$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa File: 0752d384-9147-3c2d-9b3e-23a76dab9594.roa (raw, json) Hash identifier: 2+Rq0Qmju37xAZhaz7oPVrncvP7P9NJS+OabH6awhoE= Subject key identifier: 8E:65:C3:1C:7A:55:51:93:29:B9:63:8F:54:FA:0B:61:6E:67:19:8F Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584AC9DBA80B038FDDB433DA4D00 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 63293 IP address blocks: 157.240.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a8:0b:03:8f:dd:b4:33:da:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=8f8d0035-ebb6-48f2-b8f9-20395af583e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d2:81:60:88:d5:da:13:22:2c:32:3f:40:52: f5:9e:6b:43:af:aa:57:66:46:d5:47:77:ab:26:8b: fc:75:43:c3:01:89:35:99:d7:25:94:00:42:8e:a3: a0:cb:31:02:34:e9:3c:ad:e0:a3:b3:31:38:b5:be: 53:85:b4:36:13:20:dc:bb:00:db:20:af:ce:81:ce: 5a:62:72:09:89:17:cf:d7:76:53:04:ee:48:6b:65: 19:22:9c:4f:41:0d:5d:ee:30:cb:43:68:b9:1b:96: ed:02:a5:7b:59:dd:61:bb:03:0b:03:74:54:a0:f0: 14:39:3d:b2:8b:9e:6c:de:7f:cf:72:c7:05:35:7e: 22:10:e8:a6:4b:1c:9e:91:d1:ea:62:a2:51:9a:56: 92:89:46:6e:3b:ab:15:73:13:96:f6:1d:eb:a9:4d: 51:5b:69:e8:9e:71:d8:30:4f:f4:85:a8:4a:56:b6: 26:a0:bd:c0:01:78:91:38:14:51:c9:8d:d3:49:e9: 8f:9d:bb:87:20:52:24:80:d4:15:8d:f4:44:f8:33: 85:8c:31:9f:f6:84:e2:92:09:65:75:e0:5c:bc:7c: 4d:81:90:db:e1:9a:81:3a:09:3f:b1:da:4c:26:ca: c5:21:2f:d7:87:b1:b0:42:48:c3:12:d4:67:32:33: a8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:65:C3:1C:7A:55:51:93:29:B9:63:8F:54:FA:0B:61:6E:67:19:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a5:b8:0b:20:c0:d8:08:75:26:13:5c:76:e1:6f:00:42:7c: dc:8e:e1:4d:69:f1:8c:fe:94:d5:b5:c5:51:15:27:aa:9a:23: 1b:66:b7:13:d4:f4:f7:f6:d5:20:aa:3e:82:6c:9d:d1:df:ef: 53:69:c7:a0:54:d3:a6:aa:b5:13:7c:5f:5c:81:73:f1:6a:a5: 7d:f8:f2:ab:ff:57:20:60:ec:71:fa:ee:da:f5:01:71:6e:0d: 38:d1:f9:cb:d6:23:5e:cc:40:b4:9e:49:1a:66:f1:4a:f0:cd: 2c:85:d6:e7:20:7e:83:22:b3:68:3a:b0:7c:93:88:4b:43:93: b6:25:90:db:7a:e4:79:21:84:a4:b9:ee:41:1a:45:e2:4c:8e: f1:2d:f2:f1:a8:b0:03:82:c5:7d:cd:53:50:0a:5f:87:8c:00: c6:68:85:6b:89:f1:72:7d:f6:b9:e0:e6:dc:5e:a7:b9:19:d5: 21:0a:2e:79:e7:41:48:3b:1a:17:3b:a2:18:3b:3f:8f:b1:c4: 50:1f:1e:b3:77:2d:fe:5f:d2:44:64:3c:51:01:50:bf:d3:5c: aa:f7:70:5a:59:05:5b:88:71:d2:a3:41:ae:44:85:7e:d7:cb: 82:33:0b:d3:74:3e:e8:c7:78:83:e6:82:94:2f:a0:a8:39:00: 40:57:15:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26gLA4/dtDPaTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk OGY4ZDAwMzUtZWJiNi00OGYyLWI4ZjktMjAzOTVhZjU4M2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNKBYIjV2hMiLDI/QFL1nmtDr6pXZkbVR3er Jov8dUPDAYk1mdcllABCjqOgyzECNOk8reCjszE4tb5ThbQ2EyDcuwDbIK/Ogc5a YnIJiRfP13ZTBO5Ia2UZIpxPQQ1d7jDLQ2i5G5btAqV7Wd1huwMLA3RUoPAUOT2y i55s3n/PcscFNX4iEOimSxyekdHqYqJRmlaSiUZuO6sVcxOW9h3rqU1RW2nonnHY ME/0hahKVrYmoL3AAXiROBRRyY3TSemPnbuHIFIkgNQVjfRE+DOFjDGf9oTikgll deBcvHxNgZDb4ZqBOgk/sdpMJsrFIS/Xh7GwQkjDEtRnMjOoLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5lwxx6VVGTKbljj1T6C2FuZxmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMDc1MmQzODQtOTE0Ny0z YzJkLTliM2UtMjNhNzZkYWI5NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOluAsgwNgIdSYTXHbhbwBCfNyO4U1p8Yz+lNW1xVEVJ6qaIxtmtxPU 9Pf21SCqPoJsndHf71Npx6BU06aqtRN8X1yBc/FqpX348qv/VyBg7HH67tr1AXFu DTjR+cvWI17MQLSeSRpm8UrwzSyF1ucgfoMis2g6sHyTiEtDk7YlkNt65HkhhKS5 7kEaReJMjvEt8vGosAOCxX3NU1AKX4eMAMZohWuJ8XJ99rng5txep7kZ1SEKLnnn QUg7Ghc7ohg7P4+xxFAfHrN3Lf5f0kRkPFEBUL/TXKr3cFpZBVuIcdKjQa5EhX7X y4IzC9N0PujHeIPmgpQvoKg5AEBXFTA= -----END CERTIFICATE-----Generated at Sun Aug 24 11:32:24 2025 by rpki-client