$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/be867349-d0dd-3bef-8ce0-de2d161aa2e4.roa File: be867349-d0dd-3bef-8ce0-de2d161aa2e4.roa (raw, json) Hash identifier: L3uUpxsNbG0mfAAW562JRzrVb3jKQsklnLs9r/u0ZIM= Subject key identifier: DD:3F:B8:9D:49:1B:EE:46:16:2F:A6:E6:A7:E1:61:88:D5:8C:C9:17 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584B99D7B09D7E1697FB07E58D80 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/be867349-d0dd-3bef-8ce0-de2d161aa2e4.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 143.223.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:b0:9d:7e:16:97:fb:07:e5:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=0cbf11ce-9016-4ec6-aa59-ec415bfb6ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:19:fa:50:3e:e9:78:2a:4a:28:fb:17:7f:20: 18:e9:1a:c2:00:32:ef:cb:94:d8:16:2b:49:83:60: f8:cc:e9:2c:79:27:cd:fe:d7:0b:8b:9d:b6:f7:e6: bf:18:fa:72:ff:4c:65:03:d1:32:68:b2:e7:f4:d4: 10:56:48:52:c8:cf:1c:7e:2b:b8:e8:35:ef:da:53: 7c:db:16:d7:2f:ea:ba:40:fe:00:e1:b9:b5:e8:18: 04:95:15:3d:98:54:98:7d:e4:2e:3c:2a:d5:01:75: 6c:fb:fb:24:4a:f9:55:d9:2d:c2:19:21:a9:5b:46: b1:ee:2e:39:3b:ac:d2:56:04:61:41:1b:18:89:78: 3f:a8:02:f1:71:b0:81:c0:42:92:ea:bb:ef:e5:66: cf:34:1c:11:fa:d5:22:0d:68:49:ef:d8:fa:80:90: 6d:3d:df:0c:8e:07:8f:4f:e6:16:d8:1e:e6:b2:ad: 6f:c9:77:9b:bb:f2:12:a2:df:e8:3a:11:42:8a:e0: 2d:6b:c5:be:85:e7:43:1c:8f:cf:31:e1:68:cd:19: 12:aa:03:37:90:44:cb:da:df:d1:7d:3e:9d:89:52: 07:98:fe:9c:32:63:db:ee:a5:ea:b8:7d:3a:ae:70: 3d:54:76:c6:ca:22:3f:23:51:c0:f7:2a:de:1a:e9: ee:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3F:B8:9D:49:1B:EE:46:16:2F:A6:E6:A7:E1:61:88:D5:8C:C9:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/be867349-d0dd-3bef-8ce0-de2d161aa2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:54:88:c6:b7:d6:ce:1c:41:15:0b:90:7b:5b:d6:cf:bb:32: fc:e6:7a:16:20:e0:14:45:9f:19:ae:ca:3e:91:10:60:46:fe: c7:9f:8f:d4:4c:fe:fe:85:d1:4b:e6:23:a3:08:c4:18:76:3e: 95:83:09:12:90:94:e8:2f:e4:92:f9:ef:c6:ac:34:87:99:7e: bd:45:50:a0:82:c6:84:f0:04:50:59:cc:57:e6:63:76:88:bc: d6:c2:c4:dc:a7:51:a5:2c:75:94:41:cc:29:0a:1d:99:30:94: 74:28:c3:de:42:b8:70:12:63:26:5c:51:9d:8f:c3:47:76:08: d9:08:26:19:a7:31:c0:8d:28:f1:b8:07:0a:f4:4a:5b:32:0f: 2b:dd:3a:60:6e:33:9e:54:fa:0f:8f:96:55:ae:29:64:33:dd: 8a:bd:e8:ec:47:d5:a8:71:d9:ef:1a:fa:5e:aa:24:34:30:40: e1:75:d2:e9:ef:01:5d:a4:40:d9:c8:1d:23:c9:50:9a:80:ee: 20:c0:51:0a:25:f8:22:7c:e7:0a:52:ba:4e:8c:2c:85:90:7c: 2c:b1:a6:ac:2c:2a:27:46:83:b5:1f:40:93:07:6c:48:cd:71: 2c:a2:aa:f9:69:27:04:0d:59:83:4f:03:a8:9d:64:27:56:81: a9:b4:2e:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17CdfhaX+wfljYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MGNiZjExY2UtOTAxNi00ZWM2LWFhNTktZWM0MTViZmI2YmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBn6UD7peCpKKPsXfyAY6RrCADLvy5TYFitJ g2D4zOkseSfN/tcLi5229+a/GPpy/0xlA9EyaLLn9NQQVkhSyM8cfiu46DXv2lN8 2xbXL+q6QP4A4bm16BgElRU9mFSYfeQuPCrVAXVs+/skSvlV2S3CGSGpW0ax7i45 O6zSVgRhQRsYiXg/qALxcbCBwEKS6rvv5WbPNBwR+tUiDWhJ79j6gJBtPd8MjgeP T+YW2B7msq1vyXebu/ISot/oOhFCiuAta8W+hedDHI/PMeFozRkSqgM3kETL2t/R fT6diVIHmP6cMmPb7qXquH06rnA9VHbGyiI/I1HA9yreGunuUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0/uJ1JG+5GFi+m5qfhYYjVjMkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYmU4NjczNDktZDBkZC0z YmVmLThjZTAtZGUyZDE2MWFhMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBUiMa31s4cQRULkHtb1s+7MvzmehYg4BRFnxmuyj6REGBG/sefj9RM /v6F0UvmI6MIxBh2PpWDCRKQlOgv5JL578asNIeZfr1FUKCCxoTwBFBZzFfmY3aI vNbCxNynUaUsdZRBzCkKHZkwlHQow95CuHASYyZcUZ2Pw0d2CNkIJhmnMcCNKPG4 Bwr0SlsyDyvdOmBuM55U+g+PllWuKWQz3Yq96OxH1ahx2e8a+l6qJDQwQOF10unv AV2kQNnIHSPJUJqA7iDAUQol+CJ85wpSuk6MLIWQfCyxpqwsKidGg7UfQJMHbEjN cSyiqvlpJwQNWYNPA6idZCdWgam0Ll8= -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:46 2025 by rpki-client