$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/89cbdbb2-14b8-3187-878e-9d37888c582c.roa File: 89cbdbb2-14b8-3187-878e-9d37888c582c.roa (raw, json) Hash identifier: HWVbyqx73LDdE0noqw3fOoqINm1M/pjwlXozgVbCqNA= Subject key identifier: 60:D9:F7:1F:93:EB:03:47:CD:FA:9F:0E:6D:95:45:70:CF:0E:9F:AD Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584AA85BA4BEECBA87FEC6DB2F00 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/89cbdbb2-14b8-3187-878e-9d37888c582c.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 155.63.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:a4:be:ec:ba:87:fe:c6:db:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=21e91cd4-61e3-410f-ba7d-26c6c0e09813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7c:44:a1:2b:16:23:b1:75:2a:da:90:4c:eb: 12:fa:33:4b:51:c8:56:a5:2f:cf:26:e4:5f:35:77: c8:75:3b:d8:8c:a7:7f:be:35:bd:49:66:a8:bb:4f: 84:ac:d1:09:68:9f:cb:99:99:40:5c:27:cc:50:94: 57:8e:38:b2:5c:78:85:b5:af:f8:a8:0c:46:87:8a: 97:02:c5:ee:44:59:b3:33:47:08:f5:31:ea:00:80: 96:e7:33:df:36:55:d8:3b:8d:c1:c8:84:77:96:da: 8f:6e:fc:33:93:29:09:41:54:e7:cf:d3:75:6d:dd: 23:e5:59:1c:74:3a:cd:35:b9:4f:1a:c9:34:eb:2f: 9c:c6:ca:5b:4b:ab:fa:65:77:c0:8d:48:dd:88:9b: 89:31:dc:c1:6a:0d:5b:c1:d8:cb:13:9e:cb:70:82: b5:23:b7:85:80:81:ec:ad:a0:da:df:1b:ec:fa:26: fd:c1:b2:2c:80:dd:ac:6f:9a:4a:05:d0:65:30:2a: 43:f1:e0:87:8c:5f:fb:8a:b2:a1:66:97:8a:c9:c8: 6c:5e:86:18:58:51:85:62:6a:66:f5:6d:4e:58:b1: e2:1f:77:ff:b8:34:54:9e:4a:b4:71:95:59:39:d4: 4a:b6:37:b5:80:b5:7f:5c:d7:93:98:cf:9e:3d:57: 2c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D9:F7:1F:93:EB:03:47:CD:FA:9F:0E:6D:95:45:70:CF:0E:9F:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/89cbdbb2-14b8-3187-878e-9d37888c582c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:22:73:c0:3d:9c:5a:73:40:65:2d:f2:05:cc:46:73:2f:92: 8f:e0:a6:c7:d6:9c:01:db:ae:46:d4:3c:ce:c0:0a:be:f0:cc: 73:66:5a:37:f1:97:bd:ff:f5:9e:10:d9:53:3b:de:ec:81:71: cf:ca:19:a8:b6:06:8c:00:bf:1a:0d:45:2e:df:17:89:68:35: 80:c0:fe:b1:de:68:b7:28:86:4c:6d:98:78:02:8a:41:03:6f: 24:ce:4f:22:4a:ff:d3:f1:43:15:fb:0d:80:ce:05:9f:db:53: 7d:d4:ef:cd:49:12:49:4b:73:ce:93:56:56:09:65:86:c0:47: 9b:cd:4e:18:d2:6a:e2:2d:dd:fe:ee:81:05:ce:38:7e:7a:16: c3:ec:79:d6:6d:8e:ff:36:52:73:46:65:06:35:89:0d:25:e6: 7d:b8:b9:cf:d9:4f:ca:3f:48:d3:9a:00:3e:58:98:76:c8:3b: 5f:78:19:9e:ba:c2:ad:bf:b6:6b:6a:44:28:0e:5b:10:23:23: 4f:99:b7:44:91:ef:5c:e8:04:0f:e2:67:2c:75:28:4e:5b:33: 41:12:6e:92:86:8d:52:a8:77:5f:ee:9a:d3:45:9a:57:37:04: 14:21:14:b5:a5:5c:26:34:78:09:c8:c6:87:37:76:6f:4d:19: 82:8f:52:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW6S+7LqH/sbbLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MjFlOTFjZDQtNjFlMy00MTBmLWJhN2QtMjZjNmMwZTA5ODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83xEoSsWI7F1KtqQTOsS+jNLUchWpS/PJuRf NXfIdTvYjKd/vjW9SWaou0+ErNEJaJ/LmZlAXCfMUJRXjjiyXHiFta/4qAxGh4qX AsXuRFmzM0cI9THqAICW5zPfNlXYO43ByIR3ltqPbvwzkykJQVTnz9N1bd0j5Vkc dDrNNblPGsk06y+cxspbS6v6ZXfAjUjdiJuJMdzBag1bwdjLE57LcIK1I7eFgIHs raDa3xvs+ib9wbIsgN2sb5pKBdBlMCpD8eCHjF/7irKhZpeKychsXoYYWFGFYmpm 9W1OWLHiH3f/uDRUnkq0cZVZOdRKtje1gLV/XNeTmM+ePVcsLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDZ9x+T6wNHzfqfDm2VRXDPDp+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvODljYmRiYjItMTRiOC0z MTg3LTg3OGUtOWQzNzg4OGM1ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEic8A9nFpzQGUt8gXMRnMvko/gpsfWnAHbrkbUPM7ACr7wzHNmWjfx l73/9Z4Q2VM73uyBcc/KGai2BowAvxoNRS7fF4loNYDA/rHeaLcohkxtmHgCikED byTOTyJK/9PxQxX7DYDOBZ/bU33U781JEklLc86TVlYJZYbAR5vNThjSauIt3f7u gQXOOH56FsPsedZtjv82UnNGZQY1iQ0l5n24uc/ZT8o/SNOaAD5YmHbIO194GZ66 wq2/tmtqRCgOWxAjI0+Zt0SR71zoBA/iZyx1KE5bM0ESbpKGjVKod1/umtNFmlc3 BBQhFLWlXCY0eAnIxoc3dm9NGYKPUkQ= -----END CERTIFICATE-----Generated at Mon Aug 4 15:41:58 2025 by rpki-client