$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa File: e3d82341-289c-3a6e-b275-a759634f1b4a.roa (raw, json) Hash identifier: ky07h5Y+tGryRQ/2Sa4JUhxyiSEyOuancw+WW8+EAWM= Subject key identifier: A9:76:3B:A8:60:CB:F7:56:26:2C:33:6A:14:1D:D4:D9:86:14:C3:F3 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584F331D24C2CE1FD82626837B80 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 63293 IP address blocks: 157.240.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:24:c2:ce:1f:d8:26:26:83:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=76c28396-5e04-49cd-bb7b-46e7c8b2f5a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f0:c4:ea:14:00:d4:46:1f:b1:a8:ea:7a:f2: bd:68:55:59:80:60:bf:48:b9:1d:c2:8d:09:f7:23: d1:b4:97:ea:71:9c:e1:14:7d:43:b4:85:b8:d0:c0: 7e:c8:a6:4e:98:31:bd:43:00:6d:97:6e:b1:4f:7c: ba:ad:3e:8e:8d:02:a5:26:dd:77:81:d7:8f:6d:f1: 6b:27:36:7e:3d:ba:41:4b:0c:53:71:0f:a9:de:92: 22:d0:73:e7:2d:e9:1c:59:aa:f9:e4:d2:01:19:cb: 59:57:be:ee:46:66:1f:42:bd:c3:3f:2f:7d:36:38: 7a:d5:0d:a4:24:68:ae:a1:11:0c:48:db:1f:70:e4: b4:40:04:55:73:59:c1:fe:89:01:a2:51:bb:8a:75: 68:0b:bf:0c:80:fc:c5:67:f9:77:fe:9b:e1:d7:6b: 9e:fc:a0:c5:80:f9:e1:67:42:b5:01:02:d7:bc:c0: fd:8a:6b:13:98:af:df:e9:54:a7:20:49:a7:6a:fb: bc:04:38:9b:b8:06:33:68:5d:b8:b7:f0:16:66:58: 9b:60:be:50:92:ea:dc:ff:cf:10:5c:95:dc:1d:83: a3:d3:95:48:fa:5d:9a:7b:f3:f2:e5:0b:72:e4:ac: ec:94:7e:27:c0:dd:da:ea:4e:89:74:04:f8:e5:a6: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:76:3B:A8:60:CB:F7:56:26:2C:33:6A:14:1D:D4:D9:86:14:C3:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:48:fc:67:65:cf:cb:9c:d8:b9:e0:44:35:e2:90:2b:83:ec: c9:6a:b7:a1:77:01:2d:03:f3:a6:85:7b:3a:40:41:0f:65:f7: bd:4c:c6:a4:5c:4b:cf:cb:aa:a9:fe:2f:b0:52:52:0a:63:17: a5:7b:20:74:08:eb:dd:e5:6b:ef:19:ab:f9:9f:a2:e4:fe:66: ca:69:69:fd:0d:db:f9:c2:11:e6:81:68:ef:a8:f7:9b:3f:16: cb:2f:d3:2b:02:ce:a5:7d:75:96:7e:f6:12:d8:70:27:a6:15: 65:d4:58:c0:13:6f:e1:7e:91:4f:a8:4d:65:1e:e8:5d:db:4d: f1:66:63:bb:86:dc:2f:fb:6b:00:7e:c9:3f:6c:8d:de:d5:c7: f8:d1:df:a6:d4:23:4b:1f:1a:5a:f3:2e:f3:09:90:7d:fb:bd: 70:4b:ff:79:73:2c:fc:7a:36:0c:2a:1b:65:b3:6f:f4:6d:6f: 18:da:d0:b5:b6:de:82:34:91:f1:f2:be:5f:89:7a:3c:47:3f: eb:6c:9d:78:c1:51:ab:9f:19:dd:a0:8d:d8:ea:29:26:1d:1e: 2e:84:45:33:21:97:43:61:dc:7a:ea:5f:2c:c5:8f:66:61:5e: 6f:df:78:6b:f1:cb:96:8e:c4:ee:87:d7:2b:ec:6c:bf:ec:fe: 92:ca:e6:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSTCzh/YJiaDe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk NzZjMjgzOTYtNWUwNC00OWNkLWJiN2ItNDZlN2M4YjJmNWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/DE6hQA1EYfsajqevK9aFVZgGC/SLkdwo0J 9yPRtJfqcZzhFH1DtIW40MB+yKZOmDG9QwBtl26xT3y6rT6OjQKlJt13gdePbfFr JzZ+PbpBSwxTcQ+p3pIi0HPnLekcWar55NIBGctZV77uRmYfQr3DPy99Njh61Q2k JGiuoREMSNsfcOS0QARVc1nB/okBolG7inVoC78MgPzFZ/l3/pvh12ue/KDFgPnh Z0K1AQLXvMD9imsTmK/f6VSnIEmnavu8BDibuAYzaF24t/AWZlibYL5Qkurc/88Q XJXcHYOj05VI+l2ae/Py5Qty5KzslH4nwN3a6k6JdAT45aZ/NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl2O6hgy/dWJiwzahQd1NmGFMPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvZTNkODIzNDEtMjg5Yy0z YTZlLWIyNzUtYTc1OTYzNGYxYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5I/Gdlz8uc2LngRDXikCuD7Mlqt6F3AS0D86aFezpAQQ9l971MxqRc S8/Lqqn+L7BSUgpjF6V7IHQI693la+8Zq/mfouT+Zsppaf0N2/nCEeaBaO+o95s/ Fssv0ysCzqV9dZZ+9hLYcCemFWXUWMATb+F+kU+oTWUe6F3bTfFmY7uG3C/7awB+ yT9sjd7Vx/jR36bUI0sfGlrzLvMJkH37vXBL/3lzLPx6NgwqG2Wzb/Rtbxja0LW2 3oI0kfHyvl+JejxHP+tsnXjBUaufGd2gjdjqKSYdHi6ERTMhl0Nh3HrqXyzFj2Zh Xm/feGvxy5aOxO6H1yvsbL/s/pLK5t8= -----END CERTIFICATE-----Generated at Sat Sep 19 13:12:36 2026 by rpki-client