$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/22b65cf7-195a-34e9-8bf2-d56ee3010ea2.roa File: 22b65cf7-195a-34e9-8bf2-d56ee3010ea2.roa (raw, json) Hash identifier: RSSpFoqOK6rfTU7e8JuipPqd4U8XnjJ4Wtcb0qhBagQ= Subject key identifier: A5:41:88:EC:61:1E:D7:3B:3C:9D:7A:D8:86:E3:53:98:8C:74:94:8F Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584BAED0A17D817D3662E31E9B00 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/22b65cf7-195a-34e9-8bf2-d56ee3010ea2.roa Signing time: Wed 29 Oct 2025 13:18:43 +0000 ROA not before: Wed 29 Oct 2025 13:18:43 +0000 ROA not after: Tue 27 Jan 2026 14:18:43 +0000 asID: 26337 IP address blocks: 143.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:d0:a1:7d:81:7d:36:62:e3:1e:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Oct 29 13:18:43 2025 GMT Not After : Jan 27 14:18:43 2026 GMT Subject: CN=e8a723d3-b7b1-4568-a0ba-8d7e24bee992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:1c:92:a9:c8:57:1d:df:fc:1e:8d:39:9e: 77:75:aa:29:3d:dd:c9:ee:83:34:41:ab:68:fb:80: 1a:67:36:dc:fd:7d:d1:8d:71:94:48:98:02:ae:7f: db:7f:2d:29:28:54:32:d6:70:a0:7d:5c:20:03:8b: 36:22:de:1b:ee:a7:c2:ed:b3:7b:b3:9a:32:c3:24: 32:2d:64:66:89:f4:1d:bc:c1:d8:29:e7:f2:ad:49: 46:ae:cc:bb:34:24:18:fb:82:12:16:b8:a4:29:22: 35:9f:74:a3:1b:c3:f1:f7:8c:ad:b9:c9:7f:06:86: 7f:84:4c:1a:bb:90:21:7d:6e:09:99:a6:75:33:21: 39:69:11:d9:f5:89:2b:bf:85:c1:98:b6:d2:56:f3: 27:e4:f1:13:dc:07:77:55:af:8a:5f:fd:ae:51:ce: ab:0b:d9:f1:29:00:4a:d1:18:8a:d2:0b:3e:78:82: 44:65:1e:47:6f:cb:fa:fb:62:4e:31:79:24:11:2a: 13:f4:e0:3e:d1:cc:60:ab:7f:76:ae:75:ea:b2:64: eb:b7:7b:01:03:63:07:90:35:57:de:19:3e:09:37: 75:07:8e:90:af:be:d1:ff:1f:8b:d7:8f:f4:e2:e6: 74:d7:0c:cf:ca:02:03:a1:cb:bb:a3:36:ea:03:27: 46:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:41:88:EC:61:1E:D7:3B:3C:9D:7A:D8:86:E3:53:98:8C:74:94:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/22b65cf7-195a-34e9-8bf2-d56ee3010ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 143.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:2b:4b:7b:fc:ac:ee:a2:3b:a0:fd:5a:e5:49:dd:d0:01:03: 53:12:6e:7e:8e:e1:68:10:62:ea:94:c6:fe:23:60:6c:ea:c5: ef:9d:d0:d8:a1:d6:fb:b0:45:c1:8a:18:63:53:37:5f:13:06: 3e:0a:04:d6:c1:4a:bf:73:da:bf:ad:fb:f0:6f:ae:f3:05:43: bb:ba:d9:f4:a9:f9:c5:64:1b:ad:30:d8:19:15:af:c3:d3:88: 77:fd:10:2a:01:6d:60:92:72:ae:5c:1b:9b:ef:3b:1e:4f:35: 83:9d:8c:a7:52:a5:f7:42:4c:5a:c3:57:67:26:54:a2:c0:ad: 14:69:82:8c:4c:dd:94:36:39:d4:b1:80:3d:83:6c:07:e2:48: 9b:65:42:c9:9f:71:e1:86:fb:96:8a:25:1c:00:93:17:57:01: 4a:cd:de:fc:ff:62:cf:b3:93:60:d2:74:a5:fc:c2:7a:09:16: b7:07:e5:1e:f2:d3:28:70:32:9a:60:e5:35:2c:d8:ac:03:2b: fb:ef:9f:8e:e2:4d:5e:e7:ff:ba:0c:87:06:7d:99:ed:a2:a5: b4:93:af:46:99:8c:20:36:e6:c6:e0:6e:f8:ee:7f:b6:f5:cb: b8:c3:da:86:8e:06:b3:f2:1f:d0:e6:26:ab:05:22:70:61:ae: 4c:ae:f8:7c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuu0KF9gX02YuMemwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI1MTAyOTEzMTg0M1oXDTI2MDEyNzE0MTg0M1owLzEtMCsGA1UEAxMk ZThhNzIzZDMtYjdiMS00NTY4LWEwYmEtOGQ3ZTI0YmVlOTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLockqnIVx3f/B6NOZ53daopPd3J7oM0Qato +4AaZzbc/X3RjXGUSJgCrn/bfy0pKFQy1nCgfVwgA4s2It4b7qfC7bN7s5oywyQy LWRmifQdvMHYKefyrUlGrsy7NCQY+4ISFrikKSI1n3SjG8Px94ytucl/BoZ/hEwa u5AhfW4JmaZ1MyE5aRHZ9Ykrv4XBmLbSVvMn5PET3Ad3Va+KX/2uUc6rC9nxKQBK 0RiK0gs+eIJEZR5Hb8v6+2JOMXkkESoT9OA+0cxgq392rnXqsmTrt3sBA2MHkDVX 3hk+CTd1B46Qr77R/x+L14/04uZ01wzPygIDocu7ozbqAydGywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKVBiOxhHtc7PJ162IbjU5iMdJSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvMjJiNjVjZjctMTk1YS0z NGU5LThiZjItZDU2ZWUzMDEwZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiitLe/ys7qI7oP1a5Und0AEDUxJufo7haBBi6pTG/iNgbOrF753Q2KHW +7BFwYoYY1M3XxMGPgoE1sFKv3Pav6378G+u8wVDu7rZ9Kn5xWQbrTDYGRWvw9OI d/0QKgFtYJJyrlwbm+87Hk81g52Mp1Kl90JMWsNXZyZUosCtFGmCjEzdlDY51LGA PYNsB+JIm2VCyZ9x4Yb7loolHACTF1cBSs3e/P9iz7OTYNJ0pfzCegkWtwflHvLT KHAymmDlNSzYrAMr+++fjuJNXuf/ugyHBn2Z7aKltJOvRpmMIDbmxuBu+O5/tvXL uMPaho4Gs/If0OYmqwUicGGuTK74fA== -----END CERTIFICATE-----Generated at Wed Nov 5 06:02:54 2025 by rpki-client