$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7/26992cee-3ef7-3ebb-8279-e0ce44199056.roa File: 26992cee-3ef7-3ebb-8279-e0ce44199056.roa (raw, json) Hash identifier: kMz04qe/g+oVWQ0tzg6osqkI9hV6dSwHfdR0SGNYNO0= Subject key identifier: 40:AA:93:BE:E4:56:B7:FB:78:D9:A5:22:BE:4A:D1:7A:94:04:9A:7F Certificate issuer: /CN=95a731d9-eb7e-4c0b-80ba-9386b5efaec7 Certificate serial: 010D0C9F4328584B3DBA2A977ABFF0DFE2184B40 Authority key identifier: F3:C5:4B:EB:71:B9:05:68:38:78:4B:2E:37:CC:29:CE:58:A0:65:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7/26992cee-3ef7-3ebb-8279-e0ce44199056.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 214432 IP address blocks: 45.41.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7/95a731d9-eb7e-4c0b-80ba-9386b5efaec7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7/95a731d9-eb7e-4c0b-80ba-9386b5efaec7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:2a:97:7a:bf:f0:df:e2:18:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a731d9-eb7e-4c0b-80ba-9386b5efaec7 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=19ac6b77-b8dd-43c3-bb3a-4d439dcee380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1c:15:d4:c5:d5:86:35:32:27:ad:5d:6c:1d: 6c:20:03:98:cb:c9:2e:01:bf:e3:49:be:16:09:e6: 29:0f:d5:7b:c0:a7:9b:86:78:b5:64:5f:82:1e:da: c6:54:fc:0b:f0:0c:29:c7:ee:94:0a:84:4d:ca:7b: 7f:9b:86:a8:e1:7e:71:92:92:6c:c8:ca:7d:b8:62: 0b:3d:d8:a3:75:d7:2b:10:cb:75:10:e9:30:d0:48: 4f:04:71:12:ce:dc:6e:9b:dc:d3:54:b0:90:3a:7c: ed:ea:52:31:19:85:cc:7c:31:b1:fb:14:6d:93:ea: 42:61:6d:f9:14:85:78:6c:ed:c9:9d:86:c5:54:7e: 5f:38:fb:10:a3:77:8b:18:16:64:f0:01:65:fd:0f: a3:89:fb:d8:46:20:b7:05:1c:8b:a6:4d:61:34:81: ec:2b:7c:1c:cf:7f:b2:25:d5:08:7b:57:91:1e:3f: dc:82:e1:f0:d1:9c:c7:51:c6:1c:81:83:a4:3b:72: 1d:67:a2:10:56:a3:e9:3f:72:cd:af:05:fb:ac:93: 45:7e:c5:30:c5:f6:49:d2:8d:02:27:2e:e1:8f:3e: 70:05:46:f5:7c:48:24:58:37:6e:a9:42:59:20:02: 0f:cf:aa:ff:76:1c:2d:98:e8:f2:fd:0e:1c:c9:e6: 48:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AA:93:BE:E4:56:B7:FB:78:D9:A5:22:BE:4A:D1:7A:94:04:9A:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7/26992cee-3ef7-3ebb-8279-e0ce44199056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7/95a731d9-eb7e-4c0b-80ba-9386b5efaec7.crl X509v3 Authority Key Identifier: keyid:F3:C5:4B:EB:71:B9:05:68:38:78:4B:2E:37:CC:29:CE:58:A0:65:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7.cer sbgp-ipAddrBlock: critical IPv4: 45.41.