$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa File: 1aa09281-d649-31c6-be20-6305a6a3137d.roa (raw, json) Hash identifier: d6jWo+Ugoc7ZzzIpl8LL3RObjaWT3rIk9BvqvqJS920= Subject key identifier: C4:85:68:A1:7B:A0:14:CE:74:E6:6E:53:A1:B7:F9:3E:87:D1:FB:CF Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584E3A2F3FB037036B066111E980 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 14618 IP address blocks: 143.223.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:3f:b0:37:03:6b:06:61:11:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=1403aaf4-be63-4bde-b2d9-a52f57183f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:72:1a:15:7c:23:60:48:cd:19:f8:54:95:27: 19:29:f3:dc:0b:09:b3:8a:ea:63:57:7a:fe:0d:ca: b0:ac:e9:92:f6:a8:d4:5b:a0:04:c3:78:16:f1:f8: 61:56:d4:8f:da:24:cc:67:4f:55:f7:d4:d2:b3:b6: 23:61:3c:1b:25:51:d9:68:23:33:2e:d1:2b:d2:a5: d9:11:fe:3a:0e:28:72:b5:67:8c:3c:ec:fb:47:e3: 9a:72:f6:b4:61:c0:75:89:8c:3d:a1:b0:13:cf:e3: 14:da:44:3e:93:d5:4a:b5:4f:5a:55:ad:ad:0e:6d: de:fb:23:7a:9e:41:14:33:d9:86:0a:25:42:56:7f: 23:5c:44:13:6d:7b:3f:6e:0d:a5:9b:44:09:59:43: 0f:c6:b3:2e:ce:70:32:53:5e:fd:be:28:69:a2:60: 89:cd:e5:87:0a:2b:ee:6f:49:b2:80:ba:0a:a9:19: 80:ce:4f:43:43:c8:a9:d4:3c:a0:34:47:0f:d3:68: 3c:6c:e6:0a:e6:b5:24:1f:43:ce:5d:18:c8:67:27: 04:09:7c:de:32:61:02:ad:01:02:d9:e6:7a:99:84: 87:3f:d1:01:a0:c7:44:5f:6a:ef:41:4c:c8:50:ea: 9f:42:94:95:61:2d:75:ab:d5:b1:67:b6:24:94:b3: f0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:85:68:A1:7B:A0:14:CE:74:E6:6E:53:A1:B7:F9:3E:87:D1:FB:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:df:ca:8b:50:d2:6f:12:7e:91:32:43:5b:7b:87:13:f8:09: b4:08:42:27:82:01:4a:84:3d:8c:7f:2a:db:6a:c3:2a:6c:e7: 6e:27:be:9c:56:40:78:c2:d8:2a:57:db:5b:40:2d:d4:ad:f5: 60:6f:82:87:b5:6e:b6:3a:11:63:7b:d3:96:67:65:40:3c:6f: 35:26:f9:92:6d:b6:0e:ad:46:52:f4:c6:5b:98:f1:cf:69:7f: 1f:4c:af:c9:73:17:a9:fa:c0:f2:b7:e0:5e:bd:2f:29:10:f5: de:d6:1a:af:4c:f8:29:e2:32:8d:d9:84:a6:c5:04:66:01:34: f4:57:b0:10:d4:ee:f8:17:c4:da:bc:67:3a:8a:3d:f1:c4:c6: e2:53:2c:18:49:75:ee:c0:a9:27:97:05:79:c0:00:86:bd:05: aa:29:a6:15:cb:48:f9:69:de:5b:e8:0a:ff:4a:45:d3:52:37: 15:43:3f:9e:54:c7:dd:db:27:a6:84:9f:d9:26:a5:db:a4:f7: fe:2f:4d:0f:9c:c1:eb:99:f3:9c:31:d9:64:fb:07:9b:e3:ac: 1f:01:3c:92:25:e3:19:49:96:17:af:67:10:73:ff:c9:78:d9: af:90:77:89:7b:b2:35:3a:b9:a3:21:b5:ca:20:af:c2:67:5c: e6:6d:e9:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Lz+wNwNrBmER6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk MTQwM2FhZjQtYmU2My00YmRlLWIyZDktYTUyZjU3MTgzZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnIaFXwjYEjNGfhUlScZKfPcCwmziupjV3r+ DcqwrOmS9qjUW6AEw3gW8fhhVtSP2iTMZ09V99TSs7YjYTwbJVHZaCMzLtEr0qXZ Ef46DihytWeMPOz7R+Oacva0YcB1iYw9obATz+MU2kQ+k9VKtU9aVa2tDm3e+yN6 nkEUM9mGCiVCVn8jXEQTbXs/bg2lm0QJWUMPxrMuznAyU179vihpomCJzeWHCivu b0mygLoKqRmAzk9DQ8ip1DygNEcP02g8bOYK5rUkH0POXRjIZycECXzeMmECrQEC 2eZ6mYSHP9EBoMdEX2rvQUzIUOqfQpSVYS11q9WxZ7YklLPwoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSFaKF7oBTOdOZuU6G3+T6H0fvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMWFhMDkyODEtZDY0OS0z MWM2LWJlMjAtNjMwNWE2YTMxMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATfyotQ0m8SfpEyQ1t7hxP4CbQIQieCAUqEPYx/Kttqwyps524nvpxW QHjC2CpX21tALdSt9WBvgoe1brY6EWN705ZnZUA8bzUm+ZJttg6tRlL0xluY8c9p fx9Mr8lzF6n6wPK34F69LykQ9d7WGq9M+CniMo3ZhKbFBGYBNPRXsBDU7vgXxNq8 ZzqKPfHExuJTLBhJde7AqSeXBXnAAIa9BaopphXLSPlp3lvoCv9KRdNSNxVDP55U x93bJ6aEn9kmpduk9/4vTQ+cweuZ85wx2WT7B5vjrB8BPJIl4xlJlhevZxBz/8l4 2a+Qd4l7sjU6uaMhtcogr8JnXOZt6b8= -----END CERTIFICATE-----Generated at Mon Jul 6 18:21:32 2026 by rpki-client