$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa File: b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa (raw, json) Hash identifier: zdEkeezmXqKQ5hq9IOQyUfOsFWNabgrtjyFlcm9D+qo= Subject key identifier: 76:05:B0:F3:0B:60:71:7F:90:77:F1:6A:6A:52:79:5F:7E:DE:7E:C0 Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584BAED1BAA43C853E547B177360 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa Signing time: Wed 29 Oct 2025 13:20:56 +0000 ROA not before: Wed 29 Oct 2025 13:20:56 +0000 ROA not after: Tue 27 Jan 2026 14:20:56 +0000 asID: 198949 IP address blocks: 143.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:d1:ba:a4:3c:85:3e:54:7b:17:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Oct 29 13:20:56 2025 GMT Not After : Jan 27 14:20:56 2026 GMT Subject: CN=afc8dc9f-0e23-4f55-868c-cac9f95f5ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:93:f5:b7:17:2a:9e:d0:d2:0b:a9:e4:6f:8d: 49:d0:2f:c6:6b:89:9c:26:40:97:ca:7d:3d:b6:90: 1c:36:bf:b5:22:cd:11:09:90:8d:0d:78:8f:76:41: 39:43:67:10:81:3d:fe:34:60:dd:e7:ab:b8:7c:d5: fc:55:f4:f8:7e:13:c3:d3:dd:f6:3b:d7:cd:83:1f: 79:6f:85:64:aa:e8:07:79:a6:04:cf:3d:ba:0a:3f: 29:d3:47:e0:f2:a7:c6:5b:ac:1e:30:4d:3b:03:99: 98:a1:80:ff:ec:91:29:35:e5:39:ad:bb:3d:bc:df: a0:87:d2:bb:01:63:e3:a3:62:e6:c1:1a:31:1c:09: a5:c5:1f:cd:8f:a0:47:20:10:c0:3c:74:01:34:27: 8c:c5:e7:77:19:d5:ab:72:fb:ae:ff:65:99:83:03: cd:ec:ca:ce:58:cb:a8:9d:e3:c4:bb:3f:0e:e1:c7: ec:86:e6:f5:12:65:c1:53:62:98:e8:49:bb:3c:11: 6d:e2:61:47:75:e4:5a:1f:b6:f4:79:da:31:2f:3f: 61:37:1c:4d:65:30:84:92:48:36:3a:6f:0a:da:76: 6c:44:a0:9b:fa:10:18:45:93:4d:34:0b:23:54:62: d7:b3:75:20:61:fd:f1:6d:15:fd:e5:98:ee:67:be: 87:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:05:B0:F3:0B:60:71:7F:90:77:F1:6A:6A:52:79:5F:7E:DE:7E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 143.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:90:04:f9:64:55:2d:61:8e:2f:b8:28:99:f4:a4:00:bb:a9: c5:f8:ea:02:1b:38:de:c9:e1:be:03:9b:3e:db:a9:2b:b6:db: f7:29:19:dd:d6:09:5d:90:19:df:cd:82:7e:85:14:86:e5:86: cb:9f:d4:68:2b:ed:18:93:8a:c4:2a:0a:6b:2c:12:f5:ea:85: 74:f4:05:e6:87:91:85:d2:af:36:41:f7:32:e2:dd:00:24:6a: f0:f4:e3:2a:fc:18:a9:c5:cc:9c:bb:44:5f:d5:2a:36:2e:a8: cd:ad:60:14:06:aa:ec:08:97:68:c0:b2:c8:cc:cb:26:ac:ca: 3f:9c:6f:d2:d6:d7:93:22:36:d1:45:7d:0c:1b:1b:e3:72:81: 32:e8:ca:e9:22:02:dd:25:15:ef:a4:fe:d3:81:65:41:56:25: 89:9e:4f:28:e4:d2:9d:7d:36:20:02:ea:45:33:45:a1:64:32: db:e5:38:6a:a2:a2:5c:ec:27:a7:5e:1c:ed:b5:e0:7c:f9:fb: cc:44:d1:48:9d:38:74:9b:8d:b9:f1:d4:f0:55:06:80:0d:41: 76:81:78:a8:67:6c:6e:71:b7:05:61:20:f8:cd:1f:84:66:d1: 2f:a1:65:4e:9b:5f:23:60:0e:fe:2e:47:91:6f:03:f9:11:14: 06:ed:44:86 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuu0bqkPIU+VHsXc2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI1MTAyOTEzMjA1NloXDTI2MDEyNzE0MjA1NlowLzEtMCsGA1UEAxMk YWZjOGRjOWYtMGUyMy00ZjU1LTg2OGMtY2FjOWY5NWY1ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopP1txcqntDSC6nkb41J0C/Ga4mcJkCXyn09 tpAcNr+1Is0RCZCNDXiPdkE5Q2cQgT3+NGDd56u4fNX8VfT4fhPD0932O9fNgx95 b4VkqugHeaYEzz26Cj8p00fg8qfGW6weME07A5mYoYD/7JEpNeU5rbs9vN+gh9K7 AWPjo2LmwRoxHAmlxR/Nj6BHIBDAPHQBNCeMxed3GdWrcvuu/2WZgwPN7MrOWMuo nePEuz8O4cfshub1EmXBU2KY6Em7PBFt4mFHdeRaH7b0edoxLz9hNxxNZTCEkkg2 Om8K2nZsRKCb+hAYRZNNNAsjVGLXs3UgYf3xbRX95ZjuZ76HvwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHYFsPMLYHF/kHfxampSeV9+3n7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvYjhkMTA5ZGMtNWFhYi0z ZDQ1LWJjYTAtZTA2Y2M0NWVjOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANpAE+WRVLWGOL7gomfSkALupxfjqAhs43snhvgObPtupK7bb9ykZ3dYJ XZAZ382CfoUUhuWGy5/UaCvtGJOKxCoKaywS9eqFdPQF5oeRhdKvNkH3MuLdACRq 8PTjKvwYqcXMnLtEX9UqNi6oza1gFAaq7AiXaMCyyMzLJqzKP5xv0tbXkyI20UV9 DBsb43KBMujK6SIC3SUV76T+04FlQVYliZ5PKOTSnX02IALqRTNFoWQy2+U4aqKi XOwnp14c7bXgfPn7zETRSJ04dJuNufHU8FUGgA1BdoF4qGdsbnG3BWEg+M0fhGbR L6FlTptfI2AO/i5HkW8D+REUBu1Ehg== -----END CERTIFICATE-----Generated at Mon Nov 3 22:15:44 2025 by rpki-client