$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/83e6a022-36ec-38c3-8f95-349b73ff935a.roa File: 83e6a022-36ec-38c3-8f95-349b73ff935a.roa (raw, json) Hash identifier: sOLq31jhyKpyFcaD3QOvGIz7tv8Ph2Cc9jZOvG85JKE= Subject key identifier: DE:7C:E9:6B:26:57:79:8D:13:86:C1:33:42:43:E2:9D:95:C1:C4:19 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584F90A2FEFB87A82BB6AD0DD100 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/83e6a022-36ec-38c3-8f95-349b73ff935a.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 155.63.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a2:fe:fb:87:a8:2b:b6:ad:0d:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=40e245bc-b3b0-477f-b168-274395fa84f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:2e:b6:3f:84:17:8d:61:c3:26:07:7d:77: 84:68:d3:43:49:d7:3b:15:71:a5:49:4c:66:2d:ba: 7d:a0:2f:94:6e:3e:0c:65:d3:6f:00:39:1a:e4:cb: c4:9e:bd:4f:66:7b:ea:dc:cd:90:d5:1f:01:3e:9f: 99:de:b5:11:f2:fb:2d:59:c8:81:79:75:24:28:80: 37:63:28:bc:c9:f4:27:f8:9d:e0:be:ef:a8:7a:c6: a0:70:16:d9:24:7e:48:c1:54:3d:0f:c4:0e:f5:a4: 33:ac:9d:95:55:c6:45:ad:27:2b:5f:50:38:a8:e7: 5f:2c:0f:88:ad:ea:41:56:17:b7:6d:20:ff:49:53: ae:69:a4:60:96:1f:3a:f4:9d:be:ae:02:78:5e:27: 9a:20:0a:d2:f5:c4:f1:ae:1d:94:da:6d:ff:12:f8: 0b:e7:bf:37:3f:55:21:db:03:a5:5f:74:9a:f0:a5: 07:e1:a2:f1:19:56:18:d7:2f:18:ce:1b:26:07:53: b3:82:fc:b5:b3:fb:65:00:e4:52:28:a1:57:38:45: 25:b7:43:fe:31:62:9a:40:5c:5b:62:d0:65:02:92: 7d:c4:e4:41:86:61:05:aa:6f:7d:dd:00:0e:71:b3: 88:a5:8e:4d:e5:b5:e8:20:61:44:09:01:c2:f7:16: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7C:E9:6B:26:57:79:8D:13:86:C1:33:42:43:E2:9D:95:C1:C4:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/83e6a022-36ec-38c3-8f95-349b73ff935a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:da:38:6b:d6:75:b3:20:49:b9:31:a1:b9:62:0c:27:e8:3b: b4:e0:33:06:db:51:13:eb:72:62:68:df:a0:05:e7:c8:62:ef: 28:57:26:fe:42:78:c7:ff:4c:5f:bc:2a:ee:0c:41:45:98:61: 58:46:b4:25:82:e4:e5:13:a4:c3:b6:cf:14:df:0f:9d:36:06: 08:f3:dd:0e:21:6d:67:17:46:91:f4:71:0d:ba:91:33:9f:24: 52:e5:9b:94:79:65:dc:73:89:cd:6f:01:e7:9d:03:20:87:af: 03:23:f6:76:c5:39:42:12:44:f1:30:bf:3b:e6:63:c1:2a:9e: 8e:5d:2f:b7:50:ab:43:c5:fb:8a:3a:71:5b:8d:6b:c9:e5:36: 96:dd:82:5c:b0:82:22:52:d0:82:c9:e2:62:5f:66:3e:f4:01: 1a:34:62:db:56:5c:30:64:34:95:61:13:5a:10:cf:99:da:98: 93:5f:bc:3b:8f:9a:de:4f:e1:bd:85:8b:83:69:f5:36:05:fb: da:3e:10:7f:1f:df:19:37:8a:de:a4:1b:ac:9c:81:5d:63:0a: 70:aa:dd:14:f3:92:6e:35:74:77:b8:5d:b3:09:55:9b:53:59: 2a:01:a2:2b:46:bf:f5:eb:80:d8:36:76:0b:d6:19:a9:48:91: bb:05:4f:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Qov77h6grtq0N0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk NDBlMjQ1YmMtYjNiMC00NzdmLWIxNjgtMjc0Mzk1ZmE4NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA0utj+EF41hwyYHfXeEaNNDSdc7FXGlSUxm Lbp9oC+Ubj4MZdNvADka5MvEnr1PZnvq3M2Q1R8BPp+Z3rUR8vstWciBeXUkKIA3 Yyi8yfQn+J3gvu+oesagcBbZJH5IwVQ9D8QO9aQzrJ2VVcZFrScrX1A4qOdfLA+I repBVhe3bSD/SVOuaaRglh869J2+rgJ4XieaIArS9cTxrh2U2m3/EvgL5783P1Uh 2wOlX3Sa8KUH4aLxGVYY1y8YzhsmB1Ozgvy1s/tlAORSKKFXOEUlt0P+MWKaQFxb YtBlApJ9xORBhmEFqm993QAOcbOIpY5N5bXoIGFECQHC9xZNawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN586WsmV3mNE4bBM0JD4p2VwcQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvODNlNmEwMjItMzZlYy0z OGMzLThmOTUtMzQ5YjczZmY5MzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmz/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXaOGvWdbMgSbkxobliDCfoO7TgMwbbURPrcmJo36AF58hi7yhXJv5C eMf/TF+8Ku4MQUWYYVhGtCWC5OUTpMO2zxTfD502Bgjz3Q4hbWcXRpH0cQ26kTOf JFLlm5R5Zdxzic1vAeedAyCHrwMj9nbFOUISRPEwvzvmY8Eqno5dL7dQq0PF+4o6 cVuNa8nlNpbdglywgiJS0ILJ4mJfZj70ARo0YttWXDBkNJVhE1oQz5namJNfvDuP mt5P4b2Fi4Np9TYF+9o+EH8f3xk3it6kG6ycgV1jCnCq3RTzkm41dHe4XbMJVZtT WSoBoitGv/XrgNg2dgvWGalIkbsFT/c= -----END CERTIFICATE-----Generated at Thu Nov 5 04:53:26 2026 by rpki-client