$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b4c49167-4119-3416-b7e9-256453bf1aaf.roa File: b4c49167-4119-3416-b7e9-256453bf1aaf.roa (raw, json) Hash identifier: udilyescLRldYMpQNosYDFPcx/TeLmyhUiLipHNxitk= Subject key identifier: ED:40:8F:D0:45:22:D6:F1:22:FB:E8:8B:D2:CA:57:E9:59:92:B4:66 Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584EF2E7583C5C047863D6856180 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b4c49167-4119-3416-b7e9-256453bf1aaf.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 31898 IP address blocks: 143.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:58:3c:5c:04:78:63:d6:85:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=acd0a224-d8fb-452a-99ce-2b6d19dabb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:52:c1:3f:d8:d6:b7:fd:22:69:8c:a5:bb: c6:21:84:e9:77:72:e1:1c:29:73:58:3c:6e:da:4a: af:d8:47:55:bc:48:23:0a:5f:ad:74:4b:d2:49:df: 0f:79:b1:6a:ca:a1:22:03:04:0e:a5:79:19:d6:74: 04:00:9e:19:28:88:67:4e:a1:e9:df:39:91:16:72: a5:69:48:0d:1a:64:a9:18:62:db:4c:38:e0:77:b4: d1:d4:cc:69:19:e9:2a:cd:30:db:0f:09:42:73:25: cb:b8:79:be:ae:72:5c:06:0c:63:91:54:4b:93:23: 47:30:8d:af:cb:9e:dc:00:b0:ce:de:3c:c0:ea:76: 58:f4:93:86:da:bd:5a:8e:28:7f:0d:4d:73:af:f4: 84:6a:23:5f:ff:1a:8e:9f:b1:03:c5:1a:94:7b:a7: 1d:61:58:6b:1e:9c:ff:92:20:a8:93:54:fb:11:c5: b0:97:a1:3e:56:7d:92:e6:b1:95:36:79:82:3e:55: be:4b:6b:75:6f:1d:36:11:a0:a1:4e:0f:21:3f:23: 6b:04:9b:91:5f:17:00:fb:a5:4b:4f:38:2f:2c:10: 72:bc:b2:0c:b9:61:a5:d6:2d:5b:28:d4:6f:a5:74: 1d:0e:2f:20:56:5f:11:3c:4e:2a:82:49:04:91:77: 3d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:40:8F:D0:45:22:D6:F1:22:FB:E8:8B:D2:CA:57:E9:59:92:B4:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b4c49167-4119-3416-b7e9-256453bf1aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 143.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:61:04:45:1c:a2:99:30:00:71:1a:3e:62:11:99:a0:7d:7b: 74:74:2e:97:ed:af:45:59:c0:ff:e1:ad:a9:30:c1:25:9d:f8: fe:ef:46:2d:a2:6b:6f:8f:24:3b:d4:b3:ac:79:c9:de:4d:69: 10:ee:18:f2:98:03:f6:3d:c6:0e:97:f8:29:0b:a8:5e:7f:91: a5:55:fd:cf:59:7f:f5:bd:7a:e8:f0:e1:e1:10:16:02:11:01: 64:ef:86:92:06:cb:0b:df:9c:63:aa:45:04:3e:e5:eb:b7:68: f2:ec:8e:a9:78:3d:75:ca:de:b5:a4:3d:9f:35:39:49:a8:5a: d1:db:b9:c0:a5:a4:52:50:d7:ad:c5:a4:2d:49:aa:60:75:fc: 60:ac:b7:7a:a4:cb:85:11:47:38:f7:e2:03:68:ad:d7:74:85: 3d:11:49:00:fc:d3:25:1e:33:6a:0a:34:02:a4:4d:54:b1:74: 16:92:e7:88:65:c1:5c:c6:2b:bc:57:54:4d:38:bc:14:cd:a8: b1:b4:07:00:50:b0:f4:9a:a0:19:7b:95:d4:fb:a2:61:29:b7: 7e:1f:06:15:63:ed:80:34:a4:47:1f:a0:f5:ad:28:6a:b7:d0: 53:7d:a6:01:d1:41:53:1e:61:65:ca:b8:65:18:12:48:b1:de: 51:e9:e2:49 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7y51g8XAR4Y9aFYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk YWNkMGEyMjQtZDhmYi00NTJhLTk5Y2UtMmI2ZDE5ZGFiYjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD1SwT/Y1rf9ImmMpbvGIYTpd3LhHClzWDxu 2kqv2EdVvEgjCl+tdEvSSd8PebFqyqEiAwQOpXkZ1nQEAJ4ZKIhnTqHp3zmRFnKl aUgNGmSpGGLbTDjgd7TR1MxpGekqzTDbDwlCcyXLuHm+rnJcBgxjkVRLkyNHMI2v y57cALDO3jzA6nZY9JOG2r1ajih/DU1zr/SEaiNf/xqOn7EDxRqUe6cdYVhrHpz/ kiCok1T7EcWwl6E+Vn2S5rGVNnmCPlW+S2t1bx02EaChTg8hPyNrBJuRXxcA+6VL TzgvLBByvLIMuWGl1i1bKNRvpXQdDi8gVl8RPE4qgkkEkXc9QwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFO1Aj9BFItbxIvvoi9LKV+lZkrRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvYjRjNDkxNjctNDExOS0z NDE2LWI3ZTktMjU2NDUzYmYxYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACGEERRyimTAAcRo+YhGZoH17dHQul+2vRVnA/+GtqTDBJZ34/u9GLaJr b48kO9SzrHnJ3k1pEO4Y8pgD9j3GDpf4KQuoXn+RpVX9z1l/9b166PDh4RAWAhEB ZO+GkgbLC9+cY6pFBD7l67do8uyOqXg9dcretaQ9nzU5Saha0du5wKWkUlDXrcWk LUmqYHX8YKy3eqTLhRFHOPfiA2it13SFPRFJAPzTJR4zago0AqRNVLF0FpLniGXB XMYrvFdUTTi8FM2osbQHAFCw9JqgGXuV1PuiYSm3fh8GFWPtgDSkRx+g9a0oarfQ U32mAdFBUx5hZcq4ZRgSSLHeUeniSQ== -----END CERTIFICATE-----Generated at Tue Aug 25 23:41:20 2026 by rpki-client