$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/919f581d-ddca-342e-9dfc-c7d8d062f32c.roa File: 919f581d-ddca-342e-9dfc-c7d8d062f32c.roa (raw, json) Hash identifier: +Uf2oP2cjAXMXJV6mNZh2HdVgi1vvtq+APT1wrgiVWU= Subject key identifier: 37:43:BD:20:DE:A2:9B:03:E8:6A:7D:34:EB:FA:CE:80:94:45:9A:64 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584F89A849598CE9AF80D74C78C0 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/919f581d-ddca-342e-9dfc-c7d8d062f32c.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 63293 IP address blocks: 157.240.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:49:59:8c:e9:af:80:d7:4c:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=3eb82746-5455-4654-888c-f88821f6f204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4e:2b:d7:5a:b3:2c:3c:42:90:23:96:48:5a: b6:b3:d3:14:cb:24:0d:85:37:74:97:9b:fe:da:f0: cd:a9:b3:8b:5a:32:1a:3a:e8:da:38:c0:56:b0:36: 4b:5d:d5:8f:2a:8d:b3:2a:18:2e:64:ca:84:3b:1b: f3:d2:5d:f2:c1:b5:40:d5:93:0f:49:d3:fa:1c:74: c1:3e:69:c3:7f:be:2d:ff:d0:04:39:c5:11:ac:0b: 40:69:4d:86:34:d3:a6:b3:15:dd:ae:26:74:b5:41: c3:9d:99:99:be:f4:f5:a0:da:1b:ca:17:e2:e2:e0: 77:12:ae:c4:13:a8:f3:14:85:77:43:05:5e:fb:02: 19:f9:b8:05:51:4c:53:de:fe:68:7b:08:18:fa:bf: ef:5e:20:b5:ff:9d:46:1a:61:55:55:7c:a3:3a:16: d9:46:43:87:de:9f:97:08:03:09:31:66:32:8c:72: a8:7f:d4:0d:eb:f0:de:34:78:8c:ef:89:10:7d:12: f1:93:0c:b8:da:fa:b4:ad:1b:0d:3d:d5:78:02:c1: e5:d9:cd:fd:0e:37:44:22:49:55:72:d2:59:05:ac: 92:5b:3b:1e:32:6c:73:7e:3a:42:77:32:d1:80:b5: 4a:ec:f1:9a:fa:f9:f3:71:4b:52:6b:4c:5c:6a:34: ff:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:43:BD:20:DE:A2:9B:03:E8:6A:7D:34:EB:FA:CE:80:94:45:9A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/919f581d-ddca-342e-9dfc-c7d8d062f32c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f4:86:f1:d5:ed:cf:01:66:5f:23:84:b0:29:95:07:eb:47: 99:e0:b0:f4:62:85:b9:52:6a:df:7c:40:3d:dd:39:d5:6f:de: 04:d5:f6:3d:b2:08:84:81:90:e6:56:27:a2:ee:0d:24:ef:58: 33:04:c0:fc:dc:65:3f:6f:43:2d:eb:8f:c2:95:3b:b2:b2:e7: fb:f1:93:39:92:06:23:ee:8a:91:e4:49:98:e1:57:4d:6d:30: 97:57:cb:eb:d6:c5:f3:8d:be:8c:43:12:13:96:c8:82:69:b1: b4:2d:45:ff:0b:24:b6:cc:20:a6:c0:25:f7:b3:2c:23:c2:7e: ed:17:71:51:e2:7d:7a:63:1c:a0:dd:2c:26:49:b8:ea:ae:cc: bd:5d:56:f0:b3:83:84:1e:b8:30:ae:d0:b5:df:35:f5:1d:6c: 50:14:8f:56:68:dd:cf:cd:6d:00:9b:e8:6e:0d:f5:8a:83:8d: d6:cb:4e:6f:64:f6:89:0d:6c:2f:28:a4:18:b5:e4:a8:22:d8: dc:e5:47:8c:d3:57:80:4e:f3:3f:f6:27:7e:3c:b3:08:3b:8e: a2:36:e9:58:95:08:31:04:de:1a:98:69:3d:07:47:42:21:1f: 84:bf:b1:66:5b:e3:11:6f:27:36:83:17:df:33:76:7c:e6:19: 0f:6c:ba:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqElZjOmvgNdMeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk M2ViODI3NDYtNTQ1NS00NjU0LTg4OGMtZjg4ODIxZjZmMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU4r11qzLDxCkCOWSFq2s9MUyyQNhTd0l5v+ 2vDNqbOLWjIaOujaOMBWsDZLXdWPKo2zKhguZMqEOxvz0l3ywbVA1ZMPSdP6HHTB PmnDf74t/9AEOcURrAtAaU2GNNOmsxXdriZ0tUHDnZmZvvT1oNobyhfi4uB3Eq7E E6jzFIV3QwVe+wIZ+bgFUUxT3v5oewgY+r/vXiC1/51GGmFVVXyjOhbZRkOH3p+X CAMJMWYyjHKof9QN6/DeNHiM74kQfRLxkwy42vq0rRsNPdV4AsHl2c39DjdEIklV ctJZBaySWzseMmxzfjpCdzLRgLVK7PGa+vnzcUtSa0xcajT/CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdDvSDeopsD6Gp9NOv6zoCURZpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvOTE5ZjU4MWQtZGRjYS0z NDJlLTlkZmMtYzdkOGQwNjJmMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC70hvHV7c8BZl8jhLAplQfrR5ngsPRihblSat98QD3dOdVv3gTV9j2y CISBkOZWJ6LuDSTvWDMEwPzcZT9vQy3rj8KVO7Ky5/vxkzmSBiPuipHkSZjhV01t MJdXy+vWxfONvoxDEhOWyIJpsbQtRf8LJLbMIKbAJfezLCPCfu0XcVHifXpjHKDd LCZJuOquzL1dVvCzg4QeuDCu0LXfNfUdbFAUj1Zo3c/NbQCb6G4N9YqDjdbLTm9k 9okNbC8opBi15Kgi2NzlR4zTV4BO8z/2J348swg7jqI26ViVCDEE3hqYaT0HR0Ih H4S/sWZb4xFvJzaDF98zdnzmGQ9suok= -----END CERTIFICATE-----Generated at Wed Nov 4 17:47:30 2026 by rpki-client