$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa File: 583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa (raw, json) Hash identifier: pmqePkExJnUs62xK0KC7GmsUZeS0FuLfei2+j65FVk8= Subject key identifier: 5F:D5:61:93:3C:2B:AA:8E:FC:85:42:96:58:FB:E7:C1:F1:0B:78:04 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584B5053A2AE2EA83D2483D2B300 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa Signing time: Thu 25 Sep 2025 17:00:53 +0000 ROA not before: Thu 25 Sep 2025 17:00:53 +0000 ROA not after: Wed 24 Dec 2025 18:00:53 +0000 asID: 63293 IP address blocks: 157.240.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:50:53:a2:ae:2e:a8:3d:24:83:d2:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Sep 25 17:00:53 2025 GMT Not After : Dec 24 18:00:53 2025 GMT Subject: CN=eb41063b-552e-4d98-88fd-8db5a7c09a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:73:84:f8:fd:7e:3c:0c:6b:07:4a:12:f2:62: d2:e5:94:88:62:c5:1f:04:df:71:24:5b:7b:69:b5: 4c:28:4d:a5:a2:2a:10:9e:d6:48:dc:00:4d:42:59: 6d:f6:13:f9:09:19:5f:87:a4:bb:23:ef:8b:9d:0e: 59:e2:12:1a:ff:92:7f:41:a5:34:2a:86:ce:92:3e: bf:2c:b1:64:4e:c1:33:13:93:26:96:eb:8f:c9:bc: dc:7b:45:a3:39:26:09:35:7a:86:22:ac:4c:97:14: ba:15:96:d1:7b:7d:b4:8d:69:63:8c:58:41:a2:6e: ec:f3:f7:f2:8e:ae:2f:d5:e3:14:c8:cf:a4:b2:a9: 9f:3d:81:9e:43:af:2c:ea:15:18:11:40:61:3a:09: 34:96:3f:dd:3a:38:47:bb:f2:1a:ae:92:b6:4a:f4: bc:a2:4a:92:c1:c6:d9:8d:52:91:d7:45:03:68:78: 37:d6:18:57:5d:17:86:f9:1d:d6:dc:9e:fe:b8:83: d0:27:22:26:aa:9e:ef:6f:b0:96:99:52:00:e8:00: 94:8f:09:5d:f1:81:fd:87:67:d9:34:b4:78:d0:79: 18:77:5a:4e:ce:97:2c:f9:b2:d1:69:b3:ea:07:c1: 15:70:fa:ff:2c:50:f9:8b:71:80:7f:60:c5:c4:7a: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D5:61:93:3C:2B:AA:8E:FC:85:42:96:58:FB:E7:C1:F1:0B:78:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:33:fb:ad:26:d9:a9:83:a9:70:56:3f:11:36:33:1a:54:85: f6:ad:c6:37:b5:bd:35:4b:62:76:d3:68:68:aa:1c:f4:32:8f: d3:d3:cb:8c:70:e9:43:36:2c:a5:4b:0d:98:48:5d:3c:f3:2f: fa:90:ce:a0:2e:9f:6a:ae:23:ae:79:44:15:3e:68:5b:3d:a6: 47:3f:f7:75:77:96:ae:91:0b:f1:b4:ce:37:48:c0:6f:65:fc: d6:a3:79:bb:12:d1:7f:79:e1:f4:4f:47:71:9a:a9:c6:a3:f0: 76:68:e6:86:f1:74:48:57:82:0a:07:b7:9c:2e:ac:38:a3:45: a5:9c:20:59:80:cc:bc:23:6c:d4:59:ad:2c:3a:73:cd:c6:c4: f3:cc:64:1f:83:26:1b:b3:64:82:5b:ff:85:d6:92:a7:57:d8: 63:10:05:2f:19:b0:33:8c:74:ed:6d:5f:b1:92:04:02:5d:d1: dd:1d:29:65:0b:ea:2b:d7:b1:f7:3d:20:26:00:12:2b:4c:67: ea:f7:6a:d1:5c:95:d5:6c:ef:6c:0f:a9:60:d5:91:3a:5f:ba: 56:c3:eb:ce:e4:a1:23:1c:53:84:3e:81:6f:4f:58:95:88:24: ed:36:40:86:e2:79:c9:cd:27:df:22:3b:e4:66:a5:d9:f9:6e: f3:91:32:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtQU6KuLqg9JIPSswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDkyNTE3MDA1M1oXDTI1MTIyNDE4MDA1M1owLzEtMCsGA1UEAxMk ZWI0MTA2M2ItNTUyZS00ZDk4LTg4ZmQtOGRiNWE3YzA5YTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnOE+P1+PAxrB0oS8mLS5ZSIYsUfBN9xJFt7 abVMKE2loioQntZI3ABNQllt9hP5CRlfh6S7I++LnQ5Z4hIa/5J/QaU0KobOkj6/ LLFkTsEzE5MmluuPybzce0WjOSYJNXqGIqxMlxS6FZbRe320jWljjFhBom7s8/fy jq4v1eMUyM+ksqmfPYGeQ68s6hUYEUBhOgk0lj/dOjhHu/IarpK2SvS8okqSwcbZ jVKR10UDaHg31hhXXReG+R3W3J7+uIPQJyImqp7vb7CWmVIA6ACUjwld8YH9h2fZ NLR40HkYd1pOzpcs+bLRabPqB8EVcPr/LFD5i3GAf2DFxHq9twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/VYZM8K6qO/IVCllj758HxC3gEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNTgzZDBlNGEtNWFjMi0z YWUwLWJhODUtMGRmNmY0OWMzM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4z+60m2amDqXBWPxE2MxpUhfatxje1vTVLYnbTaGiqHPQyj9PTy4xw 6UM2LKVLDZhIXTzzL/qQzqAun2quI655RBU+aFs9pkc/93V3lq6RC/G0zjdIwG9l /NajebsS0X954fRPR3Gaqcaj8HZo5obxdEhXggoHt5wurDijRaWcIFmAzLwjbNRZ rSw6c83GxPPMZB+DJhuzZIJb/4XWkqdX2GMQBS8ZsDOMdO1tX7GSBAJd0d0dKWUL 6ivXsfc9ICYAEitMZ+r3atFcldVs72wPqWDVkTpfulbD687koSMcU4Q+gW9PWJWI JO02QIbiecnNJ98iO+Rmpdn5bvORMlQ= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:21 2025 by rpki-client