$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/2b8f1862-bd0d-3d5e-84ee-2a53320170c2.roa File: 2b8f1862-bd0d-3d5e-84ee-2a53320170c2.roa (raw, json) Hash identifier: W0tC8bb/9mGzuA5lMR+RDo0rH/dNAHCLwl5JSE5oxoY= Subject key identifier: EE:F9:61:09:5D:3E:7E:C0:32:46:44:73:80:4A:9A:50:D3:6C:6C:44 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584D44FA5FD61C35C482E6568D80 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/2b8f1862-bd0d-3d5e-84ee-2a53320170c2.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 133145 IP address blocks: 155.63.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:5f:d6:1c:35:c4:82:e6:56:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=90c10dfa-e6cb-4e0a-8705-77ac547669e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:90:db:6f:24:d3:98:22:59:73:11:df:24:25: d3:88:11:71:60:fd:3a:b7:1e:e3:c2:e0:c0:40:ad: b0:38:83:e8:2e:46:00:2f:19:e3:3f:b0:6c:61:c4: a8:84:64:67:3c:2a:8f:3f:b0:e9:95:a4:34:9c:3b: 2a:3e:ac:00:12:f6:ba:be:2a:b6:2f:2e:69:e2:b3: 1e:48:0a:a8:a3:8e:0c:dd:16:30:2c:bf:9b:29:8d: 92:43:85:6f:cb:60:66:ad:3c:d8:0f:06:30:c1:56: eb:95:51:2c:fe:6a:0f:ee:a6:0f:fd:b7:25:c2:bf: 73:81:73:27:cf:b9:07:af:3f:d8:e8:8a:ab:49:6f: c5:d1:75:64:6c:a9:ee:19:43:9c:c3:41:cc:ac:d0: 2e:b7:e7:f6:b9:06:73:6e:b0:84:49:25:6c:f1:a0: 27:b5:61:97:7c:98:fe:3d:45:76:e9:62:5f:7a:99: 6d:01:f1:da:bc:b2:2e:58:f6:57:4c:6b:0b:79:e7: 16:a3:19:3b:6b:86:46:0b:06:23:38:c4:d7:61:52: 5d:ae:f0:fd:cd:e9:49:da:9a:ca:2e:d5:58:a1:44: e2:90:00:00:00:2d:10:0b:90:63:12:4c:e1:57:98: 5c:dd:bc:ee:28:da:c3:c0:2c:0e:57:ef:cf:89:d6: 7f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F9:61:09:5D:3E:7E:C0:32:46:44:73:80:4A:9A:50:D3:6C:6C:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/2b8f1862-bd0d-3d5e-84ee-2a53320170c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:64:95:ca:2a:ce:4a:eb:44:c4:76:a5:a2:1f:02:70:fd:da: a6:6e:4b:cc:20:53:b2:88:df:db:cc:ec:c3:e2:8a:ff:7c:2a: 7f:c7:9d:c2:f1:35:ca:58:c1:63:33:2c:00:f0:57:33:22:eb: 12:60:14:ac:1a:6c:4c:81:d6:5e:2e:96:36:ed:09:ef:59:25: fe:f2:f3:8c:b6:b4:e6:2d:b5:36:3c:39:42:0d:54:34:24:e5: 0e:4a:7d:24:a2:8f:cf:82:7d:f8:ef:03:5b:66:3b:e1:ba:d7: fa:85:5e:a0:14:88:bc:9c:f9:5b:f8:3d:89:e4:f1:e3:ec:dd: 78:96:03:dc:f1:d0:18:41:4e:1d:34:3d:db:b4:a8:58:c7:cd: 78:ac:6d:54:3d:25:ac:28:1c:54:21:ff:80:24:8d:a8:e2:7a: 88:dc:73:7d:7a:12:b5:29:e6:6f:b1:34:ca:9b:b6:73:60:ec: 03:37:32:b9:49:2d:ce:db:74:17:fa:e0:06:4e:4f:89:2d:00: 22:74:36:9b:0e:55:4c:0d:f7:73:f0:f1:4e:85:94:cc:53:fe: 7c:f4:59:20:81:ef:58:13:70:0b:88:b5:ce:a0:60:b6:e5:99: f5:eb:0b:95:4b:14:98:05:c5:c3:0f:f7:e4:a3:45:72:c5:39: 8d:fb:26:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+l/WHDXEguZWjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OTBjMTBkZmEtZTZjYi00ZTBhLTg3MDUtNzdhYzU0NzY2OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZDbbyTTmCJZcxHfJCXTiBFxYP06tx7jwuDA QK2wOIPoLkYALxnjP7BsYcSohGRnPCqPP7DplaQ0nDsqPqwAEva6viq2Ly5p4rMe SAqoo44M3RYwLL+bKY2SQ4Vvy2BmrTzYDwYwwVbrlVEs/moP7qYP/bclwr9zgXMn z7kHrz/Y6IqrSW/F0XVkbKnuGUOcw0HMrNAut+f2uQZzbrCESSVs8aAntWGXfJj+ PUV26WJfepltAfHavLIuWPZXTGsLeecWoxk7a4ZGCwYjOMTXYVJdrvD9zelJ2prK LtVYoUTikAAAAC0QC5BjEkzhV5hc3bzuKNrDwCwOV+/PidZ/cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO75YQldPn7AMkZEc4BKmlDTbGxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvMmI4ZjE4NjItYmQwZC0z ZDVlLTg0ZWUtMmE1MzMyMDE3MGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmz/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5klcoqzkrrRMR2paIfAnD92qZuS8wgU7KI39vM7MPiiv98Kn/HncLx NcpYwWMzLADwVzMi6xJgFKwabEyB1l4uljbtCe9ZJf7y84y2tOYttTY8OUINVDQk 5Q5KfSSij8+CffjvA1tmO+G61/qFXqAUiLyc+Vv4PYnk8ePs3XiWA9zx0BhBTh00 Pdu0qFjHzXisbVQ9JawoHFQh/4Akjajieojcc316ErUp5m+xNMqbtnNg7AM3MrlJ Lc7bdBf64AZOT4ktACJ0NpsOVUwN93Pw8U6FlMxT/nz0WSCB71gTcAuItc6gYLbl mfXrC5VLFJgFxcMP9+SjRXLFOY37Jl4= -----END CERTIFICATE-----Generated at Thu Mar 26 06:58:15 2026 by rpki-client