$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1effb335-be49-3c5a-83a0-40a99c95a39e.roa File: 1effb335-be49-3c5a-83a0-40a99c95a39e.roa (raw, json) Hash identifier: NgbqcvAAZ3OZRNMOkg3oEzmrWCOkzRWyy233Mc5AaeM= Subject key identifier: E4:13:E4:3F:4E:F1:F7:FA:94:BE:B1:07:25:4F:F9:24:94:48:2E:EC Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584D651514CC22877C794F894200 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1effb335-be49-3c5a-83a0-40a99c95a39e.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 16509 IP address blocks: 155.63.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:14:cc:22:87:7c:79:4f:89:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=1d1cf5f0-6635-44d6-b780-2df1567ecebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:a7:d7:46:e1:b8:7b:3f:51:af:65:f1:ce: ad:78:65:07:d4:c8:de:35:13:ff:05:11:3d:b7:f6: 6c:ce:57:62:3d:16:ae:ce:7d:f7:1d:9a:be:69:ee: 34:fa:7b:52:56:99:be:89:e4:84:ed:a1:6d:6f:8f: d7:5f:23:59:2b:40:8b:31:57:0d:ab:a0:90:04:ec: 37:fd:26:bd:0e:5b:05:1f:77:a9:d0:6f:d3:7e:f7: 84:f8:71:e5:62:04:09:d1:a4:70:60:73:cb:13:70: 61:80:5d:12:a1:70:65:53:b6:12:36:21:cd:c0:57: 89:7b:f6:0d:71:41:45:1a:e1:54:36:48:d4:1d:40: 10:93:74:da:b5:3f:a7:39:8a:35:43:7f:83:ff:9a: 53:b6:e3:10:d1:60:28:7f:04:23:a8:cd:0d:5b:ce: 62:54:b4:be:cc:3f:08:ed:9b:78:95:a6:29:bb:ec: a5:fb:98:12:5b:65:0f:2c:52:a0:10:0b:0d:93:55: 1d:53:1b:6c:b5:ef:9e:de:95:67:03:bc:db:82:f2: 1a:18:aa:eb:cc:29:e4:22:05:52:0b:b2:68:a2:96: 4a:76:56:72:0b:33:74:8e:6a:88:26:2d:9c:10:df: cc:eb:77:cb:8b:64:db:3d:a7:62:d9:5e:43:5c:2a: 2c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:13:E4:3F:4E:F1:F7:FA:94:BE:B1:07:25:4F:F9:24:94:48:2E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1effb335-be49-3c5a-83a0-40a99c95a39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0e:ad:93:e0:68:60:1f:4c:00:13:4b:3e:86:b8:f1:fe:3c: 07:02:4b:38:79:fd:6a:b5:f0:4d:25:c7:65:6d:8b:ef:bf:72: 3c:23:0f:08:88:4f:fc:c9:07:39:2f:42:27:8e:13:16:80:b7: 08:b4:fd:b2:c1:b7:1b:26:4e:78:4a:1e:e4:9f:d9:cb:03:1d: 17:54:b7:c5:ec:2d:c7:11:2c:a9:be:f6:ed:e6:fb:e1:cf:9e: fb:aa:81:f6:14:59:f8:5d:46:7e:04:70:22:65:83:ad:95:ba: c7:06:08:d7:cd:52:af:66:dd:71:93:8b:1a:37:30:57:2f:6d: b2:27:53:70:0b:7d:2c:a0:30:61:9d:53:28:2b:29:66:54:a2: f7:06:ef:d5:0a:6f:48:4e:9f:6b:20:2a:4a:4e:43:b8:49:19: 78:52:f5:c0:6d:1f:c2:e2:da:30:d3:54:90:b5:b8:50:5d:a7: 85:e3:03:7d:67:02:95:f8:98:84:82:6d:b7:44:d9:10:d0:05: 75:56:95:35:57:64:46:d2:d2:9a:f1:a7:99:a1:7e:64:e9:37: 54:13:f6:82:2a:91:c8:2c:61:05:f2:0a:ea:ec:59:61:9a:09: b9:d2:77:39:3c:e6:42:14:22:02:29:56:12:88:0b:06:12:c9: fe:4d:a9:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRTMIod8eU+JQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MWQxY2Y1ZjAtNjYzNS00NGQ2LWI3ODAtMmRmMTU2N2VjZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuCn10bhuHs/Ua9l8c6teGUH1MjeNRP/BRE9 t/ZszldiPRauzn33HZq+ae40+ntSVpm+ieSE7aFtb4/XXyNZK0CLMVcNq6CQBOw3 /Sa9DlsFH3ep0G/TfveE+HHlYgQJ0aRwYHPLE3BhgF0SoXBlU7YSNiHNwFeJe/YN cUFFGuFUNkjUHUAQk3TatT+nOYo1Q3+D/5pTtuMQ0WAofwQjqM0NW85iVLS+zD8I 7Zt4laYpu+yl+5gSW2UPLFKgEAsNk1UdUxtste+e3pVnA7zbgvIaGKrrzCnkIgVS C7JoopZKdlZyCzN0jmqIJi2cEN/M63fLi2TbPadi2V5DXCosLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQT5D9O8ff6lL6xByVP+SSUSC7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvMWVmZmIzMzUtYmU0OS0z YzVhLTgzYTAtNDBhOTljOTVhMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwOrZPgaGAfTAATSz6GuPH+PAcCSzh5/Wq18E0lx2Vti++/cjwjDwiI T/zJBzkvQieOExaAtwi0/bLBtxsmTnhKHuSf2csDHRdUt8XsLccRLKm+9u3m++HP nvuqgfYUWfhdRn4EcCJlg62VuscGCNfNUq9m3XGTixo3MFcvbbInU3ALfSygMGGd UygrKWZUovcG79UKb0hOn2sgKkpOQ7hJGXhS9cBtH8Li2jDTVJC1uFBdp4XjA31n ApX4mISCbbdE2RDQBXVWlTVXZEbS0prxp5mhfmTpN1QT9oIqkcgsYQXyCursWWGa CbnSdzk85kIUIgIpVhKICwYSyf5Nqfs= -----END CERTIFICATE-----Generated at Fri Apr 17 07:05:16 2026 by rpki-client