$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa File: c56e8694-75c1-3f72-8741-dd71e0f83e20.roa (raw, json) Hash identifier: tM3baBhQ20CNlxr4F4Vov7plefo2pOPotT7m5tPMyRc= Subject key identifier: AD:01:87:78:74:04:4F:D7:FB:56:27:84:0E:D4:D4:7C:BB:5F:E1:2E Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584AB91BA5D43CD12A327039EE80 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 23280 IP address blocks: 143.223.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:a5:d4:3c:d1:2a:32:70:39:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=b4888391-55e0-4ef5-9304-3c371d94173f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8a:ee:49:b3:03:8d:38:91:0f:4a:74:3a:90: e8:82:71:8a:72:79:64:74:27:e9:be:11:ce:13:23: 3c:85:26:cc:73:dc:7f:1d:89:76:6b:8d:d0:70:f6: e8:97:d5:9a:19:10:4c:dd:2b:7e:f5:90:31:81:50: 5d:17:3c:c3:0e:3a:aa:ef:ec:a5:21:62:eb:c1:6a: ce:ac:0a:1b:dc:c2:18:67:42:49:7f:2c:5b:40:2e: 5e:c0:f4:66:ac:3a:88:05:96:e2:d0:18:b7:a7:bf: c4:db:2a:f8:4a:14:54:11:43:b9:57:8c:88:cb:54: 6d:f3:22:78:3e:eb:03:6e:e3:3e:da:30:ce:b8:a8: 06:b4:70:02:31:f8:e9:67:f1:96:8b:b4:d4:a9:5d: 67:aa:d0:88:67:db:f2:81:79:1e:96:f9:14:f3:e3: 3c:b1:19:2d:9a:09:6a:e7:c7:c3:7f:7f:fa:5c:84: 06:7c:32:08:19:9c:ae:be:93:5d:6f:ee:b8:a1:16: 45:3d:6d:d7:9e:36:e6:14:95:25:47:09:15:26:1c: 88:ff:2e:b3:d1:60:32:85:8a:8c:3d:9f:77:48:91: d5:bb:d4:8a:ad:2a:17:6c:7a:e7:84:54:2c:4c:88: ca:28:ad:d3:fd:76:57:a8:66:ca:4f:be:d8:9e:78: 3b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:01:87:78:74:04:4F:D7:FB:56:27:84:0E:D4:D4:7C:BB:5F:E1:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:0c:af:39:7f:69:eb:6e:ae:64:82:4f:6c:55:a6:a9:1d:49: 82:12:23:a0:08:8e:81:8b:49:2d:a6:de:0f:70:cc:d2:f5:b5: 00:ec:aa:3c:6d:32:54:87:19:00:f2:31:b9:6b:64:69:93:6e: ed:20:e9:3c:03:64:6c:ba:39:7b:63:11:df:f5:99:69:ff:a1: 34:62:4f:c7:b8:c9:ea:69:50:34:97:33:21:44:b2:b4:87:3c: 18:80:74:73:76:ef:a6:7d:60:38:aa:99:34:21:42:48:87:62: 4b:63:bd:9e:f2:8b:c3:61:a8:e8:33:b7:7b:b2:e4:d2:3b:4e: 3c:ae:f0:8f:11:ac:81:e3:2a:72:28:8c:90:fd:ec:a4:7b:ea: 8f:1d:f9:b8:66:a2:d6:09:f6:f6:26:f7:85:c3:c6:ff:80:67: 11:6d:61:08:15:19:b9:2c:9c:0e:61:a7:48:50:e6:78:5d:3f: bb:1c:7b:68:9e:de:00:fd:15:48:21:8f:40:c1:3e:a6:06:d8: 7e:bb:71:48:bc:f4:5c:b1:33:37:af:74:b8:95:a3:e2:06:40: 4a:70:c3:31:21:9a:82:a1:47:b2:c0:37:14:30:3c:61:aa:7c: 75:f1:8e:b3:03:17:5a:f1:9a:84:54:ee:1b:61:3e:76:c1:da: 94:39:42:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G6XUPNEqMnA57oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YjQ4ODgzOTEtNTVlMC00ZWY1LTkzMDQtM2MzNzFkOTQxNzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIruSbMDjTiRD0p0OpDognGKcnlkdCfpvhHO EyM8hSbMc9x/HYl2a43QcPbol9WaGRBM3St+9ZAxgVBdFzzDDjqq7+ylIWLrwWrO rAob3MIYZ0JJfyxbQC5ewPRmrDqIBZbi0Bi3p7/E2yr4ShRUEUO5V4yIy1Rt8yJ4 PusDbuM+2jDOuKgGtHACMfjpZ/GWi7TUqV1nqtCIZ9vygXkelvkU8+M8sRktmglq 58fDf3/6XIQGfDIIGZyuvpNdb+64oRZFPW3XnjbmFJUlRwkVJhyI/y6z0WAyhYqM PZ93SJHVu9SKrSoXbHrnhFQsTIjKKK3T/XZXqGbKT77Ynng7AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0Bh3h0BE/X+1YnhA7U1Hy7X+EuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYzU2ZTg2OTQtNzVjMS0z ZjcyLTg3NDEtZGQ3MWUwZjgzZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoMrzl/aeturmSCT2xVpqkdSYISI6AIjoGLSS2m3g9wzNL1tQDsqjxt MlSHGQDyMblrZGmTbu0g6TwDZGy6OXtjEd/1mWn/oTRiT8e4yeppUDSXMyFEsrSH PBiAdHN276Z9YDiqmTQhQkiHYktjvZ7yi8NhqOgzt3uy5NI7Tjyu8I8RrIHjKnIo jJD97KR76o8d+bhmotYJ9vYm94XDxv+AZxFtYQgVGbksnA5hp0hQ5nhdP7sce2ie 3gD9FUghj0DBPqYG2H67cUi89FyxMzevdLiVo+IGQEpwwzEhmoKhR7LANxQwPGGq fHXxjrMDF1rxmoRU7hthPnbB2pQ5Qtw= -----END CERTIFICATE-----Generated at Tue Aug 5 20:12:50 2025 by rpki-client