$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa File: fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa (raw, json) Hash identifier: VS3IdNuR3+L1DIf4+ljYmkd/w1g9sTKackOBVIlt+3M= Subject key identifier: 37:54:DF:BC:7E:E4:DA:19:7E:0A:F4:6E:DF:BD:EA:FB:2F:AD:11:09 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584AADF103AE946F5BB794C1DDD0 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 155.63.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:03:ae:94:6f:5b:b7:94:c1:dd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=8aec5535-ea77-4711-99d8-b6a0992d52a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d1:e9:91:b8:28:0e:9a:3e:c6:64:3c:78:39: 11:af:c7:44:0b:6b:35:0e:4f:4b:6d:6b:ec:25:cb: 30:65:b2:52:74:8a:89:2d:f8:12:5b:cb:06:f8:20: 00:17:70:44:f3:bf:ec:a0:96:49:48:31:2a:3c:c5: 26:8f:a5:50:c3:a8:00:ce:98:52:eb:50:50:36:41: 3e:a0:d7:48:e1:c4:52:7f:40:86:3c:7c:4e:c5:f6: 79:cc:be:cb:53:b8:ab:61:67:d1:05:96:88:7d:49: 69:d1:06:90:d7:b2:33:e9:d1:17:bd:6e:a6:0d:a1: fd:e8:98:6a:6a:86:17:38:43:f1:34:72:29:35:69: 13:a0:b6:fc:02:f5:47:dc:3d:97:b1:54:db:8a:24: 9a:46:a7:b5:78:2c:c9:b2:c1:eb:81:c6:6d:e4:a0: 88:6e:06:1e:ce:21:76:c2:68:91:be:2e:50:e6:16: a9:7a:94:5c:8a:05:b0:7c:89:94:66:1f:6f:1f:72: 6b:da:bc:b4:58:4c:84:c5:a2:cd:30:88:10:b7:6f: 34:e8:ed:ca:a9:c9:c1:f2:95:d8:83:f0:4c:0b:28: 7c:ee:50:6b:70:8a:dd:36:b2:09:fa:0e:1e:95:72: 67:d1:35:e1:76:dc:a1:78:90:77:b7:84:17:ad:3a: 04:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:54:DF:BC:7E:E4:DA:19:7E:0A:F4:6E:DF:BD:EA:FB:2F:AD:11:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:3e:48:31:48:f2:12:8c:ec:73:00:9e:06:ee:cb:d2:7b:64: d8:1d:1b:59:31:b2:44:0b:6a:47:53:ab:48:2a:c1:4e:66:52: 18:19:22:e9:b6:94:e3:93:a5:e6:d7:57:1d:93:37:50:c8:fd: 2d:37:d5:22:a4:db:84:1b:47:a7:d7:4f:f8:37:f7:63:33:b1: b6:2e:83:a5:aa:8c:91:df:3a:b6:16:d6:e6:ac:47:17:bb:4a: 1b:fd:11:b0:de:bb:07:96:d9:14:aa:05:b0:6f:e0:49:30:58: bd:3c:20:1a:c0:18:c9:78:3f:66:6f:55:da:a6:d8:48:55:53: 5e:02:08:f5:dd:58:8a:58:e1:c7:c9:b3:0f:de:a8:6d:a6:e2: bf:aa:91:0f:cb:c7:68:28:81:cc:03:fc:13:c2:8d:b6:33:a3: 67:19:7f:00:ce:71:78:e8:8a:3a:80:5b:05:65:40:b0:57:3d: f2:ab:a1:24:68:78:d8:5c:6c:75:32:1e:58:aa:5a:1a:ef:89: 27:31:82:67:46:d9:21:0c:08:61:c5:be:6c:e7:ed:44:4a:44: 9f:2c:f4:5d:81:7a:9d:cb:d1:d4:8d:dd:ea:60:b5:4b:52:8c: 65:48:dd:62:cc:37:db:f7:9e:0a:a7:0b:70:68:a3:21:ed:c2: eb:86:4a:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QOulG9bt5TB3dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk OGFlYzU1MzUtZWE3Ny00NzExLTk5ZDgtYjZhMDk5MmQ1MmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdHpkbgoDpo+xmQ8eDkRr8dEC2s1Dk9LbWvs JcswZbJSdIqJLfgSW8sG+CAAF3BE87/soJZJSDEqPMUmj6VQw6gAzphS61BQNkE+ oNdI4cRSf0CGPHxOxfZ5zL7LU7irYWfRBZaIfUlp0QaQ17Iz6dEXvW6mDaH96Jhq aoYXOEPxNHIpNWkToLb8AvVH3D2XsVTbiiSaRqe1eCzJssHrgcZt5KCIbgYeziF2 wmiRvi5Q5hapepRcigWwfImUZh9vH3Jr2ry0WEyExaLNMIgQt2806O3KqcnB8pXY g/BMCyh87lBrcIrdNrIJ+g4elXJn0TXhdtyheJB3t4QXrToEPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdU37x+5NoZfgr0bt+96vsvrREJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvZmQ3ZDI3ZTEtMjg0NC0z NDg1LTk3ZWItYmVlZDY1YzdjNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz9VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo+SDFI8hKM7HMAngbuy9J7ZNgdG1kxskQLakdTq0gqwU5mUhgZIum2 lOOTpebXVx2TN1DI/S031SKk24QbR6fXT/g392MzsbYug6WqjJHfOrYW1uasRxe7 Shv9EbDeuweW2RSqBbBv4EkwWL08IBrAGMl4P2ZvVdqm2EhVU14CCPXdWIpY4cfJ sw/eqG2m4r+qkQ/Lx2gogcwD/BPCjbYzo2cZfwDOcXjoijqAWwVlQLBXPfKroSRo eNhcbHUyHliqWhrviScxgmdG2SEMCGHFvmzn7URKRJ8s9F2Bep3L0dSN3epgtUtS jGVI3WLMN9v3ngqnC3BooyHtwuuGSg4= -----END CERTIFICATE-----Generated at Mon Aug 4 14:11:53 2025 by rpki-client