$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/a73f0f41-ec9a-31f4-aa4b-c820fa15255a.roa File: a73f0f41-ec9a-31f4-aa4b-c820fa15255a.roa (raw, json) Hash identifier: hyfT5h5RNnc3pMa6T6AhVZyqoBYvUv+wXwBjMYC2R2o= Subject key identifier: 58:E4:4A:4B:BF:EC:0A:2F:71:13:56:BC:3D:E4:3E:10:72:09:9B:20 Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584E5084B1B3F60150BD1BB1C900 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/a73f0f41-ec9a-31f4-aa4b-c820fa15255a.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 46606 IP address blocks: 143.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:b1:b3:f6:01:50:bd:1b:b1:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=3028d7bc-9fc6-4711-a9ea-2de406de0a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:72:f6:76:5f:3c:5e:71:5a:a1:21:97:e1: c6:4f:01:be:7a:23:91:7d:8d:2d:ed:da:5d:52:17: 88:07:96:fe:54:a9:36:af:ee:ff:9f:8b:40:56:3d: 16:d6:9f:e3:ef:4c:57:95:e2:4f:a8:5e:ac:f0:e5: ba:80:0d:d2:ac:42:a7:ef:b5:a3:58:fd:b9:f6:08: b1:ba:c2:75:d2:2f:a9:3f:4f:6c:bd:91:9f:bb:98: a4:bf:dd:28:5e:67:59:23:09:8f:8f:a1:42:4d:fd: 86:39:dd:4e:aa:8a:42:cb:6b:a8:97:28:3b:a0:50: 3f:e9:3f:ed:68:42:14:15:76:9e:c7:59:53:39:ca: ab:77:4b:f2:69:5a:8c:23:74:13:f6:56:f6:e8:30: 5d:44:f0:0f:c5:e7:a8:99:5f:1c:cd:4f:cc:75:cd: 8a:c7:3d:5a:4d:7b:f2:79:9f:13:88:b8:6d:5a:6c: 11:52:ec:37:c7:87:13:3c:f0:dc:18:7e:42:1d:53: c8:d6:51:93:57:95:8f:87:c0:85:18:70:b2:39:b4: 70:fe:cc:df:9b:87:d0:f8:e0:0f:81:00:7b:db:f5: be:27:87:79:68:b9:6f:eb:a7:55:66:bf:6f:29:81: 84:00:dc:eb:8d:ee:18:9d:0b:d1:4c:9c:6d:8e:1e: c2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E4:4A:4B:BF:EC:0A:2F:71:13:56:BC:3D:E4:3E:10:72:09:9B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/a73f0f41-ec9a-31f4-aa4b-c820fa15255a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 143.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:07:40:57:85:fb:40:2c:e1:3d:dd:ec:93:8a:92:96:09:2a: 84:4d:e7:b6:88:c1:46:8b:b1:6d:6b:f0:07:23:b6:91:33:1c: 41:7e:52:ed:61:d1:ac:02:65:03:76:5b:24:cb:7c:5a:97:96: 73:be:ce:36:4d:0a:ab:0f:8d:35:f0:56:e0:66:3e:22:fe:9a: e4:d3:98:a7:8a:cd:4c:c8:cc:a8:fe:17:47:4f:3b:a1:b4:d9: e0:19:35:49:c1:d1:86:0c:30:93:75:fd:40:fb:e1:21:fd:20: f9:59:fd:25:11:2f:b8:fc:bb:65:e2:b2:06:fa:8c:6e:21:cf: e5:09:28:f8:ed:d6:6c:08:f6:15:5a:88:34:30:15:03:17:c0: 1b:48:39:19:90:3d:09:9e:5e:20:b1:de:2b:01:a5:a4:2f:a7: c0:a1:04:a0:3e:96:9d:11:9c:9d:d2:15:4c:05:57:0e:20:95: f5:b6:59:06:42:7f:76:6b:e6:45:fb:4c:f8:99:44:31:fc:53: 18:bd:78:cb:15:62:21:7d:00:7d:35:a0:45:d3:ba:50:1f:45: cd:a3:4a:3b:ca:b4:3a:6f:df:d4:21:a1:70:ce:ac:68:48:f3: d3:02:cc:15:f4:42:86:b8:c2:31:5d:5d:d0:0e:0b:7b:21:d8: ef:66:5b:a9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5QhLGz9gFQvRuxyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk MzAyOGQ3YmMtOWZjNi00NzExLWE5ZWEtMmRlNDA2ZGUwYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAridy9nZfPF5xWqEhl+HGTwG+eiORfY0t7dpd UheIB5b+VKk2r+7/n4tAVj0W1p/j70xXleJPqF6s8OW6gA3SrEKn77WjWP259gix usJ10i+pP09svZGfu5ikv90oXmdZIwmPj6FCTf2GOd1OqopCy2uolyg7oFA/6T/t aEIUFXaex1lTOcqrd0vyaVqMI3QT9lb26DBdRPAPxeeomV8czU/Mdc2Kxz1aTXvy eZ8TiLhtWmwRUuw3x4cTPPDcGH5CHVPI1lGTV5WPh8CFGHCyObRw/szfm4fQ+OAP gQB72/W+J4d5aLlv66dVZr9vKYGEANzrje4YnQvRTJxtjh7C9wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFjkSku/7AovcRNWvD3kPhByCZsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvYTczZjBmNDEtZWM5YS0z MWY0LWFhNGItYzgyMGZhMTUyNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHgdAV4X7QCzhPd3sk4qSlgkqhE3ntojBRouxbWvwByO2kTMcQX5S7WHR rAJlA3ZbJMt8WpeWc77ONk0Kqw+NNfBW4GY+Iv6a5NOYp4rNTMjMqP4XR087obTZ 4Bk1ScHRhgwwk3X9QPvhIf0g+Vn9JREvuPy7ZeKyBvqMbiHP5Qko+O3WbAj2FVqI NDAVAxfAG0g5GZA9CZ5eILHeKwGlpC+nwKEEoD6WnRGcndIVTAVXDiCV9bZZBkJ/ dmvmRftM+JlEMfxTGL14yxViIX0AfTWgRdO6UB9FzaNKO8q0Om/f1CGhcM6saEjz 0wLMFfRChrjCMV1d0A4LeyHY72ZbqQ== -----END CERTIFICATE-----Generated at Fri Jul 24 03:01:26 2026 by rpki-client