$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d183da02-01fd-3ce0-b7e9-14abdd41a450.roa File: d183da02-01fd-3ce0-b7e9-14abdd41a450.roa (raw, json) Hash identifier: jMNYD4pz2kVnvcGJDDXq7qpWbNdTmNiN9fO9jkL0J5Q= Subject key identifier: 58:39:55:2B:BE:50:D1:B1:18:82:96:F7:1B:4F:0A:79:7C:25:4F:0C Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584E9D4AB2C881C8FC226BD433C0 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d183da02-01fd-3ce0-b7e9-14abdd41a450.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 63293 IP address blocks: 157.240.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b2:c8:81:c8:fc:22:6b:d4:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=dda25486-5b8d-4c76-9aa3-ddff01673397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a8:12:68:bc:68:2b:57:28:a0:57:a8:b5:2b: 6c:3c:b1:74:98:7c:ab:74:5b:17:03:e6:6d:99:19: 29:6a:05:2e:25:9e:78:2f:32:e8:a0:e1:5b:03:55: 17:86:f0:d4:7f:e9:79:cd:4e:e9:43:b4:78:60:8b: 19:2c:6f:f0:16:72:7e:02:15:3d:7f:e4:20:52:1b: a1:58:bd:d7:38:f0:24:6e:85:a7:7e:4f:b1:d1:fc: 8d:cd:c1:95:ec:65:62:f1:e8:99:24:2f:6f:e9:68: 5f:8c:8f:35:89:c9:f2:3f:73:eb:37:1a:f0:e1:2f: cd:e5:1a:0d:a1:b3:c4:72:fc:06:15:85:1f:18:22: b4:aa:34:62:73:3e:70:03:f6:84:55:dc:73:b2:06: 2d:85:36:76:11:02:d5:62:55:d4:94:f1:7f:f5:a7: be:a3:22:1d:ab:ac:a1:76:7f:d3:a8:01:a0:94:da: 61:99:9d:f3:4f:d7:c7:ef:14:23:92:33:fb:39:c8: 5b:e7:03:93:3a:0b:bb:17:6d:12:82:ed:b5:32:67: 9b:bf:91:41:f3:61:44:db:97:6f:2d:53:87:73:d6: 7a:ef:6e:49:33:54:00:63:ee:32:98:ca:28:fe:dd: 3f:83:70:f5:72:85:08:3c:f5:4b:c6:01:d3:2d:3f: 57:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:39:55:2B:BE:50:D1:B1:18:82:96:F7:1B:4F:0A:79:7C:25:4F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d183da02-01fd-3ce0-b7e9-14abdd41a450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b0:20:7e:31:3e:6a:09:a7:22:1d:34:c4:34:4e:3f:53:ca: a4:67:40:d2:45:a4:34:4d:f0:21:76:53:36:cc:09:85:07:13: b9:bf:8f:60:d0:5c:62:ca:49:d6:c5:90:8e:69:a9:2f:45:71: 0c:68:0b:e9:53:aa:92:d5:3b:49:de:46:dc:c4:78:b3:37:1f: 0c:cb:a4:bd:a8:b5:fd:74:df:44:8c:5b:36:32:ff:0d:d8:08: 5b:a1:e8:46:79:97:c4:e8:73:25:92:d5:7b:1d:90:de:d5:df: 38:f4:51:ec:cc:d5:df:65:45:54:0c:bc:6d:71:6b:17:1b:c5: 33:ca:4d:3b:10:67:f7:ce:45:ca:35:3a:b9:00:99:45:af:9f: 65:ad:48:d2:05:16:81:39:cf:de:90:b7:6a:3d:b2:5d:da:ac: 1c:51:06:f1:a4:3d:cf:3f:e6:c3:95:5b:77:b1:5e:75:ae:20: 2a:63:e6:3c:db:de:bd:a2:85:18:06:a0:4f:1c:23:19:f8:89: 41:11:36:a1:4b:2d:cc:0f:70:9e:6e:07:11:7d:42:98:2d:07: 5a:86:ff:c2:c3:45:59:10:44:68:4c:28:25:61:0f:dc:36:f1: 58:7b:33:5c:5a:0a:c8:c9:a8:5d:0f:6b:b2:56:e5:35:44:fe: 34:14:e6:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSrLIgcj8ImvUM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk ZGRhMjU0ODYtNWI4ZC00Yzc2LTlhYTMtZGRmZjAxNjczMzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKgSaLxoK1cooFeotStsPLF0mHyrdFsXA+Zt mRkpagUuJZ54LzLooOFbA1UXhvDUf+l5zU7pQ7R4YIsZLG/wFnJ+AhU9f+QgUhuh WL3XOPAkboWnfk+x0fyNzcGV7GVi8eiZJC9v6WhfjI81icnyP3PrNxrw4S/N5RoN obPEcvwGFYUfGCK0qjRicz5wA/aEVdxzsgYthTZ2EQLVYlXUlPF/9ae+oyIdq6yh dn/TqAGglNphmZ3zT9fH7xQjkjP7Ochb5wOTOgu7F20Sgu21Mmebv5FB82FE25dv LVOHc9Z6725JM1QAY+4ymMoo/t0/g3D1coUIPPVLxgHTLT9X8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg5VSu+UNGxGIKW9xtPCnl8JU8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvZDE4M2RhMDItMDFmZC0z Y2UwLWI3ZTktMTRhYmRkNDFhNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6wIH4xPmoJpyIdNMQ0Tj9TyqRnQNJFpDRN8CF2UzbMCYUHE7m/j2DQ XGLKSdbFkI5pqS9FcQxoC+lTqpLVO0neRtzEeLM3HwzLpL2otf1030SMWzYy/w3Y CFuh6EZ5l8TocyWS1XsdkN7V3zj0UezM1d9lRVQMvG1xaxcbxTPKTTsQZ/fORco1 OrkAmUWvn2WtSNIFFoE5z96Qt2o9sl3arBxRBvGkPc8/5sOVW3exXnWuICpj5jzb 3r2ihRgGoE8cIxn4iUERNqFLLcwPcJ5uBxF9QpgtB1qG/8LDRVkQRGhMKCVhD9w2 8Vh7M1xaCsjJqF0Pa7JW5TVE/jQU5hE= -----END CERTIFICATE-----Generated at Wed Jul 29 04:03:13 2026 by rpki-client