$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa File: e3d82341-289c-3a6e-b275-a759634f1b4a.roa (raw, json) Hash identifier: EwTuiNQNi8DVwnnfOJOGKTnlZk8ezQ5QgQATaTLC1Ng= Subject key identifier: 5A:5B:DF:84:54:E1:AF:CA:64:CB:75:28:1C:19:17:6E:D8:70:CF:44 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584A2EEAC15255B57FA721D1C020 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 63293 IP address blocks: 157.240.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:c1:52:55:b5:7f:a7:21:d1:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=e3b60ae3-bdeb-47d6-ab34-62ab2aa77674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6e:a1:9f:7e:29:2a:da:38:ba:5a:92:8e:77: e3:4b:6e:b4:2b:6b:3d:1b:95:72:fe:48:18:7b:6a: a7:40:7e:a7:65:6c:5e:6e:e5:52:7b:9c:a5:79:b5: 89:8c:47:0d:97:44:ab:f0:50:da:ab:fc:77:13:27: ab:16:87:44:be:25:2b:d9:8c:2a:19:50:9a:21:87: 50:19:25:1d:0d:04:5b:90:76:94:b4:c8:af:b6:1f: 96:50:f3:1c:f0:a8:5d:e6:4f:e9:de:20:d4:0a:02: 9a:b4:c3:97:c3:91:9f:26:12:1b:8b:ce:11:f7:63: cd:5d:a8:ad:0b:e4:26:e9:47:26:f2:b0:5f:9c:8e: be:9d:9d:f4:1d:7a:5f:12:25:e3:f4:95:72:cc:4b: 5b:1d:fc:46:4b:50:50:54:33:9e:4a:9d:ce:f3:8e: 1c:94:1a:36:6f:24:e2:77:ef:51:ba:4a:04:99:9c: 65:7e:84:78:a1:59:4f:2a:21:0a:11:62:17:62:a8: 04:c1:e8:ee:c0:1c:47:9e:ee:b4:3b:3a:d0:9a:17: fc:11:fe:42:ea:0a:13:8e:c2:1b:03:b4:80:b3:77: 97:5d:2f:4c:5b:06:af:ea:93:8d:5b:ba:aa:06:1e: eb:d2:19:f3:45:d9:d1:4f:0d:3f:32:99:e0:69:de: c0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5B:DF:84:54:E1:AF:CA:64:CB:75:28:1C:19:17:6E:D8:70:CF:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d0:ba:d2:d6:e2:2a:97:b6:54:c2:ef:d2:8d:9c:fa:ca:0f: 7e:cf:19:b8:6e:67:3c:6e:b2:fd:95:85:ce:1e:b6:29:85:e8: 82:63:0d:77:2f:d3:b0:22:7f:e7:c6:b7:23:a1:89:99:d1:34: 38:2e:4a:9f:22:b7:b7:6d:0f:eb:1a:01:b9:fb:32:8b:02:e5: 1b:df:db:64:42:a2:35:17:b8:49:7f:48:10:c6:45:51:3f:76: 19:bd:d7:78:82:1c:9f:03:c2:a5:d3:55:a3:e8:ab:77:61:c6: b2:96:4c:06:28:72:fe:05:68:20:8f:75:41:8f:d2:d3:57:85: b7:4c:1e:30:67:5a:db:dc:30:ec:7f:b3:8f:08:ce:8f:0f:a8: 7b:cd:35:bf:5d:9a:c0:83:fc:a6:ee:b8:27:de:3e:7b:7f:f9: 12:16:d6:5d:a1:5d:b9:d1:0a:cf:34:78:4f:6d:dd:b4:37:62: 51:ac:dc:62:98:7e:e2:0f:d4:8d:4a:e8:c3:be:46:00:e0:f1: 16:22:52:0b:5d:3d:4b:4e:2b:7c:de:2a:6c:cf:ea:ba:dd:39: 08:0b:2d:2d:89:4b:4b:41:d3:1c:dd:4e:47:f1:f7:0b:99:c6: 34:53:5a:09:36:3b:c9:7f:26:c2:8c:4f:4f:33:9e:38:31:f5: f1:9e:9b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6sFSVbV/pyHRwCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk ZTNiNjBhZTMtYmRlYi00N2Q2LWFiMzQtNjJhYjJhYTc3Njc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn26hn34pKto4ulqSjnfjS260K2s9G5Vy/kgY e2qnQH6nZWxebuVSe5ylebWJjEcNl0Sr8FDaq/x3EyerFodEviUr2YwqGVCaIYdQ GSUdDQRbkHaUtMivth+WUPMc8Khd5k/p3iDUCgKatMOXw5GfJhIbi84R92PNXait C+Qm6Ucm8rBfnI6+nZ30HXpfEiXj9JVyzEtbHfxGS1BQVDOeSp3O844clBo2byTi d+9RukoEmZxlfoR4oVlPKiEKEWIXYqgEwejuwBxHnu60OzrQmhf8Ef5C6goTjsIb A7SAs3eXXS9MWwav6pONW7qqBh7r0hnzRdnRTw0/Mpngad7AbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpb34RU4a/KZMt1KBwZF27YcM9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvZTNkODIzNDEtMjg5Yy0z YTZlLWIyNzUtYTc1OTYzNGYxYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvQutLW4iqXtlTC79KNnPrKD37PGbhuZzxusv2Vhc4etimF6IJjDXcv 07Aif+fGtyOhiZnRNDguSp8it7dtD+saAbn7MosC5Rvf22RCojUXuEl/SBDGRVE/ dhm913iCHJ8DwqXTVaPoq3dhxrKWTAYocv4FaCCPdUGP0tNXhbdMHjBnWtvcMOx/ s48Izo8PqHvNNb9dmsCD/KbuuCfePnt/+RIW1l2hXbnRCs80eE9t3bQ3YlGs3GKY fuIP1I1K6MO+RgDg8RYiUgtdPUtOK3zeKmzP6rrdOQgLLS2JS0tB0xzdTkfx9wuZ xjRTWgk2O8l/JsKMT08znjgx9fGem/Q= -----END CERTIFICATE-----Generated at Mon Jun 16 13:07:43 2025 by rpki-client