$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa File: e3d82341-289c-3a6e-b275-a759634f1b4a.roa (raw, json) Hash identifier: LHqJph52h6F9WawS9VuhWy2l4AXVe+3tCeQ4fXAtjnY= Subject key identifier: C5:D4:AD:5B:8A:A2:8E:5C:39:C7:34:D8:B9:16:4A:51:21:B6:FD:D3 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584B0FA6BE5F00719E3F22BCD180 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 63293 IP address blocks: 157.240.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:be:5f:00:71:9e:3f:22:bc:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=b9b9218c-f4c4-4e22-bdf8-cf9949f3dcd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:31:c1:5c:40:bf:7f:3c:62:d2:7f:1d:ef: a4:6d:14:00:9b:4d:cf:09:6b:d9:10:6b:ea:60:9a: 3c:db:5f:df:3d:f6:8e:31:58:d6:e6:5f:67:b9:d6: 06:0d:b8:22:8d:4a:37:60:82:70:1e:a6:da:1e:8d: 74:a4:4e:4a:99:fb:11:b3:7c:96:68:b5:0c:47:46: 24:65:74:2f:c7:cb:dd:e0:83:41:aa:d4:cb:d8:f3: 92:3b:26:33:7d:53:e8:54:bd:53:79:9e:2b:1f:6c: bf:5a:48:9d:17:3d:50:d0:41:40:3f:c6:d1:9e:36: cf:0a:5b:36:30:04:bb:e2:ef:7a:48:20:1a:a7:bb: 2b:25:85:28:2f:44:b0:97:41:23:ed:2b:10:bd:f3: 32:a3:3a:07:37:fc:f4:47:2c:7e:5f:00:6f:16:f8: 86:bf:9f:82:61:e4:35:5c:8c:91:42:87:5b:09:a5: f5:ba:9e:a3:42:32:9d:5e:61:97:db:fd:87:52:45: ba:9b:60:d2:b7:cf:6b:92:b2:5d:4e:33:88:64:0b: 96:b4:0c:40:de:4e:49:3c:ff:ca:3b:a7:72:9b:72: f2:e2:6c:5e:98:a3:52:b8:bf:8e:8f:72:3d:22:b2: de:18:9a:9b:af:20:49:e8:f2:f2:5b:29:13:14:e1: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D4:AD:5B:8A:A2:8E:5C:39:C7:34:D8:B9:16:4A:51:21:B6:FD:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:58:78:7d:f6:90:6a:95:92:65:ad:cc:ab:d3:6d:e1:d2:3e: ba:4e:f5:10:89:4e:38:cf:11:66:3b:b8:29:51:55:6b:a7:37: e2:48:b2:43:79:22:c0:e9:fd:6b:4b:b6:9e:d8:bf:75:06:10: 21:83:79:16:7d:a9:d8:81:0a:63:48:09:54:39:ea:92:b3:16: 22:7a:f2:5a:93:67:e8:6c:31:2c:f3:1e:6f:49:ef:f8:00:0d: e8:c6:9a:49:25:30:7c:81:fb:78:fe:16:76:94:c7:5d:9d:b4: bf:fb:de:35:ed:6a:6d:d3:08:69:47:9d:fb:e3:65:1c:a4:26: 03:32:16:98:9a:25:cf:20:dd:5f:50:47:c7:c8:ab:4b:db:6e: c4:3f:7a:b8:09:ce:8e:22:65:4c:e1:44:e1:f3:6a:d3:24:d5: b1:2e:e0:db:ea:84:8a:7d:17:38:ae:d6:df:d0:c7:c4:55:63: cd:a5:6f:80:73:19:cc:a0:b9:bc:1d:4d:5d:fe:e0:99:bb:34: 50:12:7f:e1:cc:a5:ce:0e:ea:0c:a7:e5:83:9e:20:37:30:2f: ff:4d:81:6f:c7:8a:13:64:a9:1b:10:09:b7:c7:c4:89:64:eb: af:c6:f2:d6:2f:54:e5:50:35:3f:98:5a:4c:99:77:0a:0a:55: cc:44:ab:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpr5fAHGePyK80YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk YjliOTIxOGMtZjRjNC00ZTIyLWJkZjgtY2Y5OTQ5ZjNkY2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphcxwVxAv388YtJ/He+kbRQAm03PCWvZEGvq YJo821/fPfaOMVjW5l9nudYGDbgijUo3YIJwHqbaHo10pE5KmfsRs3yWaLUMR0Yk ZXQvx8vd4INBqtTL2POSOyYzfVPoVL1TeZ4rH2y/WkidFz1Q0EFAP8bRnjbPCls2 MAS74u96SCAap7srJYUoL0Swl0Ej7SsQvfMyozoHN/z0Ryx+XwBvFviGv5+CYeQ1 XIyRQodbCaX1up6jQjKdXmGX2/2HUkW6m2DSt89rkrJdTjOIZAuWtAxA3k5JPP/K O6dym3Ly4mxemKNSuL+Oj3I9IrLeGJqbryBJ6PLyWykTFOHqeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXUrVuKoo5cOcc02LkWSlEhtv3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvZTNkODIzNDEtMjg5Yy0z YTZlLWIyNzUtYTc1OTYzNGYxYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClYeH32kGqVkmWtzKvTbeHSPrpO9RCJTjjPEWY7uClRVWunN+JIskN5 IsDp/WtLtp7Yv3UGECGDeRZ9qdiBCmNICVQ56pKzFiJ68lqTZ+hsMSzzHm9J7/gA DejGmkklMHyB+3j+FnaUx12dtL/73jXtam3TCGlHnfvjZRykJgMyFpiaJc8g3V9Q R8fIq0vbbsQ/ergJzo4iZUzhROHzatMk1bEu4NvqhIp9Fziu1t/Qx8RVY82lb4Bz GcygubwdTV3+4Jm7NFASf+HMpc4O6gyn5YOeIDcwL/9NgW/HihNkqRsQCbfHxIlk 66/G8tYvVOVQNT+YWkyZdwoKVcxEqw8= -----END CERTIFICATE-----Generated at Thu Sep 11 01:47:54 2025 by rpki-client