$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa File: d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa (raw, json) Hash identifier: 4ZL0UwuqoH0tRCSQ6/bQT3N8lOQns/2jbp6uxDbIouw= Subject key identifier: 3F:F3:C1:8C:45:79:FA:AA:C4:45:B9:73:88:FD:3B:02:A9:8C:DF:5A Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584EEEB750DD35F76ED12A462DC0 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 155.63.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:50:dd:35:f7:6e:d1:2a:46:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=ab643d54-7668-49d0-9f04-ea0d2dfdc238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:25:26:d8:a2:c3:da:c4:01:80:38:a1:af:4b: 0c:d1:1a:72:e0:22:31:21:0e:e1:58:a3:39:ed:86: ee:49:67:3b:40:ac:c7:08:81:5b:44:e1:ac:ef:11: 09:8b:7a:4c:88:c2:57:d0:4e:bb:f9:09:f1:6e:94: 3b:51:ef:93:46:1b:5d:f1:9a:51:12:68:0d:ba:7a: 41:25:9c:f3:32:9e:02:21:4e:5b:58:c1:1d:0c:4e: 4e:c5:0b:b8:2d:d9:1c:e8:8c:e4:1b:49:4b:0e:f9: 0a:79:56:76:d8:65:8b:84:38:99:80:fa:dc:1e:da: 36:ff:1b:41:61:0a:46:26:b2:55:aa:50:c4:60:71: ab:92:41:4c:57:49:06:ae:76:28:7e:37:06:56:9a: 9b:c5:32:a4:fc:3d:4d:84:6e:c9:3b:10:8e:da:6f: 60:3a:e8:5d:1d:1e:68:2c:3d:46:ba:d9:a2:b0:5d: e0:8f:a1:c4:1b:3b:ee:5a:75:29:2a:f0:9b:b4:f2: e5:57:ac:21:3f:36:da:7f:0c:4f:09:b4:ee:11:7c: 81:9c:af:4c:fc:a9:d4:f8:a5:c8:e8:93:01:c6:0a: f4:a2:29:0b:9e:d5:d3:5f:0b:3c:6c:16:60:44:cc: 4a:f1:ff:2e:35:a3:92:63:13:d7:c0:d8:1b:2b:da: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F3:C1:8C:45:79:FA:AA:C4:45:B9:73:88:FD:3B:02:A9:8C:DF:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:3a:52:84:61:19:55:45:15:5c:7d:76:a3:42:15:2f:54:94: e6:a9:4f:fe:4a:cd:eb:2e:83:2f:dc:ff:d5:4f:b0:0f:21:f8: f4:f3:aa:f6:2c:70:38:c2:e6:b3:d1:a6:9d:d8:c7:53:d6:d6: c8:8c:cb:7e:a7:dd:b4:b7:66:99:d7:48:de:f5:96:32:e9:2e: d3:80:14:02:3d:8f:91:fc:c8:71:a7:e2:b9:f2:58:90:64:67: 68:91:45:e9:87:d5:8d:5e:e6:a4:7d:2c:29:e3:40:2a:11:40: eb:53:04:a6:d7:b6:2e:19:36:29:fc:f0:84:b8:c0:cb:ec:83: 3b:fe:98:86:9b:88:b1:76:53:d6:27:4d:64:0a:2b:a9:e1:7f: 66:a7:41:1a:67:c0:42:ad:79:81:2d:43:a3:10:41:04:b0:8f: 37:d8:62:bf:41:e8:fc:09:18:4d:09:93:25:9f:79:4b:3c:18: 26:51:e5:56:b0:b1:08:d1:bc:3f:f5:2d:1f:c7:3b:6b:23:f5: 0f:73:82:b5:e8:c8:f3:35:2c:b3:98:fd:7f:78:1f:83:c7:85: 28:77:2a:27:ce:47:0c:b3:78:55:c2:51:0e:5a:c4:56:f9:38: 9c:b3:93:aa:14:83:7c:6d:82:d0:9e:09:de:03:4e:e0:e1:58: 1f:13:34:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut1DdNfdu0SpGLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk YWI2NDNkNTQtNzY2OC00OWQwLTlmMDQtZWEwZDJkZmRjMjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCUm2KLD2sQBgDihr0sM0Rpy4CIxIQ7hWKM5 7YbuSWc7QKzHCIFbROGs7xEJi3pMiMJX0E67+QnxbpQ7Ue+TRhtd8ZpREmgNunpB JZzzMp4CIU5bWMEdDE5OxQu4Ldkc6IzkG0lLDvkKeVZ22GWLhDiZgPrcHto2/xtB YQpGJrJVqlDEYHGrkkFMV0kGrnYofjcGVpqbxTKk/D1NhG7JOxCO2m9gOuhdHR5o LD1GutmisF3gj6HEGzvuWnUpKvCbtPLlV6whPzbafwxPCbTuEXyBnK9M/KnU+KXI 6JMBxgr0oikLntXTXws8bBZgRMxK8f8uNaOSYxPXwNgbK9pDhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/zwYxFefqqxEW5c4j9OwKpjN9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvZDlkOThhYWEtZTU2YS0z ZjIyLWE0NDktM2FkOGNhOWRkNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmz/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ06UoRhGVVFFVx9dqNCFS9UlOapT/5Kzesugy/c/9VPsA8h+PTzqvYs cDjC5rPRpp3Yx1PW1siMy36n3bS3ZpnXSN71ljLpLtOAFAI9j5H8yHGn4rnyWJBk Z2iRRemH1Y1e5qR9LCnjQCoRQOtTBKbXti4ZNin88IS4wMvsgzv+mIabiLF2U9Yn TWQKK6nhf2anQRpnwEKteYEtQ6MQQQSwjzfYYr9B6PwJGE0JkyWfeUs8GCZR5Vaw sQjRvD/1LR/HO2sj9Q9zgrXoyPM1LLOY/X94H4PHhSh3KifORwyzeFXCUQ5axFb5 OJyzk6oUg3xtgtCeCd4DTuDhWB8TNJQ= -----END CERTIFICATE-----Generated at Mon Sep 21 12:23:48 2026 by rpki-client