$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa File: d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa (raw, json) Hash identifier: ZDGv3xmwV0YqWTMR1RT8oSoYf4pAopvlDjMTIkVZpt4= Subject key identifier: 02:B6:55:4A:CD:B7:8B:AB:E7:86:5A:CC:0C:AB:A2:94:1A:FC:1C:66 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584D6C0FAC14B4B534AC681E2980 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 155.63.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:ac:14:b4:b5:34:ac:68:1e:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=be3d7288-4e2f-4e97-8b2e-a66eb218f32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:07:d1:59:aa:05:be:86:f1:62:d4:a8:7a: fe:9e:97:09:14:c4:de:2d:a2:40:40:bf:de:d6:cf: 87:6f:3a:72:f1:b9:bb:87:8e:b7:65:b3:0f:80:5d: 74:81:dd:75:81:60:d5:91:93:83:aa:2b:24:9d:0a: d9:f6:d9:ea:a2:00:69:6c:b5:65:61:fe:c9:33:70: 1f:32:5a:03:b7:74:f8:25:74:04:08:27:8b:43:97: 4c:9e:4c:6f:68:c8:0a:22:be:c2:2a:0a:f5:3f:dd: b1:c7:7b:63:fc:9f:74:1b:c3:d9:47:ba:0b:ed:44: 0c:d4:dd:e3:dd:b1:d2:27:31:25:70:a9:3f:a8:ed: 45:18:0f:ed:3b:df:7c:98:e1:34:22:22:28:c8:19: e8:7b:b4:3e:ff:1a:4e:92:37:f3:73:ad:f9:c5:4a: a5:38:be:78:7d:a9:b5:84:63:1a:ce:0d:c9:6f:11: fd:c1:76:31:fc:12:cf:06:65:5f:09:70:bd:0a:05: d9:e8:78:c5:bd:82:66:a8:09:6d:21:0f:ff:4c:49: 97:2d:a6:3d:f2:62:5a:17:b3:55:06:1b:b9:ba:d8: 5f:da:eb:a0:d2:52:cf:56:76:57:44:85:92:91:75: 66:8d:65:71:14:c0:77:37:d7:36:05:90:61:60:75: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B6:55:4A:CD:B7:8B:AB:E7:86:5A:CC:0C:AB:A2:94:1A:FC:1C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ff:84:f4:81:ef:b6:58:8e:e9:65:9d:0d:e6:d5:bf:06:1d: 4b:95:95:5d:d7:6c:73:0e:35:40:26:c4:38:86:31:69:a1:c1: f3:5b:7d:af:b1:dc:8a:aa:ba:62:b3:46:da:2b:8e:96:10:c1: db:c0:29:9e:09:0b:00:97:c2:af:43:7a:a0:9d:32:5b:5d:2a: 73:52:c3:c6:3d:70:b7:33:32:49:f2:52:36:6c:75:a6:f2:44: 2a:71:df:70:6b:b6:01:4f:e4:ee:9f:e9:ea:69:73:f1:a7:bf: 3c:97:bb:b6:a9:80:78:5f:55:e9:d1:d8:5b:19:a8:bc:dc:fa: cd:d1:1d:ff:73:d8:75:1b:56:0f:0f:13:d2:51:7e:e2:13:45: b9:96:e2:8d:c9:c4:40:27:8b:6d:b3:9a:5f:8f:43:4f:3e:30: 5c:7e:99:79:ea:a3:c9:b1:03:c8:4e:e7:da:f6:2e:4b:86:ce: 93:e4:6d:06:b0:fe:dc:1c:60:66:f3:ef:0d:83:05:48:39:c4: 53:9f:ac:e9:2c:a7:b9:e0:bf:c9:d0:40:57:6d:d2:c8:70:be: de:f0:68:00:d1:41:ce:2a:a2:1e:75:85:3b:5d:ff:78:9c:2b: 20:8d:27:08:40:c2:cd:40:cc:a5:06:9c:55:d2:32:41:4c:b6: b2:a5:f5:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD6wUtLU0rGgeKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YmUzZDcyODgtNGUyZi00ZTk3LThiMmUtYTY2ZWIyMThmMzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdAH0VmqBb6G8WLUqHr+npcJFMTeLaJAQL/e 1s+Hbzpy8bm7h463ZbMPgF10gd11gWDVkZODqisknQrZ9tnqogBpbLVlYf7JM3Af MloDt3T4JXQECCeLQ5dMnkxvaMgKIr7CKgr1P92xx3tj/J90G8PZR7oL7UQM1N3j 3bHSJzElcKk/qO1FGA/tO998mOE0IiIoyBnoe7Q+/xpOkjfzc635xUqlOL54fam1 hGMazg3JbxH9wXYx/BLPBmVfCXC9CgXZ6HjFvYJmqAltIQ//TEmXLaY98mJaF7NV Bhu5uthf2uug0lLPVnZXRIWSkXVmjWVxFMB3N9c2BZBhYHVhZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAK2VUrNt4ur54ZazAyropQa/BxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvZDlkOThhYWEtZTU2YS0z ZjIyLWE0NDktM2FkOGNhOWRkNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmz/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf/hPSB77ZYjullnQ3m1b8GHUuVlV3XbHMONUAmxDiGMWmhwfNbfa+x 3IqqumKzRtorjpYQwdvAKZ4JCwCXwq9DeqCdMltdKnNSw8Y9cLczMknyUjZsdaby RCpx33BrtgFP5O6f6eppc/GnvzyXu7apgHhfVenR2FsZqLzc+s3RHf9z2HUbVg8P E9JRfuITRbmW4o3JxEAni22zml+PQ08+MFx+mXnqo8mxA8hO59r2LkuGzpPkbQaw /twcYGbz7w2DBUg5xFOfrOksp7ngv8nQQFdt0shwvt7waADRQc4qoh51hTtd/3ic KyCNJwhAws1AzKUGnFXSMkFMtrKl9dQ= -----END CERTIFICATE-----Generated at Fri Apr 17 09:33:56 2026 by rpki-client