$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/2b8f1862-bd0d-3d5e-84ee-2a53320170c2.roa File: 2b8f1862-bd0d-3d5e-84ee-2a53320170c2.roa (raw, json) Hash identifier: cSAkmF2lEM44jrJY2nWA47WHHf3s+kErqgIcquBQjoY= Subject key identifier: 79:BA:B6:C8:28:10:00:46:77:39:1F:A7:34:4D:A5:85:0C:83:4C:18 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F43285849C4CA12774C1CAD0F0A6E4080 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/2b8f1862-bd0d-3d5e-84ee-2a53320170c2.roa Signing time: Wed 07 May 2025 00:39:25 +0000 ROA not before: Wed 07 May 2025 00:39:25 +0000 ROA not after: Tue 05 Aug 2025 00:39:25 +0000 asID: 133145 IP address blocks: 155.63.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:ca:12:77:4c:1c:ad:0f:0a:6e:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: May 7 00:39:25 2025 GMT Not After : Aug 5 00:39:25 2025 GMT Subject: CN=3f229869-665d-4fc5-a9ce-e1245fed147c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:75:43:8a:cd:88:f6:61:b9:75:f8:16:b5:ba: 87:68:64:91:17:3b:f2:24:8c:17:8b:fd:c1:e8:83: be:3d:d1:b5:ef:f8:fd:c6:18:c2:91:7a:19:6e:32: 07:3f:9d:9b:34:f9:17:42:b9:4c:c5:57:d9:57:b6: bb:fd:47:25:cd:84:c6:52:d9:d9:78:a9:66:d2:8c: b0:f5:1e:a9:4e:5d:98:60:f8:60:8a:80:a4:d4:fb: ef:df:73:09:80:25:a9:f5:13:30:aa:bd:fe:e7:3f: bb:ba:fc:63:aa:db:d6:03:ab:87:02:09:eb:b6:84: 09:19:1e:d9:c0:fe:2e:e4:58:b5:82:b9:07:6d:33: 38:03:a4:d1:50:a7:78:32:22:14:cc:20:49:05:ab: b2:d7:67:99:97:89:e4:6b:0b:c9:e9:1f:23:9e:06: 4e:37:7c:62:3b:a0:b4:e4:e7:56:17:20:a2:ca:f7: 17:05:d3:e0:06:6e:90:5c:b8:32:06:68:77:18:78: 56:9d:73:4f:81:ed:b3:dd:85:3d:29:b7:18:68:62: dd:6b:0a:bb:e1:76:0e:e6:b0:89:1b:0c:42:26:23: 64:95:9f:01:c4:fe:0e:ff:2d:88:26:9d:0e:e8:1b: 43:9d:80:cb:75:5f:d9:1f:0b:51:0b:5c:25:c8:59: c5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BA:B6:C8:28:10:00:46:77:39:1F:A7:34:4D:A5:85:0C:83:4C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/2b8f1862-bd0d-3d5e-84ee-2a53320170c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:67:98:e1:1b:52:fc:7d:6b:c5:17:09:18:e9:94:52:fe:ec: 42:1d:b5:15:b7:d0:e8:a4:04:18:d2:de:62:7e:22:96:f2:c8: 30:8b:a5:b3:54:e4:c2:e7:19:7e:cf:c6:cd:ff:6e:46:ab:36: 36:a1:5e:5d:55:c5:df:e2:86:b0:3c:3a:da:08:8e:31:31:0d: 87:23:a7:a3:8b:44:6b:5d:58:b9:1a:5a:fc:e7:76:1c:39:34: ef:a3:3a:63:f8:4f:20:d8:dd:2e:50:1b:2c:39:b6:f3:d4:b1: e0:d4:70:80:6e:d4:54:6f:28:1a:46:15:68:ce:25:b2:dc:46: 4b:39:d9:59:e4:ed:87:ff:f9:9f:10:a8:41:6f:ac:23:c3:23: 51:bd:3b:89:d7:3e:db:3e:4c:6e:ed:d3:92:71:d5:8a:a2:8c: d0:8f:2e:43:da:f3:48:67:7c:16:34:0a:7b:4e:11:fc:5c:68: 1a:e3:e1:86:9e:6e:12:5c:c2:81:8d:a8:d8:ae:9a:db:8f:d6: 31:b1:f7:f8:e1:0b:b2:e5:27:37:bf:dd:24:cd:be:30:ca:19: 56:11:00:36:31:a7:1d:cc:a0:ef:cd:9c:25:2e:0d:2a:49:6c: c0:56:e0:eb:c4:1e:fa:53:6e:c5:48:0d:da:6d:fc:28:9a:80: ab:87:2a:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnEyhJ3TBytDwpuQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDUwNzAwMzkyNVoXDTI1MDgwNTAwMzkyNVowLzEtMCsGA1UEAxMk M2YyMjk4NjktNjY1ZC00ZmM1LWE5Y2UtZTEyNDVmZWQxNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHVDis2I9mG5dfgWtbqHaGSRFzvyJIwXi/3B 6IO+PdG17/j9xhjCkXoZbjIHP52bNPkXQrlMxVfZV7a7/UclzYTGUtnZeKlm0oyw 9R6pTl2YYPhgioCk1Pvv33MJgCWp9RMwqr3+5z+7uvxjqtvWA6uHAgnrtoQJGR7Z wP4u5Fi1grkHbTM4A6TRUKd4MiIUzCBJBauy12eZl4nkawvJ6R8jngZON3xiO6C0 5OdWFyCiyvcXBdPgBm6QXLgyBmh3GHhWnXNPge2z3YU9KbcYaGLdawq74XYO5rCJ GwxCJiNklZ8BxP4O/y2IJp0O6BtDnYDLdV/ZHwtRC1wlyFnFAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHm6tsgoEABGdzkfpzRNpYUMg0wYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvMmI4ZjE4NjItYmQwZC0z ZDVlLTg0ZWUtMmE1MzMyMDE3MGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmz/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVnmOEbUvx9a8UXCRjplFL+7EIdtRW30OikBBjS3mJ+IpbyyDCLpbNU 5MLnGX7Pxs3/bkarNjahXl1Vxd/ihrA8OtoIjjExDYcjp6OLRGtdWLkaWvzndhw5 NO+jOmP4TyDY3S5QGyw5tvPUseDUcIBu1FRvKBpGFWjOJbLcRks52Vnk7Yf/+Z8Q qEFvrCPDI1G9O4nXPts+TG7t05Jx1YqijNCPLkPa80hnfBY0CntOEfxcaBrj4Yae bhJcwoGNqNiumtuP1jGx9/jhC7LlJze/3STNvjDKGVYRADYxpx3MoO/NnCUuDSpJ bMBW4OvEHvpTbsVIDdpt/CiagKuHKvw= -----END CERTIFICATE-----Generated at Sat May 10 23:04:09 2025 by rpki-client