$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa File: a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa (raw, json) Hash identifier: k/qi1747Y1Y7zTnnYDHt69EEetrBuW6ADO/gYwg07Lg= Subject key identifier: 1F:00:3D:6A:16:4A:05:3E:63:BD:FE:9D:E0:3E:0C:DF:EC:81:37:26 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584AE5C67ED2DEC0D1595B61A840 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 63293 IP address blocks: 157.240.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:7e:d2:de:c0:d1:59:5b:61:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=7ffbd243-af78-47eb-9bbb-85a054927eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:91:a5:68:c5:f2:c0:bb:ac:ae:ef:9f:44: f0:28:3b:7a:9e:60:15:fa:22:18:ea:8e:8e:d3:53: 39:bb:fe:4d:fe:10:19:c9:14:0e:73:2b:e0:9b:be: da:66:6f:ab:26:04:db:e7:53:6a:51:a3:be:50:f3: 05:b4:0b:4c:45:ad:0a:38:02:4e:7b:06:d9:91:a4: a4:43:e3:9a:f1:86:c6:c3:b7:83:e8:ad:d5:e8:c8: 21:ff:70:13:26:ab:ca:69:48:91:51:6f:91:49:16: 85:c8:46:cd:09:85:07:04:19:d5:cf:44:91:9d:f0: af:34:fe:30:dd:d1:87:07:a9:ed:cd:99:4d:21:8d: df:bc:f0:d4:10:09:d1:68:4d:c6:c5:42:5f:76:93: d5:c8:42:40:11:01:af:07:77:21:2f:8f:c3:ed:ae: 09:c3:89:e1:a8:ff:80:92:54:65:31:00:e0:cf:95: 4d:f9:3d:34:d8:ef:98:33:14:96:f0:69:5c:4c:a9: ea:06:8b:63:c3:5b:68:73:19:cd:e4:c6:72:6f:1f: ab:5e:1e:69:85:03:26:c8:36:79:22:39:14:c6:cd: a5:c9:6b:0a:da:06:52:c4:61:43:aa:c7:35:76:bb: e0:a6:02:24:e0:eb:6e:a4:07:18:44:74:98:67:dd: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:3D:6A:16:4A:05:3E:63:BD:FE:9D:E0:3E:0C:DF:EC:81:37:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:92:8d:70:f1:48:64:df:ad:86:08:b8:ff:16:da:61:e4:5f: 50:28:68:db:27:7c:91:41:b9:57:7a:4e:44:1d:99:e2:e3:54: cd:9e:26:37:8f:19:16:30:d4:33:24:be:fc:a3:c3:87:c8:f8: b1:54:e8:7c:b5:73:8f:b5:60:35:69:73:c9:87:4f:b0:1b:e8: 2c:41:f7:57:c7:9c:cf:85:01:72:06:1e:29:b4:07:bd:a6:42: 4e:c2:29:36:63:d3:9b:e0:b7:4f:07:bc:db:81:a1:be:a1:6b: 46:c3:13:f4:65:5c:93:b0:eb:d3:73:8e:79:a3:b2:7b:87:2f: 6c:68:d8:5c:eb:19:08:35:1f:ce:91:b9:5d:82:59:db:9c:b3: 21:97:a8:27:2b:29:56:77:37:77:12:2b:b8:25:b9:6c:ba:c2: 33:24:8c:71:3b:86:44:12:29:90:90:59:bb:f7:e0:1e:ce:03: 77:a2:e0:fb:ac:ef:1e:88:fc:f6:0b:84:a4:be:82:a0:7d:cd: b9:db:0b:e7:ee:95:cb:e3:25:7a:8b:26:f5:ea:6e:c9:7d:49: 94:98:a2:79:30:47:ca:a1:58:98:41:81:e3:5f:69:c8:7f:6b: 71:6f:c9:94:39:9c:56:18:3d:31:b9:a3:2a:db:5e:83:ef:70: 00:65:3a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxn7S3sDRWVthqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk N2ZmYmQyNDMtYWY3OC00N2ViLTliYmItODVhMDU0OTI3ZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz2RpWjF8sC7rK7vn0TwKDt6nmAV+iIY6o6O 01M5u/5N/hAZyRQOcyvgm77aZm+rJgTb51NqUaO+UPMFtAtMRa0KOAJOewbZkaSk Q+Oa8YbGw7eD6K3V6Mgh/3ATJqvKaUiRUW+RSRaFyEbNCYUHBBnVz0SRnfCvNP4w 3dGHB6ntzZlNIY3fvPDUEAnRaE3GxUJfdpPVyEJAEQGvB3chL4/D7a4Jw4nhqP+A klRlMQDgz5VN+T002O+YMxSW8GlcTKnqBotjw1tocxnN5MZybx+rXh5phQMmyDZ5 IjkUxs2lyWsK2gZSxGFDqsc1drvgpgIk4OtupAcYRHSYZ91dwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8APWoWSgU+Y73+neA+DN/sgTcmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvYTJjYjMxZGMtZDM3OS0z YzZiLWIyYTMtMjQ2MDVjMmE0ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaSjXDxSGTfrYYIuP8W2mHkX1AoaNsnfJFBuVd6TkQdmeLjVM2eJjeP GRYw1DMkvvyjw4fI+LFU6Hy1c4+1YDVpc8mHT7Ab6CxB91fHnM+FAXIGHim0B72m Qk7CKTZj05vgt08HvNuBob6ha0bDE/RlXJOw69NzjnmjsnuHL2xo2FzrGQg1H86R uV2CWducsyGXqCcrKVZ3N3cSK7gluWy6wjMkjHE7hkQSKZCQWbv34B7OA3ei4Pus 7x6I/PYLhKS+gqB9zbnbC+fulcvjJXqLJvXqbsl9SZSYonkwR8qhWJhBgeNfach/ a3FvyZQ5nFYYPTG5oyrbXoPvcABlOgs= -----END CERTIFICATE-----Generated at Sun Aug 24 11:32:25 2025 by rpki-client