$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa File: 09e21013-7b4b-34c1-82cf-d3a46658b996.roa (raw, json) Hash identifier: RYCj+RN44V5iw10oF7evBldSSoqS6Y4npVkFHbCNOWk= Subject key identifier: AF:37:55:FF:86:F7:FB:04:C0:48:E0:70:DF:5D:BB:51:68:94:6D:9F Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584E3A2F3FB9EF2072BBCE96B370 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 16509 IP address blocks: 143.223.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:3f:b9:ef:20:72:bb:ce:96:b3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=f0e517f6-61cf-4067-b4aa-9bcf03d20c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e2:11:db:dd:08:aa:a3:82:d8:f8:ac:54:24: 47:80:2b:81:10:b3:e4:19:5e:15:1d:22:99:9c:e0: da:42:e3:3e:87:07:3a:c7:cc:6b:05:92:be:67:91: 8c:2c:e7:46:04:57:8f:2c:12:2c:97:dd:f9:70:32: 10:a6:b8:4f:40:52:c8:29:67:c5:0b:8e:40:7d:44: 91:60:a0:f1:4c:a3:45:25:4d:42:be:0e:78:45:5f: 53:61:27:a7:7f:52:21:b8:26:53:ad:c3:6c:6d:f4: 30:83:6c:31:25:8a:81:42:46:e4:ec:9f:94:bc:12: 71:39:29:19:65:ce:a7:79:db:4b:01:ac:67:26:dd: 10:5c:e0:2f:c8:49:97:da:6c:32:df:8b:b8:d4:1f: 9c:48:76:c8:9d:08:dc:62:b8:9f:83:4b:d5:08:10: 4a:78:37:ba:f0:75:0e:4f:01:9c:28:f1:8d:9f:00: 2d:be:7c:ea:1c:b7:a1:ef:5d:ba:f3:5c:4e:b6:2e: b5:2d:90:a1:cd:28:e0:27:98:c3:0e:ba:7e:51:20: 1a:54:e8:cf:71:f2:03:5f:7d:b7:5a:cf:db:94:37: 40:14:e7:0e:e3:9e:55:fe:a7:94:f4:8f:db:0e:f6: cc:b9:30:d8:1f:dc:5d:c9:4c:a7:5a:2a:9f:82:fd: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:37:55:FF:86:F7:FB:04:C0:48:E0:70:DF:5D:BB:51:68:94:6D:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:92:39:26:87:91:7e:74:37:30:ed:ac:35:af:55:6f:a8:75: 5a:a5:16:67:06:56:17:b0:b2:c9:d1:ce:60:02:c6:38:4b:f3: a1:2f:39:a1:11:37:f8:5e:e3:05:d8:bd:b1:ab:fe:13:71:cc: ca:7d:a7:77:6c:16:a6:9c:d2:24:44:09:bb:21:38:61:9e:77: 19:39:2c:26:6d:0e:f5:e1:e2:b6:6b:f5:36:80:21:1f:d4:41: 5b:e6:eb:a3:5c:b9:45:84:20:d8:ed:0b:5f:a5:a9:7c:9e:8b: 36:59:b2:65:7f:a1:7a:d4:4e:00:0f:a6:5c:ae:ff:2b:0b:54: 7d:a0:ee:8c:cb:ae:1f:ef:63:74:29:b2:17:42:04:2f:bc:3e: 08:7d:57:bb:d4:70:21:a2:46:50:a1:d2:f7:02:33:54:43:78: 7b:07:11:53:02:f2:00:20:1b:7a:b3:47:27:a5:79:d7:81:ed: 00:34:3d:b3:31:37:c8:56:aa:6f:a7:ff:c8:77:a9:da:68:f6: 3d:ff:68:e5:42:50:7a:3d:34:17:75:cf:f5:08:70:17:f5:65: 2d:e4:50:16:c5:e9:13:b4:e1:6b:19:f9:b4:07:01:62:eb:9a: a1:90:bc:04:ab:c5:5f:25:59:f8:fe:8d:d1:bb:df:38:1a:cf: 5f:d2:7e:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Lz+57yByu86Ws3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk ZjBlNTE3ZjYtNjFjZi00MDY3LWI0YWEtOWJjZjAzZDIwYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOIR290IqqOC2PisVCRHgCuBELPkGV4VHSKZ nODaQuM+hwc6x8xrBZK+Z5GMLOdGBFePLBIsl935cDIQprhPQFLIKWfFC45AfUSR YKDxTKNFJU1Cvg54RV9TYSenf1IhuCZTrcNsbfQwg2wxJYqBQkbk7J+UvBJxOSkZ Zc6nedtLAaxnJt0QXOAvyEmX2mwy34u41B+cSHbInQjcYrifg0vVCBBKeDe68HUO TwGcKPGNnwAtvnzqHLeh712681xOti61LZChzSjgJ5jDDrp+USAaVOjPcfIDX323 Ws/blDdAFOcO455V/qeU9I/bDvbMuTDYH9xdyUynWiqfgv0BYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK83Vf+G9/sEwEjgcN9du1FolG2fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMDllMjEwMTMtN2I0Yi0z NGMxLTgyY2YtZDNhNDY2NThiOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSSOSaHkX50NzDtrDWvVW+odVqlFmcGVhewssnRzmACxjhL86EvOaER N/he4wXYvbGr/hNxzMp9p3dsFqac0iRECbshOGGedxk5LCZtDvXh4rZr9TaAIR/U QVvm66NcuUWEINjtC1+lqXyeizZZsmV/oXrUTgAPplyu/ysLVH2g7ozLrh/vY3Qp shdCBC+8Pgh9V7vUcCGiRlCh0vcCM1RDeHsHEVMC8gAgG3qzRyeledeB7QA0PbMx N8hWqm+n/8h3qdpo9j3/aOVCUHo9NBd1z/UIcBf1ZS3kUBbF6RO04WsZ+bQHAWLr mqGQvASrxV8lWfj+jdG73zgaz1/Sfl8= -----END CERTIFICATE-----Generated at Wed Jun 24 22:28:00 2026 by rpki-client