$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa File: c56e8694-75c1-3f72-8741-dd71e0f83e20.roa (raw, json) Hash identifier: vwCTvICRE642gCz+Y3ewR3IYvFbJPkoeCYPBynMS27s= Subject key identifier: F7:F1:D1:E0:74:82:D3:17:AC:5C:D9:E1:AA:A5:87:9E:D8:D8:D0:93 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584C794C45C499D599AECD4276D0 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa Signing time: Sat 10 Jan 2026 02:00:31 +0000 ROA not before: Sat 10 Jan 2026 02:00:31 +0000 ROA not after: Fri 10 Apr 2026 01:00:31 +0000 asID: 23280 IP address blocks: 143.223.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:79:4c:45:c4:99:d5:99:ae:cd:42:76:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Jan 10 02:00:31 2026 GMT Not After : Apr 10 01:00:31 2026 GMT Subject: CN=cae386d3-109b-4b90-9853-2908a5c8f846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:67:8a:ef:e7:28:ce:93:88:88:3a:66:b2:89: 70:2a:3d:92:0e:29:d4:4b:73:c9:d5:d9:a0:db:ad: 08:d0:f4:b6:15:46:e7:79:0a:d2:1e:c9:33:04:c9: 5b:86:ed:20:18:e8:dc:1f:36:43:b3:28:60:cf:16: da:e1:9d:a0:d0:b2:66:c9:05:12:4c:ae:98:1b:e5: 76:aa:e2:98:27:f4:6c:5d:a3:34:68:44:0e:44:bf: c0:fe:4b:c6:be:91:5e:57:3b:5f:fe:9f:c4:a2:84: 7a:3c:59:55:d7:54:19:ad:d8:42:b5:ea:54:e9:54: 2b:37:9c:eb:8c:9b:0b:d2:55:61:69:cb:21:bf:4d: 39:ea:cf:b9:0b:59:22:35:58:bc:8b:8b:58:ed:05: 99:68:9e:77:40:22:43:83:36:1a:c8:ad:cc:89:29: 8c:b0:50:89:b0:19:0b:7a:32:47:50:21:45:20:db: f7:c3:e2:a4:f0:bb:32:d6:0d:e9:25:41:f4:1c:c1: cf:a6:ab:f6:a8:12:89:b8:74:49:a3:95:f4:83:b4: 85:99:40:d6:0e:d1:f8:af:14:87:13:90:20:26:11: 42:e1:ff:c0:f1:65:66:9a:96:22:79:2c:9d:5b:fe: 34:ac:3b:ee:eb:5d:f2:05:36:b6:da:12:7a:27:e9: 17:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F1:D1:E0:74:82:D3:17:AC:5C:D9:E1:AA:A5:87:9E:D8:D8:D0:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:39:81:92:07:88:d4:58:50:f8:20:eb:b3:c9:3f:99:e7:ea: b6:0b:8a:3b:68:5f:52:17:a5:86:61:db:fd:39:b1:c6:44:14: 8f:eb:e2:f9:18:6d:f4:40:df:11:6b:be:b6:32:4a:53:c1:b7: 62:ff:25:9c:2e:c8:11:c0:99:ad:88:8e:10:b6:5a:14:d9:1e: 50:70:7a:65:0b:a5:d1:04:94:b8:03:1a:6c:a2:ef:67:81:d7: 97:36:c7:53:0b:e9:ff:52:01:3f:41:96:76:42:29:87:5a:a1: 02:fa:2a:fa:3a:96:fa:4e:c5:7c:4c:e1:1d:6c:34:14:94:ce: 15:9d:c3:26:0b:b0:b2:5e:54:67:96:45:f5:67:e0:50:4e:38: e3:9e:54:e2:fe:09:e7:98:28:6e:6c:46:3f:9d:e5:f8:7f:a7: fc:35:56:e5:b9:d0:46:5f:5d:49:90:01:f9:e1:b2:0d:94:fc: 8b:c2:44:fc:be:20:0d:9d:4c:8a:e4:2d:b8:03:82:85:f8:1f: a0:f5:86:de:d3:25:54:7c:92:33:0b:05:f2:d0:1c:e2:4f:0c: 9e:82:d1:12:08:b1:0a:f7:f9:90:1f:7a:cc:cf:a2:76:9f:84: 4e:29:21:00:20:4c:d8:cb:80:33:41:f7:10:6e:8b:86:d6:45: 39:99:38:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx5TEXEmdWZrs1CdtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk Y2FlMzg2ZDMtMTA5Yi00YjkwLTk4NTMtMjkwOGE1YzhmODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmeK7+cozpOIiDpmsolwKj2SDinUS3PJ1dmg 260I0PS2FUbneQrSHskzBMlbhu0gGOjcHzZDsyhgzxba4Z2g0LJmyQUSTK6YG+V2 quKYJ/RsXaM0aEQORL/A/kvGvpFeVztf/p/EooR6PFlV11QZrdhCtepU6VQrN5zr jJsL0lVhacshv0056s+5C1kiNVi8i4tY7QWZaJ53QCJDgzYayK3MiSmMsFCJsBkL ejJHUCFFINv3w+Kk8Lsy1g3pJUH0HMHPpqv2qBKJuHRJo5X0g7SFmUDWDtH4rxSH E5AgJhFC4f/A8WVmmpYieSydW/40rDvu613yBTa22hJ6J+kXNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfx0eB0gtMXrFzZ4aqlh57Y2NCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYzU2ZTg2OTQtNzVjMS0z ZjcyLTg3NDEtZGQ3MWUwZjgzZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU5gZIHiNRYUPgg67PJP5nn6rYLijtoX1IXpYZh2/05scZEFI/r4vkY bfRA3xFrvrYySlPBt2L/JZwuyBHAma2IjhC2WhTZHlBwemULpdEElLgDGmyi72eB 15c2x1ML6f9SAT9BlnZCKYdaoQL6Kvo6lvpOxXxM4R1sNBSUzhWdwyYLsLJeVGeW RfVn4FBOOOOeVOL+CeeYKG5sRj+d5fh/p/w1VuW50EZfXUmQAfnhsg2U/IvCRPy+ IA2dTIrkLbgDgoX4H6D1ht7TJVR8kjMLBfLQHOJPDJ6C0RIIsQr3+ZAfeszPonaf hE4pIQAgTNjLgDNB9xBui4bWRTmZOIM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:44:40 2026 by rpki-client