$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa File: a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa (raw, json) Hash identifier: 423S9V4b6uS1cymIMmjyErBo2o/txIoTfNtm/vOeyuk= Subject key identifier: E2:92:19:83:EB:45:E4:49:46:DE:93:FB:C6:A4:FC:78:6D:5B:7E:D3 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584F093D0032B002D6EDCB53D500 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 63293 IP address blocks: 157.240.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:00:32:b0:02:d6:ed:cb:53:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=3573f11e-d171-4c38-939d-62eb7d35a812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ec:5c:0d:14:75:e3:c4:18:65:13:32:9c:35: e8:e3:7b:25:41:d8:26:d0:5d:c7:32:bc:9a:d7:42: 4e:ce:f0:90:b7:d4:10:ad:83:79:54:05:85:d2:2a: d5:79:ff:9f:ee:c2:86:4f:b0:82:f3:aa:6b:a8:b8: b2:5e:17:7c:c6:cd:11:bc:7d:1b:45:4d:d7:15:c0: 6f:6c:54:a2:63:24:83:85:52:2a:ec:fd:82:c6:62: b3:50:c2:ed:c4:32:5a:52:44:81:55:0d:2a:94:ae: ed:cb:c6:2f:8e:1e:81:e9:58:d2:f4:fe:0c:2f:9d: 3c:4e:45:fd:c8:92:85:39:9d:f2:4b:de:ed:e4:a2: a4:90:29:9c:5e:dd:9e:f6:6e:c3:74:b1:c0:ce:6e: 8e:d7:a6:5a:32:e6:3f:ad:44:be:19:60:6f:36:7e: 5f:57:66:ce:b4:01:36:ca:92:9b:4c:ad:33:1c:55: 8c:b5:b9:22:22:8c:a6:d7:d4:79:ac:fe:6b:1d:5a: 96:22:91:79:cb:2e:b1:7b:7e:10:fa:d8:22:c7:2e: 9d:b9:62:ef:d6:04:30:a3:1c:8f:b3:ae:de:20:08: b5:a6:dd:80:f9:b5:21:fa:1d:e9:c3:e0:7d:57:41: e7:53:9e:03:a0:06:db:17:a2:5a:16:65:29:65:67: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:92:19:83:EB:45:E4:49:46:DE:93:FB:C6:A4:FC:78:6D:5B:7E:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:2f:83:f2:04:e3:e7:06:26:22:36:2b:fe:96:02:9d:5d:0c: 6c:09:af:78:94:fd:bb:2f:61:fe:7b:17:24:e8:15:3c:b0:54: 08:59:aa:33:c8:8a:89:06:6b:48:f3:76:65:b3:4b:ce:36:9e: d6:24:17:b1:e7:b8:50:88:35:86:3f:43:29:7e:ae:6b:ee:76: 2a:e6:2a:5f:d7:bb:50:cb:2e:d2:12:5d:73:b9:79:bd:5b:84: d2:ff:5f:41:08:56:78:9c:b5:ec:ed:a9:61:c6:a7:d6:9b:d5: b5:27:b1:04:23:f9:f2:26:8a:a6:f6:eb:b1:bb:ad:2c:3d:4e: 90:96:69:14:ef:3e:ca:a3:fe:69:4d:95:0b:c3:85:32:eb:d5: e1:70:4a:e2:0e:16:29:4a:49:ea:e7:4a:9f:66:38:d9:93:a4: ae:20:44:3d:22:0f:3f:7c:57:47:2b:0c:fc:67:af:37:e2:ae: 03:17:6a:c2:19:e5:30:07:09:4f:35:d2:c0:ff:23:3f:46:36: b1:3d:29:5e:a4:95:a5:bf:db:9a:ad:5e:7b:99:c9:c6:38:c8: 03:bf:a3:a2:02:cb:4e:9a:04:a6:ed:13:13:bb:56:e6:d0:4a: 05:44:18:3a:93:e0:31:75:aa:cc:c3:a0:a5:db:7c:fa:95:06: 16:fd:6d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQAysALW7ctT1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MzU3M2YxMWUtZDE3MS00YzM4LTkzOWQtNjJlYjdkMzVhODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhexcDRR148QYZRMynDXo43slQdgm0F3HMrya 10JOzvCQt9QQrYN5VAWF0irVef+f7sKGT7CC86prqLiyXhd8xs0RvH0bRU3XFcBv bFSiYySDhVIq7P2CxmKzUMLtxDJaUkSBVQ0qlK7ty8Yvjh6B6VjS9P4ML508TkX9 yJKFOZ3yS97t5KKkkCmcXt2e9m7DdLHAzm6O16ZaMuY/rUS+GWBvNn5fV2bOtAE2 ypKbTK0zHFWMtbkiIoym19R5rP5rHVqWIpF5yy6xe34Q+tgixy6duWLv1gQwoxyP s67eIAi1pt2A+bUh+h3pw+B9V0HnU54DoAbbF6JaFmUpZWe9bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKSGYPrReRJRt6T+8ak/HhtW37TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvYTJjYjMxZGMtZDM3OS0z YzZiLWIyYTMtMjQ2MDVjMmE0ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIvg/IE4+cGJiI2K/6WAp1dDGwJr3iU/bsvYf57FyToFTywVAhZqjPI iokGa0jzdmWzS842ntYkF7HnuFCINYY/Qyl+rmvudirmKl/Xu1DLLtISXXO5eb1b hNL/X0EIVnicteztqWHGp9ab1bUnsQQj+fImiqb267G7rSw9TpCWaRTvPsqj/mlN lQvDhTLr1eFwSuIOFilKSernSp9mONmTpK4gRD0iDz98V0crDPxnrzfirgMXasIZ 5TAHCU810sD/Iz9GNrE9KV6klaW/25qtXnuZycY4yAO/o6ICy06aBKbtExO7VubQ SgVEGDqT4DF1qszDoKXbfPqVBhb9bds= -----END CERTIFICATE-----Generated at Sat Sep 19 12:08:29 2026 by rpki-client