$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa File: d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa (raw, json) Hash identifier: 6kyE2hDa8s1qGVCZa/kNFgsBrC8wpAfg6iVCXxlEfkY= Subject key identifier: 9F:0B:97:F8:0B:71:05:06:2F:B1:87:84:F4:AE:67:A1:30:B7:99:55 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584BABFCFE018A4946DD46665600 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 155.63.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fc:fe:01:8a:49:46:dd:46:66:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=26bb0f7d-b23c-4fcf-8d60-10466b3a0eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:47:0b:0b:3e:da:5c:58:e5:18:ed:0b:92:7d: d1:48:54:92:c9:ae:ba:40:b5:7c:bb:6a:97:21:f2: 98:fd:84:38:d1:25:b1:06:df:d6:10:c5:8c:6e:02: f7:2f:8f:04:ef:9b:13:92:7e:75:02:64:c6:3f:9a: f7:6b:15:27:7a:00:c3:60:05:7d:59:1b:55:df:ae: 6f:4b:51:1f:43:98:60:2a:93:eb:8d:ab:1c:fa:56: 7d:86:e7:85:7d:a5:18:ca:d9:c7:f9:63:ff:23:1f: 84:4d:27:ae:bf:4d:30:3d:40:8c:4c:d1:45:4d:7d: d1:17:4e:f2:f5:e5:d0:60:d7:35:a6:6d:0a:7d:ac: 80:ce:bb:40:65:51:cc:c0:67:1a:80:8b:6e:f7:ea: 75:f0:a9:d7:0b:01:96:68:56:db:bf:15:07:cd:eb: da:47:54:93:58:f3:c0:5d:27:53:03:fe:22:8a:f2: a1:df:79:25:46:ed:87:09:3c:31:3a:6e:50:18:b7: 98:dd:9e:e9:aa:48:83:a0:9a:15:b4:5f:e7:cf:3c: 26:2f:28:46:06:2d:16:12:4c:a8:4c:0e:bf:c5:1f: aa:90:23:6c:36:d1:b0:43:a7:8a:f4:98:5c:87:56: 36:75:30:f2:d9:fe:9a:2c:c2:c2:3a:64:4f:6f:94: 2f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0B:97:F8:0B:71:05:06:2F:B1:87:84:F4:AE:67:A1:30:B7:99:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4a:8f:15:10:fd:ea:4c:4a:bb:39:8e:23:08:ba:cb:68:3a: 94:60:bd:6a:d5:a0:59:31:e6:a0:61:6c:39:3c:cc:32:d6:08: ea:80:6f:db:78:00:e3:65:8d:ad:19:5c:3f:4d:c4:c3:dd:f9: 27:dc:94:98:e4:cf:4e:e6:b7:86:40:69:98:84:4e:a6:68:26: e5:ff:da:22:97:0b:69:e7:22:be:ba:d4:a9:63:52:96:e8:07: ae:48:33:0a:73:f0:d0:6b:27:0c:eb:c7:a9:f0:6c:43:98:b1: 41:83:55:1d:df:55:2c:b7:02:9f:ac:2c:d1:47:26:75:9d:57: 19:05:61:2a:51:03:22:23:34:3c:21:98:04:f9:38:f4:58:5b: 8c:01:ad:cd:a5:81:91:41:48:79:0b:c9:82:0a:7e:06:ab:93: 23:61:2c:f4:24:2c:7b:df:e1:3d:e6:11:81:b6:8a:a1:aa:2e: 68:97:2e:37:ba:14:4f:64:90:e8:de:4c:5f:57:2d:3e:18:3c: 7f:9e:56:31:f1:e3:70:f4:7c:de:09:f6:30:14:fb:65:6e:a2: fe:19:ad:7e:44:2b:f6:e1:ef:58:d9:e4:c4:a6:c7:b0:f7:71: 6d:f1:09:a5:d2:b5:57:11:44:02:a9:71:9e:f6:7d:f3:f4:d4: b1:b7:8a:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/P4BiklG3UZmVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MjZiYjBmN2QtYjIzYy00ZmNmLThkNjAtMTA0NjZiM2EwZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kcLCz7aXFjlGO0Lkn3RSFSSya66QLV8u2qX IfKY/YQ40SWxBt/WEMWMbgL3L48E75sTkn51AmTGP5r3axUnegDDYAV9WRtV365v S1EfQ5hgKpPrjasc+lZ9hueFfaUYytnH+WP/Ix+ETSeuv00wPUCMTNFFTX3RF07y 9eXQYNc1pm0KfayAzrtAZVHMwGcagItu9+p18KnXCwGWaFbbvxUHzevaR1STWPPA XSdTA/4iivKh33klRu2HCTwxOm5QGLeY3Z7pqkiDoJoVtF/nzzwmLyhGBi0WEkyo TA6/xR+qkCNsNtGwQ6eK9Jhch1Y2dTDy2f6aLMLCOmRPb5QvPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8Ll/gLcQUGL7GHhPSuZ6Ewt5lVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvZDlkOThhYWEtZTU2YS0z ZjIyLWE0NDktM2FkOGNhOWRkNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmz/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtKjxUQ/epMSrs5jiMIustoOpRgvWrVoFkx5qBhbDk8zDLWCOqAb9t4 AONlja0ZXD9NxMPd+SfclJjkz07mt4ZAaZiETqZoJuX/2iKXC2nnIr661KljUpbo B65IMwpz8NBrJwzrx6nwbEOYsUGDVR3fVSy3Ap+sLNFHJnWdVxkFYSpRAyIjNDwh mAT5OPRYW4wBrc2lgZFBSHkLyYIKfgarkyNhLPQkLHvf4T3mEYG2iqGqLmiXLje6 FE9kkOjeTF9XLT4YPH+eVjHx43D0fN4J9jAU+2Vuov4ZrX5EK/bh71jZ5MSmx7D3 cW3xCaXStVcRRAKpcZ72ffP01LG3igQ= -----END CERTIFICATE-----Generated at Wed Nov 5 19:43:07 2025 by rpki-client