$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/a99c8d7e-6698-3e76-842c-4f32a162a3bf.roa File: a99c8d7e-6698-3e76-842c-4f32a162a3bf.roa (raw, json) Hash identifier: kIfITJwv9HWR0tkg6fsxY7eXvEwNkLZ8gWe6sFDZRt4= Subject key identifier: 9A:5F:E5:D3:C8:44:09:82:96:24:32:71:64:E3:46:86:72:8A:D0:04 Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Certificate serial: 010D0C9F4328584F20F7A29B34273D4091F29540 Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/a99c8d7e-6698-3e76-842c-4f32a162a3bf.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 14960 IP address blocks: 45.60.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a2:9b:34:27:3d:40:91:f2:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=a199ea12-a053-4fca-a513-36058421f684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:87:7c:64:a0:fc:c0:4a:37:fe:f7:db:94:74: 41:db:2e:49:b6:3b:22:82:cd:53:ed:23:10:29:42: 16:5e:c3:e7:4c:18:ae:94:27:2e:69:84:fa:cb:de: 09:49:ed:a9:1b:c8:1e:be:a3:92:1b:d7:12:e6:04: 47:f5:5b:59:b0:40:44:07:83:a4:31:ca:1d:24:9d: eb:f9:d8:53:63:ee:cc:45:d9:4c:40:d0:b0:3f:c1: 7e:4f:fb:80:68:cb:6d:ee:4c:c6:db:c0:9c:c7:28: ac:f9:0d:95:39:58:b1:a1:52:9b:8d:51:40:d6:e8: da:fd:fc:d6:88:4e:c3:9b:a9:56:75:d3:96:9b:6e: 0d:84:05:70:fb:75:90:25:59:25:16:ff:62:d3:c3: 0c:16:5b:db:b8:2f:9a:5d:4d:9c:29:95:89:30:07: cc:2f:db:9a:07:3b:3e:d1:8d:32:9e:3c:f0:bf:48: 7d:aa:33:81:f5:ca:8c:43:10:23:0b:87:f2:96:e8: 96:c4:ed:2e:e0:c2:63:f8:50:2d:a7:f7:28:30:5b: aa:92:8b:d2:56:c0:16:e3:6a:6c:0d:68:0d:63:24: 62:ea:9f:88:6e:27:bf:a5:b8:37:e0:42:45:12:1e: 3f:e7:5b:b3:e2:73:34:25:0e:91:b3:a4:16:8c:58: 83:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5F:E5:D3:C8:44:09:82:96:24:32:71:64:E3:46:86:72:8A:D0:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/a99c8d7e-6698-3e76-842c-4f32a162a3bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl X509v3 Authority Key Identifier: keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer sbgp-ipAddrBlock: critical IPv4: 45.60.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f3:ec:f3:23:c8:54:75:24:67:df:2d:86:96:81:04:27:58: c0:84:f8:12:c3:bd:f0:58:4d:2b:d8:80:82:6d:37:0a:11:24: 2f:1f:34:70:94:9c:23:d8:9b:7c:d5:77:0f:7a:a0:19:85:93: 8c:96:e9:91:53:84:ff:6f:71:68:7a:48:9a:55:8f:85:37:e2: 75:48:b0:db:ba:f0:59:de:fd:43:29:0a:11:19:e1:d6:d4:1d: 61:b4:ff:37:15:4c:9f:12:42:9b:9f:18:11:92:04:a6:10:2e: f4:c2:15:1c:8a:a5:71:86:4f:05:9e:f6:e2:a4:0c:bc:54:17: 9e:4f:8b:cd:94:ac:aa:4f:25:87:9c:67:8a:ed:2d:74:01:d4: 94:6c:50:85:d5:69:fa:a0:2c:5a:e9:eb:76:32:79:fd:d9:da: f8:0d:2a:84:f6:97:09:e2:d2:ae:f5:39:80:6b:7a:10:40:af: ea:bf:0f:09:5f:50:4c:be:e8:71:89:2e:ff:d1:74:e6:a3:32: ee:98:24:af:92:d5:a3:27:2b:7c:c1:da:c3:58:45:b9:f8:07: ef:6c:61:a2:e4:da:18:73:5f:51:94:bc:e5:37:76:32:5a:62: b6:b8:00:8d:85:4a:b9:10:95:ef:0e:5d:e2:dc:aa:80:f4:a6: bc:06:31:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96KbNCc9QJHylUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj Yzc4MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YTE5OWVhMTItYTA1My00ZmNhLWE1MTMtMzYwNTg0MjFmNjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoId8ZKD8wEo3/vfblHRB2y5Jtjsigs1T7SMQ KUIWXsPnTBiulCcuaYT6y94JSe2pG8gevqOSG9cS5gRH9VtZsEBEB4OkMcodJJ3r +dhTY+7MRdlMQNCwP8F+T/uAaMtt7kzG28Ccxyis+Q2VOVixoVKbjVFA1uja/fzW iE7Dm6lWddOWm24NhAVw+3WQJVklFv9i08MMFlvbuC+aXU2cKZWJMAfML9uaBzs+ 0Y0ynjzwv0h9qjOB9cqMQxAjC4fyluiWxO0u4MJj+FAtp/coMFuqkovSVsAW42ps DWgNYyRi6p+Ibie/pbg34EJFEh4/51uz4nM0JQ6Rs6QWjFiDXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpf5dPIRAmCliQycWTjRoZyitAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvYTk5YzhkN2UtNjY5OC0z ZTc2LTg0MmMtNGYzMmExNjJhM2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0 ZDZiY2NjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTzbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/z7PMjyFR1JGffLYaWgQQnWMCE+BLDvfBYTSvYgIJtNwoRJC8fNHCU nCPYm3zVdw96oBmFk4yW6ZFThP9vcWh6SJpVj4U34nVIsNu68Fne/UMpChEZ4dbU HWG0/zcVTJ8SQpufGBGSBKYQLvTCFRyKpXGGTwWe9uKkDLxUF55Pi82UrKpPJYec Z4rtLXQB1JRsUIXVafqgLFrp63Yyef3Z2vgNKoT2lwni0q71OYBrehBAr+q/Dwlf UEy+6HGJLv/RdOajMu6YJK+S1aMnK3zB2sNYRbn4B+9sYaLk2hhzX1GUvOU3djJa Yra4AI2FSrkQle8OXeLcqoD0prwGMek= -----END CERTIFICATE-----Generated at Tue Sep 22 11:09:00 2026 by rpki-client