$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/a73f0f41-ec9a-31f4-aa4b-c820fa15255a.roa File: a73f0f41-ec9a-31f4-aa4b-c820fa15255a.roa (raw, json) Hash identifier: Z953bj80JPvoYKfyN/SbLs4Nbey8zs3mCD4yj653l/s= Subject key identifier: 89:27:AB:36:B2:81:AD:89:60:AB:5B:2D:07:15:69:BD:0E:30:EB:CA Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584F94D35FB7533EB312BF9879C0 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/a73f0f41-ec9a-31f4-aa4b-c820fa15255a.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 46606 IP address blocks: 143.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:5f:b7:53:3e:b3:12:bf:98:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=119319ee-2ccc-426a-bb33-c9a39efcf3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2d:6a:68:8b:e8:1f:b9:70:d5:62:ed:57:e3: 82:62:b7:38:0b:03:8b:e4:45:e1:bd:4d:7a:7c:89: 9c:fa:c9:a9:d6:90:f2:34:fd:a9:7f:82:99:77:9b: fb:5c:b5:05:91:27:d4:ff:08:1f:4b:32:4c:66:3a: ef:b9:60:6c:5c:eb:40:3a:75:8e:7c:76:65:11:93: 9c:09:31:9f:10:31:95:b4:97:87:79:61:20:d2:08: 84:39:1c:87:9a:9f:e1:f8:43:09:fa:9b:b2:c7:0f: e4:c7:a8:a8:ec:d7:51:fa:50:0c:55:c2:45:ff:9b: 1c:36:ac:bf:76:26:16:c8:83:59:e2:e8:94:cf:79: b4:c5:53:d5:d8:be:53:65:4b:36:52:71:b7:97:ba: 08:cf:5b:36:0d:53:cb:8d:11:ca:4e:ba:44:7e:d2: 5c:b5:16:a9:71:a7:f4:2b:c3:05:be:86:ee:7e:c3: 37:62:21:47:79:df:1e:d8:0c:ea:2a:32:80:7d:6d: d4:65:53:fc:68:31:d7:ec:63:1b:d4:39:1d:5f:63: 44:ea:3a:09:be:8e:e6:7c:67:de:f6:e7:c4:31:4f: 8a:cc:1e:7f:c8:a8:b2:34:32:97:e4:b4:a2:d2:52: 83:0b:e2:5b:26:f6:6d:0c:f1:58:d0:23:b6:c6:7d: 1c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:27:AB:36:B2:81:AD:89:60:AB:5B:2D:07:15:69:BD:0E:30:EB:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/a73f0f41-ec9a-31f4-aa4b-c820fa15255a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 143.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:fb:82:bd:3d:2c:fa:39:6c:c4:62:63:a7:a0:25:95:79:57: 12:51:48:db:07:63:39:ca:6d:2e:dd:e8:ae:07:54:16:a5:3b: 9d:b0:d2:69:d9:83:4f:f0:63:a4:9d:0a:6b:27:09:22:82:d4: c5:d8:6e:3f:93:aa:0b:9c:b4:53:3d:8a:26:e8:20:60:2d:16: 8a:46:76:93:a8:f1:9b:02:af:6d:23:63:88:80:e4:82:56:fb: a8:21:ef:e5:90:35:f8:aa:8d:c2:25:69:9d:ad:04:8b:70:4b: 6a:77:1b:d2:1b:89:7f:0c:69:11:f1:fc:79:66:e5:06:4f:c1: 41:34:f5:c7:95:52:20:31:ee:c5:26:3e:83:9f:5a:4b:51:5b: d4:9c:0c:34:df:2a:25:3b:64:d5:a8:d5:aa:b1:be:1f:bc:1f: d4:97:04:c2:fb:0d:de:6d:d1:b3:7d:1b:e6:19:26:7f:92:63: 6b:8a:cd:d0:61:3a:60:5a:f3:85:92:4b:55:ac:8e:0e:21:bd: 0b:d5:2a:0a:13:8c:38:18:4e:91:7d:40:b9:46:f3:49:a5:71: 01:5e:7a:d5:a5:ca:0f:0c:96:a7:1d:78:23:30:e9:54:fc:f0: c3:aa:75:da:19:87:dc:88:3a:2a:93:d4:09:82:30:da:0e:3e: d7:df:b8:06 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+U01+3Uz6zEr+YecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MTE5MzE5ZWUtMmNjYy00MjZhLWJiMzMtYzlhMzllZmNmM2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS1qaIvoH7lw1WLtV+OCYrc4CwOL5EXhvU16 fImc+smp1pDyNP2pf4KZd5v7XLUFkSfU/wgfSzJMZjrvuWBsXOtAOnWOfHZlEZOc CTGfEDGVtJeHeWEg0giEORyHmp/h+EMJ+puyxw/kx6io7NdR+lAMVcJF/5scNqy/ diYWyINZ4uiUz3m0xVPV2L5TZUs2UnG3l7oIz1s2DVPLjRHKTrpEftJctRapcaf0 K8MFvobufsM3YiFHed8e2AzqKjKAfW3UZVP8aDHX7GMb1DkdX2NE6joJvo7mfGfe 9ufEMU+KzB5/yKiyNDKX5LSi0lKDC+JbJvZtDPFY0CO2xn0cOQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIknqzayga2JYKtbLQcVab0OMOvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvYTczZjBmNDEtZWM5YS0z MWY0LWFhNGItYzgyMGZhMTUyNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAm/uCvT0s+jlsxGJjp6AllXlXElFI2wdjOcptLt3orgdUFqU7nbDSadmD T/BjpJ0KaycJIoLUxdhuP5OqC5y0Uz2KJuggYC0WikZ2k6jxmwKvbSNjiIDkglb7 qCHv5ZA1+KqNwiVpna0Ei3BLancb0huJfwxpEfH8eWblBk/BQTT1x5VSIDHuxSY+ g59aS1Fb1JwMNN8qJTtk1ajVqrG+H7wf1JcEwvsN3m3Rs30b5hkmf5Jja4rN0GE6 YFrzhZJLVayODiG9C9UqChOMOBhOkX1AuUbzSaVxAV561aXKDwyWpx14IzDpVPzw w6p12hmH3Ig6KpPUCYIw2g4+19+4Bg== -----END CERTIFICATE-----Generated at Sun Nov 15 06:31:00 2026 by rpki-client