$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa File: 131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa (raw, json) Hash identifier: +UH3q6kWbs5u7S93m9DgQ4r43oGqqvdvDdFyL74rwRI= Subject key identifier: 08:63:63:00:8C:D3:59:B7:08:A4:E4:8D:44:C6:AF:27:D3:D1:32:37 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584A29558B2FE603598F577EA800 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 63293 IP address blocks: 157.240.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:8b:2f:e6:03:59:8f:57:7e:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=ed2e3dac-a87d-4fcc-b514-c9fdf1550977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:a4:12:cf:fe:11:a9:52:5f:bd:27:3d:80: b2:ad:ab:fa:25:e7:54:b1:a3:52:cf:2d:21:55:a9: 99:37:de:5a:9a:cb:33:49:dc:3f:24:cb:41:84:ef: 7b:f2:81:bf:19:2a:33:71:e0:e1:85:a5:6e:51:8c: 04:52:e4:c8:57:b1:fb:74:18:fc:8f:09:63:57:7e: 6c:fb:f3:a3:e4:c6:6b:41:96:09:59:e6:6c:82:1e: c3:0f:09:5f:e5:be:69:8c:6b:12:de:13:59:da:ac: ec:37:dc:b6:1e:d8:99:d7:e5:85:81:e4:10:27:d6: 6b:2e:4c:44:e1:be:0e:14:2f:98:01:cc:fe:18:73: 6e:e6:dd:1d:b7:a0:d7:d5:9e:3b:fa:34:2e:b3:15: 7c:14:ac:74:54:81:0e:e0:e1:b3:dc:69:2f:ed:f4: 64:ef:7b:03:8f:77:6d:64:e6:dd:7b:22:02:81:3c: 7b:12:94:f4:7f:b5:b6:f5:cd:c5:db:39:bc:1d:9b: ed:fa:1d:0a:90:82:68:42:7f:cd:5e:29:11:61:ed: 81:b0:30:2b:43:09:59:80:48:90:80:e7:ff:8c:a2: 0e:63:70:cc:3b:4b:f6:9d:0f:0a:85:ef:1f:39:42: 0a:21:7d:49:98:b1:6e:42:d9:33:c5:c3:19:e6:f3: ca:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:63:63:00:8C:D3:59:B7:08:A4:E4:8D:44:C6:AF:27:D3:D1:32:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e5:67:ef:62:b3:c7:22:f6:2b:b0:36:96:19:0a:ca:71:c0: fe:76:b9:07:53:21:2f:a5:e8:0f:b7:ca:b7:ce:47:6b:be:b6: 30:38:f2:b5:95:08:1f:61:4e:41:7b:00:79:78:a4:51:b7:44: a9:f8:f3:c5:64:25:fc:37:28:22:40:29:68:e6:d2:80:5c:3d: e3:7f:9a:0b:ae:00:6c:ba:f1:f4:f3:69:e3:87:d0:ed:86:9c: c6:8c:87:98:3a:bf:7f:17:04:cb:ed:07:40:42:4e:9d:ab:cd: 81:7e:1b:50:04:3b:7e:97:87:58:58:5d:bd:11:cc:b2:68:00: 42:72:95:12:b0:ee:4b:5d:be:3b:75:93:ac:71:08:9f:b5:ea: 5b:b1:f9:44:fa:b3:88:8a:8d:4f:04:6e:56:00:95:e2:fb:4d: 1e:90:2e:37:44:fa:1d:cf:fd:71:58:55:a9:e8:68:68:90:56: 63:76:5b:9d:b8:b7:4f:8d:01:d1:ba:ea:3d:34:99:5d:91:c9: fe:62:1c:40:ce:13:39:48:9e:45:e5:cc:fe:9b:e9:f0:65:14: c8:f9:58:8b:df:1b:cc:0d:64:96:46:13:74:86:ae:02:20:c4: 96:f6:23:67:d2:32:36:8f:e8:a7:6b:18:19:0e:6d:51:26:99: 9f:ea:5d:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVYsv5gNZj1d+qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk ZWQyZTNkYWMtYTg3ZC00ZmNjLWI1MTQtYzlmZGYxNTUwOTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslKkEs/+EalSX70nPYCyrav6JedUsaNSzy0h VamZN95amsszSdw/JMtBhO978oG/GSozceDhhaVuUYwEUuTIV7H7dBj8jwljV35s +/Oj5MZrQZYJWeZsgh7DDwlf5b5pjGsS3hNZ2qzsN9y2HtiZ1+WFgeQQJ9ZrLkxE 4b4OFC+YAcz+GHNu5t0dt6DX1Z47+jQusxV8FKx0VIEO4OGz3Gkv7fRk73sDj3dt ZObdeyICgTx7EpT0f7W29c3F2zm8HZvt+h0KkIJoQn/NXikRYe2BsDArQwlZgEiQ gOf/jKIOY3DMO0v2nQ8Khe8fOUIKIX1JmLFuQtkzxcMZ5vPK9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhjYwCM01m3CKTkjUTGryfT0TI3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMTMxYzJjMjAtNmZjNy0z ZWU0LWFjYmYtZGI5NDJmZDFkOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALlZ+9is8ci9iuwNpYZCspxwP52uQdTIS+l6A+3yrfOR2u+tjA48rWV CB9hTkF7AHl4pFG3RKn488VkJfw3KCJAKWjm0oBcPeN/mguuAGy68fTzaeOH0O2G nMaMh5g6v38XBMvtB0BCTp2rzYF+G1AEO36Xh1hYXb0RzLJoAEJylRKw7ktdvjt1 k6xxCJ+16lux+UT6s4iKjU8EblYAleL7TR6QLjdE+h3P/XFYVanoaGiQVmN2W524 t0+NAdG66j00mV2Ryf5iHEDOEzlInkXlzP6b6fBlFMj5WIvfG8wNZJZGE3SGrgIg xJb2I2fSMjaP6KdrGBkObVEmmZ/qXV8= -----END CERTIFICATE-----Generated at Tue Jul 1 01:44:16 2025 by rpki-client