$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b4c49167-4119-3416-b7e9-256453bf1aaf.roa File: b4c49167-4119-3416-b7e9-256453bf1aaf.roa (raw, json) Hash identifier: lgP+1yYq2ZTEwVFhRN+ApGA+KVWcbwRhLucj2UpHmZU= Subject key identifier: 09:80:66:F3:33:E1:AC:55:54:78:B3:C4:4F:FF:85:0C:57:6F:55:0F Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584BAED1550814F12CD3D7422F80 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b4c49167-4119-3416-b7e9-256453bf1aaf.roa Signing time: Wed 29 Oct 2025 13:20:08 +0000 ROA not before: Wed 29 Oct 2025 13:20:08 +0000 ROA not after: Tue 27 Jan 2026 14:20:08 +0000 asID: 31898 IP address blocks: 143.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:d1:55:08:14:f1:2c:d3:d7:42:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Oct 29 13:20:08 2025 GMT Not After : Jan 27 14:20:08 2026 GMT Subject: CN=5723f27c-85bc-4b4b-a0e3-f3d3fe947c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d7:b8:35:0d:45:d1:b5:6b:72:4c:a6:53:a5: 75:53:c4:c2:4e:20:d1:aa:71:2e:11:18:52:c6:21: 11:66:17:91:a1:c1:d1:06:67:10:8e:02:6a:66:57: bb:9f:24:35:9e:52:a7:e2:51:32:95:2c:c8:fe:f8: 07:71:1a:1e:f0:0a:d6:42:9d:08:92:7e:67:1c:b7: 57:a3:bf:8a:5c:8f:90:4b:3f:d0:81:92:bb:9c:40: e3:a4:e3:4c:6b:00:94:5a:97:51:a7:d4:18:56:27: d4:cf:19:a6:48:3d:24:19:a4:88:e2:0b:90:d1:70: 0f:da:85:3f:3a:ad:86:73:57:17:70:0d:f1:c0:aa: 72:b6:05:87:9a:f3:bf:36:ee:8f:b0:ac:ad:07:c0: 54:c6:8d:63:ed:fc:75:9d:df:8e:3d:ac:e1:ec:69: 84:cb:86:29:ed:0d:da:d8:ce:44:80:eb:31:74:df: 6a:1c:e5:f1:72:4d:c8:d9:6f:17:ce:c5:2b:25:e7: a8:25:b3:63:6b:b1:bd:7f:b3:a6:3d:72:78:e3:aa: c3:5f:5f:bb:e2:e1:55:25:5f:80:59:23:34:c0:92: 4f:ee:37:e2:ee:1d:2a:d7:d6:55:db:19:23:22:45: c3:14:3e:03:a4:1a:6b:ab:71:0f:9b:8c:c4:5e:ca: 93:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:80:66:F3:33:E1:AC:55:54:78:B3:C4:4F:FF:85:0C:57:6F:55:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b4c49167-4119-3416-b7e9-256453bf1aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 143.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9e:69:41:ea:99:d7:3a:0e:d8:ea:fc:cf:57:4d:4c:f4:5a: 25:5f:7e:ea:2b:16:4e:c7:6c:a6:e2:64:65:35:da:5a:8b:69: ea:fe:df:74:a2:2f:4d:28:f6:8a:40:03:f9:a8:e2:16:70:a2: ad:af:7d:1a:e8:86:09:ea:70:da:ef:91:22:4d:39:17:ad:85: 6a:c3:b1:bf:60:f3:97:3c:47:c1:04:06:2f:0e:27:fc:9c:7b: ca:b9:e5:c4:59:da:94:3b:f8:52:9a:b8:08:3c:bc:86:0d:37: e3:43:b1:79:cb:c0:19:69:d9:35:28:ce:a4:6d:e0:10:b1:29: 37:f0:7d:9d:16:b2:70:31:5f:6a:f7:2b:87:27:3b:31:2e:59: 2c:d2:59:09:ca:89:da:bb:45:bd:dc:a7:35:e0:8a:44:12:f0: 98:17:f1:a0:e6:53:23:cb:e4:a3:79:35:21:69:79:62:f2:af: e7:8e:3d:5e:4a:2e:22:14:ab:54:a6:b5:89:65:3d:c9:d9:0c: db:1c:05:bd:11:be:49:b3:25:4d:bf:af:e0:37:ef:66:65:2a: 3c:fd:fd:12:14:c5:53:06:a8:28:a9:8b:95:b5:17:de:14:45: f2:95:f4:0c:00:52:65:28:8e:45:db:45:55:f3:39:2d:d6:a6: a5:e7:75:39 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuu0VUIFPEs09dCL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI1MTAyOTEzMjAwOFoXDTI2MDEyNzE0MjAwOFowLzEtMCsGA1UEAxMk NTcyM2YyN2MtODViYy00YjRiLWEwZTMtZjNkM2ZlOTQ3YzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjde4NQ1F0bVrckymU6V1U8TCTiDRqnEuERhS xiERZheRocHRBmcQjgJqZle7nyQ1nlKn4lEylSzI/vgHcRoe8ArWQp0Ikn5nHLdX o7+KXI+QSz/QgZK7nEDjpONMawCUWpdRp9QYVifUzxmmSD0kGaSI4guQ0XAP2oU/ Oq2Gc1cXcA3xwKpytgWHmvO/Nu6PsKytB8BUxo1j7fx1nd+OPazh7GmEy4Yp7Q3a 2M5EgOsxdN9qHOXxck3I2W8XzsUrJeeoJbNja7G9f7OmPXJ446rDX1+74uFVJV+A WSM0wJJP7jfi7h0q19ZV2xkjIkXDFD4DpBprq3EPm4zEXsqTRwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAmAZvMz4axVVHizxE//hQxXb1UPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvYjRjNDkxNjctNDExOS0z NDE2LWI3ZTktMjU2NDUzYmYxYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADZ5pQeqZ1zoO2Or8z1dNTPRaJV9+6isWTsdspuJkZTXaWotp6v7fdKIv TSj2ikAD+ajiFnCira99GuiGCepw2u+RIk05F62FasOxv2DzlzxHwQQGLw4n/Jx7 yrnlxFnalDv4Upq4CDy8hg0340OxecvAGWnZNSjOpG3gELEpN/B9nRaycDFfavcr hyc7MS5ZLNJZCcqJ2rtFvdynNeCKRBLwmBfxoOZTI8vko3k1IWl5YvKv5449Xkou IhSrVKa1iWU9ydkM2xwFvRG+SbMlTb+v4DfvZmUqPP39EhTFUwaoKKmLlbUX3hRF 8pX0DABSZSiORdtFVfM5Ldamped1OQ== -----END CERTIFICATE-----Generated at Wed Nov 5 13:59:47 2025 by rpki-client