$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/0d5c86c2-6106-3417-af37-0063e2ac2681.roa File: 0d5c86c2-6106-3417-af37-0063e2ac2681.roa (raw, json) Hash identifier: FCcZ6LrnivjNYDXPCXUdIPVySqmvWxNQ5wlqBzGd7Lc= Subject key identifier: 8E:5F:23:00:BF:C6:33:95:C9:9D:5E:5F:74:12:76:28:54:21:2E:5C Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584B99D7A14D85410F4D9BCE2090 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/0d5c86c2-6106-3417-af37-0063e2ac2681.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 23280 IP address blocks: 143.223.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a1:4d:85:41:0f:4d:9b:ce:20:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=8c125282-ac80-4824-9d40-e32d2140ebb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b1:8c:31:b9:71:ef:53:86:ea:b9:e7:5d:ee: 74:26:ac:c0:af:12:06:b1:5f:e0:a8:80:5c:17:59: 51:7a:56:79:5a:bb:59:c7:5c:6a:18:d6:3d:ae:a7: 88:57:a2:1b:01:8f:c6:c5:66:5b:e7:1f:c5:69:0e: 77:5c:93:fa:f0:e0:29:b1:10:5e:8c:18:aa:1b:20: fc:f9:73:c1:ac:78:ef:01:69:e4:50:b1:4b:e1:e9: 1a:b3:28:b8:71:a8:4d:bf:11:15:2a:fd:16:ee:1b: 0c:d6:ac:bc:b8:49:7b:4a:48:12:3f:eb:dc:57:22: ea:62:7a:38:30:a4:d0:bc:c8:89:1e:7c:4e:1c:48: d5:13:77:53:e3:ae:a6:c2:da:d9:62:c3:79:5f:72: 89:75:b6:d6:35:44:68:3b:b9:c2:59:ba:be:d0:9a: bc:c8:26:50:97:ab:bd:c4:45:ca:89:1b:19:67:0b: 9c:d2:b8:4e:1b:ad:5b:1b:21:99:61:5c:9e:b8:da: 72:67:b8:22:96:f9:92:a2:32:3c:6f:df:13:b4:d4: bb:dc:d7:7d:8b:c3:bf:9b:54:68:ed:41:30:3d:94: ef:af:8b:4c:f1:2c:93:54:ce:57:78:07:29:99:a2: 81:63:08:4c:0b:cd:96:75:e4:18:bb:25:15:e2:c3: 41:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5F:23:00:BF:C6:33:95:C9:9D:5E:5F:74:12:76:28:54:21:2E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/0d5c86c2-6106-3417-af37-0063e2ac2681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:40:62:d6:3d:50:97:ce:9a:c6:be:bd:fc:6f:8e:d2:65:12: bf:6e:07:7d:9e:03:04:07:6f:16:bd:72:be:7d:88:dd:70:6a: 06:21:9b:09:7a:8e:ba:a0:d0:20:be:85:5c:6c:24:45:31:3d: aa:10:77:c6:c9:54:97:b2:15:a9:6a:c2:20:37:13:74:f0:b5: ad:ea:ca:04:8c:ec:d4:a0:46:de:e1:11:05:b2:83:d6:e3:ea: b7:51:73:85:4a:45:d2:6f:31:61:54:80:d0:f7:8f:9d:1a:2d: ac:ce:61:da:91:10:9e:a7:b3:b5:68:59:0d:57:e0:05:fe:5a: e2:84:55:02:3a:cd:ba:4d:83:4d:a9:ee:56:78:3c:d7:1c:84: 9b:9b:51:7c:6a:25:5d:43:2c:8d:cc:23:ad:f1:fd:eb:b8:3b: a9:91:b2:2f:8f:41:11:80:b0:0b:61:9a:48:77:c8:bc:56:c2: 2b:d7:2b:7d:f8:5c:07:b1:2c:a3:54:90:16:23:68:f0:ac:b7: 76:b1:7e:fa:c0:76:6b:8e:da:b1:6d:6b:60:4b:51:e8:cd:d5: d4:d7:a8:f9:90:96:5d:29:2c:68:4d:68:ba:37:7b:ff:83:eb: c3:be:bb:4f:b5:c3:c6:6d:7b:a8:b9:2b:f6:e9:27:78:ac:1c: a6:40:9f:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16FNhUEPTZvOIJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OGMxMjUyODItYWM4MC00ODI0LTlkNDAtZTMyZDIxNDBlYmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rGMMblx71OG6rnnXe50JqzArxIGsV/gqIBc F1lRelZ5WrtZx1xqGNY9rqeIV6IbAY/GxWZb5x/FaQ53XJP68OApsRBejBiqGyD8 +XPBrHjvAWnkULFL4ekasyi4cahNvxEVKv0W7hsM1qy8uEl7SkgSP+vcVyLqYno4 MKTQvMiJHnxOHEjVE3dT466mwtrZYsN5X3KJdbbWNURoO7nCWbq+0Jq8yCZQl6u9 xEXKiRsZZwuc0rhOG61bGyGZYVyeuNpyZ7gilvmSojI8b98TtNS73Nd9i8O/m1Ro 7UEwPZTvr4tM8SyTVM5XeAcpmaKBYwhMC82WdeQYuyUV4sNBBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5fIwC/xjOVyZ1eX3QSdihUIS5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMGQ1Yzg2YzItNjEwNi0z NDE3LWFmMzctMDA2M2UyYWMyNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1AYtY9UJfOmsa+vfxvjtJlEr9uB32eAwQHbxa9cr59iN1wagYhmwl6 jrqg0CC+hVxsJEUxPaoQd8bJVJeyFalqwiA3E3Twta3qygSM7NSgRt7hEQWyg9bj 6rdRc4VKRdJvMWFUgND3j50aLazOYdqREJ6ns7VoWQ1X4AX+WuKEVQI6zbpNg02p 7lZ4PNcchJubUXxqJV1DLI3MI63x/eu4O6mRsi+PQRGAsAthmkh3yLxWwivXK334 XAexLKNUkBYjaPCst3axfvrAdmuO2rFta2BLUejN1dTXqPmQll0pLGhNaLo3e/+D 68O+u0+1w8Zte6i5K/bpJ3isHKZAnx4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:10 2025 by rpki-client