$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d97bb320-c812-3c84-92a3-7ab04213b188.roa File: d97bb320-c812-3c84-92a3-7ab04213b188.roa (raw, json) Hash identifier: SG+BYOKUUcDIhjSnev7BoYBABGeCYHxTROwI2I2eyOM= Subject key identifier: CC:16:91:FF:99:11:7E:14:3B:F4:E2:B0:57:CB:A3:20:6B:98:0A:86 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584B7FC93E76423C4BC7103147C0 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d97bb320-c812-3c84-92a3-7ab04213b188.roa Signing time: Sun 12 Oct 2025 17:00:50 +0000 ROA not before: Sun 12 Oct 2025 17:00:50 +0000 ROA not after: Sat 10 Jan 2026 18:00:50 +0000 asID: 63293 IP address blocks: 157.240.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:c9:3e:76:42:3c:4b:c7:10:31:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Oct 12 17:00:50 2025 GMT Not After : Jan 10 18:00:50 2026 GMT Subject: CN=59032285-6368-42ee-a040-5e77d40a03d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:b0:1b:d4:b1:f7:4d:67:a7:fa:15:41:93: 38:4d:96:0a:29:92:88:df:31:36:e2:7c:b9:2d:1a: cd:17:59:0f:fe:88:2b:8a:f3:ce:da:be:0e:e6:87: f6:f8:05:48:c4:53:c3:17:9d:f7:3d:d8:62:a3:c2: 0d:28:d1:8e:fd:94:32:6e:3d:eb:43:8d:ea:b7:fa: d2:ad:85:20:8c:fa:5c:6f:19:30:cd:3e:1d:79:70: 31:75:64:b8:7c:93:d3:05:fa:74:8d:32:e9:8b:38: 54:62:9b:19:3e:48:97:89:3e:0d:29:8a:66:81:4c: c0:0b:dc:3d:dc:e8:b6:7c:27:3a:cb:17:ea:dc:24: 8a:23:9b:f3:af:a3:d5:89:bb:1e:80:88:e3:09:c4: eb:2e:6c:a2:f9:a4:a7:00:2d:35:5c:7c:d1:1e:24: 8a:c7:73:6f:83:e1:f5:9c:07:07:23:b1:7a:3b:d0: cf:52:31:3e:f6:eb:a1:6e:f1:9d:3d:9b:12:fc:dd: 73:10:4b:03:7e:1f:3e:96:e1:15:c5:d5:f3:36:b4: 8a:c7:05:07:2d:a5:80:d4:ff:bb:5d:c2:a8:09:6a: e2:ec:8e:6f:d4:72:17:b6:48:6b:30:72:70:cb:6c: 11:fc:fa:cf:e9:ef:97:cc:15:3a:58:4f:4a:f6:25: c7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:16:91:FF:99:11:7E:14:3B:F4:E2:B0:57:CB:A3:20:6B:98:0A:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d97bb320-c812-3c84-92a3-7ab04213b188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:67:47:29:3d:da:0b:40:d7:0d:41:8a:b1:70:89:64:e7:7d: 0e:1b:d1:8a:d0:25:01:e2:ec:26:86:c1:4a:3d:01:c1:bf:55: d8:f7:21:32:1e:6a:71:5b:ab:a4:4e:44:b6:d6:64:90:ed:b5: 37:cd:b1:45:b7:6f:b9:17:5f:7c:58:f6:45:85:8b:e7:72:6f: a3:76:3a:53:bd:8a:18:04:8d:e9:d4:48:4d:75:95:9c:07:e1: f9:0a:1c:b9:0e:01:40:a9:f3:f2:4a:76:5d:5f:f4:70:3b:4e: 74:d1:a5:1a:40:d9:66:46:92:83:62:98:1a:ff:db:aa:c3:60: 82:55:dc:ae:d6:cf:e1:c0:cf:5d:7d:55:71:94:43:57:4f:e3: e6:d8:16:8b:30:1e:83:2b:97:67:15:cd:9b:63:3e:85:cd:d4: 69:5c:27:fb:2d:a1:01:1a:21:3a:7b:bf:f7:7c:06:8a:fd:f4: 3b:9e:b1:4b:4e:c7:a9:7a:61:7a:5e:55:98:0d:11:dd:1e:b6: eb:f9:3d:53:4c:2a:9f:18:c7:3f:84:b1:ed:a7:8d:ef:dd:51: 16:f1:03:67:18:cd:f3:c8:ee:8f:62:57:01:88:3d:a9:53:f7: c1:ab:e9:ab:d0:ee:bb:2e:f1:c4:d1:4a:2f:d4:8f:fd:9c:a4: cd:2c:2f:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/yT52QjxLxxAxR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MTAxMjE3MDA1MFoXDTI2MDExMDE4MDA1MFowLzEtMCsGA1UEAxMk NTkwMzIyODUtNjM2OC00MmVlLWEwNDAtNWU3N2Q0MGEwM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/ywG9Sx901np/oVQZM4TZYKKZKI3zE24ny5 LRrNF1kP/ogrivPO2r4O5of2+AVIxFPDF533Pdhio8INKNGO/ZQybj3rQ43qt/rS rYUgjPpcbxkwzT4deXAxdWS4fJPTBfp0jTLpizhUYpsZPkiXiT4NKYpmgUzAC9w9 3Oi2fCc6yxfq3CSKI5vzr6PVibsegIjjCcTrLmyi+aSnAC01XHzRHiSKx3Nvg+H1 nAcHI7F6O9DPUjE+9uuhbvGdPZsS/N1zEEsDfh8+luEVxdXzNrSKxwUHLaWA1P+7 XcKoCWri7I5v1HIXtkhrMHJwy2wR/PrP6e+XzBU6WE9K9iXHBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwWkf+ZEX4UO/TisFfLoyBrmAqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvZDk3YmIzMjAtYzgxMi0z Yzg0LTkyYTMtN2FiMDQyMTNiMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1nRyk92gtA1w1BirFwiWTnfQ4b0YrQJQHi7CaGwUo9AcG/Vdj3ITIe anFbq6RORLbWZJDttTfNsUW3b7kXX3xY9kWFi+dyb6N2OlO9ihgEjenUSE11lZwH 4fkKHLkOAUCp8/JKdl1f9HA7TnTRpRpA2WZGkoNimBr/26rDYIJV3K7Wz+HAz119 VXGUQ1dP4+bYFoswHoMrl2cVzZtjPoXN1GlcJ/stoQEaITp7v/d8Bor99DuesUtO x6l6YXpeVZgNEd0etuv5PVNMKp8Yxz+Ese2nje/dURbxA2cYzfPI7o9iVwGIPalT 98Gr6avQ7rsu8cTRSi/Uj/2cpM0sLx4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:25 2025 by rpki-client