$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa File: d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa (raw, json) Hash identifier: /v2/F7k8f0Nj6rGlJH/AnRcLLOxcYaHV3APNlO3fpDc= Subject key identifier: 78:13:77:CE:F6:15:35:C2:BA:CD:FA:E4:D0:1F:61:98:16:86:7D:A4 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584B9E07AE4A4F6A9DF24D5AA680 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 155.63.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ae:4a:4f:6a:9d:f2:4d:5a:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=f6f72728-9870-448d-a522-51403cf3e467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:27:b4:5c:9f:e2:df:70:d7:45:1e:53:33: fd:86:6c:4a:15:ed:fd:cc:54:e5:ed:46:5f:c8:17: f2:3d:a2:90:f2:45:02:fc:16:be:23:03:26:eb:27: de:32:a8:74:39:61:bb:66:79:8a:03:be:85:34:4c: 48:02:32:7e:00:48:0c:57:78:ae:5d:82:be:08:f6: 03:18:ea:8c:6d:d2:a3:3e:3a:f9:19:14:16:85:04: 30:f0:1f:40:fc:5a:fa:6c:b7:f8:2c:12:d1:bc:9d: 8a:85:54:7e:5b:24:e9:cd:ac:ca:c1:79:22:65:24: a5:32:33:a7:ac:79:60:0b:37:32:47:d6:ee:f9:46: 93:0a:80:1b:25:a2:00:c2:02:84:68:57:74:4b:2c: 1a:d8:ae:b1:8d:cd:c9:c5:c8:2d:2d:ba:71:92:cf: c9:3c:73:43:2d:3f:eb:d8:b8:5b:ef:4f:d6:2f:39: fa:16:58:8b:eb:db:e0:5d:71:f3:6b:99:3d:5a:d1: 99:bc:d3:d5:c8:0a:6b:20:c8:f2:da:f9:ce:e1:e7: 22:e0:27:2f:6b:ac:5c:3a:95:dc:19:e1:44:93:15: 29:a6:66:8b:93:d0:0f:91:15:99:9b:21:f1:d6:71: 1d:1c:49:49:9b:bf:c0:e3:14:eb:34:06:1a:18:20: 0a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:13:77:CE:F6:15:35:C2:BA:CD:FA:E4:D0:1F:61:98:16:86:7D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:10:01:7c:a6:8c:97:9c:3d:44:b4:4b:c4:b4:ca:6a:96:a8: 30:c3:71:8d:d7:7d:02:0e:62:e4:9c:e0:92:c2:ce:a7:d1:0a: cc:5e:0c:24:21:63:34:77:42:a7:01:5d:74:e4:d7:5d:ff:69: 01:9c:b6:01:74:1e:9f:e0:09:1f:7b:f8:34:e1:d4:08:8f:5b: 6a:58:5e:f4:80:15:3b:a8:3d:f3:b1:72:98:48:a2:cf:09:8b: fc:8e:ca:ad:46:ba:ee:cf:7a:36:4d:45:fc:74:6b:50:bd:7e: dc:a9:7d:1f:e0:b9:b6:77:62:53:40:eb:3d:3a:20:78:24:a5: 31:b9:dd:ec:a3:a6:93:0b:f5:3e:96:64:e6:ce:cb:fa:2a:e3: 83:5e:2d:93:cc:4c:35:e9:61:1f:e8:71:59:85:48:f1:f5:01: b2:11:d7:46:38:f0:99:13:0e:2a:d1:aa:50:dc:be:d3:3b:81: a6:b2:a6:d5:5c:8a:cd:e8:50:69:2c:d1:ec:04:f5:c2:09:1c: a6:5d:3c:59:67:a1:4b:c4:db:30:1a:7a:5c:bc:83:83:27:83: 8a:d4:9b:06:49:99:0f:52:a5:96:1a:05:03:12:ba:52:42:20: 80:0d:d6:ba:aa:6a:40:70:90:c6:ac:4b:53:bd:4b:b1:4a:0c: 69:1c:94:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB65KT2qd8k1apoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZjZmNzI3MjgtOTg3MC00NDhkLWE1MjItNTE0MDNjZjNlNDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPcntFyf4t9w10UeUzP9hmxKFe39zFTl7UZf yBfyPaKQ8kUC/Ba+IwMm6yfeMqh0OWG7ZnmKA76FNExIAjJ+AEgMV3iuXYK+CPYD GOqMbdKjPjr5GRQWhQQw8B9A/Fr6bLf4LBLRvJ2KhVR+WyTpzazKwXkiZSSlMjOn rHlgCzcyR9bu+UaTCoAbJaIAwgKEaFd0Sywa2K6xjc3JxcgtLbpxks/JPHNDLT/r 2Lhb70/WLzn6FliL69vgXXHza5k9WtGZvNPVyAprIMjy2vnO4eci4Ccva6xcOpXc GeFEkxUppmaLk9APkRWZmyHx1nEdHElJm7/A4xTrNAYaGCAKGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgTd872FTXCus365NAfYZgWhn2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvZDJkODFlNGMtYTBhOC0z MmI4LTkxOTctZjBiMTcyNDFkM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz9WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoQAXymjJecPUS0S8S0ymqWqDDDcY3XfQIOYuSc4JLCzqfRCsxeDCQh YzR3QqcBXXTk113/aQGctgF0Hp/gCR97+DTh1AiPW2pYXvSAFTuoPfOxcphIos8J i/yOyq1Guu7PejZNRfx0a1C9ftypfR/gubZ3YlNA6z06IHgkpTG53eyjppML9T6W ZObOy/oq44NeLZPMTDXpYR/ocVmFSPH1AbIR10Y48JkTDirRqlDcvtM7gaayptVc is3oUGks0ewE9cIJHKZdPFlnoUvE2zAaely8g4Mng4rUmwZJmQ9SpZYaBQMSulJC IIAN1rqqakBwkMasS1O9S7FKDGkclF8= -----END CERTIFICATE-----Generated at Wed Nov 5 19:43:01 2025 by rpki-client