$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa File: 3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa (raw, json) Hash identifier: R34njt6ZsFsRStcQKGcWx/OoNhX2IAeGB6xei9a9slY= Subject key identifier: 3E:8E:94:F7:3C:31:8A:27:6A:89:48:46:B1:6C:0F:0E:2B:00:E4:2B Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584BA39D048BF4BE6A4B14D21900 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 155.63.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:04:8b:f4:be:6a:4b:14:d2:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=8334781f-6bd9-4146-880e-46455b5e2459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c8:30:93:ff:db:d3:56:0b:85:df:2f:2a:6d: 78:b3:ff:aa:a3:dc:22:73:bc:8d:71:eb:ce:d0:33: ac:da:f9:96:10:46:82:f9:8b:57:e1:f6:39:b9:60: 6c:6d:d0:cc:c5:e3:76:1b:db:66:5e:de:0c:5c:a7: ea:7e:f2:98:b7:74:8f:26:a1:38:72:fd:96:b2:44: 25:d8:0f:cc:13:8f:a8:91:d9:a9:cd:3c:0c:0b:ec: 0d:eb:e0:19:96:97:d1:2c:0b:96:d7:82:ad:cf:6c: d6:f6:45:ea:b7:a2:63:93:11:ce:b3:29:f3:5f:62: e3:69:ea:fd:ee:67:e0:54:02:56:a7:de:06:b5:17: 68:ac:17:b6:06:21:5d:e3:4c:89:8d:e1:e0:e9:dd: f5:a3:98:c2:e4:04:e0:60:07:12:2d:5b:c6:fa:bd: ca:ec:63:41:82:35:27:4a:c7:3c:75:06:c8:bd:a7: 14:14:ae:d3:2d:a5:70:e7:7b:72:e3:e2:08:66:4d: f9:7c:ca:8f:32:05:5c:b7:df:cd:1c:6a:40:cf:be: b5:89:3f:a4:4a:19:c6:d0:37:1b:f4:62:0b:74:f3: 1a:f8:98:c8:c2:31:62:ea:41:c7:b8:fd:6f:d6:1f: 01:d0:69:06:95:02:ae:1d:1a:5d:56:0c:88:a4:5a: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8E:94:F7:3C:31:8A:27:6A:89:48:46:B1:6C:0F:0E:2B:00:E4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f8:7d:a2:a5:12:f8:e1:2a:d5:c9:03:bf:5b:37:6b:e7:21: 1f:c4:c0:03:b8:97:d6:b7:0c:88:47:69:23:6f:da:7e:fe:85: 68:75:b0:52:d3:89:e7:57:21:45:e6:7d:ab:d6:1a:32:0f:34: 19:ec:5c:d8:00:bf:f9:16:86:1f:50:a3:2c:65:ba:43:6d:1a: 30:06:30:81:f1:c0:29:47:1b:c9:93:4a:e2:de:8f:30:e7:86: 12:ed:8c:cc:14:fc:0c:22:3c:7f:60:d7:a3:b7:e8:bd:52:81: 0a:53:ab:81:b6:98:20:3b:45:b0:2f:14:5f:8c:36:fb:90:4e: f0:fb:34:6b:40:f0:6e:bf:51:8f:f3:ef:6d:b3:6c:52:09:e0: e0:58:2f:84:70:7d:16:3e:22:96:7d:ff:f7:90:a0:b9:fd:2d: e2:46:7f:ab:e7:e7:2f:97:0a:7b:8a:45:a6:b5:9f:ce:53:85: ff:f5:85:b5:6f:1f:9a:1b:00:19:b5:ba:09:e4:4b:ae:00:0c: e0:2c:56:1f:30:71:c4:ab:fb:e6:35:59:13:34:75:3c:2a:6b: 77:62:9e:27:eb:9a:e0:f6:b0:cb:33:f6:e4:57:59:88:c5:90: 08:e5:81:7e:80:3e:a9:e2:e2:38:12:50:fa:07:b9:ff:e7:50: 21:4d:b6:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQSL9L5qSxTSGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODMzNDc4MWYtNmJkOS00MTQ2LTg4MGUtNDY0NTViNWUyNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcgwk//b01YLhd8vKm14s/+qo9wic7yNcevO 0DOs2vmWEEaC+YtX4fY5uWBsbdDMxeN2G9tmXt4MXKfqfvKYt3SPJqE4cv2WskQl 2A/ME4+okdmpzTwMC+wN6+AZlpfRLAuW14Ktz2zW9kXqt6JjkxHOsynzX2Ljaer9 7mfgVAJWp94GtRdorBe2BiFd40yJjeHg6d31o5jC5ATgYAcSLVvG+r3K7GNBgjUn Ssc8dQbIvacUFK7TLaVw53ty4+IIZk35fMqPMgVct9/NHGpAz761iT+kShnG0Dcb 9GILdPMa+JjIwjFi6kHHuP1v1h8B0GkGlQKuHRpdVgyIpFrmDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6OlPc8MYonaolIRrFsDw4rAOQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvMzczMmNkMjktZDU5Zi0z N2M0LTg5N2UtZWIzZmQxNTI4ZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH4faKlEvjhKtXJA79bN2vnIR/EwAO4l9a3DIhHaSNv2n7+hWh1sFLT iedXIUXmfavWGjIPNBnsXNgAv/kWhh9QoyxlukNtGjAGMIHxwClHG8mTSuLejzDn hhLtjMwU/AwiPH9g16O36L1SgQpTq4G2mCA7RbAvFF+MNvuQTvD7NGtA8G6/UY/z 722zbFIJ4OBYL4RwfRY+IpZ9//eQoLn9LeJGf6vn5y+XCnuKRaa1n85Thf/1hbVv H5obABm1ugnkS64ADOAsVh8wccSr++Y1WRM0dTwqa3dinifrmuD2sMsz9uRXWYjF kAjlgX6APqni4jgSUPoHuf/nUCFNttA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:36 2025 by rpki-client