$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa File: 1aa09281-d649-31c6-be20-6305a6a3137d.roa (raw, json) Hash identifier: svytlXAZuAl36CczsLDIbaiXfM7KkxbMZd/E78hE1zU= Subject key identifier: 3E:EB:69:8E:09:E0:E1:74:CE:90:63:97:9B:04:76:8C:38:EA:67:D0 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584C794C5316745C1CB2DE01A980 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa Signing time: Sat 10 Jan 2026 02:00:31 +0000 ROA not before: Sat 10 Jan 2026 02:00:31 +0000 ROA not after: Fri 10 Apr 2026 01:00:31 +0000 asID: 14618 IP address blocks: 143.223.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:79:4c:53:16:74:5c:1c:b2:de:01:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Jan 10 02:00:31 2026 GMT Not After : Apr 10 01:00:31 2026 GMT Subject: CN=d3ed0bad-f98f-4536-8ba6-fd0693ac2417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:bd:af:2e:56:1e:71:b1:33:de:7c:a8:56: 7c:ab:82:81:8f:44:2a:aa:12:7e:a8:ac:33:68:86: 03:50:06:a5:d4:49:5f:1d:ae:e4:bd:68:83:37:c4: ec:27:e5:2f:d5:e1:1a:e6:84:e3:e4:c4:57:86:6d: 6a:68:2a:c0:b5:dc:99:bc:55:29:7e:94:ec:30:ff: 54:65:40:00:d2:1e:43:e0:17:5a:68:52:0e:a1:37: 35:9b:43:66:66:1f:a7:e8:bc:6d:41:10:8a:61:74: 6d:88:30:a7:ec:aa:0d:74:4e:6e:bc:19:7f:06:24: 14:b0:a4:92:db:f7:a1:1a:1d:eb:5c:44:b7:c4:56: 1b:e4:36:9b:fe:99:6d:ec:50:c0:9e:50:f9:67:b5: 65:52:cb:1b:e6:6e:44:1e:b4:f1:fb:45:a7:64:cc: b8:e2:47:9a:9a:49:9a:8a:01:f5:38:17:2b:be:f9: 45:4b:a4:d8:1a:e8:07:14:96:df:5a:d4:ab:70:d6: c6:70:07:bf:8d:d3:38:2e:1a:b3:8f:ce:ad:10:a9: 1a:9d:78:c8:1e:c3:af:6c:22:14:aa:52:50:72:73: fd:57:02:a0:e8:88:f6:03:3d:84:b0:5f:9a:1b:43: 3b:21:43:27:ca:1a:d3:ec:65:3b:98:a4:ac:e8:ce: 2d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EB:69:8E:09:E0:E1:74:CE:90:63:97:9B:04:76:8C:38:EA:67:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e1:39:74:a1:bc:01:6b:c8:5e:b7:25:d0:dd:b4:12:f9:68: 6a:8a:8c:7c:f9:ef:68:4c:2c:30:93:93:2f:24:91:e6:c5:df: 14:e3:9f:2e:af:0c:ad:3f:f2:80:2f:b7:70:83:c3:53:18:7b: cd:a2:32:e5:69:ac:ae:a4:3a:07:48:68:e2:d2:40:be:80:a6: d2:ad:61:38:43:66:5e:7e:f5:87:98:a2:a0:af:f9:ec:97:b9: f1:5c:a8:2d:ed:09:13:f0:ca:fe:16:9d:ac:f2:55:bf:5d:37: cc:04:14:e3:a6:94:29:f3:d5:fe:63:b8:f9:86:79:0f:71:c9: f0:95:88:dd:72:8b:83:4c:bf:bb:af:65:5d:20:78:71:f4:15: 80:c9:ae:d1:50:0b:dc:30:90:91:cc:7c:b0:03:a3:bb:81:fe: 1c:b1:b1:bc:7a:c3:1a:da:b4:e2:37:76:7c:7d:7a:5b:5f:af: 48:2a:18:c1:5b:68:c9:52:70:26:75:5b:c6:e4:c7:f3:6a:70: b3:45:ff:2a:86:69:04:ea:49:9e:3a:98:e6:fa:bb:b8:32:f0: 70:9b:6b:66:c2:90:1d:41:9e:1a:bf:6d:4b:e2:6f:1a:20:bf: 4f:a9:65:1f:be:87:33:82:9d:1a:d1:c1:56:16:55:49:4d:d1: 4f:06:d7:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx5TFMWdFwcst4BqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDNlZDBiYWQtZjk4Zi00NTM2LThiYTYtZmQwNjkzYWMyNDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6e9ry5WHnGxM958qFZ8q4KBj0QqqhJ+qKwz aIYDUAal1ElfHa7kvWiDN8TsJ+Uv1eEa5oTj5MRXhm1qaCrAtdyZvFUpfpTsMP9U ZUAA0h5D4BdaaFIOoTc1m0NmZh+n6LxtQRCKYXRtiDCn7KoNdE5uvBl/BiQUsKSS 2/ehGh3rXES3xFYb5Dab/plt7FDAnlD5Z7VlUssb5m5EHrTx+0WnZMy44keamkma igH1OBcrvvlFS6TYGugHFJbfWtSrcNbGcAe/jdM4Lhqzj86tEKkanXjIHsOvbCIU qlJQcnP9VwKg6Ij2Az2EsF+aG0M7IUMnyhrT7GU7mKSs6M4tFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7raY4J4OF0zpBjl5sEdow46mfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMWFhMDkyODEtZDY0OS0z MWM2LWJlMjAtNjMwNWE2YTMxMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfhOXShvAFryF63JdDdtBL5aGqKjHz572hMLDCTky8kkebF3xTjny6v DK0/8oAvt3CDw1MYe82iMuVprK6kOgdIaOLSQL6AptKtYThDZl5+9YeYoqCv+eyX ufFcqC3tCRPwyv4WnazyVb9dN8wEFOOmlCnz1f5juPmGeQ9xyfCViN1yi4NMv7uv ZV0geHH0FYDJrtFQC9wwkJHMfLADo7uB/hyxsbx6wxratOI3dnx9eltfr0gqGMFb aMlScCZ1W8bkx/NqcLNF/yqGaQTqSZ46mOb6u7gy8HCba2bCkB1Bnhq/bUvibxog v0+pZR++hzOCnRrRwVYWVUlN0U8G13s= -----END CERTIFICATE-----Generated at Mon Mar 2 08:08:05 2026 by rpki-client