$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa File: 131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa (raw, json) Hash identifier: b5gV30AQCN1OJLRdnaUNLxrcnY96UYMSQeb51ifqEXo= Subject key identifier: 10:AB:92:48:01:A5:6D:97:3C:3E:DC:8B:80:E1:8F:0F:7D:5F:D3:B8 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584CCA4218D678D8D00230388100 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa Signing time: Sun 08 Feb 2026 02:00:32 +0000 ROA not before: Sun 08 Feb 2026 02:00:32 +0000 ROA not after: Sat 09 May 2026 01:00:32 +0000 asID: 63293 IP address blocks: 157.240.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ca:42:18:d6:78:d8:d0:02:30:38:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Feb 8 02:00:32 2026 GMT Not After : May 9 01:00:32 2026 GMT Subject: CN=53e8e6b8-e302-449e-8014-a423075a3f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:f0:c1:ef:a2:01:7f:a0:97:d2:bb:cd:9b: aa:61:18:c0:71:ba:b6:94:4b:9f:6d:af:bb:b1:32: 94:2b:1f:d3:f1:49:94:ce:dc:ef:78:84:56:12:74: a9:d1:03:a7:d0:3e:ea:c6:88:de:ec:bd:d6:05:28: 93:48:2a:28:7b:4f:54:eb:21:8b:23:af:43:68:bf: 3a:73:a0:af:b0:f0:c6:b5:0e:89:22:10:66:83:ed: bb:87:ef:31:bd:9f:16:b3:98:bf:f2:21:0a:2a:3f: 6e:b8:c1:22:73:f7:e0:f7:41:2d:71:e7:8a:a9:33: 39:99:d2:8c:fd:15:bf:a7:bc:72:5d:aa:09:31:73: 60:5f:1c:a3:5a:d6:ea:2a:31:60:4c:4d:b8:18:14: 9a:8f:93:c3:ad:b5:1e:42:2d:97:12:d2:97:a6:13: ee:75:57:66:3c:51:5d:61:50:25:2d:db:e4:48:1f: 02:e9:8d:1a:eb:c1:30:31:42:9b:55:0c:d3:db:2e: 0e:85:aa:df:0e:16:0e:55:cb:bc:1e:00:8f:de:45: 2b:11:1c:83:93:04:d2:96:ea:bd:14:da:38:f8:28: 5b:4b:6f:2b:82:09:f4:f5:3b:7d:ae:47:3f:6a:2e: 8f:c7:ed:40:e7:c3:38:d0:03:d7:70:9d:ee:5a:e4: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AB:92:48:01:A5:6D:97:3C:3E:DC:8B:80:E1:8F:0F:7D:5F:D3:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:6f:dd:aa:dd:fb:5b:28:b2:09:71:e2:0b:bb:0d:d3:14:37: ac:9c:8a:ca:66:e7:9b:fe:96:a4:87:c7:5a:16:f5:d1:6c:f5: a3:82:e5:81:c1:10:b2:74:56:b7:8c:82:0a:57:55:f0:95:81: 1c:c7:0d:1a:e1:86:6f:a6:cc:bc:da:5b:74:c3:69:29:e0:2d: 09:85:85:ee:aa:34:c4:11:d3:0c:93:73:3d:51:d4:41:94:e7: 42:59:41:fe:9c:5e:2c:88:22:8a:1d:34:28:69:2a:c5:e1:39: 61:20:06:97:82:b7:ee:ca:cd:d5:4d:57:c2:a8:a8:8d:86:33: 71:d1:5a:b6:a3:cd:bc:07:fb:4d:9b:bd:8d:58:29:65:96:61: c0:b7:f1:da:fd:eb:f7:b6:77:5e:c7:7d:8b:44:80:e5:55:a4: ef:5e:ec:0f:a3:a0:46:03:ca:6c:87:27:53:5f:c8:34:8d:87: 15:97:50:dd:51:a5:48:7f:e6:c0:ac:a0:88:d8:e1:13:69:b2: 8d:46:e9:8c:8d:b5:ad:48:51:2a:26:ce:7b:18:93:67:15:9b: 6a:ad:9e:60:54:62:33:21:fc:5f:ab:9b:0d:70:77:dd:79:b1: e0:42:cb:ab:20:b2:91:89:73:96:38:43:2b:25:90:e2:ae:db: 8a:47:76:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQhjWeNjQAjA4gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk NTNlOGU2YjgtZTMwMi00NDllLTgwMTQtYTQyMzA3NWEzZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHLwwe+iAX+gl9K7zZuqYRjAcbq2lEufba+7 sTKUKx/T8UmUztzveIRWEnSp0QOn0D7qxoje7L3WBSiTSCooe09U6yGLI69DaL86 c6CvsPDGtQ6JIhBmg+27h+8xvZ8Ws5i/8iEKKj9uuMEic/fg90EtceeKqTM5mdKM /RW/p7xyXaoJMXNgXxyjWtbqKjFgTE24GBSaj5PDrbUeQi2XEtKXphPudVdmPFFd YVAlLdvkSB8C6Y0a68EwMUKbVQzT2y4OharfDhYOVcu8HgCP3kUrERyDkwTSluq9 FNo4+ChbS28rggn09Tt9rkc/ai6Px+1A58M40APXcJ3uWuRJmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCrkkgBpW2XPD7ci4Dhjw99X9O4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMTMxYzJjMjAtNmZjNy0z ZWU0LWFjYmYtZGI5NDJmZDFkOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFv3ard+1sosglx4gu7DdMUN6ycispm55v+lqSHx1oW9dFs9aOC5YHB ELJ0VreMggpXVfCVgRzHDRrhhm+mzLzaW3TDaSngLQmFhe6qNMQR0wyTcz1R1EGU 50JZQf6cXiyIIoodNChpKsXhOWEgBpeCt+7KzdVNV8KoqI2GM3HRWrajzbwH+02b vY1YKWWWYcC38dr96/e2d17HfYtEgOVVpO9e7A+joEYDymyHJ1NfyDSNhxWXUN1R pUh/5sCsoIjY4RNpso1G6YyNta1IUSomznsYk2cVm2qtnmBUYjMh/F+rmw1wd915 seBCy6sgspGJc5Y4QyslkOKu24pHdjY= -----END CERTIFICATE-----Generated at Mon Mar 2 15:11:12 2026 by rpki-client