$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa File: 1aa09281-d649-31c6-be20-6305a6a3137d.roa (raw, json) Hash identifier: wQpBdLQDYq1ECuSb8FDwYMSt3hw88ZpxLvJXv47wySU= Subject key identifier: C7:78:40:BA:77:61:E6:C8:8A:C7:8A:59:0A:32:96:CC:A4:F2:B2:BD Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584B99D7B03333350EAC20FF1D40 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 143.223.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:b0:33:33:35:0e:ac:20:ff:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=a9f1d93b-0a97-4d7e-94cd-fc9d908eb8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:01:34:21:77:54:54:0d:91:13:96:45:99:67: d1:c6:7d:1c:95:f4:52:e9:78:5e:e2:95:0f:0e:66: 11:31:50:a7:6d:fd:6e:84:7b:a7:44:bb:45:d3:5d: d3:d1:db:21:79:e0:89:0d:e9:0e:2f:72:6e:63:18: ff:6d:23:47:53:9c:01:f2:82:f1:a0:ab:54:09:53: 5c:9d:a3:93:cb:18:43:b0:0b:1b:81:4f:1d:69:92: ef:80:93:b5:0c:d2:0c:da:3c:46:63:44:cd:fa:82: 07:77:7c:c5:4f:33:21:46:54:03:71:5c:61:bc:b0: bb:ce:e1:a5:db:c9:b6:dd:05:d6:25:5e:c1:dd:18: a9:84:dc:4d:18:56:f9:52:ef:69:51:ac:f9:3c:91: 8c:54:63:fb:67:63:78:52:83:ad:f2:af:15:ab:1e: dc:fb:b9:57:6b:a5:31:e9:d0:4e:7e:eb:8b:5f:06: 58:3b:34:d2:2f:37:2e:68:25:08:c4:e0:fc:e1:b8: 59:c7:29:59:7d:84:92:85:bd:7d:c3:a8:81:45:68: 8d:8b:16:f2:c9:d7:ef:60:9d:e9:48:07:12:16:86: 6a:26:bb:26:c6:91:8c:f6:b5:65:97:84:10:82:19: 59:c2:72:a3:72:48:48:6c:7a:53:2b:28:2d:a7:43: 52:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:78:40:BA:77:61:E6:C8:8A:C7:8A:59:0A:32:96:CC:A4:F2:B2:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c8:23:8c:72:ef:83:5e:70:8f:13:e9:a4:c5:8f:35:6e:19: 37:f5:46:88:28:d7:10:1e:dd:be:4e:f0:e9:08:8f:a5:00:51: cf:9d:80:10:39:9f:25:d3:34:d2:9f:34:74:99:9d:13:79:52: 7c:b3:4b:b7:ec:b0:fe:17:1a:4c:a5:fe:7d:a2:97:f4:4e:51: ec:4e:12:22:79:ca:35:64:04:13:eb:34:99:84:f7:f4:d9:9b: 0e:68:1b:d2:fa:02:e0:e7:06:5e:62:1b:31:4f:90:6a:46:2b: 0e:ca:b8:da:1e:b5:be:ba:87:42:c7:51:ca:27:07:3f:3a:ec: ad:aa:7e:38:95:bf:0b:5e:99:6d:c4:57:ef:bf:d7:53:0a:2c: fc:93:27:fb:51:9e:b6:54:55:df:4b:c7:d1:ed:40:25:8b:d3: 78:9c:7c:7d:58:0d:a9:79:54:50:26:65:9c:38:02:e6:3b:6d: 96:4c:4e:37:15:f4:36:7e:8c:1f:64:8b:3a:ee:d3:f9:11:ec: de:0e:53:f2:b3:0a:32:1f:57:98:82:54:42:22:14:7f:4b:2e: 53:d1:41:07:37:fd:fd:06:f9:dc:3d:81:01:56:dc:6b:5b:2e: 37:4b:41:00:57:de:ef:50:80:4c:77:a9:59:5f:cf:08:02:b5: 26:49:80:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17AzMzUOrCD/HUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YTlmMWQ5M2ItMGE5Ny00ZDdlLTk0Y2QtZmM5ZDkwOGViOGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgE0IXdUVA2RE5ZFmWfRxn0clfRS6Xhe4pUP DmYRMVCnbf1uhHunRLtF013T0dsheeCJDekOL3JuYxj/bSNHU5wB8oLxoKtUCVNc naOTyxhDsAsbgU8daZLvgJO1DNIM2jxGY0TN+oIHd3zFTzMhRlQDcVxhvLC7zuGl 28m23QXWJV7B3RiphNxNGFb5Uu9pUaz5PJGMVGP7Z2N4UoOt8q8Vqx7c+7lXa6Ux 6dBOfuuLXwZYOzTSLzcuaCUIxOD84bhZxylZfYSShb19w6iBRWiNixbyydfvYJ3p SAcSFoZqJrsmxpGM9rVll4QQghlZwnKjckhIbHpTKygtp0NSbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd4QLp3YebIiseKWQoylsyk8rK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMWFhMDkyODEtZDY0OS0z MWM2LWJlMjAtNjMwNWE2YTMxMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/II4xy74NecI8T6aTFjzVuGTf1Rogo1xAe3b5O8OkIj6UAUc+dgBA5 nyXTNNKfNHSZnRN5UnyzS7fssP4XGkyl/n2il/ROUexOEiJ5yjVkBBPrNJmE9/TZ mw5oG9L6AuDnBl5iGzFPkGpGKw7KuNoetb66h0LHUconBz867K2qfjiVvwtemW3E V++/11MKLPyTJ/tRnrZUVd9Lx9HtQCWL03icfH1YDal5VFAmZZw4AuY7bZZMTjcV 9DZ+jB9kizru0/kR7N4OU/KzCjIfV5iCVEIiFH9LLlPRQQc3/f0G+dw9gQFW3Gtb LjdLQQBX3u9QgEx3qVlfzwgCtSZJgMI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:11 2025 by rpki-client