$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1effb335-be49-3c5a-83a0-40a99c95a39e.roa File: 1effb335-be49-3c5a-83a0-40a99c95a39e.roa (raw, json) Hash identifier: Xy35sfHJ8+9Q75xHQqpxu0AHJKNzXtL4kzwcB8w8Kow= Subject key identifier: 9A:16:7F:08:13:25:76:24:08:F8:80:61:AD:64:73:D0:7C:FA:32:52 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584AC2E0E725A2BAF9771709EA80 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1effb335-be49-3c5a-83a0-40a99c95a39e.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 155.63.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e7:25:a2:ba:f9:77:17:09:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=2ec0f5c7-a747-4716-b1b2-e6da14465c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:47:1b:92:e3:b5:84:4b:15:b6:d5:5a:9f: 30:c3:b2:3f:c4:6e:62:c2:07:74:f5:36:19:8e:c0: 0b:7e:23:9c:92:5c:ab:77:f5:94:d2:4d:b0:e9:2a: 9e:6b:96:b2:2d:a6:ba:8f:c7:aa:d0:ef:85:14:9d: f8:4a:b6:2d:99:8c:52:33:4f:95:7a:a4:89:23:2e: 0b:6a:c9:a9:ea:5c:04:2f:d6:77:01:54:70:dc:ba: ee:ff:2b:67:3d:f4:85:76:af:9c:71:a0:90:43:b7: 2b:4f:04:3e:42:18:d0:56:5b:0d:1f:1a:de:2c:42: ae:1a:ea:f4:89:84:b2:e2:0f:0e:91:8c:fe:49:70: f7:08:ec:67:ea:ee:68:1d:c7:d1:f1:ef:5a:c6:ad: 75:c0:33:1e:51:07:6e:aa:e5:ee:0e:fc:ad:cf:b6: 10:c0:c9:43:2e:a1:7b:61:cf:7e:1f:89:8d:6d:6d: 03:b3:9f:01:c6:d3:21:3e:da:04:a5:3c:c5:9c:6d: c5:89:a3:df:76:f2:e0:dc:95:e7:d6:e8:b4:5c:d1: 0e:7c:32:fe:c7:f2:a9:aa:ba:49:6e:a5:23:97:46: 1a:92:b1:9a:b4:cc:a3:e4:30:ad:a2:b0:8d:b9:d8: 17:5d:98:55:68:f0:ff:70:da:40:9b:09:23:37:35: fd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:16:7F:08:13:25:76:24:08:F8:80:61:AD:64:73:D0:7C:FA:32:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1effb335-be49-3c5a-83a0-40a99c95a39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5c:b6:b3:48:0a:4d:fe:6d:dc:4b:19:8d:19:f4:d7:61:a3: d7:f7:3c:50:87:50:ef:ad:65:e7:3b:d3:3c:61:84:23:44:87: 1c:96:af:33:c2:a8:c6:96:36:2a:0b:fc:22:3a:6d:99:43:28: d2:f4:ec:da:b5:e1:38:95:66:8f:60:6d:6a:a6:0e:f2:f9:6e: dd:c5:29:3f:17:a6:1b:70:1d:c0:f2:4a:1c:d3:f0:3a:b1:ee: eb:e0:4c:a8:62:da:28:96:d3:95:17:97:72:34:9f:33:2c:55: 23:28:bd:97:2a:27:81:71:29:61:fe:f5:9f:ae:89:68:19:5e: 6b:b9:9b:6a:db:24:42:6e:8d:7c:4a:f9:56:4d:d5:7f:a6:ad: 36:1c:5e:ec:17:ba:76:09:bb:fe:e7:9e:a7:d5:70:97:9c:ea: a6:67:72:9f:ba:32:5a:20:fa:96:5d:5a:87:4e:52:42:f8:7b: 4a:1d:4b:8c:e6:f5:ee:46:67:fe:a2:51:a8:78:66:8d:12:cd: 9c:c7:76:0f:27:98:c9:56:f4:8d:85:04:b4:4d:56:50:be:41: f9:e5:28:52:4f:2e:49:2a:44:fc:3a:93:01:36:25:06:35:d5: 67:11:56:57:e4:d9:e7:c0:be:c0:f6:81:07:50:2b:24:37:55: 69:7a:33:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Oclorr5dxcJ6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MmVjMGY1YzctYTc0Ny00NzE2LWIxYjItZTZkYTE0NDY1YzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlxHG5LjtYRLFbbVWp8ww7I/xG5iwgd09TYZ jsALfiOcklyrd/WU0k2w6Sqea5ayLaa6j8eq0O+FFJ34SrYtmYxSM0+VeqSJIy4L asmp6lwEL9Z3AVRw3Lru/ytnPfSFdq+ccaCQQ7crTwQ+QhjQVlsNHxreLEKuGur0 iYSy4g8OkYz+SXD3COxn6u5oHcfR8e9axq11wDMeUQduquXuDvytz7YQwMlDLqF7 Yc9+H4mNbW0Ds58BxtMhPtoEpTzFnG3FiaPfdvLg3JXn1ui0XNEOfDL+x/KpqrpJ bqUjl0YakrGatMyj5DCtorCNudgXXZhVaPD/cNpAmwkjNzX9jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoWfwgTJXYkCPiAYa1kc9B8+jJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvMWVmZmIzMzUtYmU0OS0z YzVhLTgzYTAtNDBhOTljOTVhMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhctrNICk3+bdxLGY0Z9Ndho9f3PFCHUO+tZec70zxhhCNEhxyWrzPC qMaWNioL/CI6bZlDKNL07Nq14TiVZo9gbWqmDvL5bt3FKT8XphtwHcDyShzT8Dqx 7uvgTKhi2iiW05UXl3I0nzMsVSMovZcqJ4FxKWH+9Z+uiWgZXmu5m2rbJEJujXxK +VZN1X+mrTYcXuwXunYJu/7nnqfVcJec6qZncp+6Mlog+pZdWodOUkL4e0odS4zm 9e5GZ/6iUah4Zo0SzZzHdg8nmMlW9I2FBLRNVlC+QfnlKFJPLkkqRPw6kwE2JQY1 1WcRVlfk2efAvsD2gQdQKyQ3VWl6M6g= -----END CERTIFICATE-----Generated at Sat Aug 23 12:11:29 2025 by rpki-client