$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b4f50c36-553a-389d-961f-f1bbfb8e5441.roa File: b4f50c36-553a-389d-961f-f1bbfb8e5441.roa (raw, json) Hash identifier: fiRPbQvRqDT545v23Cy6hlifFtk5R/6GZ1k1S1gN2Lo= Subject key identifier: 99:8B:4F:38:9E:01:C6:34:63:E5:77:0A:2C:42:BD:BE:09:4C:F8:D9 Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Certificate serial: 010D0C9F4328584D9E502E91D66E86DC18FA9600 Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b4f50c36-553a-389d-961f-f1bbfb8e5441.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 14960 IP address blocks: 45.60.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2e:91:d6:6e:86:dc:18:fa:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=0f964fd9-dff9-4df0-a743-4afecfde2040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:be:61:8b:8d:94:8c:89:ae:d0:a2:96:4d:47: 52:57:59:25:49:94:f2:37:d1:28:2a:2a:01:e8:bc: 6b:7c:78:f3:99:58:7b:d7:23:b4:ec:8f:17:93:5e: 78:0a:45:12:4e:40:7d:7e:e9:10:ee:d6:68:a2:ea: ef:02:db:05:be:28:66:e1:e2:de:4b:90:0d:9a:2a: 56:57:73:26:52:11:68:1d:6f:f5:9d:80:79:37:f0: 0c:ac:21:cd:b3:40:b8:b7:71:dc:34:f2:6a:e1:f9: 81:79:62:23:36:ac:3c:cf:1a:e0:f3:b5:35:de:22: 2c:2e:5a:3e:4d:63:cd:8b:0c:61:a5:88:b1:2f:37: 13:8e:89:3f:0c:41:05:ec:62:0f:cd:42:0c:41:94: b4:2d:b3:0a:cd:c1:d4:57:29:cc:3b:7a:cf:72:80: bb:c0:9b:d4:06:18:96:ca:f0:0a:96:00:c9:72:a0: 03:af:e3:e4:74:90:29:2a:08:cc:c9:06:6c:c1:82: 2a:74:82:1b:98:d3:03:bc:d9:51:48:60:e7:9d:ed: 02:07:00:a0:ec:1e:6e:11:14:1b:56:72:5a:56:ad: 5d:b1:f4:1d:28:1a:e8:9f:3c:3c:87:60:db:f0:fb: 78:bf:4f:5a:ff:bc:85:63:7f:a3:fd:fa:89:89:f8: d8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8B:4F:38:9E:01:C6:34:63:E5:77:0A:2C:42:BD:BE:09:4C:F8:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b4f50c36-553a-389d-961f-f1bbfb8e5441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl X509v3 Authority Key Identifier: keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer sbgp-ipAddrBlock: critical IPv4: 45.60.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:09:29:32:e5:c9:f7:80:06:6f:15:fc:14:f0:01:d3:fa:9d: 07:0a:ad:ed:4b:9f:9a:cf:3e:5a:23:bc:0b:29:a6:cb:36:8c: 5f:48:b7:27:f9:dc:90:11:8c:bc:47:a0:b0:3f:61:c6:7d:72: 98:de:8d:1d:01:eb:3c:59:7e:32:eb:04:dc:49:c0:42:bb:99: 78:82:cf:99:c5:48:d9:aa:5f:a3:77:47:66:61:f4:65:b7:83: 00:60:fb:f1:1b:14:de:f0:29:0f:0c:21:7f:42:2a:b7:cc:bc: ea:74:16:3f:4c:2b:92:61:5e:8a:37:53:c1:41:6b:6e:81:1e: a7:d6:ee:4c:b7:66:3c:4f:36:53:f6:4d:00:88:79:1b:81:1a: 4d:2c:c3:70:48:55:f8:28:a1:85:36:63:38:65:d8:a4:3a:9f: d0:57:2c:0d:e8:dd:c2:47:96:e7:ae:65:33:23:7c:7c:c5:d1: d4:f4:4f:e2:c9:1c:44:13:7c:12:88:cf:d2:70:38:df:ef:13: e0:c5:2c:91:d0:b3:6b:ea:b3:19:b7:23:80:ea:88:86:d5:59: cb:98:73:a3:c9:33:61:42:a5:4c:31:9d:a3:5f:f0:b5:a6:c6: ba:c2:d7:7b:f5:83:a2:b5:d6:8a:e6:97:cd:42:48:59:a5:43: 35:bd:af:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUC6R1m6G3Bj6lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj Yzc4MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MGY5NjRmZDktZGZmOS00ZGYwLWE3NDMtNGFmZWNmZGUyMDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb5hi42UjImu0KKWTUdSV1klSZTyN9EoKioB 6LxrfHjzmVh71yO07I8Xk154CkUSTkB9fukQ7tZoourvAtsFvihm4eLeS5ANmipW V3MmUhFoHW/1nYB5N/AMrCHNs0C4t3HcNPJq4fmBeWIjNqw8zxrg87U13iIsLlo+ TWPNiwxhpYixLzcTjok/DEEF7GIPzUIMQZS0LbMKzcHUVynMO3rPcoC7wJvUBhiW yvAKlgDJcqADr+PkdJApKgjMyQZswYIqdIIbmNMDvNlRSGDnne0CBwCg7B5uERQb VnJaVq1dsfQdKBronzw8h2Db8Pt4v09a/7yFY3+j/fqJifjY1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmLTzieAcY0Y+V3CixCvb4JTPjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvYjRmNTBjMzYtNTUzYS0z ODlkLTk2MWYtZjFiYmZiOGU1NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0 ZDZiY2NjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTzaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYJKTLlyfeABm8V/BTwAdP6nQcKre1Ln5rPPlojvAsppss2jF9Ityf5 3JARjLxHoLA/YcZ9cpjejR0B6zxZfjLrBNxJwEK7mXiCz5nFSNmqX6N3R2Zh9GW3 gwBg+/EbFN7wKQ8MIX9CKrfMvOp0Fj9MK5JhXoo3U8FBa26BHqfW7ky3ZjxPNlP2 TQCIeRuBGk0sw3BIVfgooYU2Yzhl2KQ6n9BXLA3o3cJHlueuZTMjfHzF0dT0T+LJ HEQTfBKIz9JwON/vE+DFLJHQs2vqsxm3I4DqiIbVWcuYc6PJM2FCpUwxnaNf8LWm xrrC13v1g6K11orml81CSFmlQzW9r9o= -----END CERTIFICATE-----Generated at Wed May 13 14:46:20 2026 by rpki-client