$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa File: d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa (raw, json) Hash identifier: Ms9qG7YYPk5cCs2QMk5HkqYX1A10Hiqfb4crqdB+WJ8= Subject key identifier: C5:48:AA:36:AE:58:87:21:55:A2:07:2C:7A:23:D0:4E:C2:36:78:1F Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584ABD4B8DD87E1CBD2C28C78300 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 14618 IP address blocks: 155.63.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:8d:d8:7e:1c:bd:2c:28:c7:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=4040d318-81af-40d3-9eaa-c6cd07ef1073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:94:38:0e:a1:36:51:d0:78:3a:17:0d:5a:83: fd:1e:88:be:d1:8e:f7:92:a3:9b:9b:71:ee:bb:27: 65:3e:db:f9:4c:30:06:1d:c8:cb:90:81:f7:7f:c2: 71:a5:9c:28:03:ef:e1:53:de:87:43:2a:62:0b:5b: 83:ce:f7:9c:08:0d:76:79:e4:c3:71:e5:c6:c2:0f: 5c:8d:76:0d:f4:dd:8a:01:0a:a3:ee:bd:a1:fb:1d: ce:90:4c:0f:88:2d:99:34:84:a0:fc:2d:54:6b:1b: 3e:bc:a0:bf:51:06:a1:a9:ff:5c:dc:1a:08:f5:de: b7:7f:9d:f3:e0:87:b0:99:06:da:ab:6f:bf:0f:6e: ff:9c:2e:7e:7b:24:0d:74:d3:92:e8:60:cd:c3:50: 6e:5c:fd:6e:a2:2f:12:f5:8e:b6:47:29:47:77:07: ef:8f:79:37:bc:ea:d2:47:d0:d2:e0:48:57:2d:8c: d8:44:67:51:33:42:a6:f6:90:7c:59:41:02:80:89: 9d:b4:77:b0:61:b4:00:0d:55:76:8d:72:f3:8b:65: 9a:ed:d1:bf:82:cd:c7:eb:55:8d:0a:33:1b:45:37: 7e:af:11:ce:51:0b:a8:e8:37:d1:ad:6c:c2:cd:f1: c2:26:57:20:46:2b:2e:1b:06:76:32:4f:60:1f:ee: fa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:48:AA:36:AE:58:87:21:55:A2:07:2C:7A:23:D0:4E:C2:36:78:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4f:fa:e6:bf:d6:df:df:73:58:ca:aa:c7:3b:25:65:b8:f4: d6:fe:81:3f:21:b3:bc:e6:87:65:ed:08:51:96:dc:15:7c:15: fa:1f:df:81:d4:24:05:69:9b:dd:c7:4c:d8:dd:ab:85:c7:d7: 6d:bf:85:8e:ba:19:8d:15:1f:fe:e3:3d:0a:73:90:a2:ab:17: c4:6d:d0:90:b2:0f:4a:9c:8b:b1:4d:2b:18:81:f1:62:87:ad: 98:69:bc:fb:41:7b:5e:92:bd:0f:23:fa:67:15:19:89:c3:a3: 2b:31:da:e4:a3:9b:76:4d:aa:66:d5:4b:f5:e5:27:d0:62:a8: e3:d8:73:3f:d9:19:2c:ee:bb:2f:af:92:1b:dc:a8:91:bc:a9: 8e:bc:33:48:44:1f:78:26:ab:7e:99:9c:f1:b5:b7:0e:f6:26: 81:ce:18:03:7e:d1:a2:27:38:62:35:c8:49:f6:3b:c9:c2:b9: 03:22:20:60:7f:11:c3:5b:84:89:b0:d7:e6:52:b3:cb:fc:57: cf:c5:38:bc:e4:c0:0d:1a:4c:cd:19:83:5c:d8:ae:9a:7c:e8: 56:69:ef:9f:06:31:eb:e7:13:52:ec:73:e8:fe:ff:7d:b9:71: 4d:df:46:57:6f:74:9f:c9:2c:55:27:44:b5:78:ea:2e:a1:23: 8d:a8:d1:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S43Yfhy9LCjHgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NDA0MGQzMTgtODFhZi00MGQzLTllYWEtYzZjZDA3ZWYxMDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJQ4DqE2UdB4OhcNWoP9Hoi+0Y73kqObm3Hu uydlPtv5TDAGHcjLkIH3f8JxpZwoA+/hU96HQypiC1uDzvecCA12eeTDceXGwg9c jXYN9N2KAQqj7r2h+x3OkEwPiC2ZNISg/C1Uaxs+vKC/UQahqf9c3BoI9d63f53z 4IewmQbaq2+/D27/nC5+eyQNdNOS6GDNw1BuXP1uoi8S9Y62RylHdwfvj3k3vOrS R9DS4EhXLYzYRGdRM0Km9pB8WUECgImdtHewYbQADVV2jXLzi2Wa7dG/gs3H61WN CjMbRTd+rxHOUQuo6DfRrWzCzfHCJlcgRisuGwZ2Mk9gH+76fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVIqjauWIchVaIHLHoj0E7CNngfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvZDJkODFlNGMtYTBhOC0z MmI4LTkxOTctZjBiMTcyNDFkM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz9WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFP+ua/1t/fc1jKqsc7JWW49Nb+gT8hs7zmh2XtCFGW3BV8Ffof34HU JAVpm93HTNjdq4XH122/hY66GY0VH/7jPQpzkKKrF8Rt0JCyD0qci7FNKxiB8WKH rZhpvPtBe16SvQ8j+mcVGYnDoysx2uSjm3ZNqmbVS/XlJ9BiqOPYcz/ZGSzuuy+v khvcqJG8qY68M0hEH3gmq36ZnPG1tw72JoHOGAN+0aInOGI1yEn2O8nCuQMiIGB/ EcNbhImw1+ZSs8v8V8/FOLzkwA0aTM0Zg1zYrpp86FZp758GMevnE1Lsc+j+/325 cU3fRldvdJ/JLFUnRLV46i6hI42o0d0= -----END CERTIFICATE-----Generated at Mon Aug 4 15:59:43 2025 by rpki-client