$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/24193cda-dfba-3da1-a667-f8eeba423d0a.roa File: 24193cda-dfba-3da1-a667-f8eeba423d0a.roa (raw, json) Hash identifier: v70Ur21S53k42Aqe7irJ5/AXeLSaxOnXYiF06IAdfXM= Subject key identifier: FF:25:B3:F5:19:5A:39:A6:CF:9F:E0:86:48:C0:4C:B4:73:9D:D2:07 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584D5E1A60EB8894F36ABFDA3F60 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/24193cda-dfba-3da1-a667-f8eeba423d0a.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 155.63.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:60:eb:88:94:f3:6a:bf:da:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=2c6c853a-bedf-4757-b0b8-286d00ab5f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:57:8a:71:ec:df:36:1e:ee:d1:02:a1:b2:bb: ae:3f:02:eb:41:5f:49:1c:6e:d8:24:a5:0a:6f:6d: 50:31:fe:fa:15:21:91:35:6f:bf:35:cb:59:5d:47: 98:39:f6:24:4d:a6:10:d1:bc:86:14:86:29:76:71: 6e:37:d6:13:9a:c8:20:e4:ed:53:bd:b2:26:f5:cf: 0f:85:2c:11:46:26:bf:f0:16:0c:0e:be:07:10:d8: 24:27:13:31:f5:77:21:df:8a:f7:f6:a0:73:f4:0b: f4:58:3b:dd:29:b5:48:fa:d0:46:0a:5d:e4:c6:31: ae:10:8f:a4:a8:97:2f:8b:af:27:71:ce:20:46:24: ed:9d:ee:84:ac:e5:a4:cd:9c:f2:3e:98:55:e2:ca: ca:be:b7:1f:9a:f8:40:4b:b2:fd:bd:f6:13:cf:ca: c8:3b:3a:7b:4a:89:4b:6c:cb:56:4f:69:13:ee:aa: 0a:07:06:ba:c6:4b:e5:a0:a9:a7:bd:75:73:0c:b3: 5f:c7:e8:fc:cd:4c:50:22:a1:05:bb:3f:51:01:fa: a4:e4:02:b6:f5:a0:63:43:d5:21:5d:ba:72:d2:48: 77:49:06:c3:cd:13:ea:e8:8e:c0:30:85:24:07:54: 7a:cd:4c:59:ae:85:45:24:b3:06:78:cf:e9:72:c8: 08:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:25:B3:F5:19:5A:39:A6:CF:9F:E0:86:48:C0:4C:B4:73:9D:D2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/24193cda-dfba-3da1-a667-f8eeba423d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:fe:de:b7:02:10:1c:72:41:39:7a:b5:9c:18:a9:d7:22:06: 97:d0:b9:45:da:7c:93:31:bd:3d:18:21:37:7c:90:8d:33:48: 02:0c:bb:98:c8:45:4b:52:0e:0e:69:1f:66:c7:b4:c8:46:fc: a1:bd:b1:89:d2:44:86:50:03:da:87:4a:a6:da:3c:18:d2:bb: 57:3a:99:7c:bb:26:65:cc:f8:26:95:cc:dc:f7:7a:9c:f0:8e: 6e:5e:df:db:4d:29:0e:fe:74:40:6b:2f:f9:dd:17:18:a5:d1: 03:f0:9f:40:68:cd:f0:f9:a2:ca:a7:74:86:51:d1:b2:1d:25: 79:5d:57:35:f7:53:68:d3:f9:fc:4f:65:5e:36:67:56:a4:f5: fb:43:0e:5a:72:27:93:82:7e:e1:95:31:3d:e2:84:a2:2a:30: 72:a2:d8:fb:24:62:e2:90:a9:15:4b:78:08:4e:5b:98:48:80: d5:bd:1c:c5:8b:37:68:a0:44:36:13:64:20:54:70:d6:ed:0c: 83:60:55:47:61:bb:03:fc:c0:0a:15:81:ea:3a:1c:47:ff:74: 63:93:2e:75:8b:46:69:21:df:5c:9b:94:69:03:3a:2d:b2:bc: f5:27:2e:aa:89:ee:e3:bb:44:73:ce:01:22:19:e1:a2:37:28: 63:2b:44:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmDriJTzar/aP2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MmM2Yzg1M2EtYmVkZi00NzU3LWIwYjgtMjg2ZDAwYWI1ZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFeKcezfNh7u0QKhsruuPwLrQV9JHG7YJKUK b21QMf76FSGRNW+/NctZXUeYOfYkTaYQ0byGFIYpdnFuN9YTmsgg5O1TvbIm9c8P hSwRRia/8BYMDr4HENgkJxMx9Xch34r39qBz9Av0WDvdKbVI+tBGCl3kxjGuEI+k qJcvi68ncc4gRiTtne6ErOWkzZzyPphV4srKvrcfmvhAS7L9vfYTz8rIOzp7SolL bMtWT2kT7qoKBwa6xkvloKmnvXVzDLNfx+j8zUxQIqEFuz9RAfqk5AK29aBjQ9Uh Xbpy0kh3SQbDzRPq6I7AMIUkB1R6zUxZroVFJLMGeM/pcsgI2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8ls/UZWjmmz5/ghkjATLRzndIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvMjQxOTNjZGEtZGZiYS0z ZGExLWE2NjctZjhlZWJhNDIzZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz9WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJT+3rcCEBxyQTl6tZwYqdciBpfQuUXafJMxvT0YITd8kI0zSAIMu5jI RUtSDg5pH2bHtMhG/KG9sYnSRIZQA9qHSqbaPBjSu1c6mXy7JmXM+CaVzNz3epzw jm5e39tNKQ7+dEBrL/ndFxil0QPwn0BozfD5osqndIZR0bIdJXldVzX3U2jT+fxP ZV42Z1ak9ftDDlpyJ5OCfuGVMT3ihKIqMHKi2PskYuKQqRVLeAhOW5hIgNW9HMWL N2igRDYTZCBUcNbtDINgVUdhuwP8wAoVgeo6HEf/dGOTLnWLRmkh31yblGkDOi2y vPUnLqqJ7uO7RHPOASIZ4aI3KGMrRDE= -----END CERTIFICATE-----Generated at Fri Apr 17 04:56:44 2026 by rpki-client