$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa File: 131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa (raw, json) Hash identifier: kg+CXfJuuQ6QUS7K9QSv9GyX3y0ikKVqwA15QnSseeQ= Subject key identifier: E5:D0:3B:E3:34:15:87:58:6D:2F:15:27:86:35:3C:42:B2:04:9F:35 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584B0A118E6F3C7786A3952BBFC0 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 63293 IP address blocks: 157.240.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:8e:6f:3c:77:86:a3:95:2b:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=ddfdce81-539a-4aaf-8648-7a549d0ab9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9e:d1:0f:bd:e1:6f:b3:45:fe:e4:5e:dc:28: 53:32:39:8b:e4:fb:0b:83:4a:fb:5d:46:0e:8f:99: 88:69:28:57:b3:b2:d8:54:19:55:8e:35:94:16:f0: 60:9e:92:3c:23:26:06:8f:77:13:a7:d4:c5:2d:c5: d0:9e:6b:cc:e6:74:9a:cc:59:9d:6c:9e:b2:01:de: 2c:b0:2c:03:e9:e9:f8:9d:1d:fb:78:46:31:5a:d2: 91:d7:a6:9d:38:0e:3c:a1:6e:60:f4:98:81:5f:a5: b8:49:cf:e1:d5:9b:bb:be:4f:21:1f:2f:ea:5b:f4: 60:86:b0:be:f8:f0:55:3c:f4:ac:12:67:75:fc:9a: be:a9:eb:f6:3b:ae:d7:3a:63:6b:37:a1:5f:95:70: c5:29:81:a0:7a:d6:c3:ce:df:1f:58:1f:e5:4e:a0: 61:b7:f9:28:10:14:26:9a:df:b0:53:c8:fe:78:49: 03:95:10:c6:54:26:a9:d6:3b:b5:21:60:97:25:2c: c6:86:30:9b:49:0c:dd:59:e9:2a:b6:86:88:c7:60: 91:68:1f:1f:62:6d:10:04:c7:e9:c1:1f:f0:df:a8: ba:dd:39:0a:5d:ab:ad:62:29:92:a6:e4:77:63:5d: 8b:c7:0b:f2:c2:a6:09:82:19:af:c3:3a:e7:9b:ee: 1d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D0:3B:E3:34:15:87:58:6D:2F:15:27:86:35:3C:42:B2:04:9F:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d8:24:7e:e4:6b:e1:d7:68:2e:7e:12:20:e4:2b:da:45:22: fd:2d:ea:2e:56:5b:da:b7:5f:10:1f:94:1d:d7:cd:c6:1f:6b: 20:b2:cf:c0:99:7a:78:23:63:2b:ec:2e:04:09:77:9d:07:bd: c8:6a:e4:2a:13:c8:15:3a:cd:21:ed:4d:ab:eb:fe:a9:1f:b3: 70:c5:98:73:d5:f5:35:44:b1:8f:da:5e:16:02:1a:32:83:11: 84:71:70:74:55:2e:ca:1a:5f:37:ec:cc:5c:14:2b:23:a2:73: 82:17:fa:34:28:11:14:bf:da:ea:50:8e:b6:ee:61:e0:f0:9e: 2f:e4:ad:94:11:fc:95:0a:61:a8:8b:bf:5b:c1:89:bf:13:ee: fb:0d:f2:1e:cb:c7:20:02:e8:7c:06:c2:41:0b:63:46:be:35: 39:c4:48:b1:71:07:17:18:d3:34:db:04:3d:47:22:c0:45:85: 05:dc:c0:7f:44:63:96:2c:85:e9:90:4e:5c:29:4e:14:df:9d: 44:be:c4:50:3c:4c:00:69:e4:0e:6a:29:69:af:54:97:c1:e0: a5:42:a3:00:57:3e:e0:e2:96:ff:a1:e0:64:f1:52:05:e7:1c: d7:20:0e:a6:c6:71:75:09:52:0b:b7:55:da:15:5c:27:9f:a9: 16:d7:a8:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEY5vPHeGo5Urv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ZGRmZGNlODEtNTM5YS00YWFmLTg2NDgtN2E1NDlkMGFiOWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA057RD73hb7NF/uRe3ChTMjmL5PsLg0r7XUYO j5mIaShXs7LYVBlVjjWUFvBgnpI8IyYGj3cTp9TFLcXQnmvM5nSazFmdbJ6yAd4s sCwD6en4nR37eEYxWtKR16adOA48oW5g9JiBX6W4Sc/h1Zu7vk8hHy/qW/RghrC+ +PBVPPSsEmd1/Jq+qev2O67XOmNrN6FflXDFKYGgetbDzt8fWB/lTqBht/koEBQm mt+wU8j+eEkDlRDGVCap1ju1IWCXJSzGhjCbSQzdWekqtoaIx2CRaB8fYm0QBMfp wR/w36i63TkKXautYimSpuR3Y12LxwvywqYJghmvwzrnm+4dMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXQO+M0FYdYbS8VJ4Y1PEKyBJ81MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMTMxYzJjMjAtNmZjNy0z ZWU0LWFjYmYtZGI5NDJmZDFkOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInYJH7ka+HXaC5+EiDkK9pFIv0t6i5WW9q3XxAflB3XzcYfayCyz8CZ engjYyvsLgQJd50Hvchq5CoTyBU6zSHtTavr/qkfs3DFmHPV9TVEsY/aXhYCGjKD EYRxcHRVLsoaXzfszFwUKyOic4IX+jQoERS/2upQjrbuYeDwni/krZQR/JUKYaiL v1vBib8T7vsN8h7LxyAC6HwGwkELY0a+NTnESLFxBxcY0zTbBD1HIsBFhQXcwH9E Y5YshemQTlwpThTfnUS+xFA8TABp5A5qKWmvVJfB4KVCowBXPuDilv+h4GTxUgXn HNcgDqbGcXUJUgu3VdoVXCefqRbXqDs= -----END CERTIFICATE-----Generated at Thu Sep 11 01:56:29 2025 by rpki-client