$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa File: 95727abb-f8cd-392c-9fda-6a003409ad50.roa (raw, json) Hash identifier: FgU5zoNadtVixw9lQuLXFB27R8ZV22lc9Yw5ljFxqHI= Subject key identifier: 2D:C8:AA:DF:69:9D:F3:BB:0C:54:23:05:BC:6A:3F:86:D1:67:D2:F0 Certificate issuer: /CN=09729117-c725-49ca-9a64-f10a055403c3 Certificate serial: 010D0C9F4328584BA667AB65F70A7E33B4FE74C0 Authority key identifier: 22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 60354 IP address blocks: 45.41.234.0/24 maxlen: 32 2602:80b:b000::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ab:65:f7:0a:7e:33:b4:fe:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09729117-c725-49ca-9a64-f10a055403c3 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=7a9ad9a2-82e9-4816-8691-dd6d1b723cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:63:bc:7a:57:01:dd:c4:21:48:39:0a:24: 7f:6c:62:e9:75:2b:27:84:36:b6:b5:c8:9f:6e:48: 84:c6:65:0c:99:94:ef:6d:a9:c0:5b:00:86:83:af: d7:74:84:25:6e:7a:c9:f1:7b:cd:7c:39:03:8f:b0: fd:e2:4e:47:41:f7:6e:62:a0:c5:94:4e:4e:e9:7f: 9e:03:b5:ce:2d:cf:2f:bd:29:a4:d9:31:9b:60:ff: 1a:63:18:a8:6a:06:ff:4d:87:9e:7f:0e:ea:6e:ed: 5c:6a:92:5c:2c:0f:db:02:0c:3f:8e:0e:3f:b8:55: 0b:03:50:6d:2f:1d:94:90:c1:bb:43:a7:66:91:a6: 69:fe:2f:b6:07:c0:54:ab:3e:0f:fd:2a:c2:9d:9d: ba:99:b3:3f:ec:06:1a:5f:a4:71:17:6d:79:10:8e: 09:26:1d:c1:9f:f4:fc:c2:85:f2:84:a4:d6:0a:f7: 28:88:18:c0:e5:d8:b0:9d:8d:48:2a:86:f8:46:4b: a3:da:7e:0a:e1:a4:48:c3:68:6e:40:0f:c8:dc:59: 94:bc:c6:52:3c:4c:af:bb:c5:23:49:03:09:a6:9b: 69:be:95:c8:ac:d1:fd:1e:95:82:38:6b:22:80:26: dd:c4:1d:b1:23:b2:3c:df:80:0d:d1:b7:3d:97:41: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C8:AA:DF:69:9D:F3:BB:0C:54:23:05:BC:6A:3F:86:D1:67:D2:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl X509v3 Authority Key Identifier: keyid:22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer sbgp-ipAddrBlock: critical IPv4: 45.41.234.0/24 IPv6: 2602:80b:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:84:bf:68:24:0c:b1:77:df:9d:49:9f:a0:6f:8b:6b:c2:27: 3c:79:af:3f:84:62:32:15:9d:90:5b:19:65:fc:68:be:28:ff: 49:91:08:ff:ed:d3:ee:6c:18:33:92:f2:b0:87:91:50:05:f2: 66:45:cf:f8:05:08:d0:21:cd:f2:44:0a:8b:c9:59:f2:f3:8f: 7d:7b:f7:e9:64:64:07:09:ec:ae:ee:64:e0:1a:0e:3e:07:43: 5e:54:7e:08:3a:d8:03:ff:4d:e4:9d:5c:21:4c:9a:69:2e:d6: 23:b3:29:ed:55:f6:1b:04:3e:fd:5b:22:95:24:0b:c2:52:75: 7e:1f:f7:53:7b:d8:66:12:84:71:7a:3b:3c:e0:b4:6c:fe:f2: 1d:97:f7:2b:63:1e:6c:d1:4f:51:b1:66:d3:b9:d6:65:80:55: 5c:22:09:06:01:9b:28:cb:2f:a1:5f:ea:6a:ee:90:05:e0:a0: 68:38:fb:87:3d:1d:66:8e:98:7f:26:b1:39:7a:37:12:79:8b: b1:72:c7:59:db:c0:43:b6:b6:33:4c:b7:9d:0b:47:07:60:ec: 3b:cb:95:ab:ed:ca:05:1f:17:98:2d:11:e0:17:49:bb:ec:45: a3:cd:23:f4:98:5c:1c:aa:9a:f1:da:b7:2c:f3:89:a2:d4:15: d9:e6:48:25 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEumZ6tl9wp+M7T+dMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk3MjkxMTctYzcyNS00OWNhLTlhNjQtZjEwYTA1NTQw M2MzMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk N2E5YWQ5YTItODJlOS00ODE2LTg2OTEtZGQ2ZDFiNzIzY2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUxjvHpXAd3EIUg5CiR/bGLpdSsnhDa2tcif bkiExmUMmZTvbanAWwCGg6/XdIQlbnrJ8XvNfDkDj7D94k5HQfduYqDFlE5O6X+e A7XOLc8vvSmk2TGbYP8aYxioagb/TYeefw7qbu1capJcLA/bAgw/jg4/uFULA1Bt Lx2UkMG7Q6dmkaZp/i+2B8BUqz4P/SrCnZ26mbM/7AYaX6RxF215EI4JJh3Bn/T8 woXyhKTWCvcoiBjA5diwnY1IKob4Rkuj2n4K4aRIw2huQA/I3FmUvMZSPEyvu8Uj SQMJpptpvpXIrNH9HpWCOGsigCbdxB2xI7I834AN0bc9l0G66wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFC3Iqt9pnfO7DFQjBbxqP4bRZ9LwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wOTcy OTExNy1jNzI1LTQ5Y2EtOWE2NC1mMTBhMDU1NDAzYzMvOTU3MjdhYmItZjhjZC0z OTJjLTlmZGEtNmEwMDM0MDlhZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDk3MjkxMTctYzcyNS00OWNhLTlh NjQtZjEwYTA1NTQwM2MzLzA5NzI5MTE3LWM3MjUtNDljYS05YTY0LWYxMGEwNTU0 MDNjMy5jcmwwHwYDVR0jBBgwFoAUIhsZyr33iDxQ2BPzsviveqmKfNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wOTcyOTExNy1jNzI1LTQ5Y2EtOWE2NC1mMTBh MDU1NDAzYzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALSnqMA8E AgACMAkDBwQmAggLsAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOYS/aCQMsXffnUmfoG+La8InPHmvP4Ri MhWdkFsZZfxovij/SZEI/+3T7mwYM5LysIeRUAXyZkXP+AUI0CHN8kQKi8lZ8vOP fXv36WRkBwnsru5k4BoOPgdDXlR+CDrYA/9N5J1cIUyaaS7WI7Mp7VX2GwQ+/Vsi lSQLwlJ1fh/3U3vYZhKEcXo7POC0bP7yHZf3K2MebNFPUbFm07nWZYBVXCIJBgGb KMsvoV/qau6QBeCgaDj7hz0dZo6YfyaxOXo3EnmLsXLHWdvAQ7a2M0y3nQtHB2Ds O8uVq+3KBR8XmC0R4BdJu+xFo80j9JhcHKqa8dq3LPOJotQV2eZIJQ== -----END CERTIFICATE-----Generated at Wed Nov 5 10:09:29 2025 by rpki-client