$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/fb753e6a-85fb-3762-aa85-f233161f6e88.roa File: fb753e6a-85fb-3762-aa85-f233161f6e88.roa (raw, json) Hash identifier: h005mr704NkFFDEvqoemvy5ZR4ajiIRcqI+I5AFrE1U= Subject key identifier: EC:FE:BE:33:F0:2C:80:64:B3:DD:31:1D:30:02:6A:23:9D:B0:83:59 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584B3D384B14C11A97294E7BFF40 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/fb753e6a-85fb-3762-aa85-f233161f6e88.roa Signing time: Thu 18 Sep 2025 20:45:26 +0000 ROA not before: Thu 18 Sep 2025 20:45:26 +0000 ROA not after: Wed 17 Dec 2025 21:45:26 +0000 asID: 23280 IP address blocks: 216.87.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:38:4b:14:c1:1a:97:29:4e:7b:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Sep 18 20:45:26 2025 GMT Not After : Dec 17 21:45:26 2025 GMT Subject: CN=52323630-03ac-42d5-8351-ccafafdf4dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:bb:09:fc:0e:3b:11:ca:88:65:77:e0:3e: de:cb:5d:ec:ad:10:e6:08:ae:82:73:fb:b8:d2:63: 84:ee:56:82:7c:42:be:7f:6b:08:5f:ac:cf:34:d0: 51:9a:e6:06:b7:02:de:15:0e:6c:4e:39:a1:28:94: 83:7b:69:65:66:08:90:f7:2b:33:7e:dd:8a:a6:db: a0:53:07:c2:75:5e:46:c7:23:bc:ff:d2:8c:ae:ec: 30:b2:f9:89:df:5d:47:e3:73:ee:e1:d4:22:bb:43: 47:6f:ed:b6:03:b7:de:e7:9f:10:6c:77:e0:aa:e9: d9:51:a5:91:f8:79:1b:34:29:95:f5:08:47:20:fe: d4:3e:34:ac:fe:96:e9:c4:56:31:40:09:a3:50:08: c5:23:0d:fa:6b:00:5c:02:ba:f9:02:69:b3:e9:12: b2:45:c2:47:df:33:cb:47:9a:f4:18:96:e3:42:6a: c1:d7:0f:a3:ff:39:11:71:c6:6f:97:ed:6d:55:64: 9d:8a:9e:50:79:44:43:58:cf:bf:cc:93:58:c2:8c: f8:22:b1:28:25:32:e4:ac:35:2b:d5:8f:e7:08:85: a1:ac:1d:7c:7c:e6:7d:c5:92:ad:98:00:5a:b0:a5: 08:49:8f:18:e8:2e:dd:61:9c:46:bb:bb:3a:aa:8a: 61:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FE:BE:33:F0:2C:80:64:B3:DD:31:1D:30:02:6A:23:9D:B0:83:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/fb753e6a-85fb-3762-aa85-f233161f6e88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 216.87.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:10:5d:ac:6f:3b:87:20:5d:92:e7:ca:3b:26:1d:03:f1:99: 27:8d:60:5b:8e:c2:c2:f9:41:7c:99:b2:19:e4:a7:76:fe:67: 51:2e:5e:c6:6c:db:8f:61:67:47:d5:b5:c6:2e:ac:ab:13:d4: f6:db:b7:41:1f:8f:ee:ea:10:a0:f7:26:a9:e6:f2:83:a4:8c: 45:2f:06:bf:73:ea:b7:01:0c:1a:46:8d:4f:ef:90:08:53:72: 4a:54:47:ec:c1:c4:77:00:f1:6d:c4:0d:82:89:37:b5:40:f8: a7:b4:a2:43:94:0c:04:ee:5c:a7:26:f7:8e:da:d5:59:a7:fa: e1:61:83:cd:f6:88:24:d3:ee:6c:67:59:bd:50:51:f9:0d:e3: 34:12:5b:68:ba:56:3c:4e:23:c9:21:95:7c:d4:63:04:b3:85: 84:fd:d5:08:ca:f7:92:2e:01:9d:5e:b6:3c:16:05:76:5c:cc: d9:eb:5e:fe:10:af:df:c5:e9:7d:d3:58:25:8b:42:55:0c:88: cf:30:88:51:eb:06:22:eb:15:a1:72:e0:b1:ce:38:92:6a:78: 5d:6d:60:60:43:00:02:20:6c:af:f1:82:c8:4e:aa:9d:6b:c0: 2e:c8:af:9c:4c:9c:73:eb:e5:20:33:eb:ee:dc:e8:97:89:8f: 3c:31:ef:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9OEsUwRqXKU57/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDkxODIwNDUyNloXDTI1MTIxNzIxNDUyNlowLzEtMCsGA1UEAxMk NTIzMjM2MzAtMDNhYy00MmQ1LTgzNTEtY2NhZmFmZGY0ZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0W7CfwOOxHKiGV34D7ey13srRDmCK6Cc/u4 0mOE7laCfEK+f2sIX6zPNNBRmuYGtwLeFQ5sTjmhKJSDe2llZgiQ9yszft2Kptug UwfCdV5GxyO8/9KMruwwsvmJ311H43Pu4dQiu0NHb+22A7fe558QbHfgqunZUaWR +HkbNCmV9QhHIP7UPjSs/pbpxFYxQAmjUAjFIw36awBcArr5Ammz6RKyRcJH3zPL R5r0GJbjQmrB1w+j/zkRccZvl+1tVWSdip5QeURDWM+/zJNYwoz4IrEoJTLkrDUr 1Y/nCIWhrB18fOZ9xZKtmABasKUISY8Y6C7dYZxGu7s6qophQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOz+vjPwLIBks90xHTACaiOdsINZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvZmI3NTNlNmEtODVmYi0z NzYyLWFhODUtZjIzMzE2MWY2ZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FcrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYQXaxvO4cgXZLnyjsmHQPxmSeNYFuOwsL5QXyZshnkp3b+Z1EuXsZs 249hZ0fVtcYurKsT1Pbbt0Efj+7qEKD3Jqnm8oOkjEUvBr9z6rcBDBpGjU/vkAhT ckpUR+zBxHcA8W3EDYKJN7VA+Ke0okOUDATuXKcm947a1Vmn+uFhg832iCTT7mxn Wb1QUfkN4zQSW2i6VjxOI8khlXzUYwSzhYT91QjK95IuAZ1etjwWBXZczNnrXv4Q r9/F6X3TWCWLQlUMiM8wiFHrBiLrFaFy4LHOOJJqeF1tYGBDAAIgbK/xgshOqp1r wC7Ir5xMnHPr5SAz6+7c6JeJjzwx7+A= -----END CERTIFICATE-----Generated at Sun Oct 19 20:03:52 2025 by rpki-client