$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b4c49167-4119-3416-b7e9-256453bf1aaf.roa File: b4c49167-4119-3416-b7e9-256453bf1aaf.roa (raw, json) Hash identifier: LJ79CY4VTe65pss1ecEXGtr74GNTf0uZnjK1TLfGMH4= Subject key identifier: C6:40:CA:09:CB:A3:66:15:1A:D3:73:1F:BA:5D:1E:62:3B:7A:31:BA Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584F94D33B4F851D42260D5C63A0 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b4c49167-4119-3416-b7e9-256453bf1aaf.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 31898 IP address blocks: 143.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:3b:4f:85:1d:42:26:0d:5c:63:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=2f9c5711-a748-46fe-b5bf-8440955a54da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:78:42:b7:83:e1:6a:d9:fd:9d:cf:ac:9f:ad: 9a:80:a0:8b:5d:f9:b6:98:d2:3a:6e:40:d9:a3:c4: 06:39:25:ea:db:cc:09:e7:d0:fd:97:7a:e1:2a:af: 27:d5:54:8a:d0:4d:19:23:1c:6e:1d:ce:dd:6b:14: 07:c0:fc:c5:8b:10:76:c7:82:96:5b:1c:54:5d:3f: ce:fa:bd:0e:3e:75:ac:af:8e:86:26:10:b3:ed:57: df:9b:47:74:59:04:3f:c4:a6:fb:28:36:c1:7b:bd: a2:b0:74:66:82:11:a6:b4:dd:af:b8:20:c9:af:10: c0:6d:6b:6c:95:0a:a1:ff:84:30:a9:c6:bf:92:0c: 53:0f:f1:f6:c6:70:09:ec:fc:e6:48:45:d8:92:05: c2:48:73:2e:8e:11:52:ec:31:d8:ef:0f:bb:41:c5: 9b:96:1c:87:9f:3c:9f:ee:63:fa:b3:2f:70:ca:6f: c3:11:8b:6d:61:bc:b4:69:33:63:29:58:23:fa:ee: 48:c4:85:34:41:84:00:d4:f9:ec:ea:d9:6a:01:6c: e2:a1:73:49:9d:51:79:fd:71:fa:1d:73:d9:fb:f3: 1a:14:cd:c5:33:b6:df:a8:60:48:92:b1:e8:af:46: dc:80:e5:b8:62:59:86:8f:ec:af:36:72:43:9d:2e: 85:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:40:CA:09:CB:A3:66:15:1A:D3:73:1F:BA:5D:1E:62:3B:7A:31:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b4c49167-4119-3416-b7e9-256453bf1aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 143.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:56:d5:6f:fe:f7:8d:ce:52:cc:08:22:f6:2c:50:ab:cf:a4: 80:d1:3c:be:b8:56:9f:66:dc:e4:e9:3f:6c:44:ed:8c:c2:ae: 69:fa:f3:8f:fa:e8:9d:a7:28:74:82:f8:07:2f:cf:02:ed:c1: 40:de:13:d5:ca:de:d3:d5:21:68:7b:f1:7b:80:b1:a5:09:58: aa:a2:d4:11:ef:19:61:d5:92:3e:3b:df:7e:14:7a:a3:9b:7a: 76:c0:4f:c6:5d:91:54:a1:6f:9c:0d:62:43:38:43:3e:7a:25: a1:43:db:0e:e8:3c:37:1d:e6:eb:a0:a9:2e:f3:1d:9b:0a:f9: a9:13:78:46:9c:c7:a9:cb:04:43:19:fa:c3:70:b7:5e:fc:21: c4:9d:46:d8:aa:60:af:df:48:9a:96:73:44:b4:aa:81:fd:61: 9e:1c:07:65:bd:86:7d:ad:6a:46:c3:ed:81:96:9b:4a:e8:88: 4c:b0:59:84:23:4e:a0:a2:92:9d:db:45:fe:1d:f1:4b:4e:5b: 5b:d0:c4:59:de:50:41:96:0e:9f:14:c4:90:dc:bd:91:dd:db: d7:7d:4f:ed:cb:c1:80:88:1f:b9:ce:95:ac:03:18:88:8e:62: 0e:f6:84:7c:8f:0a:cb:4a:f9:e7:56:ac:eb:f5:fd:39:58:37: 04:52:0d:79 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+U0ztPhR1CJg1cY6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MmY5YzU3MTEtYTc0OC00NmZlLWI1YmYtODQ0MDk1NWE1NGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3hCt4Phatn9nc+sn62agKCLXfm2mNI6bkDZ o8QGOSXq28wJ59D9l3rhKq8n1VSK0E0ZIxxuHc7daxQHwPzFixB2x4KWWxxUXT/O +r0OPnWsr46GJhCz7Vffm0d0WQQ/xKb7KDbBe72isHRmghGmtN2vuCDJrxDAbWts lQqh/4Qwqca/kgxTD/H2xnAJ7PzmSEXYkgXCSHMujhFS7DHY7w+7QcWblhyHnzyf 7mP6sy9wym/DEYttYby0aTNjKVgj+u5IxIU0QYQA1Pns6tlqAWzioXNJnVF5/XH6 HXPZ+/MaFM3FM7bfqGBIkrHor0bcgOW4YlmGj+yvNnJDnS6FKwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMZAygnLo2YVGtNzH7pdHmI7ejG6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvYjRjNDkxNjctNDExOS0z NDE2LWI3ZTktMjU2NDUzYmYxYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAilbVb/73jc5SzAgi9ixQq8+kgNE8vrhWn2bc5Ok/bETtjMKuafrzj/ro nacodIL4By/PAu3BQN4T1cre09UhaHvxe4CxpQlYqqLUEe8ZYdWSPjvffhR6o5t6 dsBPxl2RVKFvnA1iQzhDPnoloUPbDug8Nx3m66CpLvMdmwr5qRN4RpzHqcsEQxn6 w3C3XvwhxJ1G2Kpgr99ImpZzRLSqgf1hnhwHZb2Gfa1qRsPtgZabSuiITLBZhCNO oKKSndtF/h3xS05bW9DEWd5QQZYOnxTEkNy9kd3b131P7cvBgIgfuc6VrAMYiI5i DvaEfI8Ky0r551as6/X9OVg3BFINeQ== -----END CERTIFICATE-----Generated at Sun Nov 15 17:51:45 2026 by rpki-client