$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/dd71a052-0292-3c0f-9bd6-254406f51f76.roa File: dd71a052-0292-3c0f-9bd6-254406f51f76.roa (raw, json) Hash identifier: 5asqSp0MyEKb9yZji+/2soFF35EYMnlcMUedyMbRt8Y= Subject key identifier: 60:34:B2:D8:27:11:9E:3C:6B:2D:21:24:02:E5:3E:BF:8B:9A:69:33 Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Certificate serial: 010D0C9F4328584E7E94DBCD3B32DDEE282AE980 Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/dd71a052-0292-3c0f-9bd6-254406f51f76.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 14960 IP address blocks: 107.154.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:db:cd:3b:32:dd:ee:28:2a:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=000a1e6f-04eb-48ef-be41-fed62cbf4f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:23:53:be:a1:78:92:d9:15:5e:5f:9f:ee: 87:7b:b2:d8:b3:73:92:c4:5f:02:af:3e:34:f5:a8: b8:b6:b7:c3:b7:86:a0:24:a3:d4:28:03:2c:82:f5: 11:99:8f:d1:2f:09:fc:da:8c:52:72:8b:9b:e7:ee: 17:1c:d0:57:91:b8:57:f0:db:ec:1f:01:a7:1a:5a: 9f:9d:58:a8:42:6f:cf:49:e1:e5:1f:42:6d:d1:ca: 8b:35:d0:7f:6b:f1:19:4c:d3:b2:eb:2d:fc:11:09: 88:d4:c9:48:61:f8:99:57:5c:d5:58:aa:39:f0:21: 27:85:a1:90:e1:62:86:43:40:ec:9f:00:44:79:b9: fd:57:4e:33:ed:e3:b7:3c:b7:dc:ba:27:ce:d9:d0: 40:c3:ba:d7:fc:6b:3c:13:0d:ea:be:90:fb:d3:95: 26:c8:81:2b:0e:5c:a5:b8:2c:14:7c:f4:a8:c5:45: ec:8c:c5:36:20:20:08:50:50:2d:0c:6b:f0:b1:3b: 2c:8c:a9:90:0a:25:27:b1:71:06:f9:8d:42:4f:61: 82:6f:6d:0c:41:53:97:c6:e9:95:bb:98:b1:e7:de: 19:84:d9:bd:ed:64:04:1b:bf:cf:40:47:21:9e:d3: 00:40:15:c4:2d:15:18:bd:8a:bf:d4:2e:8b:54:73: 61:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:34:B2:D8:27:11:9E:3C:6B:2D:21:24:02:E5:3E:BF:8B:9A:69:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/dd71a052-0292-3c0f-9bd6-254406f51f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl X509v3 Authority Key Identifier: keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer sbgp-ipAddrBlock: critical IPv4: 107.154.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:80:bb:1c:31:00:8b:b6:eb:ce:e7:9c:42:a2:e7:54:43:37: 6c:ec:25:01:d5:f9:0b:02:29:34:3d:69:e1:d8:ad:b7:ee:27: c6:ac:56:c3:25:0d:59:4b:11:07:02:a9:b3:15:4b:a0:ba:2c: 15:31:54:77:81:bc:c1:25:ef:72:6d:26:bf:3c:cd:af:ce:9f: d1:7e:5e:a7:0a:55:27:ba:68:a5:f1:4e:0c:99:6e:31:98:92: d0:14:36:9c:43:9c:66:19:3e:5e:5e:c9:4e:d7:69:8e:d0:99: 3e:a4:34:f6:79:53:54:29:88:9b:bb:16:9c:96:45:53:22:19: 91:bd:50:aa:09:a9:10:76:ef:62:5c:b8:68:c3:70:0d:d0:dd: 63:14:35:67:a2:1b:83:1a:e2:1e:8f:34:5f:05:72:99:ba:a6: ec:01:98:7e:56:58:18:f0:62:ac:e5:3f:0b:e4:2f:38:e8:c9: 64:81:71:ac:7f:f5:db:4f:4b:72:d7:f2:44:f7:d4:bb:0b:c3: 17:14:12:0f:93:86:83:9d:0b:1d:68:04:b5:21:c6:17:8a:d7: 46:1a:31:f3:30:c7:e1:3e:4b:b7:40:04:59:05:1c:60:d2:32: 58:07:d2:ca:e7:16:fb:24:5f:68:95:ac:df:a6:b5:99:f6:ec: d2:93:3e:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNvNOzLd7igq6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj Yzc4MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MDAwYTFlNmYtMDRlYi00OGVmLWJlNDEtZmVkNjJjYmY0ZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAQjU76heJLZFV5fn+6He7LYs3OSxF8Crz40 9ai4trfDt4agJKPUKAMsgvURmY/RLwn82oxScoub5+4XHNBXkbhX8NvsHwGnGlqf nVioQm/PSeHlH0Jt0cqLNdB/a/EZTNOy6y38EQmI1MlIYfiZV1zVWKo58CEnhaGQ 4WKGQ0DsnwBEebn9V04z7eO3PLfcuifO2dBAw7rX/Gs8Ew3qvpD705UmyIErDlyl uCwUfPSoxUXsjMU2ICAIUFAtDGvwsTssjKmQCiUnsXEG+Y1CT2GCb20MQVOXxumV u5ix594ZhNm97WQEG7/PQEchntMAQBXELRUYvYq/1C6LVHNhYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGA0stgnEZ48ay0hJALlPr+LmmkzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvZGQ3MWEwNTItMDI5Mi0z YzBmLTliZDYtMjU0NDA2ZjUxZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0 ZDZiY2NjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5o6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCAuxwxAIu2687nnEKi51RDN2zsJQHV+QsCKTQ9aeHYrbfuJ8asVsMl DVlLEQcCqbMVS6C6LBUxVHeBvMEl73JtJr88za/On9F+XqcKVSe6aKXxTgyZbjGY ktAUNpxDnGYZPl5eyU7XaY7QmT6kNPZ5U1QpiJu7FpyWRVMiGZG9UKoJqRB272Jc uGjDcA3Q3WMUNWeiG4Ma4h6PNF8Fcpm6puwBmH5WWBjwYqzlPwvkLzjoyWSBcax/ 9dtPS3LX8kT31LsLwxcUEg+ThoOdCx1oBLUhxheK10YaMfMwx+E+S7dABFkFHGDS MlgH0srnFvskX2iVrN+mtZn27NKTPnM= -----END CERTIFICATE-----Generated at Fri Jul 24 14:42:04 2026 by rpki-client