$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa File: a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa (raw, json) Hash identifier: Ax6Gmh0jmastb7TbNlQ6Ckb3LhURtYeSm9cJGqKyudE= Subject key identifier: 1C:F3:91:59:69:86:5A:3A:82:D7:75:42:A4:6D:1F:86:E1:24:20:07 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584D86956D345A87B4339E766000 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 63293 IP address blocks: 157.240.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:6d:34:5a:87:b4:33:9e:76:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=550c71a9-5130-440f-b3e6-e104b4f96e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:20:3a:a3:53:ea:d3:09:42:03:75:3c:9e:3f: 06:12:b0:7a:dd:1f:f4:c4:3b:48:05:e5:b6:71:f3: 2d:e7:31:23:ba:b8:a9:f0:0f:6b:80:f3:e4:43:ec: 57:02:a8:2a:50:6b:65:ed:13:e0:59:8d:3b:57:7b: e3:c8:51:df:3c:57:b9:bd:f9:9c:72:7e:59:b5:77: 74:84:32:f0:d5:84:d9:4a:73:98:b5:11:dc:34:7f: 2a:72:db:b6:94:f7:96:f5:30:79:49:18:0c:46:b4: 7d:ff:61:04:26:86:88:13:e1:15:da:50:5a:11:31: 93:12:7d:36:b2:91:2d:22:fc:20:59:1e:96:fe:ec: f8:2a:17:59:39:37:80:3a:57:4f:8b:00:8a:33:61: f1:ac:89:e6:03:68:e6:db:0a:2e:b1:2b:54:2c:ab: a6:bc:6e:82:f8:52:40:7f:9a:d6:e1:bb:05:f5:00: f1:6d:04:b0:5b:05:a2:16:87:e5:64:e2:bd:8d:21: 77:7a:25:d2:23:83:34:05:df:83:11:15:c0:ea:79: a1:ce:3f:12:ed:eb:43:cd:69:c5:8b:4e:a1:e5:4a: 4a:85:95:cc:d8:9c:10:e7:7f:4e:04:79:4b:07:4f: 7f:c2:21:02:e2:bb:b2:5d:9e:a4:6c:87:e2:60:99: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F3:91:59:69:86:5A:3A:82:D7:75:42:A4:6D:1F:86:E1:24:20:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:55:0f:b4:74:5c:29:2c:ec:d8:40:d4:67:50:f0:f7:23:3f: 25:3f:70:a5:17:79:16:28:ed:fa:e8:4a:fb:45:4c:e8:91:7a: e6:ef:45:b9:d2:71:8d:04:11:14:50:7b:9c:f0:a7:f4:af:80: 73:ba:4b:02:87:d6:f5:cb:5f:91:dd:2a:8e:42:92:96:cc:a7: 09:03:39:16:6d:df:63:ba:f6:f8:da:49:f0:4c:3a:b2:ca:9f: f6:a1:9f:7f:5a:02:93:2d:0d:26:f8:34:f2:da:fb:d2:38:03: 8b:87:e1:7f:7b:ff:33:9a:da:71:c5:48:55:f9:9c:bc:a7:d4: a8:1d:b1:4b:16:71:be:a8:e4:53:35:15:88:f3:a6:4b:11:79: 0f:13:16:cf:56:27:5a:5b:5f:73:1b:15:52:51:14:6a:a6:4a: 9e:06:e3:d5:e8:37:2e:44:ea:8e:65:91:fc:23:1f:da:91:fc: d4:8b:b5:91:45:99:4a:6a:e6:24:9b:dc:f2:e2:1d:2f:b6:70: c2:ce:ea:c4:1b:b8:d4:d3:d5:3c:62:43:0f:35:82:6f:2e:92: 95:7a:0c:09:f2:98:b0:cc:1e:2f:d6:93:46:59:6b:61:1f:c2: 26:6b:d2:7a:11:dc:29:63:43:0d:9f:a5:0f:e1:d5:87:d8:50: 5a:5b:7a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlW00Woe0M552YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NTUwYzcxYTktNTEzMC00NDBmLWIzZTYtZTEwNGI0Zjk2ZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyA6o1Pq0wlCA3U8nj8GErB63R/0xDtIBeW2 cfMt5zEjurip8A9rgPPkQ+xXAqgqUGtl7RPgWY07V3vjyFHfPFe5vfmccn5ZtXd0 hDLw1YTZSnOYtRHcNH8qctu2lPeW9TB5SRgMRrR9/2EEJoaIE+EV2lBaETGTEn02 spEtIvwgWR6W/uz4KhdZOTeAOldPiwCKM2HxrInmA2jm2wousStULKumvG6C+FJA f5rW4bsF9QDxbQSwWwWiFoflZOK9jSF3eiXSI4M0Bd+DERXA6nmhzj8S7etDzWnF i06h5UpKhZXM2JwQ539OBHlLB09/wiEC4ruyXZ6kbIfiYJm92wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzzkVlphlo6gtd1QqRtH4bhJCAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvYTJjYjMxZGMtZDM3OS0z YzZiLWIyYTMtMjQ2MDVjMmE0ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlVD7R0XCks7NhA1GdQ8PcjPyU/cKUXeRYo7froSvtFTOiReubvRbnS cY0EERRQe5zwp/SvgHO6SwKH1vXLX5HdKo5CkpbMpwkDORZt32O69vjaSfBMOrLK n/ahn39aApMtDSb4NPLa+9I4A4uH4X97/zOa2nHFSFX5nLyn1KgdsUsWcb6o5FM1 FYjzpksReQ8TFs9WJ1pbX3MbFVJRFGqmSp4G49XoNy5E6o5lkfwjH9qR/NSLtZFF mUpq5iSb3PLiHS+2cMLO6sQbuNTT1TxiQw81gm8ukpV6DAnymLDMHi/Wk0ZZa2Ef wiZr0noR3CljQw2fpQ/h1YfYUFpbev8= -----END CERTIFICATE-----Generated at Fri Apr 17 21:27:02 2026 by rpki-client