$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa File: 0752d384-9147-3c2d-9b3e-23a76dab9594.roa (raw, json) Hash identifier: HnfiSUK5hW2fb8hg/sP+ex99Pk2rpO/UqcLw7WDEqfE= Subject key identifier: 05:F9:0A:5A:20:D9:6F:41:66:2D:2C:1C:86:7B:B4:54:C1:D4:58:BB Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584D6AAA9032B9A4A9A4AB30DC80 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 63293 IP address blocks: 157.240.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:90:32:b9:a4:a9:a4:ab:30:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=55528364-f2b8-450b-8552-379ae3444cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f3:6d:05:76:0c:8e:8f:e7:1b:d6:70:e6:fa: 69:5f:32:f1:3f:3d:b0:7f:66:98:3c:93:99:c1:d0: 96:c3:20:16:66:ad:7b:ce:40:d2:85:aa:be:5d:19: 54:b9:21:e2:25:d5:cd:75:55:b1:7a:28:5d:9b:28: 5c:f7:0a:8f:69:23:fc:a0:94:7a:a9:e0:07:0c:d2: 28:60:dd:69:42:41:85:e2:40:3b:f1:14:b4:e5:30: 94:a5:e7:56:cf:cc:7a:70:f7:ec:99:73:27:fa:f5: 9a:49:11:01:d0:91:aa:30:3e:1b:bf:80:65:25:f8: 24:93:b7:eb:45:4b:96:98:63:1a:47:a9:a7:fe:7e: 8b:12:de:a9:37:0f:58:0a:58:a7:a3:a7:84:ed:83: 8f:ee:0f:d5:4a:c8:be:1e:72:a9:f3:97:eb:a1:9f: fb:15:60:53:65:dc:b5:99:ff:9d:b7:16:81:d9:48: f9:89:25:dd:31:60:e3:98:5d:55:68:b9:fe:54:12: 45:9e:d4:5f:b6:6a:33:8b:32:61:f4:c4:13:00:82: df:28:0d:7b:31:aa:ec:9e:8c:24:98:b2:74:3b:23: 3e:99:d2:34:40:05:b3:1c:af:c4:53:38:59:e5:98: fb:bb:4c:e8:49:52:50:9a:d2:e9:98:73:c3:3b:b1: 69:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F9:0A:5A:20:D9:6F:41:66:2D:2C:1C:86:7B:B4:54:C1:D4:58:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:54:9b:e3:db:04:96:53:67:65:a5:de:b2:83:ff:2c:b6:19: 23:95:a5:41:e3:d9:13:2c:56:2c:fc:53:c8:4d:ae:08:85:03: fd:ce:35:1e:ea:d5:d2:2d:14:69:02:f2:2d:c6:1e:dd:15:03: f3:0e:bc:3a:2d:f6:b5:4f:14:1c:df:18:97:75:94:eb:02:66: d6:c1:58:11:16:78:c9:1f:70:60:79:46:67:81:7f:f9:83:91: 35:8e:b5:af:b8:12:be:22:37:fe:74:45:0b:47:4e:b9:63:7c: c0:44:56:6b:a0:65:7e:c8:53:df:b7:94:db:ef:4a:14:0a:8c: 9d:a0:d5:37:94:75:63:73:0e:3f:42:be:ca:6d:21:d3:2f:5b: 9f:20:b1:fc:50:1e:41:21:cb:21:a2:1b:6f:72:b0:7b:e1:3a: de:a4:fb:09:22:60:19:77:0c:91:17:b9:8e:b5:3c:97:97:2b: 74:4c:0a:33:d7:66:e2:4b:7a:2f:bf:1c:6b:5d:c3:28:09:06: cd:55:5a:dd:79:4e:18:c5:73:6d:af:c1:6b:34:ed:1a:7e:11: d3:18:02:24:0c:65:bf:ae:1a:0c:fc:7a:73:19:b4:8c:c0:8f: 56:4e:a7:f2:39:c8:24:b4:bb:39:01:d9:1d:87:d3:b2:fe:6a: 21:bc:7b:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpAyuaSppKsw3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NTU1MjgzNjQtZjJiOC00NTBiLTg1NTItMzc5YWUzNDQ0Y2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfNtBXYMjo/nG9Zw5vppXzLxPz2wf2aYPJOZ wdCWwyAWZq17zkDShaq+XRlUuSHiJdXNdVWxeihdmyhc9wqPaSP8oJR6qeAHDNIo YN1pQkGF4kA78RS05TCUpedWz8x6cPfsmXMn+vWaSREB0JGqMD4bv4BlJfgkk7fr RUuWmGMaR6mn/n6LEt6pNw9YClino6eE7YOP7g/VSsi+HnKp85froZ/7FWBTZdy1 mf+dtxaB2Uj5iSXdMWDjmF1VaLn+VBJFntRftmozizJh9MQTAILfKA17Marsnowk mLJ0OyM+mdI0QAWzHK/EUzhZ5Zj7u0zoSVJQmtLpmHPDO7FpbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAX5Clog2W9BZi0sHIZ7tFTB1Fi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMDc1MmQzODQtOTE0Ny0z YzJkLTliM2UtMjNhNzZkYWI5NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZUm+PbBJZTZ2Wl3rKD/yy2GSOVpUHj2RMsViz8U8hNrgiFA/3ONR7q 1dItFGkC8i3GHt0VA/MOvDot9rVPFBzfGJd1lOsCZtbBWBEWeMkfcGB5RmeBf/mD kTWOta+4Er4iN/50RQtHTrljfMBEVmugZX7IU9+3lNvvShQKjJ2g1TeUdWNzDj9C vsptIdMvW58gsfxQHkEhyyGiG29ysHvhOt6k+wkiYBl3DJEXuY61PJeXK3RMCjPX ZuJLei+/HGtdwygJBs1VWt15ThjFc22vwWs07Rp+EdMYAiQMZb+uGgz8enMZtIzA j1ZOp/I5yCS0uzkB2R2H07L+aiG8exA= -----END CERTIFICATE-----Generated at Fri Apr 17 21:27:42 2026 by rpki-client