$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa File: d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa (raw, json) Hash identifier: 4xNi1enEY93TbcOHa4yUqi6xGTKctGpNut3bZAbvLgo= Subject key identifier: 8B:5A:DF:FA:B6:E3:E7:6F:0F:E0:E9:76:82:AB:6D:FE:D4:74:D7:B4 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F43285849EA8512FD1DFE4BB5CAD23580 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 16509 IP address blocks: 155.63.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:12:fd:1d:fe:4b:b5:ca:d2:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=59234eef-65fc-49e4-a77f-1c6373771733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:80:12:b4:9b:a3:0e:5e:b1:88:41:ef:03:23: 92:82:85:35:85:2a:88:c8:36:6d:34:7a:82:7b:7c: d2:75:12:0e:ea:40:51:08:3d:65:f4:3d:1c:6f:22: 33:25:fb:93:28:b7:53:44:be:3d:36:fd:bf:89:6b: d3:34:90:e7:42:6d:bb:b2:02:13:1d:c7:7c:73:51: 87:08:43:5d:80:f1:b0:1c:97:c0:ad:b4:94:f0:38: 3f:6d:ed:90:fb:73:99:a2:68:8b:e3:75:4e:24:29: 07:a4:16:1a:03:a2:c2:c0:97:a8:3c:91:b0:44:30: df:7a:70:51:19:86:31:98:42:82:ce:fa:d5:9a:14: b6:66:8d:7d:e7:71:1c:c2:82:8e:8a:9e:02:41:22: 2e:0a:05:e6:ba:37:c2:89:22:4b:a0:81:f1:e0:29: 33:33:80:38:23:8a:e7:7e:0d:78:79:eb:c6:27:04: 61:33:8a:02:c3:91:14:19:7f:60:31:7c:f7:a8:fb: 02:3f:04:30:7c:a4:8e:26:f2:fa:f3:4f:2d:e3:3e: 52:ba:b4:13:3a:2b:d5:b0:a0:c2:18:b0:1c:46:c4: 8c:03:5d:43:f3:57:c4:75:02:19:04:6b:fd:f8:27: d2:e4:e1:3c:ae:b5:07:fa:2f:be:aa:ac:85:92:0d: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5A:DF:FA:B6:E3:E7:6F:0F:E0:E9:76:82:AB:6D:FE:D4:74:D7:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:7b:b3:db:c7:93:af:82:6e:f7:58:42:1d:c5:9b:6f:9b:bf: a2:b4:39:16:b8:c7:01:9e:e6:b6:3c:4f:25:74:ce:a5:78:38: 28:9d:d4:91:8a:42:aa:9b:ea:27:f1:01:4a:73:eb:d0:5f:0b: d8:16:12:4a:0c:98:58:7e:90:31:bd:5e:82:25:ed:7d:9a:97: 82:e5:ad:93:14:d3:a2:00:96:a7:f4:ec:d2:47:2a:d5:ab:f9: 53:3f:c2:95:a8:a3:17:f7:23:1e:b5:d2:42:06:63:6e:0d:72: c9:25:84:76:ac:8f:4a:e4:ff:a7:d3:85:23:bc:52:a0:42:68: 6f:63:a1:93:cc:14:89:17:dd:ad:30:70:46:b5:7c:00:ef:23: ba:cf:d1:bd:ed:1b:d4:a1:a7:85:b9:97:8f:b0:a6:6c:ff:a4: d7:8a:d3:e5:15:94:5c:0d:64:8b:5d:44:3a:ea:a0:13:46:b4: e2:3a:fb:79:62:c1:62:7d:66:96:ae:57:65:71:6e:dc:8c:f4: 1d:9a:40:24:b2:13:4c:99:60:80:15:19:ca:8d:19:b9:ec:23: e3:78:79:3f:30:35:b5:3a:05:e4:04:dd:c9:c8:91:ce:96:da: 42:ce:44:e1:52:ca:fa:b1:81:d9:53:ba:3f:f8:f0:28:4d:87: 0c:e9:14:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhRL9Hf5LtcrSNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NTkyMzRlZWYtNjVmYy00OWU0LWE3N2YtMWM2MzczNzcxNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIAStJujDl6xiEHvAyOSgoU1hSqIyDZtNHqC e3zSdRIO6kBRCD1l9D0cbyIzJfuTKLdTRL49Nv2/iWvTNJDnQm27sgITHcd8c1GH CENdgPGwHJfArbSU8Dg/be2Q+3OZomiL43VOJCkHpBYaA6LCwJeoPJGwRDDfenBR GYYxmEKCzvrVmhS2Zo1953EcwoKOip4CQSIuCgXmujfCiSJLoIHx4CkzM4A4I4rn fg14eevGJwRhM4oCw5EUGX9gMXz3qPsCPwQwfKSOJvL6808t4z5SurQTOivVsKDC GLAcRsSMA11D81fEdQIZBGv9+CfS5OE8rrUH+i++qqyFkg1Z+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIta3/q24+dvD+DpdoKrbf7UdNe0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvZDlkOThhYWEtZTU2YS0z ZjIyLWE0NDktM2FkOGNhOWRkNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmz/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI17s9vHk6+CbvdYQh3Fm2+bv6K0ORa4xwGe5rY8TyV0zqV4OCid1JGK Qqqb6ifxAUpz69BfC9gWEkoMmFh+kDG9XoIl7X2al4LlrZMU06IAlqf07NJHKtWr +VM/wpWooxf3Ix610kIGY24NcsklhHasj0rk/6fThSO8UqBCaG9joZPMFIkX3a0w cEa1fADvI7rP0b3tG9Shp4W5l4+wpmz/pNeK0+UVlFwNZItdRDrqoBNGtOI6+3li wWJ9ZpauV2VxbtyM9B2aQCSyE0yZYIAVGcqNGbnsI+N4eT8wNbU6BeQE3cnIkc6W 2kLOROFSyvqxgdlTuj/48ChNhwzpFF8= -----END CERTIFICATE-----Generated at Sat Jun 14 05:54:54 2025 by rpki-client