$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa File: 95727abb-f8cd-392c-9fda-6a003409ad50.roa (raw, json) Hash identifier: HXKjmG8SR0P9uZfmjZU1oyi2ZZF0MFUGNFPRXFhOEwg= Subject key identifier: C8:D4:4B:76:AF:C3:B9:B8:FF:31:03:57:46:88:C9:4C:1A:9C:4E:F9 Certificate issuer: /CN=09729117-c725-49ca-9a64-f10a055403c3 Certificate serial: 010D0C9F4328584F8DD85F4AE2A4E3BADEE4FF00 Authority key identifier: 22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 60354 IP address blocks: 45.41.234.0/24 maxlen: 32 2602:80b:b000::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:5f:4a:e2:a4:e3:ba:de:e4:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09729117-c725-49ca-9a64-f10a055403c3 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=df6af20b-e021-4753-b697-116b9a342582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:2d:07:33:dc:b8:96:80:76:49:f8:a0:9d: 08:5d:5d:bd:fb:89:ff:e5:af:d8:d8:47:2a:be:94: 85:8a:43:4c:d3:ed:80:26:3a:bf:56:c5:f2:da:d3: f3:e6:d8:d8:01:38:56:38:37:4b:8d:9b:73:8d:7b: 0e:71:65:83:59:9c:59:e1:eb:05:54:60:19:f9:63: 88:de:de:15:eb:00:1e:2f:ee:73:8f:73:cb:12:ab: c0:3b:b2:ce:ae:55:b9:53:73:99:5e:9a:e6:dd:e5: 84:70:fb:e8:4d:54:af:42:e2:a0:f4:25:ff:4b:ba: 35:8f:d0:2e:4f:16:4e:ea:84:99:95:cd:ae:9b:b1: 10:d9:d3:29:45:e1:48:ca:78:14:c7:90:89:87:17: c2:04:86:7b:ba:1a:12:e5:e6:89:ea:70:be:63:24: cf:26:2a:08:06:50:15:88:19:86:aa:53:83:2d:8c: c1:22:b0:26:ad:7d:f7:64:0a:b2:fc:fd:9e:d6:35: c3:a5:f7:5a:70:53:a5:d6:ec:92:c3:fa:0a:40:3f: 68:34:45:e3:ad:55:ec:27:7b:15:59:ba:59:3b:3b: 65:1b:45:7b:7c:9f:1c:bf:2b:a9:4f:81:4f:67:cb: 8b:7d:ec:98:1f:b1:3f:00:c5:d7:ff:ee:b5:f9:ec: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D4:4B:76:AF:C3:B9:B8:FF:31:03:57:46:88:C9:4C:1A:9C:4E:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl X509v3 Authority Key Identifier: keyid:22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer sbgp-ipAddrBlock: critical IPv4: 45.41.234.0/24 IPv6: 2602:80b:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3a:ef:e2:af:70:54:96:66:85:9c:43:a1:ec:5a:d0:fc:d6: 13:14:e7:14:47:1e:5a:2b:8d:9a:98:f9:fb:50:f3:25:c2:d0: bc:05:17:98:e1:38:2c:31:8f:a2:5a:91:87:78:a7:ef:65:7c: 7b:da:b5:61:55:47:55:00:88:1e:6e:cd:44:33:ad:e2:82:03: 78:a1:a9:67:58:dd:f1:42:81:22:c7:c1:75:24:72:db:f4:45: 0e:fe:cc:29:1b:52:57:aa:62:79:de:4e:c3:e2:e7:50:ea:b8: 90:e5:ac:66:92:0b:d9:7f:15:9a:5e:11:7e:36:a5:ff:95:93: 15:ae:1f:e0:63:b1:9f:da:c9:29:38:23:c4:db:2c:26:ba:75: 7f:95:12:90:b4:29:92:8d:a3:bd:26:56:40:5f:82:d0:61:a5: 93:29:3a:03:c3:71:96:c0:c8:de:ba:25:f6:8e:c4:23:76:7c: 02:22:eb:4b:c3:00:21:de:cb:29:44:33:73:f3:de:fa:bc:8f: 55:41:01:3c:6e:4d:9d:68:47:27:85:e6:4d:1f:bd:db:35:04: 2b:b2:da:d8:f3:72:5a:fd:70:76:81:25:27:1d:96:52:86:83: ad:8a:4e:b0:83:04:55:de:ac:58:1e:37:30:12:5a:67:29:34: f6:de:64:2e -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE+N2F9K4qTjut7k/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk3MjkxMTctYzcyNS00OWNhLTlhNjQtZjEwYTA1NTQw M2MzMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk ZGY2YWYyMGItZTAyMS00NzUzLWI2OTctMTE2YjlhMzQyNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub0tBzPcuJaAdkn4oJ0IXV29+4n/5a/Y2Ecq vpSFikNM0+2AJjq/VsXy2tPz5tjYAThWODdLjZtzjXsOcWWDWZxZ4esFVGAZ+WOI 3t4V6wAeL+5zj3PLEqvAO7LOrlW5U3OZXprm3eWEcPvoTVSvQuKg9CX/S7o1j9Au TxZO6oSZlc2um7EQ2dMpReFIyngUx5CJhxfCBIZ7uhoS5eaJ6nC+YyTPJioIBlAV iBmGqlODLYzBIrAmrX33ZAqy/P2e1jXDpfdacFOl1uySw/oKQD9oNEXjrVXsJ3sV WbpZOztlG0V7fJ8cvyupT4FPZ8uLfeyYH7E/AMXX/+61+ex73QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMjUS3avw7m4/zEDV0aIyUwanE75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wOTcy OTExNy1jNzI1LTQ5Y2EtOWE2NC1mMTBhMDU1NDAzYzMvOTU3MjdhYmItZjhjZC0z OTJjLTlmZGEtNmEwMDM0MDlhZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDk3MjkxMTctYzcyNS00OWNhLTlh NjQtZjEwYTA1NTQwM2MzLzA5NzI5MTE3LWM3MjUtNDljYS05YTY0LWYxMGEwNTU0 MDNjMy5jcmwwHwYDVR0jBBgwFoAUIhsZyr33iDxQ2BPzsviveqmKfNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wOTcyOTExNy1jNzI1LTQ5Y2EtOWE2NC1mMTBh MDU1NDAzYzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALSnqMA8E AgACMAkDBwQmAggLsAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUzrv4q9wVJZmhZxDoexa0PzWExTnFEce WiuNmpj5+1DzJcLQvAUXmOE4LDGPolqRh3in72V8e9q1YVVHVQCIHm7NRDOt4oID eKGpZ1jd8UKBIsfBdSRy2/RFDv7MKRtSV6pied5Ow+LnUOq4kOWsZpIL2X8Vml4R fjal/5WTFa4f4GOxn9rJKTgjxNssJrp1f5USkLQpko2jvSZWQF+C0GGlkyk6A8Nx lsDI3rol9o7EI3Z8AiLrS8MAId7LKUQzc/Pe+ryPVUEBPG5NnWhHJ4XmTR+92zUE K7La2PNyWv1wdoElJx2WUoaDrYpOsIMEVd6sWB43MBJaZyk09t5kLg== -----END CERTIFICATE-----Generated at Wed Oct 28 21:52:21 2026 by rpki-client