$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa File: 0752d384-9147-3c2d-9b3e-23a76dab9594.roa (raw, json) Hash identifier: d/X9m+yG2DWGc+PXSqaq4qyA/gN9yPRdnf8E23TE/iM= Subject key identifier: 25:74:F3:AA:2E:E4:A8:6D:BF:21:CD:8B:D4:A8:18:9A:E6:B5:8D:F8 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584BAA97A9982DDBB6712C854700 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 63293 IP address blocks: 157.240.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a9:98:2d:db:b6:71:2c:85:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=73bf4733-d337-427a-a613-7aa77fe3f8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:df:86:38:9d:c9:79:ba:59:81:60:2f:01: 9e:db:41:12:17:b3:9b:3b:45:bc:74:e3:4d:56:f5: ca:7e:a9:15:f4:93:34:34:01:44:5c:cd:80:7a:4c: 8b:e5:a5:ac:18:0f:8b:72:05:04:e6:18:3a:88:04: fc:02:af:db:06:57:c2:f5:71:5c:a8:0e:54:36:ff: e7:85:b7:f6:ab:e6:dc:5e:fa:2d:7f:15:0d:a9:a1: 8b:f9:7b:b4:14:e7:b3:52:5e:11:dc:92:a6:9a:a6: e2:65:0f:e0:7f:34:b8:0c:c8:fb:7c:8e:ed:b4:99: 9f:af:55:a8:69:af:dc:d5:19:63:b2:29:fd:80:fb: f3:9d:e9:33:ff:55:6e:30:90:61:ee:2a:13:a6:49: 32:76:e2:15:bc:5a:8f:be:2d:c1:38:f9:37:00:0d: 85:be:ef:bb:af:14:4f:9c:2f:c4:7a:f4:68:f6:bd: aa:e4:a8:f5:39:c1:aa:5e:34:12:bf:00:bf:42:ad: 35:04:f3:20:c6:fa:5c:5f:7c:9c:ed:5a:24:ad:0f: 56:a8:4b:17:38:bc:50:11:82:a4:77:d0:7b:9d:23: 1e:e4:fc:42:2f:29:9f:12:2a:8c:21:a6:de:bf:38: 73:27:aa:7b:58:30:89:2d:c9:db:85:7a:c9:ec:9c: 07:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:74:F3:AA:2E:E4:A8:6D:BF:21:CD:8B:D4:A8:18:9A:E6:B5:8D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:df:75:d2:20:5b:01:28:66:a3:8d:3a:fb:df:e7:d2:1c:e6: 82:4a:a1:78:13:dc:f0:0b:ac:fc:f1:c6:6a:c4:77:23:33:0c: 56:9c:c6:c2:a4:7a:24:e2:49:69:27:f3:34:57:7b:6a:a8:ee: 2c:7b:04:fd:a4:6d:e3:50:b9:eb:da:b7:3d:dd:df:93:23:8e: 9a:ca:bf:4e:d1:2b:4d:44:f7:cf:56:f9:14:e4:32:4b:09:a9: 0c:a1:19:98:3f:bc:80:ac:67:de:bf:03:f6:5d:b5:2b:71:d0: 28:26:90:5f:b1:68:3f:6b:df:a6:59:d8:f5:3e:0f:fa:72:25: e3:b6:9b:c7:6c:a2:1c:5c:71:8d:e9:d2:7c:45:5a:f8:7f:86: 79:e0:58:26:66:ff:99:8b:9d:ce:0d:02:fe:1f:1d:79:37:33: 29:0e:e1:ed:bf:87:14:2a:9a:12:2d:2d:e3:8c:08:e2:6a:55: 34:07:cb:08:95:d2:81:19:a4:da:8f:9e:16:08:4c:29:83:0e: fd:7e:f8:e3:eb:38:99:4d:48:bc:43:9d:40:13:15:79:e0:bf: ae:32:10:a1:88:d7:e6:37:e2:50:f1:b8:81:1d:da:0b:f8:0c: 3d:af:de:03:b1:59:bc:73:68:6b:90:ef:dd:5a:46:2a:25:8c: 5e:09:65:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6mYLdu2cSyFRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NzNiZjQ3MzMtZDMzNy00MjdhLWE2MTMtN2FhNzdmZTNmOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyrfhjidyXm6WYFgLwGe20ESF7ObO0W8dONN VvXKfqkV9JM0NAFEXM2AekyL5aWsGA+LcgUE5hg6iAT8Aq/bBlfC9XFcqA5UNv/n hbf2q+bcXvotfxUNqaGL+Xu0FOezUl4R3JKmmqbiZQ/gfzS4DMj7fI7ttJmfr1Wo aa/c1Rljsin9gPvznekz/1VuMJBh7ioTpkkyduIVvFqPvi3BOPk3AA2Fvu+7rxRP nC/EevRo9r2q5Kj1OcGqXjQSvwC/Qq01BPMgxvpcX3yc7VokrQ9WqEsXOLxQEYKk d9B7nSMe5PxCLymfEiqMIabevzhzJ6p7WDCJLcnbhXrJ7JwHlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV086ou5KhtvyHNi9SoGJrmtY34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMDc1MmQzODQtOTE0Ny0z YzJkLTliM2UtMjNhNzZkYWI5NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPfddIgWwEoZqONOvvf59Ic5oJKoXgT3PALrPzxxmrEdyMzDFacxsKk eiTiSWkn8zRXe2qo7ix7BP2kbeNQuevatz3d35MjjprKv07RK01E989W+RTkMksJ qQyhGZg/vICsZ96/A/ZdtStx0CgmkF+xaD9r36ZZ2PU+D/pyJeO2m8dsohxccY3p 0nxFWvh/hnngWCZm/5mLnc4NAv4fHXk3MykO4e2/hxQqmhItLeOMCOJqVTQHywiV 0oEZpNqPnhYITCmDDv1++OPrOJlNSLxDnUATFXngv64yEKGI1+Y34lDxuIEd2gv4 DD2v3gOxWbxzaGuQ791aRioljF4JZWk= -----END CERTIFICATE-----Generated at Wed Oct 29 17:01:07 2025 by rpki-client