$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa File: b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa (raw, json) Hash identifier: Dxj4EUOvgkHs+au17L+XhlOlnODPN7oxUB3+2/Z3vtk= Subject key identifier: 88:8E:53:81:0D:7D:93:62:D7:39:24:DF:DF:2E:04:DD:00:58:34:2B Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584EF2E7843856DD338A13972980 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 198949 IP address blocks: 143.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:84:38:56:dd:33:8a:13:97:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=37a0cf60-1e64-4391-8d3f-9553bf86ae18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5b:99:3c:48:e8:aa:3d:92:1f:59:76:42:5f: 23:03:28:2c:7f:92:08:0b:00:d9:e3:a7:9b:78:ff: 5c:78:fc:2e:d0:de:06:11:a8:e1:b5:2b:72:7c:c5: 03:1f:21:cb:93:fe:09:78:3e:9d:a7:f9:30:3a:e6: e9:40:a2:e2:ec:a2:67:2d:d4:c1:1e:1b:59:93:af: 83:cc:91:1e:a3:da:7b:7a:65:b5:ed:5a:dd:ff:14: 70:a6:15:85:c7:07:86:63:16:89:ca:7b:ca:fa:f1: 05:13:89:c9:9f:77:e6:8d:0d:53:c7:bc:6e:bf:35: 1d:f0:0b:cd:d7:86:ab:24:3d:d6:ee:1d:bb:64:9d: 2f:09:b0:3a:5b:e0:87:0e:4a:55:66:46:a0:31:6d: 01:8c:92:4d:bc:9a:c8:2d:1e:b8:79:10:d4:d0:93: 4b:2c:a8:a9:b5:62:48:91:25:01:17:26:7e:92:dd: 56:10:a1:c8:4d:ba:b9:0d:70:f5:71:99:0c:0a:90: 1b:25:50:6e:bc:7a:17:66:5b:a6:d5:f0:76:ff:66: 22:27:95:af:5b:40:7f:ba:2c:dd:49:08:8f:7a:d1: 7d:4e:17:0f:6b:05:4b:3e:ad:82:0b:e7:99:f3:8d: d6:c5:45:64:5c:2e:a7:c1:f7:06:3d:29:f4:5d:cf: 0e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8E:53:81:0D:7D:93:62:D7:39:24:DF:DF:2E:04:DD:00:58:34:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 143.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:53:14:79:8f:7b:54:f4:25:53:4e:03:70:a5:5a:24:8d:5f: 5e:22:71:2a:67:84:5c:18:d8:9b:7d:e0:f2:db:9c:2c:8f:1a: 70:24:f9:d1:f9:82:fb:8e:1e:94:dd:85:eb:09:cf:0e:2a:69: ee:9b:a6:91:8c:09:7b:7e:67:d7:8e:9a:55:c5:88:30:d7:1e: 7f:47:86:be:fa:8b:8f:d1:47:2a:1c:a8:5a:35:99:3c:dc:c4: 11:1b:7c:4b:33:fc:74:9b:5f:3d:75:b8:d5:d8:5b:74:e6:f6: 31:bc:a4:33:bd:70:96:ca:31:19:70:c8:1d:f6:1f:7c:7f:f2: 93:41:7b:d0:2f:a9:3c:66:c3:97:6e:3e:d5:7a:6b:a9:fa:de: 1f:30:13:4e:99:0a:55:56:fd:45:5c:b2:0e:fe:a5:d0:59:17: 51:5c:bf:da:84:88:52:13:60:08:98:57:95:46:db:d7:ab:83: 7e:67:ce:bc:5a:26:b6:d5:c7:c0:2c:7c:ab:13:7e:1f:3c:13: 4e:7d:e0:f0:15:0d:b1:00:d3:93:0a:15:32:55:6d:b1:c5:e5: dd:01:16:73:a5:cf:bc:d3:8f:7b:6d:50:ba:21:78:a5:06:98: 57:2a:44:38:6f:08:28:8c:77:96:41:a1:08:07:95:c6:89:f6: 4f:a2:53:a4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7y54Q4Vt0zihOXKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MzdhMGNmNjAtMWU2NC00MzkxLThkM2YtOTU1M2JmODZhZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVuZPEjoqj2SH1l2Ql8jAygsf5IICwDZ46eb eP9cePwu0N4GEajhtStyfMUDHyHLk/4JeD6dp/kwOubpQKLi7KJnLdTBHhtZk6+D zJEeo9p7emW17Vrd/xRwphWFxweGYxaJynvK+vEFE4nJn3fmjQ1Tx7xuvzUd8AvN 14arJD3W7h27ZJ0vCbA6W+CHDkpVZkagMW0BjJJNvJrILR64eRDU0JNLLKiptWJI kSUBFyZ+kt1WEKHITbq5DXD1cZkMCpAbJVBuvHoXZlum1fB2/2YiJ5WvW0B/uizd SQiPetF9ThcPawVLPq2CC+eZ843WxUVkXC6nwfcGPSn0Xc8OMwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIiOU4ENfZNi1zkk398uBN0AWDQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvYjhkMTA5ZGMtNWFhYi0z ZDQ1LWJjYTAtZTA2Y2M0NWVjOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAG1MUeY97VPQlU04DcKVaJI1fXiJxKmeEXBjYm33g8tucLI8acCT50fmC +44elN2F6wnPDipp7pumkYwJe35n146aVcWIMNcef0eGvvqLj9FHKhyoWjWZPNzE ERt8SzP8dJtfPXW41dhbdOb2MbykM71wlsoxGXDIHfYffH/yk0F70C+pPGbDl24+ 1XprqfreHzATTpkKVVb9RVyyDv6l0FkXUVy/2oSIUhNgCJhXlUbb16uDfmfOvFom ttXHwCx8qxN+HzwTTn3g8BUNsQDTkwoVMlVtscXl3QEWc6XPvNOPe21QuiF4pQaY VypEOG8IKIx3lkGhCAeVxon2T6JTpA== -----END CERTIFICATE-----Generated at Mon Sep 21 01:35:21 2026 by rpki-client