$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/ac35c2b5-65fd-34d7-8216-230376162d02.roa File: ac35c2b5-65fd-34d7-8216-230376162d02.roa (raw, json) Hash identifier: IkpkLgsZ2qJrm9ah2q8evMkdesorsKQ1IP0N/l4NAz8= Subject key identifier: 41:75:D0:8C:8C:0C:50:52:34:EB:41:DB:01:08:A4:87:D9:99:69:1B Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584BABFCFDEB46FA4B94A946EE38 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/ac35c2b5-65fd-34d7-8216-230376162d02.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 21971 IP address blocks: 155.63.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fc:fd:eb:46:fa:4b:94:a9:46:ee:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=3e7ce971-2e97-4def-8819-7f6052d2159c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:01:d7:c3:52:a4:cc:57:c6:75:3d:42:e2:08: 3d:d9:4d:db:10:6c:28:4c:92:e1:5f:6a:c2:63:13: fa:78:f5:35:22:a8:47:34:ed:84:4c:5a:66:2a:e4: 1d:dd:67:37:92:a3:4a:64:be:4f:8d:c8:d2:d0:93: 93:c8:e1:82:d6:1c:58:f4:57:c5:76:65:62:f8:1e: df:6d:6d:41:8e:32:8a:11:44:56:34:77:59:14:bc: 59:63:a3:ee:aa:82:00:44:4c:c8:fd:ab:a0:0f:c7: b1:d5:d8:a2:29:03:ba:6a:c5:7a:96:e8:3f:87:f7: 92:c5:6d:35:f2:a1:53:96:ea:eb:91:70:c1:3e:f4: 1d:eb:e3:89:62:24:e5:c5:04:3c:ac:3c:1a:22:f8: f5:1c:1e:1e:21:f8:19:de:77:92:5a:fb:a8:58:b5: 46:45:5c:8c:b6:60:8a:57:f7:fa:95:57:60:9f:a4: 02:5b:59:96:1e:0c:60:6d:93:1d:cb:a8:3d:b9:83: 96:e7:4c:33:c3:3e:52:df:5c:d7:02:dd:63:8e:18: 63:f2:6e:cd:7b:ff:5d:0d:d2:2a:34:39:24:a8:ab: 23:d9:ef:59:de:8d:c1:d5:27:cc:47:db:bc:a6:f5: 61:c3:83:1f:58:0f:5d:ef:d1:2e:57:ef:86:71:4c: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:75:D0:8C:8C:0C:50:52:34:EB:41:DB:01:08:A4:87:D9:99:69:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/ac35c2b5-65fd-34d7-8216-230376162d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:31:41:f0:50:ba:91:d8:16:57:f2:df:ec:37:db:b3:80:37: c8:e4:e9:65:33:a8:b5:fb:57:b7:2d:07:96:ec:e5:24:50:b7: 5b:1c:cd:86:25:73:af:3b:a0:55:9a:a5:75:48:3e:15:8a:7c: 81:37:59:08:8d:fb:98:c0:cf:b6:23:9d:36:9d:f1:d0:74:fa: da:e5:ee:75:44:2c:89:e8:89:71:6a:d7:31:3c:3e:8b:a9:f0: 23:09:1e:48:2e:4e:54:04:d4:b5:9a:30:20:28:b8:55:95:6f: 60:18:6c:b5:2b:08:d1:f7:13:c1:5f:c9:23:68:77:66:d3:1f: bc:e4:00:49:d5:9c:36:34:31:1a:1f:b8:84:1e:df:42:c2:6e: ae:06:a8:2b:f6:8f:5c:62:ea:56:f9:b0:cb:04:66:1e:a4:8b: 08:fc:dc:78:16:c4:61:05:db:8e:48:4b:66:bc:a7:39:8f:d7: 21:e1:cd:c2:f4:16:f3:13:56:d2:d4:26:1c:e4:83:38:53:3a: 38:49:87:a4:c6:da:3e:7a:b3:13:de:a5:f8:18:6e:af:4a:ae: 90:00:ed:0c:97:49:c6:2b:e8:58:65:0e:03:c3:9e:31:c9:9e: f4:5c:0c:07:96:3d:15:65:25:f1:51:5a:32:c6:bd:08:a1:d4: aa:ae:16:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/P3rRvpLlKlG7jgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk M2U3Y2U5NzEtMmU5Ny00ZGVmLTg4MTktN2Y2MDUyZDIxNTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQHXw1KkzFfGdT1C4gg92U3bEGwoTJLhX2rC YxP6ePU1IqhHNO2ETFpmKuQd3Wc3kqNKZL5PjcjS0JOTyOGC1hxY9FfFdmVi+B7f bW1BjjKKEURWNHdZFLxZY6PuqoIAREzI/augD8ex1diiKQO6asV6lug/h/eSxW01 8qFTlurrkXDBPvQd6+OJYiTlxQQ8rDwaIvj1HB4eIfgZ3neSWvuoWLVGRVyMtmCK V/f6lVdgn6QCW1mWHgxgbZMdy6g9uYOW50wzwz5S31zXAt1jjhhj8m7Ne/9dDdIq NDkkqKsj2e9Z3o3B1SfMR9u8pvVhw4MfWA9d79EuV++GcUxJzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF10IyMDFBSNOtB2wEIpIfZmWkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvYWMzNWMyYjUtNjVmZC0z NGQ3LTgyMTYtMjMwMzc2MTYyZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmz/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYxQfBQupHYFlfy3+w327OAN8jk6WUzqLX7V7ctB5bs5SRQt1sczYYl c687oFWapXVIPhWKfIE3WQiN+5jAz7YjnTad8dB0+trl7nVELInoiXFq1zE8Poup 8CMJHkguTlQE1LWaMCAouFWVb2AYbLUrCNH3E8FfySNod2bTH7zkAEnVnDY0MRof uIQe30LCbq4GqCv2j1xi6lb5sMsEZh6kiwj83HgWxGEF245IS2a8pzmP1yHhzcL0 FvMTVtLUJhzkgzhTOjhJh6TG2j56sxPepfgYbq9KrpAA7QyXScYr6FhlDgPDnjHJ nvRcDAeWPRVlJfFRWjLGvQih1KquFoA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:05 2025 by rpki-client