$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d183da02-01fd-3ce0-b7e9-14abdd41a450.roa File: d183da02-01fd-3ce0-b7e9-14abdd41a450.roa (raw, json) Hash identifier: 5oI/l1kHu3frx71ImMaiO0YvTPG4RJFGGpykC5dk+J0= Subject key identifier: CE:9A:4F:CF:7C:E7:68:C2:3D:2F:C2:2F:8B:9B:00:57:3A:69:4E:42 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584DBD05E321DC491B62C501AC80 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d183da02-01fd-3ce0-b7e9-14abdd41a450.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 63293 IP address blocks: 157.240.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:e3:21:dc:49:1b:62:c5:01:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=4cc6f4e6-783a-4914-99cd-eb6fbb860be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3e:4d:91:2d:67:fc:98:78:d5:90:3e:52:00: 2d:1a:6f:2a:61:7b:83:28:d2:bf:3d:23:a0:16:ce: 1d:b6:04:88:00:1f:1f:88:ff:3f:97:6f:f8:c3:9c: ad:84:30:55:82:93:f1:94:6e:f3:06:71:d0:c0:22: 15:47:1a:2f:74:99:ac:52:54:a2:1d:ca:2f:4b:06: 37:1d:74:ec:fd:66:65:e7:21:9c:fe:b2:2e:ce:08: 1f:ed:c6:fb:3a:64:26:27:ec:ef:4f:3a:28:c9:27: 0f:61:1a:08:b5:9e:c5:f1:86:10:a5:01:4d:4e:29: bb:e0:6f:1e:ba:94:b4:1e:81:ab:b5:50:2a:58:72: 97:ab:98:c1:a2:10:60:fe:38:50:dc:e6:a6:b6:65: 84:ac:83:65:83:22:1e:d5:34:aa:41:21:b6:70:35: de:2b:b4:1c:99:43:32:52:d7:27:5e:4b:1f:d6:2c: 58:b5:40:3c:db:ff:20:0a:b7:e1:2e:42:0c:c4:c0: 37:be:da:41:b0:27:c9:aa:0c:bd:fe:98:1c:a7:9a: e5:70:bc:a8:bd:7c:38:ce:79:d8:2a:2b:a5:b3:20: 7b:d3:a2:d9:00:ff:af:98:fc:5f:1e:e8:90:b5:70: 45:00:f4:aa:b4:ea:a3:e6:df:63:e1:2e:96:37:ee: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9A:4F:CF:7C:E7:68:C2:3D:2F:C2:2F:8B:9B:00:57:3A:69:4E:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d183da02-01fd-3ce0-b7e9-14abdd41a450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:7b:de:77:b3:e9:a2:69:d7:e9:36:4b:95:bb:23:28:ca:ef: c3:05:e4:d1:1c:ea:b2:44:42:94:06:82:14:be:e0:98:ae:4c: 8b:f9:da:89:41:3b:93:ce:a7:e1:ec:3c:28:91:d2:c6:5c:21: 1f:b0:f6:8c:2e:a1:96:95:c7:90:44:df:55:5d:56:82:bd:de: e8:cb:86:7b:a8:52:59:33:5a:d6:c4:1b:2c:5a:a3:86:26:fb: 27:fc:74:64:b8:1e:7a:b4:5d:d0:a2:3c:53:ad:7b:46:0e:c0: 33:e3:09:10:00:40:ea:63:94:b1:88:cc:fc:bb:39:1c:e2:f0: a8:f0:df:a5:d1:70:a3:7c:e7:4d:84:0f:7f:f9:0a:f7:fb:60: ab:6e:56:f6:89:c9:4c:d8:79:88:96:97:e0:2b:12:d0:d1:38: 24:16:5a:98:ac:1d:f1:6d:b2:56:15:03:00:a5:50:2e:f7:46: 2c:8e:9f:82:c5:81:97:f2:eb:50:6a:5f:16:29:35:a9:91:90: 90:d5:67:b6:d3:09:ef:31:97:63:42:26:75:00:f5:60:17:e9: ac:86:30:d0:3a:4e:df:87:53:31:7a:d3:bc:af:c8:a7:35:93: 40:4e:e6:3c:c0:32:46:0c:d1:fb:5f:27:bf:43:8d:69:84:96: c9:84:58:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BeMh3EkbYsUBrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk NGNjNmY0ZTYtNzgzYS00OTE0LTk5Y2QtZWI2ZmJiODYwYmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D5NkS1n/Jh41ZA+UgAtGm8qYXuDKNK/PSOg Fs4dtgSIAB8fiP8/l2/4w5ythDBVgpPxlG7zBnHQwCIVRxovdJmsUlSiHcovSwY3 HXTs/WZl5yGc/rIuzggf7cb7OmQmJ+zvTzooyScPYRoItZ7F8YYQpQFNTim74G8e upS0HoGrtVAqWHKXq5jBohBg/jhQ3OamtmWErINlgyIe1TSqQSG2cDXeK7QcmUMy UtcnXksf1ixYtUA82/8gCrfhLkIMxMA3vtpBsCfJqgy9/pgcp5rlcLyovXw4znnY KiulsyB706LZAP+vmPxfHuiQtXBFAPSqtOqj5t9j4S6WN+4BPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6aT89852jCPS/CL4ubAFc6aU5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvZDE4M2RhMDItMDFmZC0z Y2UwLWI3ZTktMTRhYmRkNDFhNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp73nez6aJp1+k2S5W7IyjK78MF5NEc6rJEQpQGghS+4JiuTIv52olB O5POp+HsPCiR0sZcIR+w9owuoZaVx5BE31VdVoK93ujLhnuoUlkzWtbEGyxao4Ym +yf8dGS4Hnq0XdCiPFOte0YOwDPjCRAAQOpjlLGIzPy7ORzi8Kjw36XRcKN8502E D3/5Cvf7YKtuVvaJyUzYeYiWl+ArEtDROCQWWpisHfFtslYVAwClUC73RiyOn4LF gZfy61BqXxYpNamRkJDVZ7bTCe8xl2NCJnUA9WAX6ayGMNA6Tt+HUzF607yvyKc1 k0BO5jzAMkYM0ftfJ79DjWmElsmEWDs= -----END CERTIFICATE-----Generated at Wed May 13 12:29:53 2026 by rpki-client