$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa File: 131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa (raw, json) Hash identifier: VzrJfk/avw5MPTyNS1TzZWSDl3qlThdDRHKd1PXP5ac= Subject key identifier: 66:0E:63:8F:D3:C4:63:BF:1E:40:67:A2:E5:13:3C:01:FE:02:94:D5 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584DAAE04BF2A70C9FB55580ED00 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 63293 IP address blocks: 157.240.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:4b:f2:a7:0c:9f:b5:55:80:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=fb6aa033-34ce-49d6-9e84-fece40a2014f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a1:67:03:be:d4:44:93:98:4f:fd:29:d2:21: 92:73:e7:9d:a6:5e:e8:07:d5:54:3f:0b:29:b5:f6: 6b:73:b5:0a:85:8f:80:12:22:f4:b2:1b:bd:6c:20: 01:3c:ac:59:ed:4a:16:8a:c6:81:b0:c8:bc:b7:42: e6:32:3c:09:aa:89:ef:80:2d:33:b7:f4:59:b2:ce: 02:02:1f:f6:48:f8:05:07:2b:d3:3c:26:c5:e1:a2: 40:32:8d:f2:65:67:6e:3f:1a:0b:64:bc:df:39:25: f9:46:0f:fc:df:2a:87:b7:2a:68:f1:2b:ee:f5:35: b7:93:46:57:3d:d5:e0:a2:20:66:61:46:4d:15:22: 1a:1a:4f:05:fe:e1:dd:06:cb:6f:34:67:70:ed:14: 6b:42:01:b7:6b:72:3e:ed:85:30:a1:53:a8:7b:ee: 2f:cf:3e:aa:ad:76:33:68:e1:ac:aa:a6:e7:d8:8c: 8e:11:10:76:cd:8b:99:12:35:b7:dd:7a:fb:ac:08: 41:40:59:ed:bb:a0:27:72:93:51:59:40:7b:2f:2b: 4d:f4:21:cc:f2:c9:f7:09:c4:e6:b7:6d:d5:fb:18: 48:93:b4:99:60:f2:9f:fc:db:88:c7:01:75:99:65: a0:5a:5e:18:32:90:48:1d:2e:c8:a9:cc:77:c5:38: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0E:63:8F:D3:C4:63:BF:1E:40:67:A2:E5:13:3C:01:FE:02:94:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2e:d8:52:47:53:00:5b:e0:be:8c:d9:c9:a1:db:f4:1c:bf: 10:1a:05:bb:0a:d2:28:d8:93:36:36:ce:f6:39:dd:67:41:49: fb:7c:9a:d8:12:4a:b5:d0:6f:06:09:1b:23:e8:b3:cf:9b:5d: 00:b0:9d:7b:9c:3d:73:5d:b4:2e:80:6e:29:46:3a:11:7b:66: 9e:d7:14:b9:4b:e8:20:f8:05:8a:35:00:33:0e:71:5c:6d:38: f3:1b:02:6c:56:c1:4b:77:d9:c2:d6:fd:b9:49:23:35:44:b7: 15:6f:62:a7:8e:d6:8a:7a:4a:52:f8:fa:50:65:96:0b:93:27: a9:6b:f4:76:9c:50:95:0f:0d:16:33:cb:79:12:6c:f2:6e:cf: cc:53:91:e7:61:45:32:a7:47:87:98:1c:24:4d:8b:dd:b5:2f: b0:a4:45:17:e6:65:e9:5b:b9:01:27:21:76:00:8f:83:55:d8: 1b:bd:89:ff:8e:be:02:0f:3a:49:ce:4c:cd:38:2f:69:dd:bd: d5:59:6e:82:46:34:50:81:ae:d8:18:00:47:3f:c6:44:92:18: bd:9d:7f:9d:dd:c9:74:1b:8f:b2:23:a3:9f:13:87:dd:ee:71: 52:49:95:d5:fa:5e:43:d3:24:2c:7f:c6:ea:b4:d7:74:10:7f: 1e:6b:66:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4EvypwyftVWA7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk ZmI2YWEwMzMtMzRjZS00OWQ2LTllODQtZmVjZTQwYTIwMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaFnA77URJOYT/0p0iGSc+edpl7oB9VUPwsp tfZrc7UKhY+AEiL0shu9bCABPKxZ7UoWisaBsMi8t0LmMjwJqonvgC0zt/RZss4C Ah/2SPgFByvTPCbF4aJAMo3yZWduPxoLZLzfOSX5Rg/83yqHtypo8Svu9TW3k0ZX PdXgoiBmYUZNFSIaGk8F/uHdBstvNGdw7RRrQgG3a3I+7YUwoVOoe+4vzz6qrXYz aOGsqqbn2IyOERB2zYuZEjW33Xr7rAhBQFntu6AncpNRWUB7LytN9CHM8sn3CcTm t23V+xhIk7SZYPKf/NuIxwF1mWWgWl4YMpBIHS7Iqcx3xTgpkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYOY4/TxGO/HkBnouUTPAH+ApTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMTMxYzJjMjAtNmZjNy0z ZWU0LWFjYmYtZGI5NDJmZDFkOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8u2FJHUwBb4L6M2cmh2/QcvxAaBbsK0ijYkzY2zvY53WdBSft8mtgS SrXQbwYJGyPos8+bXQCwnXucPXNdtC6AbilGOhF7Zp7XFLlL6CD4BYo1ADMOcVxt OPMbAmxWwUt32cLW/blJIzVEtxVvYqeO1op6SlL4+lBllguTJ6lr9HacUJUPDRYz y3kSbPJuz8xTkedhRTKnR4eYHCRNi921L7CkRRfmZelbuQEnIXYAj4NV2Bu9if+O vgIPOknOTM04L2ndvdVZboJGNFCBrtgYAEc/xkSSGL2df53dyXQbj7Ijo58Th93u cVJJldX6XkPTJCx/xuq013QQfx5rZlg= -----END CERTIFICATE-----Generated at Wed May 6 01:16:01 2026 by rpki-client