$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/03940f68-15cc-37ea-9d81-2d50bccadcd8.roa File: 03940f68-15cc-37ea-9d81-2d50bccadcd8.roa (raw, json) Hash identifier: c87kREyX7LRcQfXxU7p6A+IBiI926vPNL7H2XiXlOLs= Subject key identifier: 57:33:0D:CB:8D:2C:19:4D:CE:7C:B7:CB:4F:38:00:91:DA:E7:09:1E Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Certificate serial: 010D0C9F4328584F3FAD33D49AC6F34DBE6D9780 Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/03940f68-15cc-37ea-9d81-2d50bccadcd8.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 45.223.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:33:d4:9a:c6:f3:4d:be:6d:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=154f497b-bb52-47da-84b1-cefe5ac97285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ae:6c:05:e6:54:77:2d:b0:fc:25:0e:88:fb: 5d:c3:20:e5:da:af:b1:71:7b:f5:bd:ab:25:80:25: 8f:28:5a:fb:c2:74:38:2a:da:c0:5b:7c:b8:ac:7a: cf:5a:1e:6c:fa:ec:56:c5:9b:58:e4:61:d9:3f:79: 46:91:01:d8:d1:dc:16:d0:5b:44:23:31:48:10:d9: 1f:b6:93:c2:d5:7a:da:21:e8:84:9c:a6:a7:96:ec: 9e:2f:55:1b:0c:91:89:f4:2e:72:e8:d9:a9:05:62: bd:e3:65:a3:5b:78:f2:96:a8:74:e5:fd:e1:e5:1f: 80:d8:f0:4f:eb:bb:ab:43:49:7a:9d:4e:88:37:66: c7:e3:3d:a1:8d:39:9f:73:c5:d7:aa:16:73:19:74: a2:d2:41:a7:8a:b3:80:1a:15:3f:4d:49:e7:50:82: 82:c6:72:c2:92:6b:13:05:44:0b:ce:de:44:c9:93: d6:b8:2a:08:2b:a2:0c:83:30:4e:58:6f:f1:92:87: 42:75:51:0f:a3:ba:39:29:f7:b7:b2:8c:33:50:e3: 39:f2:7c:a6:7c:bc:2c:28:a4:1d:b7:c1:70:b4:e5: 31:a3:0a:5d:30:e6:59:11:ed:84:6c:fe:fa:a7:02: 9f:89:34:32:b5:03:e7:96:44:40:0b:44:f0:a5:18: ea:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:33:0D:CB:8D:2C:19:4D:CE:7C:B7:CB:4F:38:00:91:DA:E7:09:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/03940f68-15cc-37ea-9d81-2d50bccadcd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl X509v3 Authority Key Identifier: keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer sbgp-ipAddrBlock: critical IPv4: 45.223.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:5e:ad:2d:e3:61:93:b0:33:27:8a:8f:1f:da:ee:58:e9:40: d2:de:9b:97:a9:bf:96:8c:20:18:fa:f8:5d:49:86:53:09:e2: f5:64:5b:07:e1:4a:55:df:57:10:b6:64:89:fe:62:b7:e5:3a: 30:64:f5:c3:dd:25:9f:9e:61:39:31:d7:d4:f9:c5:31:39:1a: 74:80:26:18:58:5f:c7:cd:ac:60:05:78:83:09:3e:8c:6c:97: ef:cb:6d:58:3a:78:fc:5d:0a:9e:0a:eb:54:18:5d:1c:ce:61: 1c:cc:69:42:91:cb:ca:39:7b:9e:91:85:ce:fb:a3:4a:3f:80: f7:35:d3:a7:24:5b:6c:ae:3d:d3:a7:0c:13:59:09:8a:fb:17: de:54:0c:b8:64:58:47:b8:69:cc:fd:66:63:07:68:74:d3:f0: b3:18:3f:fe:0a:52:28:cd:db:fa:dc:1b:b6:27:8d:4d:82:77: c9:b4:8f:b1:2b:38:64:19:84:60:75:7b:94:14:51:46:48:a3: 10:08:da:e7:5a:a1:cd:96:81:e2:c6:a8:1d:3f:72:7e:c1:96: 54:5b:f1:47:81:80:06:3a:4d:88:1e:d1:4a:6f:09:5d:a0:66: d8:64:64:56:b9:62:f3:32:f5:65:19:ef:27:33:54:4d:7e:76: e0:cd:18:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTPUmsbzTb5tl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj Yzc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MTU0ZjQ5N2ItYmI1Mi00N2RhLTg0YjEtY2VmZTVhYzk3Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5K5sBeZUdy2w/CUOiPtdwyDl2q+xcXv1vasl gCWPKFr7wnQ4KtrAW3y4rHrPWh5s+uxWxZtY5GHZP3lGkQHY0dwW0FtEIzFIENkf tpPC1XraIeiEnKanluyeL1UbDJGJ9C5y6NmpBWK942WjW3jylqh05f3h5R+A2PBP 67urQ0l6nU6IN2bH4z2hjTmfc8XXqhZzGXSi0kGnirOAGhU/TUnnUIKCxnLCkmsT BUQLzt5EyZPWuCoIK6IMgzBOWG/xkodCdVEPo7o5Kfe3sowzUOM58nymfLwsKKQd t8FwtOUxowpdMOZZEe2EbP76pwKfiTQytQPnlkRAC0TwpRjqIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFczDcuNLBlNzny3y084AJHa5wkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvMDM5NDBmNjgtMTVjYy0z N2VhLTlkODEtMmQ1MGJjY2FkY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0 ZDZiY2NjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALd8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5erS3jYZOwMyeKjx/a7ljpQNLem5epv5aMIBj6+F1JhlMJ4vVkWwfh SlXfVxC2ZIn+YrflOjBk9cPdJZ+eYTkx19T5xTE5GnSAJhhYX8fNrGAFeIMJPoxs l+/LbVg6ePxdCp4K61QYXRzOYRzMaUKRy8o5e56Rhc77o0o/gPc106ckW2yuPdOn DBNZCYr7F95UDLhkWEe4acz9ZmMHaHTT8LMYP/4KUijN2/rcG7YnjU2Cd8m0j7Er OGQZhGB1e5QUUUZIoxAI2udaoc2WgeLGqB0/cn7BllRb8UeBgAY6TYge0UpvCV2g ZthkZFa5YvMy9WUZ7yczVE1+duDNGM4= -----END CERTIFICATE-----Generated at Tue Sep 22 08:21:28 2026 by rpki-client