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:09:18:83:66:70:aa:9f:be:83:d6:f4:6c:ba:a1:f8:35:46: 7d:ee:76:c9:3c:fc:f4:1a:95:a2:78:dc:42:0c:4c:53:45:c6: 0b:f7:bd:4e:15:0d:5d:ac:b9:8c:2c:8c:17:ce:d8:47:3b:4f: 3d:dd:c3:0e:08:07:46:8f:46:bb:d6:52:37:9d:a3:b2:eb:f6: a1:b6:16:da:20:6d:50:bc:f2:2a:b1:21:ee:3f:30:d7:e7:15: 46:74:aa:91:13:de:1a:82:46:5a:2d:d1:f4:51:31:bb:5c:45: 64:74:4d:1c:1c:af:96:8d:97:4d:ff:de:7d:2d:cd:32:dd:8d: 60:c9:60:01:cc:f7:52:87:44:7b:eb:29:1c:74:be:61:7a:99: 2a:9f:92:43:0b:95:aa:11:13:eb:c0:9d:20:6d:14:14:16:51: 0e:b5:57:5a:6e:3b:28:dc:69:c6:e6:53:3d:e8:54:cf:5c:e1: af:77:2a:3f:5f:53:61:b4:c3:45:e4:45:f7:49:0a:0a:75:cf: 1c:78:b6:21:39:b0:38:3b:1b:52:7b:1b:c4:1f:a2:25:25:05: 0a:08:be:d5:63:a9:f1:f9:4c:96:de:0c:d8:d8:de:47:38:94: a0:60:66:b3:8d:a8:2e:f3:a5:87:35:a8:05:7d:96:7c:c2:73: ee:b9:33:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uiqXer/w3+IYS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNzMxZDktZWI3ZS00YzBiLTgwYmEtOTM4NmI1ZWZh ZWM3MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTlhYzZiNzctYjhkZC00M2MzLWJiM2EtNGQ0MzlkY2VlMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBwV1MXVhjUyJ61dbB1sIAOYy8kuAb/jSb4W CeYpD9V7wKebhni1ZF+CHtrGVPwL8Awpx+6UCoRNynt/m4ao4X5xkpJsyMp9uGIL PdijddcrEMt1EOkw0EhPBHESztxum9zTVLCQOnzt6lIxGYXMfDGx+xRtk+pCYW35 FIV4bO3JnYbFVH5fOPsQo3eLGBZk8AFl/Q+jifvYRiC3BRyLpk1hNIHsK3wcz3+y JdUIe1eRHj/cguHw0ZzHUcYcgYOkO3IdZ6IQVqPpP3LNrwX7rJNFfsUwxfZJ0o0C Jy7hjz5wBUb1fEgkWDduqUJZIAIPz6r/dhwtmOjy/Q4cyeZIEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECqk77kVrf7eNmlIr5K0XqUBJp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85NWE3 MzFkOS1lYjdlLTRjMGItODBiYS05Mzg2YjVlZmFlYzcvMjY5OTJjZWUtM2VmNy0z ZWJiLTgyNzktZTBjZTQ0MTk5MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTVhNzMxZDktZWI3ZS00YzBiLTgw YmEtOTM4NmI1ZWZhZWM3Lzk1YTczMWQ5LWViN2UtNGMwYi04MGJhLTkzODZiNWVm YWVjNy5jcmwwHwYDVR0jBBgwFoAU88VL63G5BWg4eEsuN8wpzligZUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85NWE3MzFkOS1lYjdlLTRjMGItODBiYS05Mzg2 YjVlZmFlYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLSkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwJGINmcKqfvoPW9Gy6ofg1Rn3udsk8/PQalaJ43EIMTFNFxgv3vU4V DV2suYwsjBfO2Ec7Tz3dww4IB0aPRrvWUjedo7Lr9qG2FtogbVC88iqxIe4/MNfn FUZ0qpET3hqCRlot0fRRMbtcRWR0TRwcr5aNl03/3n0tzTLdjWDJYAHM91KHRHvr KRx0vmF6mSqfkkMLlaoRE+vAnSBtFBQWUQ61V1puOyjcacbmUz3oVM9c4a93Kj9f U2G0w0XkRfdJCgp1zxx4tiE5sDg7G1J7G8QfoiUlBQoIvtVjqfH5TJbeDNjY3kc4 lKBgZrONqC7zpYc1qAV9lnzCc+65M4Q= -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:26 2025 by rpki-client