$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa File: 583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa (raw, json) Hash identifier: wHXEliWq5HintnRt3ZCw0pW125cGbilyfOWi+3hSS8k= Subject key identifier: D5:C1:81:C4:8A:B2:58:0B:2D:E4:3C:C5:11:BA:6B:75:37:33:3E:0A Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584D100D03D93896E1D34136DA00 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 63293 IP address blocks: 157.240.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0d:03:d9:38:96:e1:d3:41:36:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=8e7e3900-c431-416a-be32-06e2132df537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:7a:d6:0e:b9:6f:e3:99:09:51:0a:f1:5a: 94:76:32:a5:49:45:3e:49:bc:11:f2:6a:1b:c7:ad: 0a:45:24:5d:28:1d:19:75:ca:93:71:d5:3c:f7:dc: 3b:5a:dd:ec:6b:4b:9d:64:14:c2:a9:99:a7:18:03: 8b:3b:7b:c0:fb:4d:06:13:72:2f:c3:91:f8:48:57: dd:08:20:63:cc:6f:c7:ea:19:86:4d:4a:dd:6c:69: 57:68:5a:74:b9:c0:26:1e:d1:07:3f:4d:bb:a5:fa: 3a:5f:23:62:7d:74:3d:84:08:12:d3:1a:f2:09:1a: 27:2f:b4:9a:7e:f2:2a:d6:e5:e4:c3:01:b1:40:39: 1a:4e:dc:5a:4b:4d:b9:95:04:00:ea:d3:b8:6d:6a: 60:4c:af:60:b4:5f:0c:d1:5c:67:b7:a4:fa:db:89: 5f:a7:40:54:59:db:ca:e0:7d:15:e5:f1:fd:48:8d: 1b:12:e2:02:62:85:0d:cf:aa:69:4c:9c:b7:80:17: ed:7b:54:1f:db:f0:e3:42:48:e6:f3:7a:90:05:35: a1:5b:ff:9c:2e:bb:d7:97:8c:8b:ae:b9:e8:f8:d3: f7:f9:61:80:ec:dc:3b:5b:00:ed:6a:2f:3b:13:f0: e0:ad:11:06:cc:93:b7:5d:11:c9:52:12:b5:96:9a: a2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C1:81:C4:8A:B2:58:0B:2D:E4:3C:C5:11:BA:6B:75:37:33:3E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:72:2c:49:6c:29:d6:e4:9a:3c:99:40:d5:09:8c:36:4d:55: 2c:55:03:0e:a3:b3:45:d4:19:3d:56:e5:3e:c9:95:f3:8e:f5: d2:1b:42:ed:aa:a5:d9:06:61:77:31:a4:b3:12:0b:d0:fd:a7: 69:d5:dd:65:bc:c6:8c:1a:cf:13:a7:b5:ed:11:65:64:1b:1b: ae:77:c5:40:ec:6e:b9:a8:96:b0:17:d4:42:f7:f9:81:30:9f: 0c:f1:44:bd:11:30:71:73:c8:67:65:bc:e2:5e:93:90:d4:f7: c4:44:94:50:a5:49:8d:54:9f:41:0d:b9:cb:43:7d:b0:62:01: 45:75:df:1f:7a:39:a0:e8:20:f2:49:c3:12:3c:29:45:e2:65: 5c:51:1a:9e:f7:58:6c:a2:25:7b:53:9a:c5:48:0b:9e:c2:35: ef:6e:ce:c3:91:ec:b7:44:59:12:d9:37:dd:a4:b9:63:d9:c1: 0b:33:4c:94:05:11:74:f6:5b:f0:1d:f6:30:53:a9:75:6c:6b: 2e:76:25:5e:3f:b6:b7:4d:a9:3e:d1:0e:61:82:ec:76:d8:be: f5:5b:b5:33:d9:93:d9:06:e0:e0:ce:98:2a:06:31:67:16:6f: 91:c2:6b:f6:4a:76:f3:6b:d7:78:63:ce:16:12:ea:db:22:fe: d9:dd:72:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDQPZOJbh00E22gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk OGU3ZTM5MDAtYzQzMS00MTZhLWJlMzItMDZlMjEzMmRmNTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYp61g65b+OZCVEK8VqUdjKlSUU+SbwR8mob x60KRSRdKB0ZdcqTcdU899w7Wt3sa0udZBTCqZmnGAOLO3vA+00GE3Ivw5H4SFfd CCBjzG/H6hmGTUrdbGlXaFp0ucAmHtEHP027pfo6XyNifXQ9hAgS0xryCRonL7Sa fvIq1uXkwwGxQDkaTtxaS025lQQA6tO4bWpgTK9gtF8M0Vxnt6T624lfp0BUWdvK 4H0V5fH9SI0bEuICYoUNz6ppTJy3gBfte1Qf2/DjQkjm83qQBTWhW/+cLrvXl4yL rrno+NP3+WGA7Nw7WwDtai87E/DgrREGzJO3XRHJUhK1lpqiKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXBgcSKslgLLeQ8xRG6a3U3Mz4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNTgzZDBlNGEtNWFjMi0z YWUwLWJhODUtMGRmNmY0OWMzM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdyLElsKdbkmjyZQNUJjDZNVSxVAw6js0XUGT1W5T7JlfOO9dIbQu2q pdkGYXcxpLMSC9D9p2nV3WW8xowazxOnte0RZWQbG653xUDsbrmolrAX1EL3+YEw nwzxRL0RMHFzyGdlvOJek5DU98RElFClSY1Un0ENuctDfbBiAUV13x96OaDoIPJJ wxI8KUXiZVxRGp73WGyiJXtTmsVIC57CNe9uzsOR7LdEWRLZN92kuWPZwQszTJQF EXT2W/Ad9jBTqXVsay52JV4/trdNqT7RDmGC7HbYvvVbtTPZk9kG4ODOmCoGMWcW b5HCa/ZKdvNr13hjzhYS6tsi/tndctA= -----END CERTIFICATE-----Generated at Fri Mar 20 22:14:24 2026 by rpki-client