$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/be867349-d0dd-3bef-8ce0-de2d161aa2e4.roa File: be867349-d0dd-3bef-8ce0-de2d161aa2e4.roa (raw, json) Hash identifier: 4b1Jl7h5NRVTL6sF/qXwhAF8w+fA5qczAOiD4s5PczE= Subject key identifier: AE:D5:5F:4F:A0:25:24:9F:57:39:E3:B1:C5:7C:E3:46:C0:82:17:9A Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F43285849D85FAC5A24D59687549A6A00 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/be867349-d0dd-3bef-8ce0-de2d161aa2e4.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 143.223.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:ac:5a:24:d5:96:87:54:9a:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ba6542c6-adfd-40e1-bca7-020e1a4feb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:53:3e:15:a9:cb:36:15:c7:06:3f:4b:7a: 43:b8:69:a7:f3:5c:8e:80:b6:ca:b2:89:72:52:0f: a7:8b:31:3e:bf:95:a7:a9:5f:e2:74:6e:b4:3d:64: 6d:fe:b0:ad:49:0f:fd:c8:20:8f:ee:a0:55:b8:66: a5:55:10:f8:59:1b:43:43:ce:81:b0:b4:7a:c6:7a: 86:12:d5:f9:b6:b2:68:1d:b5:5b:8b:52:04:ae:8b: 72:fb:48:93:d0:f7:3d:a1:eb:b3:be:7c:c0:6f:4d: 39:9b:b0:62:eb:6f:d0:6d:35:28:5a:c0:3d:bb:c9: 5a:1b:4b:64:4c:ae:6e:87:25:23:de:a9:3e:c8:20: d2:6c:9c:02:6f:87:b4:04:97:53:3a:2b:17:7d:80: d7:5e:2b:ac:48:36:28:74:67:a3:8c:66:2b:1c:00: 1f:93:77:9b:fc:af:17:7d:bf:07:a6:6a:7a:a1:25: 6b:c9:b9:e9:e4:24:a3:22:59:0d:67:84:8f:cf:ac: 26:14:66:c0:9b:08:b3:19:c9:c7:0c:5f:1b:b3:bb: cf:66:ca:cf:ce:87:28:36:4d:21:2e:f7:a0:c3:f6: ea:d2:51:99:94:55:35:29:21:9e:9d:b6:23:f1:c0: 4d:73:b0:df:a1:c7:12:db:de:fa:24:88:1c:f4:83: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D5:5F:4F:A0:25:24:9F:57:39:E3:B1:C5:7C:E3:46:C0:82:17:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/be867349-d0dd-3bef-8ce0-de2d161aa2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ea:64:3d:a1:68:a3:10:2e:34:30:18:15:60:29:55:45:c6: a2:9c:d3:1b:67:e4:58:26:c3:1e:60:c6:9d:ec:4b:87:1f:a3: 10:21:b5:6f:68:d9:d3:ce:74:39:9e:63:4f:c9:9b:40:35:09: 6c:3d:ee:57:56:df:e0:75:be:eb:ec:f5:d5:46:9c:fe:25:ec: bb:03:69:d7:88:b4:1e:43:10:4f:60:40:64:20:fc:7b:e2:9f: aa:57:dc:63:c2:bc:71:30:79:11:d2:14:68:11:a3:27:ad:9d: 76:3c:48:84:d0:d8:6a:7c:ff:a3:69:ce:98:cf:d7:91:c1:d2: 92:29:95:51:c9:9f:8e:cd:00:81:7f:92:88:d3:af:6e:50:f5: ed:f3:42:96:ab:05:90:1e:c3:bd:40:46:a4:49:2a:46:55:98: 8f:dd:fe:7b:72:36:13:e8:84:b7:ad:fe:14:e8:b0:1e:ac:5c: fb:e4:e6:61:a1:c7:ea:96:a7:e2:fc:f0:68:40:77:a0:18:21: d0:41:2e:1e:b7:3d:d3:05:1b:fb:77:ef:5d:e1:8d:58:cb:9c: d0:8c:d2:96:e1:97:bc:b5:f3:dd:a9:47:7c:00:84:c0:9a:cb: 9e:07:e9:46:fd:46:e9:37:1f:2e:02:c7:a4:1d:93:82:7d:97: 45:d5:1e:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6xaJNWWh1SaagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YmE2NTQyYzYtYWRmZC00MGUxLWJjYTctMDIwZTFhNGZlYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV5TPhWpyzYVxwY/S3pDuGmn81yOgLbKsoly Ug+nizE+v5WnqV/idG60PWRt/rCtSQ/9yCCP7qBVuGalVRD4WRtDQ86BsLR6xnqG EtX5trJoHbVbi1IEroty+0iT0Pc9oeuzvnzAb005m7Bi62/QbTUoWsA9u8laG0tk TK5uhyUj3qk+yCDSbJwCb4e0BJdTOisXfYDXXiusSDYodGejjGYrHAAfk3eb/K8X fb8Hpmp6oSVrybnp5CSjIlkNZ4SPz6wmFGbAmwizGcnHDF8bs7vPZsrPzocoNk0h Lvegw/bq0lGZlFU1KSGenbYj8cBNc7DfoccS2976JIgc9INLiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7VX0+gJSSfVznjscV840bAgheaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYmU4NjczNDktZDBkZC0z YmVmLThjZTAtZGUyZDE2MWFhMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTqZD2haKMQLjQwGBVgKVVFxqKc0xtn5Fgmwx5gxp3sS4cfoxAhtW9o 2dPOdDmeY0/Jm0A1CWw97ldW3+B1vuvs9dVGnP4l7LsDadeItB5DEE9gQGQg/Hvi n6pX3GPCvHEweRHSFGgRoyetnXY8SITQ2Gp8/6NpzpjP15HB0pIplVHJn47NAIF/ kojTr25Q9e3zQparBZAew71ARqRJKkZVmI/d/ntyNhPohLet/hTosB6sXPvk5mGh x+qWp+L88GhAd6AYIdBBLh63PdMFG/t3713hjVjLnNCM0pbhl7y1892pR3wAhMCa y54H6Ub9Ruk3Hy4Cx6Qdk4J9l0XVHtU= -----END CERTIFICATE-----Generated at Sun Jun 15 00:23:39 2025 by rpki-client