$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa File: c56e8694-75c1-3f72-8741-dd71e0f83e20.roa (raw, json) Hash identifier: APlfnMFGEz5+tPdAQ74A1Qk5/Gzum93gDC+b1GpRSr8= Subject key identifier: BA:54:DC:AD:5C:26:90:BF:C7:BB:8A:72:9F:32:45:35:B0:A4:5C:2A Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F43285849D85F9F30F34E3C0DB41565A0 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 23280 IP address blocks: 143.223.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:9f:30:f3:4e:3c:0d:b4:15:65:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=293c4ff5-969c-4bbd-964f-e0085ffa908a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:31:43:5b:8e:84:ca:48:eb:3f:50:05:2c: ae:44:5a:63:39:81:1c:c2:fc:ed:72:81:28:db:1a: 42:64:a4:fe:02:e2:fe:ad:d1:a9:8c:94:e7:c9:61: 32:4b:42:d2:64:4c:85:e2:26:58:81:c9:28:63:11: 6e:5a:8b:be:ca:e4:77:af:73:38:3e:8e:7f:32:6a: 08:02:6d:24:8b:47:f3:d8:f5:47:6f:22:8d:be:b8: 26:b1:f0:22:6e:ee:f8:0d:6b:43:a6:ed:af:24:29: b1:6b:b1:4a:31:3f:67:cb:df:69:d6:09:52:4d:b4: 24:dd:88:c9:bd:62:37:e9:82:2e:a5:c6:16:47:5d: 1c:40:30:5e:37:9e:fc:9b:d2:22:09:05:1b:f7:7c: a9:9e:94:34:d7:c3:c4:6e:4b:1b:c4:1c:25:17:5e: b0:ac:c7:a0:a9:c0:64:93:b1:10:f0:f2:33:46:65: d9:a7:db:92:71:cd:07:19:37:73:6e:bd:ec:3f:83: 2c:f0:9c:f4:46:47:4d:3b:c0:d7:49:ae:9a:be:10: ce:8e:0b:8c:24:b8:90:1e:c0:08:7e:25:d5:50:e5: 5c:f1:3e:9c:2c:0d:3c:86:20:81:9f:4c:11:9e:c3: 4f:0c:05:29:84:f8:3d:3d:fe:c9:da:b3:a0:0f:f5: 47:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:54:DC:AD:5C:26:90:BF:C7:BB:8A:72:9F:32:45:35:B0:A4:5C:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a8:a3:00:50:ef:b9:e8:7b:0e:d1:4d:04:3c:c7:bd:f3:d8: b6:9d:74:a7:67:e5:9f:36:20:29:85:1c:b8:a8:bd:61:cd:91: 16:16:3b:ed:00:3a:55:56:fa:e1:a1:41:00:1a:56:0b:fe:35: 29:cc:26:2d:a6:4a:53:10:72:74:7e:9b:35:7a:eb:5f:42:77: 7c:bb:86:16:d2:75:ab:bb:5e:a1:39:b7:0e:be:0d:40:1b:66: a9:3b:43:04:00:3b:2a:f0:33:10:39:00:a0:12:be:58:aa:2a: 8d:2e:fe:a0:31:5d:7b:2a:f6:fa:a0:47:67:90:02:03:54:24: 86:c0:b0:cb:e2:ff:37:37:8e:e1:f6:68:4f:57:92:35:02:4f: d1:91:91:e2:b7:c1:00:f3:94:11:2f:93:af:2c:c1:71:60:7f: 3a:28:2d:6f:05:3e:49:21:85:c7:93:77:00:2e:88:61:c0:73: f2:72:56:e5:5b:01:d5:16:77:46:b1:71:b8:7e:0a:2f:6d:46: 1e:f7:25:dc:4b:aa:4a:dc:33:80:ec:6e:f5:af:32:8c:c2:eb: c7:dd:9b:96:81:44:28:db:3f:d4:ea:00:f8:6e:ef:37:17:5f: 3b:77:a1:08:c9:17:a5:c9:89:6a:ec:83:01:2b:5d:f3:dd:06: 07:0c:c8:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX58w8048DbQVZaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MjkzYzRmZjUtOTY5Yy00YmJkLTk2NGYtZTAwODVmZmE5MDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm0xQ1uOhMpI6z9QBSyuRFpjOYEcwvztcoEo 2xpCZKT+AuL+rdGpjJTnyWEyS0LSZEyF4iZYgckoYxFuWou+yuR3r3M4Po5/MmoI Am0ki0fz2PVHbyKNvrgmsfAibu74DWtDpu2vJCmxa7FKMT9ny99p1glSTbQk3YjJ vWI36YIupcYWR10cQDBeN578m9IiCQUb93ypnpQ018PEbksbxBwlF16wrMegqcBk k7EQ8PIzRmXZp9uScc0HGTdzbr3sP4Ms8Jz0RkdNO8DXSa6avhDOjguMJLiQHsAI fiXVUOVc8T6cLA08hiCBn0wRnsNPDAUphPg9Pf7J2rOgD/VH9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpU3K1cJpC/x7uKcp8yRTWwpFwqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYzU2ZTg2OTQtNzVjMS0z ZjcyLTg3NDEtZGQ3MWUwZjgzZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2oowBQ77noew7RTQQ8x73z2LaddKdn5Z82ICmFHLiovWHNkRYWO+0A OlVW+uGhQQAaVgv+NSnMJi2mSlMQcnR+mzV6619Cd3y7hhbSdau7XqE5tw6+DUAb Zqk7QwQAOyrwMxA5AKASvliqKo0u/qAxXXsq9vqgR2eQAgNUJIbAsMvi/zc3juH2 aE9XkjUCT9GRkeK3wQDzlBEvk68swXFgfzooLW8FPkkhhceTdwAuiGHAc/JyVuVb AdUWd0axcbh+Ci9tRh73JdxLqkrcM4DsbvWvMozC68fdm5aBRCjbP9TqAPhu7zcX Xzt3oQjJF6XJiWrsgwErXfPdBgcMyJs= -----END CERTIFICATE-----Generated at Sun Jun 29 13:57:31 2025 by rpki-client