$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d183da02-01fd-3ce0-b7e9-14abdd41a450.roa File: d183da02-01fd-3ce0-b7e9-14abdd41a450.roa (raw, json) Hash identifier: fvfj4n/iQdKWGM6VYEPZbPYwMmzjctaQ5kCEZ1qREro= Subject key identifier: A8:E3:FF:E6:EB:66:12:71:1D:B7:C4:F2:B3:D4:F8:BB:FB:76:C0:74 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584A3BF1E7E443BD04AF4B319200 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d183da02-01fd-3ce0-b7e9-14abdd41a450.roa Signing time: Wed 18 Jun 2025 17:00:52 +0000 ROA not before: Wed 18 Jun 2025 17:00:52 +0000 ROA not after: Tue 16 Sep 2025 17:00:52 +0000 asID: 63293 IP address blocks: 157.240.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:f1:e7:e4:43:bd:04:af:4b:31:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Jun 18 17:00:52 2025 GMT Not After : Sep 16 17:00:52 2025 GMT Subject: CN=3d3f0f6f-e591-4100-9c23-a3bc306f69b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:ab:e1:bf:5d:0a:88:d8:6c:2b:63:46:ad: d4:06:cf:d4:21:f4:d3:e3:1b:ad:17:bd:15:55:fc: fb:ac:d0:57:d7:1d:e1:06:01:2e:d6:02:d3:aa:a7: 05:ad:df:f8:54:a1:69:30:ca:74:d5:2f:b2:cb:4d: f6:ac:44:43:49:1f:ee:d9:8a:ca:ce:2d:1a:6a:9a: 01:56:5c:fd:f9:3e:4d:f7:2e:a5:fb:5a:0d:1b:76: fd:b4:e5:09:2d:18:4b:ee:b0:3a:2f:ab:38:71:df: 5b:3a:22:58:86:60:e1:65:56:08:94:91:c7:e8:a3: a4:a8:16:d7:4c:0f:fd:98:9b:8a:e8:f0:d0:f9:2f: 96:71:4b:d1:56:11:91:c4:4d:ff:c8:39:db:84:6c: d1:9e:d6:5e:d5:40:bd:d8:70:be:3b:f4:a2:7f:53: ba:4c:4e:7e:d5:97:1e:e7:14:d0:a0:21:e7:2f:cb: db:ed:fa:a2:b7:bf:11:20:d5:df:c2:7c:5b:2e:9f: c0:f4:65:bb:e8:95:42:59:ee:20:c5:0d:33:93:39: 2d:ec:6c:c3:7f:0e:6d:67:46:56:91:ac:43:92:68: f2:b5:1d:18:b5:90:ed:d0:20:2f:df:51:54:0a:f7: 6e:1a:f3:0f:e1:bd:fb:92:d3:63:bb:4f:97:7d:5d: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E3:FF:E6:EB:66:12:71:1D:B7:C4:F2:B3:D4:F8:BB:FB:76:C0:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d183da02-01fd-3ce0-b7e9-14abdd41a450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:47:2e:03:d0:30:8d:ca:06:a3:64:55:22:ee:c3:37:4b:20: da:78:d6:f9:f1:1b:26:fa:11:a4:48:d5:46:78:df:0c:36:62: 34:d5:37:4e:65:9e:fc:cb:1c:a6:05:b4:ae:77:71:92:74:80: f2:df:a7:8d:b8:6a:15:88:15:f8:6f:2c:82:5c:f3:c1:a0:53: 02:96:13:a1:05:6c:20:aa:4b:70:1a:88:55:62:a7:6b:bc:f2: 43:97:8e:01:a5:80:47:1e:1f:f6:e5:18:fc:4e:6d:31:b0:74: c4:4e:38:da:0f:47:9e:b2:bf:8e:b3:c3:35:64:a0:17:d1:c1: 4e:be:b4:22:55:db:58:45:fc:3e:48:99:1a:f3:24:03:fb:23: bd:70:72:a6:b7:f7:cd:16:ec:6e:38:dc:ad:2c:10:33:30:c1: 83:52:00:3b:d6:45:cc:4a:e5:a0:a4:ac:b4:c6:19:17:bb:8c: cb:bc:c3:bd:b2:0c:17:a7:bb:89:86:19:6f:0f:a0:85:7a:20: 12:da:68:b7:54:00:2d:c6:cb:ae:dd:07:36:b4:76:25:d1:c6: 2a:65:f4:16:e9:f9:63:c8:d0:9c:ce:29:90:09:72:cd:73:a1: ed:86:fb:f9:40:16:b1:e3:a6:56:38:33:58:26:97:76:48:74: 02:d7:1b:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo78efkQ70Er0sxkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDYxODE3MDA1MloXDTI1MDkxNjE3MDA1MlowLzEtMCsGA1UEAxMk M2QzZjBmNmYtZTU5MS00MTAwLTljMjMtYTNiYzMwNmY2OWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPGr4b9dCojYbCtjRq3UBs/UIfTT4xutF70V Vfz7rNBX1x3hBgEu1gLTqqcFrd/4VKFpMMp01S+yy032rERDSR/u2YrKzi0aapoB Vlz9+T5N9y6l+1oNG3b9tOUJLRhL7rA6L6s4cd9bOiJYhmDhZVYIlJHH6KOkqBbX TA/9mJuK6PDQ+S+WcUvRVhGRxE3/yDnbhGzRntZe1UC92HC+O/Sif1O6TE5+1Zce 5xTQoCHnL8vb7fqit78RINXfwnxbLp/A9GW76JVCWe4gxQ0zkzkt7GzDfw5tZ0ZW kaxDkmjytR0YtZDt0CAv31FUCvduGvMP4b37ktNju0+XfV1W/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjj/+brZhJxHbfE8rPU+Lv7dsB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvZDE4M2RhMDItMDFmZC0z Y2UwLWI3ZTktMTRhYmRkNDFhNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJHLgPQMI3KBqNkVSLuwzdLINp41vnxGyb6EaRI1UZ43ww2YjTVN05l nvzLHKYFtK53cZJ0gPLfp424ahWIFfhvLIJc88GgUwKWE6EFbCCqS3AaiFVip2u8 8kOXjgGlgEceH/blGPxObTGwdMROONoPR56yv46zwzVkoBfRwU6+tCJV21hF/D5I mRrzJAP7I71wcqa3980W7G443K0sEDMwwYNSADvWRcxK5aCkrLTGGRe7jMu8w72y DBenu4mGGW8PoIV6IBLaaLdUAC3Gy67dBza0diXRxipl9Bbp+WPI0JzOKZAJcs1z oe2G+/lAFrHjplY4M1gml3ZIdALXG9c= -----END CERTIFICATE-----Generated at Tue Jul 1 02:32:38 2025 by rpki-client