$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa File: 3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa (raw, json) Hash identifier: tCAMr+rXPFW/+28uTPcs7uU79/SFwRUdCI1ZqvVCAzY= Subject key identifier: E1:6A:D9:75:9F:10:2F:75:A1:0B:25:10:03:11:5F:F2:7E:E7:1B:84 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584F89A861BC6B66C5D067147280 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 14618 IP address blocks: 155.63.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:61:bc:6b:66:c5:d0:67:14:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=8da067b4-c0bf-492d-be25-ff76fef7894d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:e6:71:74:ec:68:73:d5:09:b2:26:94:4c: a4:e8:24:72:5c:18:c9:f5:4b:18:0b:a7:b3:c6:3a: d4:be:1c:e7:84:cb:77:44:29:0e:52:17:46:24:e3: 05:76:a0:d3:d0:06:ca:3c:9a:9f:aa:22:ea:b1:e2: cb:c7:99:4a:45:8b:09:9e:e5:d3:f6:04:4f:27:0a: 82:e6:49:22:88:0c:c6:00:f5:7e:b5:fe:58:20:aa: d0:30:fc:04:30:c8:05:7f:07:9d:56:0e:3c:c9:69: 03:b3:ff:bf:51:e2:3f:c3:5f:a5:7a:26:5f:6e:1c: 7b:0d:02:7c:5d:d0:90:06:c7:4c:8f:3c:38:f0:ec: 92:3b:1f:27:e6:9a:22:e4:13:12:75:1d:f3:7f:db: 23:db:bd:60:0c:25:e3:eb:fe:1e:6e:eb:0c:09:07: b5:cb:db:5d:ae:68:ab:af:ea:5a:03:c9:8c:5f:c9: 83:29:21:27:83:7d:ed:59:67:50:d7:03:ca:d4:c2: 41:5d:f7:4f:f4:5a:73:a7:49:55:32:af:01:ef:39: c0:78:f6:c0:49:1a:70:06:08:c1:07:ac:b8:91:81: 66:95:67:6e:1f:79:c9:9e:41:e9:c0:ce:36:59:d7: bf:63:ca:66:a4:33:01:cd:0a:0f:bd:fd:d5:fb:8e: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6A:D9:75:9F:10:2F:75:A1:0B:25:10:03:11:5F:F2:7E:E7:1B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f7:59:05:80:7a:8f:7a:f8:23:f4:cc:4e:f8:a4:0d:71:b4: 5e:fc:ae:ec:6e:13:6b:c1:01:1b:c2:55:8a:79:28:57:af:6b: f4:04:40:f8:f7:7b:bb:5f:a0:6e:26:86:af:08:57:68:b3:14: 35:ad:32:7e:bf:9a:df:db:7d:4c:cb:fd:2d:ab:f7:e9:9a:da: 1d:c8:15:c2:86:1a:64:75:d0:5a:4f:d9:7e:84:b1:30:c6:90: 42:ab:da:e9:6d:ae:32:d1:97:9a:e1:ec:50:74:26:73:5b:20: 71:0a:e4:d6:63:b5:ab:b1:14:fb:3d:4f:0d:c5:63:88:0d:eb: ea:f6:23:63:13:71:f4:3b:98:e4:8e:cb:61:24:65:c7:a3:f8: b0:53:40:f9:5e:86:bb:ea:58:bc:60:24:c5:bd:5a:d7:7f:0b: 8a:19:07:ce:de:bd:2b:7a:27:31:e4:1f:1f:05:21:37:d1:8a: 5e:4a:2f:60:dc:1b:c3:89:8f:44:4e:a5:43:c6:70:e1:bc:84: 6a:df:20:21:83:7e:2e:6b:52:0d:d6:c3:13:ce:61:ff:72:09: 9c:0a:07:20:40:ef:ef:c8:04:ef:ab:17:1c:ec:eb:60:24:bb: 8d:15:0c:ae:20:1b:dd:19:0f:54:61:3d:b2:e5:b5:32:b5:16: f1:20:1a:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqGG8a2bF0GcUcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk OGRhMDY3YjQtYzBiZi00OTJkLWJlMjUtZmY3NmZlZjc4OTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRTmcXTsaHPVCbImlEyk6CRyXBjJ9UsYC6ez xjrUvhznhMt3RCkOUhdGJOMFdqDT0AbKPJqfqiLqseLLx5lKRYsJnuXT9gRPJwqC 5kkiiAzGAPV+tf5YIKrQMPwEMMgFfwedVg48yWkDs/+/UeI/w1+leiZfbhx7DQJ8 XdCQBsdMjzw48OySOx8n5poi5BMSdR3zf9sj271gDCXj6/4ebusMCQe1y9tdrmir r+paA8mMX8mDKSEng33tWWdQ1wPK1MJBXfdP9Fpzp0lVMq8B7znAePbASRpwBgjB B6y4kYFmlWduH3nJnkHpwM42Wde/Y8pmpDMBzQoPvf3V+45J1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFq2XWfEC91oQslEAMRX/J+5xuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvMzczMmNkMjktZDU5Zi0z N2M0LTg5N2UtZWIzZmQxNTI4ZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJX3WQWAeo96+CP0zE74pA1xtF78ruxuE2vBARvCVYp5KFeva/QEQPj3 e7tfoG4mhq8IV2izFDWtMn6/mt/bfUzL/S2r9+ma2h3IFcKGGmR10FpP2X6EsTDG kEKr2ultrjLRl5rh7FB0JnNbIHEK5NZjtauxFPs9Tw3FY4gN6+r2I2MTcfQ7mOSO y2EkZcej+LBTQPlehrvqWLxgJMW9Wtd/C4oZB87evSt6JzHkHx8FITfRil5KL2Dc G8OJj0ROpUPGcOG8hGrfICGDfi5rUg3WwxPOYf9yCZwKByBA7+/IBO+rFxzs62Ak u40VDK4gG90ZD1RhPbLltTK1FvEgGkU= -----END CERTIFICATE-----Generated at Sat Nov 14 20:43:23 2026 by rpki-client