$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1effb335-be49-3c5a-83a0-40a99c95a39e.roa File: 1effb335-be49-3c5a-83a0-40a99c95a39e.roa (raw, json) Hash identifier: 7oJkBl/MAqwePi3x5OladpUHAnQCwOlzWZVG+NL4OAo= Subject key identifier: 4E:89:5B:26:1B:43:D4:FD:22:E8:29:54:7C:9E:68:E0:6D:61:4C:E0 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584BA39D049F6E72BF82BD8696C0 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1effb335-be49-3c5a-83a0-40a99c95a39e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 155.63.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:04:9f:6e:72:bf:82:bd:86:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=29bb72f5-6683-4e79-aa79-b250f95776ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:91:93:55:26:74:89:2c:1c:a6:25:c0:21:ce: 30:b0:9f:47:10:63:51:9c:e2:d1:77:11:78:90:05: f8:a2:48:04:d4:5e:c7:2c:cf:0c:58:87:7b:89:0c: 29:73:dd:b3:e7:1a:3c:cc:6e:b4:10:d4:11:2a:25: df:56:6e:68:ac:4c:cb:e8:0b:3d:8e:a1:2b:ef:ef: 4c:45:7c:6e:41:fc:0f:4b:d6:6e:de:7a:f9:04:e8: 72:0a:ea:6c:74:c1:90:40:c7:3e:f7:4a:5d:f7:6e: c1:5e:ec:2d:25:ed:60:a7:00:99:e8:58:80:5d:50: b6:57:0c:0d:bb:58:5c:4a:42:0b:3d:dd:46:ef:b9: 4d:05:1f:98:1d:3c:36:fa:08:a2:a4:6c:18:76:18: ac:14:6c:1f:6c:c3:d9:5d:06:bd:ea:93:63:10:a5: 96:60:50:b3:8d:16:7a:42:f7:50:25:49:ea:76:61: 82:db:c2:8f:52:13:4f:58:c3:9d:a0:78:88:4e:25: 64:4f:68:9b:1a:26:83:10:50:57:8f:83:7d:40:61: c1:f8:37:30:4a:de:b5:1b:2f:8e:8d:3f:a8:79:28: 2e:3b:9d:83:28:04:74:45:86:1d:49:5a:2f:af:4f: 54:35:d9:70:55:52:cf:97:64:10:41:b1:17:00:ba: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:89:5B:26:1B:43:D4:FD:22:E8:29:54:7C:9E:68:E0:6D:61:4C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1effb335-be49-3c5a-83a0-40a99c95a39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:29:8a:87:7d:f2:28:41:bf:c1:e8:dc:a6:e2:c3:43:82:33: c4:b3:aa:64:03:86:cf:a8:7c:8f:8f:9d:b0:3f:49:1a:53:33: 27:8d:07:09:37:a8:0d:5b:90:83:87:3e:2b:bd:23:29:d1:8f: 6f:d2:bf:5c:3b:8a:9e:2e:2a:6d:65:4c:8b:70:69:99:52:09: 5f:88:ee:25:99:db:d4:16:07:f8:00:c7:26:f4:40:38:9b:e6: fc:36:80:07:bf:c9:8b:e5:c9:4c:9b:6e:b9:db:cd:e5:b2:28: 27:a3:f1:61:a8:54:a7:29:b6:42:93:5f:ba:ff:a2:56:a1:00: a1:b6:ca:a8:2d:0a:85:fc:52:ea:40:b4:2f:d0:95:0b:84:f6: f8:7e:16:b3:95:21:0c:a7:2f:e9:be:87:2c:b9:f4:32:ef:df: 1e:91:3d:83:81:86:d4:5d:35:6d:06:7e:b1:e2:a3:2c:99:97: 13:d6:b4:b1:e4:fe:15:1f:2c:7d:f6:55:57:f6:3b:95:a8:8b: 32:51:92:be:87:42:f2:3f:c2:4f:3d:73:22:68:61:2a:dc:fe: 1c:39:2d:9e:19:4f:f7:00:0b:a7:1b:ab:e1:52:bc:47:8b:70: 68:aa:2a:cd:47:8d:82:70:a5:f4:c2:77:16:c4:73:2f:76:57: 2e:15:42:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQSfbnK/gr2GlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MjliYjcyZjUtNjY4My00ZTc5LWFhNzktYjI1MGY5NTc3NmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJGTVSZ0iSwcpiXAIc4wsJ9HEGNRnOLRdxF4 kAX4okgE1F7HLM8MWId7iQwpc92z5xo8zG60ENQRKiXfVm5orEzL6As9jqEr7+9M RXxuQfwPS9Zu3nr5BOhyCupsdMGQQMc+90pd927BXuwtJe1gpwCZ6FiAXVC2VwwN u1hcSkILPd1G77lNBR+YHTw2+giipGwYdhisFGwfbMPZXQa96pNjEKWWYFCzjRZ6 QvdQJUnqdmGC28KPUhNPWMOdoHiITiVkT2ibGiaDEFBXj4N9QGHB+DcwSt61Gy+O jT+oeSguO52DKAR0RYYdSVovr09UNdlwVVLPl2QQQbEXALoeFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6JWyYbQ9T9IugpVHyeaOBtYUzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvMWVmZmIzMzUtYmU0OS0z YzVhLTgzYTAtNDBhOTljOTVhMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYpiod98ihBv8Ho3Kbiw0OCM8SzqmQDhs+ofI+PnbA/SRpTMyeNBwk3 qA1bkIOHPiu9IynRj2/Sv1w7ip4uKm1lTItwaZlSCV+I7iWZ29QWB/gAxyb0QDib 5vw2gAe/yYvlyUybbrnbzeWyKCej8WGoVKcptkKTX7r/olahAKG2yqgtCoX8UupA tC/QlQuE9vh+FrOVIQynL+m+hyy59DLv3x6RPYOBhtRdNW0GfrHioyyZlxPWtLHk /hUfLH32VVf2O5WoizJRkr6HQvI/wk89cyJoYSrc/hw5LZ4ZT/cAC6cbq+FSvEeL cGiqKs1HjYJwpfTCdxbEcy92Vy4VQjc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:24 2025 by rpki-client