$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b4c49167-4119-3416-b7e9-256453bf1aaf.roa File: b4c49167-4119-3416-b7e9-256453bf1aaf.roa (raw, json) Hash identifier: dGTmyHjIblcyLoCSQ2w411khEfFFvgFdvET1evPqH5Y= Subject key identifier: 90:1F:0A:CD:9C:5C:07:3C:A9:7D:B0:60:D4:17:E3:0C:4B:7B:75:8D Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584D703FCCA283630409F6E5EB00 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b4c49167-4119-3416-b7e9-256453bf1aaf.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 31898 IP address blocks: 143.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:cc:a2:83:63:04:09:f6:e5:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=b34e2674-b9ef-41e3-af5b-3da22c40207b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:06:69:85:d9:38:1e:58:78:68:01:86:55: 5d:85:5a:41:34:38:cb:d6:7d:52:58:c8:44:f8:01: a6:af:32:e6:e9:d9:c4:81:88:af:84:a8:11:65:75: 70:03:62:64:83:fb:70:d6:25:6e:5e:e9:6d:3c:d7: 34:be:fb:1a:11:29:7e:f4:e3:8a:1b:0c:16:7f:27: 71:28:9f:f6:46:68:13:a9:2c:02:fa:30:fe:e2:42: ba:b2:cc:0b:3e:ca:7f:1f:d8:27:8f:b6:d8:2a:8f: 7d:e1:1d:8f:dd:3e:74:fa:7f:60:42:0f:f7:d8:7b: e6:c5:7e:67:34:30:40:6d:79:ca:47:be:0d:7d:f0: 5d:8a:d9:b0:a3:9e:22:33:af:1e:30:c7:e4:86:43: 73:b6:c7:35:d1:84:5a:70:e4:f6:28:c0:36:6f:7d: 04:fa:d2:53:d8:3e:ea:aa:ed:ef:fb:7e:d9:59:ad: d0:83:ad:c8:92:6d:b9:41:ce:7d:8c:d3:38:b1:be: f8:92:54:db:e0:b3:e1:5d:5b:67:4b:dd:a3:e1:fe: 2f:ec:29:1b:04:fb:89:48:a8:02:5d:70:e7:92:ee: 34:8c:64:84:54:bf:2d:be:19:ed:76:1b:cb:9e:e5: f7:7e:bb:6e:8f:70:88:3f:af:14:6d:61:2b:08:e9: 09:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1F:0A:CD:9C:5C:07:3C:A9:7D:B0:60:D4:17:E3:0C:4B:7B:75:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b4c49167-4119-3416-b7e9-256453bf1aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 143.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:85:9b:97:b0:4d:c4:4e:d4:af:0a:96:33:70:e5:71:fe:60: d9:99:0e:f5:48:4e:79:e3:8b:0a:d6:d0:cc:a2:5e:50:73:1f: f4:db:bc:71:cd:52:88:ac:1d:d6:9e:58:28:f6:d4:b1:0c:cb: c5:d5:e2:c7:f2:d7:17:b4:3c:01:87:31:3a:17:17:52:0d:46: 8c:bf:f1:d5:09:cc:ea:8c:ed:d8:c8:85:21:38:8d:d8:a7:28: 9b:77:a1:f5:82:82:a7:b1:1f:8d:91:05:f6:3a:57:a1:d3:2c: a0:ce:24:1b:e9:f1:3a:39:68:90:cf:ab:44:64:86:7b:73:f3: 7f:02:b9:a8:18:1e:e0:84:62:dc:c6:b0:c8:9e:4a:8e:d3:66: 92:d1:07:d2:c7:81:28:6e:02:f6:ed:99:bd:d9:d5:40:5f:b0: 8c:b9:5d:2b:03:84:8f:0c:b3:3e:42:db:f4:36:c9:e8:bb:2b: ee:0b:3b:3a:df:f3:bb:fe:91:f9:24:76:85:38:75:0d:3c:d5: d4:82:d9:33:36:8b:2a:2b:49:c1:dd:5b:7f:20:10:52:8f:0c: 01:26:10:3c:2d:d1:e1:87:db:90:6d:b0:59:24:87:75:0b:b0: c4:66:d7:49:1e:3d:6f:c4:05:a3:93:3d:69:fd:64:33:e2:90: 7b:5b:de:61 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1wP8yig2MECfbl6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk YjM0ZTI2NzQtYjllZi00MWUzLWFmNWItM2RhMjJjNDAyMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeEGaYXZOB5YeGgBhlVdhVpBNDjL1n1SWMhE +AGmrzLm6dnEgYivhKgRZXVwA2Jkg/tw1iVuXultPNc0vvsaESl+9OOKGwwWfydx KJ/2RmgTqSwC+jD+4kK6sswLPsp/H9gnj7bYKo994R2P3T50+n9gQg/32HvmxX5n NDBAbXnKR74NffBditmwo54iM68eMMfkhkNztsc10YRacOT2KMA2b30E+tJT2D7q qu3v+37ZWa3Qg63Ikm25Qc59jNM4sb74klTb4LPhXVtnS92j4f4v7CkbBPuJSKgC XXDnku40jGSEVL8tvhntdhvLnuX3frtuj3CIP68UbWErCOkJJwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJAfCs2cXAc8qX2wYNQX4wxLe3WNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvYjRjNDkxNjctNDExOS0z NDE2LWI3ZTktMjU2NDUzYmYxYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAG4Wbl7BNxE7UrwqWM3Dlcf5g2ZkO9UhOeeOLCtbQzKJeUHMf9Nu8cc1S iKwd1p5YKPbUsQzLxdXix/LXF7Q8AYcxOhcXUg1GjL/x1QnM6ozt2MiFITiN2Kco m3eh9YKCp7EfjZEF9jpXodMsoM4kG+nxOjlokM+rRGSGe3PzfwK5qBge4IRi3Maw yJ5KjtNmktEH0seBKG4C9u2ZvdnVQF+wjLldKwOEjwyzPkLb9DbJ6Lsr7gs7Ot/z u/6R+SR2hTh1DTzV1ILZMzaLKitJwd1bfyAQUo8MASYQPC3R4YfbkG2wWSSHdQuw xGbXSR49b8QFo5M9af1kM+KQe1veYQ== -----END CERTIFICATE-----Generated at Mon Apr 13 14:36:12 2026 by rpki-client