D01/f0J6DFlbEN0pBlOcesUaEMqflnSLzzRDQPZXLhuGLJsMOU4ce2yJev+j38Fw Uj9RUPPDPGU0Vw5tzdt5Ol/kItomWOw= -----END CERTIFICATE-----Generated at Tue Aug 5 17:27:55 2025 by rpki-client