$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa File: b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa (raw, json) Hash identifier: Afv6Knx0cciP85lrKw2kJzE9xOm/SiAu+7z7ZSwaWWA= Subject key identifier: 8F:16:89:5D:60:A0:F2:35:D4:37:E4:1F:A2:32:28:D2:D2:96:4B:F5 Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584D703FF933908B60F35B59FD80 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 198949 IP address blocks: 143.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:f9:33:90:8b:60:f3:5b:59:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=d7eb3e91-815e-48d2-a0a2-5567502ee119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:8b:b4:89:b6:6c:0b:cb:4f:ba:80:7b:af: 48:70:b2:a4:08:af:f7:e8:09:c5:90:b3:b1:80:b0: f9:4e:b5:5f:df:19:ac:e1:0e:ae:77:8d:e5:54:8c: 04:3c:71:14:90:93:31:8a:a7:eb:00:f7:52:3e:af: 1a:e3:58:f1:c8:f4:90:85:d8:b6:0e:a8:89:30:47: 1c:94:71:21:80:d8:c8:19:c9:9e:37:8c:63:8e:10: 13:11:88:c4:49:ae:92:9d:27:99:37:00:78:fa:7a: 79:20:fd:0e:61:48:ef:eb:87:c4:97:ad:c4:2f:34: e1:11:12:50:53:0d:14:be:df:c2:00:36:9e:73:12: 4e:06:66:8d:47:e3:c6:d1:bf:f4:9a:d0:4a:d5:3b: ac:6f:d3:7d:47:b2:f1:c0:f1:47:da:df:94:89:84: d9:bb:fc:d6:24:7e:a2:d3:47:36:ce:e8:1d:fd:90: ca:f7:6c:fd:dd:e9:6b:cb:0e:2f:25:d5:ac:ce:e4: 56:d1:85:e1:11:10:33:90:8c:db:c7:94:a2:92:d6: e0:cc:5f:eb:5a:c3:5b:07:6e:ef:d0:66:ff:da:ef: d6:63:b2:61:39:b5:6c:8b:62:61:07:c4:b8:69:cc: 5d:cb:d8:f5:f1:76:ed:14:6b:be:2e:83:7c:53:39: f2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:16:89:5D:60:A0:F2:35:D4:37:E4:1F:A2:32:28:D2:D2:96:4B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 143.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:30:db:d7:77:5f:c5:2a:07:08:69:c0:57:db:a3:37:04:c1: c4:b0:12:d2:b4:a3:31:b7:e6:72:4e:68:16:0d:8a:c4:0b:9d: 9c:02:8b:74:eb:c5:0c:96:17:3c:78:03:e3:1f:c7:0d:b9:53: 7b:11:6b:54:1a:b3:ca:cc:7f:51:c5:fd:ef:96:fd:41:be:f5: dc:93:89:94:29:cb:22:4c:49:9d:df:78:34:60:0a:89:ee:95: fd:75:e2:cf:6c:e2:7b:e3:a5:78:cf:ae:6b:bf:50:78:f0:8f: c9:55:17:67:c1:74:14:72:02:a5:53:14:ab:66:3f:30:24:e8: a7:0e:4f:37:20:ab:4a:d3:57:70:8e:8d:64:e2:d1:be:9c:9f: a5:ef:5a:3f:93:bf:db:2c:c5:2a:e7:ca:eb:d3:d3:77:d8:d1: 70:14:72:35:00:54:fa:23:2d:a8:5a:5b:be:2f:a3:ba:cd:e4: b5:cb:15:a6:35:6f:cc:4b:78:4e:79:12:4a:1f:94:c3:ca:fb: e5:d7:3f:d5:53:37:f1:1c:96:ec:f1:17:7b:af:dd:0c:4b:f7: f7:71:15:e9:00:fc:3b:7f:65:c1:03:cd:3d:cb:6a:83:53:15: 21:76:64:2a:80:8b:fa:b2:2e:14:91:0b:17:f8:2f:0f:9a:bf: 1e:ed:1e:40 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1wP/kzkItg81tZ/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk ZDdlYjNlOTEtODE1ZS00OGQyLWEwYTItNTU2NzUwMmVlMTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPSLtIm2bAvLT7qAe69IcLKkCK/36AnFkLOx gLD5TrVf3xms4Q6ud43lVIwEPHEUkJMxiqfrAPdSPq8a41jxyPSQhdi2DqiJMEcc lHEhgNjIGcmeN4xjjhATEYjESa6SnSeZNwB4+np5IP0OYUjv64fEl63ELzThERJQ Uw0Uvt/CADaecxJOBmaNR+PG0b/0mtBK1Tusb9N9R7LxwPFH2t+UiYTZu/zWJH6i 00c2zugd/ZDK92z93elryw4vJdWszuRW0YXhERAzkIzbx5SiktbgzF/rWsNbB27v 0Gb/2u/WY7JhObVsi2JhB8S4acxdy9j18XbtFGu+LoN8UznykQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI8WiV1goPI11DfkH6IyKNLSlkv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvYjhkMTA5ZGMtNWFhYi0z ZDQ1LWJjYTAtZTA2Y2M0NWVjOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZTDb13dfxSoHCGnAV9ujNwTBxLAS0rSjMbfmck5oFg2KxAudnAKLdOvF DJYXPHgD4x/HDblTexFrVBqzysx/UcX975b9Qb713JOJlCnLIkxJnd94NGAKie6V /XXiz2zie+OleM+ua79QePCPyVUXZ8F0FHICpVMUq2Y/MCTopw5PNyCrStNXcI6N ZOLRvpyfpe9aP5O/2yzFKufK69PTd9jRcBRyNQBU+iMtqFpbvi+jus3ktcsVpjVv zEt4TnkSSh+Uw8r75dc/1VM38RyW7PEXe6/dDEv393EV6QD8O39lwQPNPctqg1MV IXZkKoCL+rIuFJELF/gvD5q/Hu0eQA== -----END CERTIFICATE-----Generated at Fri Apr 17 03:02:38 2026 by rpki-client