$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa File: b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa (raw, json) Hash identifier: gjkgh3Hl+ESNrR/WnVHdKyBHZpfpTxgwJS59TBgpErk= Subject key identifier: 17:82:73:E8:3A:C7:BE:ED:F9:18:1A:60:37:B2:9D:0A:EC:8B:B5:96 Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584F94D3629A3902600A3B548780 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 198949 IP address blocks: 143.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:62:9a:39:02:60:0a:3b:54:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=29b376f5-5afb-4d17-9d71-7ee6689286ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:ae:1a:53:65:5a:ab:59:2c:a7:fe:65:ed: cb:c3:03:4a:60:43:cd:bd:22:13:47:61:cc:7b:ef: 3c:96:db:4b:6e:7e:93:d0:54:81:ef:c8:39:b9:06: c3:09:9c:06:8a:d8:61:45:2e:c1:af:ea:60:78:ab: 01:4b:4c:f3:fe:29:aa:76:42:1d:4e:5f:96:ec:e2: 44:5f:54:2e:54:0b:02:27:ff:c7:16:46:45:e8:9f: 91:ab:45:84:18:dd:ef:2a:82:4f:80:d1:4b:43:df: 9b:4c:34:8a:9a:44:e8:2b:bd:02:7a:79:e9:20:55: aa:d7:2f:47:46:04:36:6f:b1:c5:e4:e7:43:54:64: 2d:d5:39:c9:86:12:20:32:c5:7a:d5:af:50:fe:9d: eb:78:d8:c1:75:6e:e3:4c:97:b7:7c:03:74:ea:12: 0b:2a:4a:ac:a1:ea:b8:1e:0d:a8:c2:c5:eb:dc:92: 43:d1:d9:f7:b8:95:8c:a5:3a:e7:b5:d9:30:63:81: 3d:0b:8d:29:14:c4:f4:3e:04:12:dd:94:2c:6e:6f: f6:a7:c3:ef:16:97:d9:2b:40:53:a5:95:32:85:66: 63:0b:c6:5f:db:9c:a8:51:79:3a:40:e1:e7:b5:50: f2:18:7c:30:16:74:8a:cf:21:2c:16:64:3c:47:fe: 61:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:82:73:E8:3A:C7:BE:ED:F9:18:1A:60:37:B2:9D:0A:EC:8B:B5:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 143.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d3:33:a0:da:1b:68:5c:ac:32:90:d6:91:e4:30:85:d9:53: 11:2f:8f:0f:da:c4:c7:a7:a1:4a:9f:6e:22:1d:4b:f7:2c:35: 2b:29:bb:34:15:df:eb:54:18:65:51:ac:4b:02:93:11:73:d2: 6c:bf:1b:5e:b4:d0:12:f6:c8:9c:2d:0b:55:3b:a0:ba:7f:6c: b7:1f:ed:ff:bc:17:cf:fc:58:be:d8:2a:d6:45:de:83:da:e4: b9:08:7b:41:5a:1b:ab:36:f0:f8:4b:c9:45:2d:81:3b:d2:2d: 76:64:f8:62:54:d1:b2:ab:82:87:d2:2e:07:58:04:f3:af:98: 88:cd:61:51:24:15:ee:aa:51:5a:6c:07:15:33:c1:16:1b:89: cd:13:03:af:6a:ec:56:ad:26:28:ba:13:07:7f:e6:fe:41:4c: ee:bb:38:ee:57:87:1a:9b:d2:2a:46:f2:bb:bc:07:43:3b:a8: f2:ce:26:92:c6:54:76:90:43:92:3c:42:d5:fa:7e:fe:2e:58: 6b:40:69:7b:57:18:9c:c1:8e:4a:2a:af:f4:01:f0:84:72:58: eb:2d:c1:61:6d:b3:2d:fb:26:6b:e7:23:65:62:86:38:20:a6: 98:cd:12:2a:1b:2f:43:a2:77:c1:fb:81:a3:96:23:22:45:2e: ae:88:58:50 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+U02KaOQJgCjtUh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MjliMzc2ZjUtNWFmYi00ZDE3LTlkNzEtN2VlNjY4OTI4NmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTCuGlNlWqtZLKf+Ze3LwwNKYEPNvSITR2HM e+88lttLbn6T0FSB78g5uQbDCZwGithhRS7Br+pgeKsBS0zz/imqdkIdTl+W7OJE X1QuVAsCJ//HFkZF6J+Rq0WEGN3vKoJPgNFLQ9+bTDSKmkToK70CennpIFWq1y9H RgQ2b7HF5OdDVGQt1TnJhhIgMsV61a9Q/p3reNjBdW7jTJe3fAN06hILKkqsoeq4 Hg2owsXr3JJD0dn3uJWMpTrntdkwY4E9C40pFMT0PgQS3ZQsbm/2p8PvFpfZK0BT pZUyhWZjC8Zf25yoUXk6QOHntVDyGHwwFnSKzyEsFmQ8R/5hZQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBeCc+g6x77t+RgaYDeynQrsi7WWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvYjhkMTA5ZGMtNWFhYi0z ZDQ1LWJjYTAtZTA2Y2M0NWVjOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAF9MzoNobaFysMpDWkeQwhdlTES+PD9rEx6ehSp9uIh1L9yw1Kym7NBXf 61QYZVGsSwKTEXPSbL8bXrTQEvbInC0LVTugun9stx/t/7wXz/xYvtgq1kXeg9rk uQh7QVobqzbw+EvJRS2BO9ItdmT4YlTRsquCh9IuB1gE86+YiM1hUSQV7qpRWmwH FTPBFhuJzRMDr2rsVq0mKLoTB3/m/kFM7rs47leHGpvSKkbyu7wHQzuo8s4mksZU dpBDkjxC1fp+/i5Ya0Bpe1cYnMGOSiqv9AHwhHJY6y3BYW2zLfsma+cjZWKGOCCm mM0SKhsvQ6J3wfuBo5YjIkUurohYUA== -----END CERTIFICATE-----Generated at Tue Nov 10 06:35:06 2026 by rpki-client