$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/22b65cf7-195a-34e9-8bf2-d56ee3010ea2.roa File: 22b65cf7-195a-34e9-8bf2-d56ee3010ea2.roa (raw, json) Hash identifier: pQLfrPQXxJqnQvOJ5/jJZn11NXIgkJjIKBRM9elOVqs= Subject key identifier: D3:AB:9E:98:77:B3:43:9B:60:6C:CB:5A:8B:69:6C:BB:58:54:79:AC Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584EF2E77F77DB3BFB3E7C3A9680 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/22b65cf7-195a-34e9-8bf2-d56ee3010ea2.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 26337 IP address blocks: 143.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:7f:77:db:3b:fb:3e:7c:3a:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=f5dbe48c-68c6-4f4a-b4c7-bd05733f19b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:de:b8:71:64:f3:60:76:0d:6c:0d:bb:a2:b0: 7f:ca:6b:49:ef:53:ba:68:c1:76:76:42:4b:ad:d1: 00:91:1b:33:93:6a:a8:ca:a8:93:e4:68:e5:25:4f: 89:f9:46:21:35:e7:47:ac:08:96:a2:f2:34:f0:d7: bc:03:bd:4f:45:74:54:3b:09:b5:6e:64:0f:ba:f4: af:15:d7:a3:28:b8:4b:ea:6b:0f:a3:22:64:2f:c3: 24:5c:80:02:e2:65:3b:0d:3c:b0:b4:5d:6e:3c:ad: f0:84:70:80:b8:d9:24:f8:08:6d:6e:fa:17:b3:ae: 4b:b4:4d:a2:ae:2f:7a:2f:e6:b3:00:4c:58:be:b0: 7b:3f:f5:eb:5e:34:6d:6d:2c:79:f2:6d:ee:5c:52: 7c:33:6e:dc:82:62:9e:49:c0:4c:7c:5d:97:fe:8f: 02:ee:83:17:c5:1b:1c:0a:70:25:64:39:89:9e:d7: 6b:b9:43:d3:9d:73:a3:d9:ec:c8:98:dd:31:4a:3b: b1:c4:69:8b:dc:d3:e1:5e:23:14:90:3c:72:37:9c: ef:d4:f7:8a:09:eb:4b:24:13:cc:58:7d:07:94:14: bc:f4:56:57:4a:79:7e:3d:54:e7:35:1a:28:33:46: 4e:0d:9e:10:02:bc:5f:c9:ad:c3:4c:0e:b3:31:37: 9e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AB:9E:98:77:B3:43:9B:60:6C:CB:5A:8B:69:6C:BB:58:54:79:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/22b65cf7-195a-34e9-8bf2-d56ee3010ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 143.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a2:42:2b:c0:2e:fc:5a:52:bf:44:3f:90:88:f3:17:04:41: 59:86:0b:a0:54:0d:bc:75:13:40:15:2d:39:99:d2:c4:43:65: 77:51:dd:3c:04:0a:f6:0c:fc:ac:48:c4:fe:59:1f:82:aa:aa: 21:e4:ef:c3:39:a6:e2:f0:8f:2e:77:86:19:17:02:b1:82:dd: 4a:5f:81:2a:83:9c:00:94:4e:cf:96:11:06:3f:69:bd:20:fc: 55:ff:b2:35:78:62:c5:e2:2e:51:ac:21:a6:96:d1:c0:33:2b: 51:64:a6:92:7a:65:27:83:b8:c9:f8:87:ec:0e:e7:e0:e3:01: b9:6f:64:e5:d6:c4:a7:a4:48:47:ca:26:62:b6:6f:e8:fe:40: 20:01:00:00:98:f4:8a:6d:28:c9:8e:72:76:af:a3:e7:1f:12: 05:b6:11:73:af:1c:58:6a:9b:1a:8d:7a:67:c6:e7:bc:e2:25: a7:7b:13:27:ae:cd:41:4e:75:8f:fb:c7:7a:10:0f:d3:9b:4b: 6a:27:e9:40:20:35:e9:8f:02:47:18:fd:56:42:d8:f6:33:7d: 8f:2f:57:dc:a6:d7:fe:90:fa:dd:d3:5c:0f:3e:16:18:db:29: 34:00:87:a0:fa:be:8c:83:71:f0:9c:22:d8:dd:17:86:38:b7: a9:97:ba:de -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7y53932zv7Pnw6loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZjVkYmU0OGMtNjhjNi00ZjRhLWI0YzctYmQwNTczM2YxOWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd64cWTzYHYNbA27orB/ymtJ71O6aMF2dkJL rdEAkRszk2qoyqiT5GjlJU+J+UYhNedHrAiWovI08Ne8A71PRXRUOwm1bmQPuvSv FdejKLhL6msPoyJkL8MkXIAC4mU7DTywtF1uPK3whHCAuNkk+AhtbvoXs65LtE2i ri96L+azAExYvrB7P/XrXjRtbSx58m3uXFJ8M27cgmKeScBMfF2X/o8C7oMXxRsc CnAlZDmJntdruUPTnXOj2ezImN0xSjuxxGmL3NPhXiMUkDxyN5zv1PeKCetLJBPM WH0HlBS89FZXSnl+PVTnNRooM0ZODZ4QArxfya3DTA6zMTeecwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNOrnph3s0ObYGzLWotpbLtYVHmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvMjJiNjVjZjctMTk1YS0z NGU5LThiZjItZDU2ZWUzMDEwZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAaaJCK8Au/FpSv0Q/kIjzFwRBWYYLoFQNvHUTQBUtOZnSxENld1HdPAQK 9gz8rEjE/lkfgqqqIeTvwzmm4vCPLneGGRcCsYLdSl+BKoOcAJROz5YRBj9pvSD8 Vf+yNXhixeIuUawhppbRwDMrUWSmknplJ4O4yfiH7A7n4OMBuW9k5dbEp6RIR8om YrZv6P5AIAEAAJj0im0oyY5ydq+j5x8SBbYRc68cWGqbGo16Z8bnvOIlp3sTJ67N QU51j/vHehAP05tLaifpQCA16Y8CRxj9VkLY9jN9jy9X3KbX/pD63dNcDz4WGNsp NACHoPq+jINx8Jwi2N0Xhji3qZe63g== -----END CERTIFICATE-----Generated at Mon Sep 21 20:03:08 2026 by rpki-client