$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa File: 0752d384-9147-3c2d-9b3e-23a76dab9594.roa (raw, json) Hash identifier: pRpfMdSjakLiK2w/XjAjWB+/PUff5vNlOsGeiapBMQ8= Subject key identifier: 97:C3:97:DA:8D:E4:C9:36:B1:10:7D:8D:90:31:B3:BA:22:F4:87:44 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584EED5224A2C17CE5435EEC4940 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 63293 IP address blocks: 157.240.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:24:a2:c1:7c:e5:43:5e:ec:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=9e2cd030-3db6-4d8c-a2db-2ffa6a80c7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ec:1c:e9:09:a3:16:88:b5:bf:16:a9:d1:ee: ed:35:fa:c7:ce:3f:50:ac:0b:08:31:da:ce:21:ff: 87:da:3b:0d:80:02:5d:05:a9:6b:58:9b:f3:74:16: b0:08:ce:7d:40:44:e7:77:bb:b9:76:bb:00:70:d5: b5:0b:c2:3b:8b:54:44:0b:33:91:54:61:0b:4b:9d: a6:40:98:d2:80:33:80:88:0d:0c:3b:34:f1:d2:79: 9b:42:77:48:53:9b:53:64:31:03:66:de:1b:09:d0: 93:97:ee:b9:15:20:7a:94:f3:0a:d8:12:8a:60:0f: 8f:0e:fd:e5:b3:ba:e6:d6:10:91:a4:25:a7:23:99: b4:76:20:63:de:21:05:ad:e3:72:b0:07:39:02:63: b3:ae:97:ad:be:36:0f:cf:74:c9:ed:0f:42:0f:a2: 93:f0:e4:2e:6d:25:7e:06:f4:3a:de:61:a9:a6:8c: 30:fa:fd:b3:48:e5:10:50:1c:c4:87:fe:2b:7c:eb: 77:bb:08:15:f6:6a:b8:ae:70:51:31:7d:69:b6:7f: d0:d7:60:1b:82:3c:bb:c7:48:bd:15:03:b4:8d:e2: fe:55:a2:5f:a5:74:3e:f1:90:8a:52:a3:d7:40:b2: 05:92:53:66:c7:af:5d:84:46:48:89:5e:18:1c:8c: 72:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C3:97:DA:8D:E4:C9:36:B1:10:7D:8D:90:31:B3:BA:22:F4:87:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:0d:68:c6:5e:87:7a:79:77:86:39:a5:50:46:0a:5a:1e:f6: e6:e1:7d:4b:5e:8f:d9:fe:da:fb:41:07:81:84:a8:8c:94:be: 07:14:fc:04:df:e6:69:9c:ff:a5:eb:59:d4:f7:45:1d:87:8d: 20:1f:92:39:01:1f:db:e5:45:e6:9e:eb:a3:d0:fa:53:18:d7: b2:a6:ff:b9:b4:28:3e:d9:6b:dc:68:6f:fb:cf:98:f5:76:b0: eb:d5:c8:86:49:a7:62:c2:48:92:e3:b5:3c:74:32:0c:e0:7f: a2:04:92:f9:64:ed:c1:6b:23:19:52:2a:7e:a2:9f:05:cd:25: 73:c8:95:57:73:6b:91:e1:e4:65:33:45:1f:83:ec:c2:85:0d: c9:00:a3:a2:33:d1:62:b6:1d:c3:c4:ca:b5:8c:e2:da:a9:1e: be:b8:78:1f:75:a4:c6:07:bf:c6:99:5e:02:9a:82:72:91:b0: 56:d1:bb:fc:06:70:19:f8:13:2f:bd:dd:94:f9:b6:5f:b3:55: 7b:69:d9:20:28:cd:d5:41:b3:a3:c4:65:da:d3:9d:da:d7:78: 33:0c:6e:33:86:0d:b7:17:cc:fd:d3:65:b8:af:40:2b:3c:2e: 1c:9e:3c:f2:c4:d2:ef:8c:e9:5a:c9:ee:59:d2:f4:fa:78:54: 5e:ac:9e:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUiSiwXzlQ17sSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk OWUyY2QwMzAtM2RiNi00ZDhjLWEyZGItMmZmYTZhODBjN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuwc6QmjFoi1vxap0e7tNfrHzj9QrAsIMdrO If+H2jsNgAJdBalrWJvzdBawCM59QETnd7u5drsAcNW1C8I7i1RECzORVGELS52m QJjSgDOAiA0MOzTx0nmbQndIU5tTZDEDZt4bCdCTl+65FSB6lPMK2BKKYA+PDv3l s7rm1hCRpCWnI5m0diBj3iEFreNysAc5AmOzrpetvjYPz3TJ7Q9CD6KT8OQubSV+ BvQ63mGppoww+v2zSOUQUBzEh/4rfOt3uwgV9mq4rnBRMX1ptn/Q12Abgjy7x0i9 FQO0jeL+VaJfpXQ+8ZCKUqPXQLIFklNmx69dhEZIiV4YHIxyBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfDl9qN5Mk2sRB9jZAxs7oi9IdEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMDc1MmQzODQtOTE0Ny0z YzJkLTliM2UtMjNhNzZkYWI5NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4NaMZeh3p5d4Y5pVBGCloe9ubhfUtej9n+2vtBB4GEqIyUvgcU/ATf 5mmc/6XrWdT3RR2HjSAfkjkBH9vlReae66PQ+lMY17Km/7m0KD7Za9xob/vPmPV2 sOvVyIZJp2LCSJLjtTx0Mgzgf6IEkvlk7cFrIxlSKn6inwXNJXPIlVdza5Hh5GUz RR+D7MKFDckAo6Iz0WK2HcPEyrWM4tqpHr64eB91pMYHv8aZXgKagnKRsFbRu/wG cBn4Ey+93ZT5tl+zVXtp2SAozdVBs6PEZdrTndrXeDMMbjOGDbcXzP3TZbivQCs8 LhyePPLE0u+M6VrJ7lnS9Pp4VF6sng4= -----END CERTIFICATE-----Generated at Sat Sep 19 12:21:59 2026 by rpki-client