$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/baf4ae08-3b16-3d91-8894-dbf4f0704e07.roa File: baf4ae08-3b16-3d91-8894-dbf4f0704e07.roa (raw, json) Hash identifier: arlhy/tmq1KjSgybDP8KOkhTV2I+wXgpTXDrNv8cFEg= Subject key identifier: 2D:9A:4E:91:B0:F9:A1:AF:CA:A2:C4:67:6F:D9:EB:AF:57:69:A6:99 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584E3A2F3FC4C788864F69B248E0 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/baf4ae08-3b16-3d91-8894-dbf4f0704e07.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 16509 IP address blocks: 143.223.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:3f:c4:c7:88:86:4f:69:b2:48:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=617272bf-77a0-46f7-ad1f-417adf444f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e9:07:5d:c9:0b:83:d1:7b:77:e7:69:ae:8d: 4a:f2:2d:40:17:3b:93:75:c8:cf:d6:f4:bb:65:6e: 53:67:b9:76:3d:f3:ed:78:1e:52:1d:55:84:b4:93: 2f:8a:4c:46:dd:9e:33:56:a9:b3:2c:b0:49:c5:b7: 7b:3d:64:95:8e:43:f7:a3:f6:70:93:e8:ce:46:e5: e7:12:54:1e:60:96:7e:d7:c2:2e:21:39:ae:4b:df: 48:86:a2:7c:e1:04:b9:f0:62:8a:8a:24:36:a7:63: 2f:c9:e0:41:76:02:77:a5:64:2a:cc:97:b7:b5:35: 0e:b0:38:c1:19:98:2b:24:9f:44:e5:1b:e3:f9:53: 9e:b2:51:28:10:9b:59:80:d6:32:b3:1c:05:7b:32: 9a:3c:dc:d9:3e:9f:db:55:12:a9:c9:4c:b6:1d:05: bd:68:5b:3e:95:66:7e:bc:c3:22:51:91:a4:8a:d2: 7a:47:84:bd:9f:f9:4e:32:c5:bb:76:3c:c1:ef:9d: 0a:79:93:27:a3:a7:07:3a:23:a5:a3:0a:f1:77:ed: 83:07:8b:e0:69:71:58:c1:98:a2:8c:a8:1e:16:b3: 59:87:73:1f:8a:89:68:2b:01:47:9b:e0:bf:be:fb: 35:65:b7:9e:dc:76:76:be:3c:8a:9b:ae:df:2c:fe: 86:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9A:4E:91:B0:F9:A1:AF:CA:A2:C4:67:6F:D9:EB:AF:57:69:A6:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/baf4ae08-3b16-3d91-8894-dbf4f0704e07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ce:ba:89:29:f9:db:18:ea:8d:f3:50:f5:1d:cc:ee:28:12: a3:9d:ef:16:da:c1:4e:c6:ec:7c:df:ec:88:f1:36:9f:6d:49: ab:d8:75:c7:9f:e5:87:fb:e4:95:c1:b0:4d:26:e6:24:b2:dc: 7c:37:7f:4f:a7:9d:55:29:bb:c5:79:97:d3:22:ac:3f:92:36: 51:c6:9f:d2:b7:73:c0:77:1e:9a:65:99:d9:87:b3:9e:1b:3c: 65:47:bb:4e:f1:c5:02:65:e5:45:d5:18:1a:06:94:b5:48:6f: 73:6e:6c:62:18:47:03:3f:8b:16:4f:72:f5:95:6f:3d:aa:11: e8:64:1f:70:41:63:c8:b5:09:8c:2a:fb:78:dd:e9:49:39:f7: c7:cb:c3:80:f7:98:be:f7:82:fe:04:26:4d:4f:1e:ec:15:08: e6:b9:1a:f3:dd:fe:23:cc:dc:41:4d:7c:19:c9:81:2e:91:f0: 5e:b4:7b:28:d5:cc:7f:0c:0d:96:7c:1b:be:b3:35:18:1a:45: cb:c5:b1:a9:d5:43:19:99:cb:e0:07:d4:c5:57:e2:3d:58:1d: 2f:fb:f0:8e:5b:e5:33:8e:67:a5:5d:d9:7e:2f:e6:3a:37:7d: 3e:97:27:91:c0:1b:73:c1:30:77:b5:f4:15:19:1b:f4:f5:6c: 8c:c3:09:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Lz/Ex4iGT2mySOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk NjE3MjcyYmYtNzdhMC00NmY3LWFkMWYtNDE3YWRmNDQ0ZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+kHXckLg9F7d+dpro1K8i1AFzuTdcjP1vS7 ZW5TZ7l2PfPteB5SHVWEtJMvikxG3Z4zVqmzLLBJxbd7PWSVjkP3o/Zwk+jORuXn ElQeYJZ+18IuITmuS99IhqJ84QS58GKKiiQ2p2MvyeBBdgJ3pWQqzJe3tTUOsDjB GZgrJJ9E5Rvj+VOeslEoEJtZgNYysxwFezKaPNzZPp/bVRKpyUy2HQW9aFs+lWZ+ vMMiUZGkitJ6R4S9n/lOMsW7djzB750KeZMno6cHOiOlowrxd+2DB4vgaXFYwZii jKgeFrNZh3MfioloKwFHm+C/vvs1Zbee3HZ2vjyKm67fLP6GpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2aTpGw+aGvyqLEZ2/Z669XaaaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYmFmNGFlMDgtM2IxNi0z ZDkxLTg4OTQtZGJmNGYwNzA0ZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHOuokp+dsY6o3zUPUdzO4oEqOd7xbawU7G7Hzf7IjxNp9tSavYdcef 5Yf75JXBsE0m5iSy3Hw3f0+nnVUpu8V5l9MirD+SNlHGn9K3c8B3HpplmdmHs54b PGVHu07xxQJl5UXVGBoGlLVIb3NubGIYRwM/ixZPcvWVbz2qEehkH3BBY8i1CYwq +3jd6Uk598fLw4D3mL73gv4EJk1PHuwVCOa5GvPd/iPM3EFNfBnJgS6R8F60eyjV zH8MDZZ8G76zNRgaRcvFsanVQxmZy+AH1MVX4j1YHS/78I5b5TOOZ6Vd2X4v5jo3 fT6XJ5HAG3PBMHe19BUZG/T1bIzDCZM= -----END CERTIFICATE-----Generated at Wed Jun 24 22:27:00 2026 by rpki-client