$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa File: 3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa (raw, json) Hash identifier: 8t7XcOvfa+MVAlvYM0XJbpJjSL7EVakNd4LJq6f6nT8= Subject key identifier: 21:A2:30:10:17:60:9D:2F:4D:5E:CD:E0:16:4D:5C:16:FB:3D:B3:EA Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584E4559DA3B1E18F6FCCB2DB218 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 14618 IP address blocks: 155.63.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:da:3b:1e:18:f6:fc:cb:2d:b2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=49aea3c0-725a-4543-9fac-ed2344aa64ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:61:ff:25:3e:3e:ca:c4:3e:b1:d1:a1:bf:04: 70:40:80:97:1d:3e:5e:d9:db:81:06:b7:83:d2:cb: dd:eb:e7:15:c6:6a:ce:97:de:07:40:76:2c:c5:83: 22:3f:6e:4b:4b:1f:13:0f:52:e1:94:14:88:6d:fa: c1:9e:c8:17:5e:7a:41:ac:8f:50:51:b3:f3:28:33: e7:79:58:a1:7f:22:c6:8f:dd:33:72:a5:94:d0:34: 72:22:b0:b3:de:22:cb:28:ef:b3:03:80:73:84:08: 1e:19:08:d1:07:68:b6:4c:a9:96:d3:29:05:d3:54: 44:9d:68:23:93:db:b7:b4:52:e7:3c:8e:70:53:fb: 38:5c:09:b5:8a:53:a1:38:a9:50:8d:cb:44:3c:66: 4e:9c:c7:55:7f:d8:79:88:62:cb:a8:9c:59:66:c8: ab:2f:37:c7:33:dc:f6:a2:34:9f:a9:34:a4:d8:30: f9:66:32:c5:be:81:27:f8:fd:68:aa:af:6c:be:37: 0b:a5:c5:b8:ef:82:c5:2c:c1:43:14:6e:02:66:db: 98:23:0b:f4:5d:dd:0e:0c:52:1c:47:db:92:0f:c5: 3b:7f:5d:8d:bc:3c:51:ff:5e:5c:f6:dd:69:1e:48: d6:e1:1e:a0:e1:43:dc:72:71:6a:df:e1:59:9e:a7: c3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A2:30:10:17:60:9D:2F:4D:5E:CD:E0:16:4D:5C:16:FB:3D:B3:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6c:8a:f5:24:e6:eb:87:38:13:d0:a2:71:67:8e:71:ce:68: 4a:e8:2e:b9:f4:f2:56:b2:2e:d3:9a:8b:d9:5a:28:48:e6:d4: 6b:04:32:fe:37:be:36:63:37:82:1a:51:67:fa:fb:73:7d:e9: c9:07:9d:92:1c:d4:fe:aa:54:f8:74:bb:49:f9:2e:e5:ce:ea: 4d:2e:5e:15:8d:8e:9a:42:c3:94:87:25:7d:4d:b7:01:da:4b: 5a:a5:1d:08:df:1f:ed:a2:2a:81:38:d5:df:f1:70:5b:3d:02: b9:18:10:8a:e1:c1:71:c7:2e:c6:35:e1:79:31:a8:9b:76:b1: 1c:2e:3c:a1:ca:d4:3e:06:5b:fe:14:a8:e0:6e:03:f6:a2:a1: 77:f1:66:c3:e4:33:d3:eb:0f:d2:78:1d:71:81:c8:a4:38:9d: 87:92:0d:8c:50:9c:0a:2b:49:a0:38:20:df:35:1f:f3:cd:2e: f1:9c:58:0c:a5:5a:24:d4:cb:c6:81:b8:4c:84:3a:7c:4e:10: 0c:c0:1e:d6:b1:b7:bb:5e:7c:32:3b:38:3d:31:a9:3d:35:0b: d2:57:eb:3d:1a:86:e4:00:22:b5:67:d3:4b:c9:53:ae:6a:30: 08:58:fe:c8:8a:0a:76:e8:22:44:3f:b5:d5:d9:dc:09:95:ea: 8b:6d:72:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWdo7Hhj2/MstshgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk NDlhZWEzYzAtNzI1YS00NTQzLTlmYWMtZWQyMzQ0YWE2NGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGH/JT4+ysQ+sdGhvwRwQICXHT5e2duBBreD 0svd6+cVxmrOl94HQHYsxYMiP25LSx8TD1LhlBSIbfrBnsgXXnpBrI9QUbPzKDPn eVihfyLGj90zcqWU0DRyIrCz3iLLKO+zA4BzhAgeGQjRB2i2TKmW0ykF01REnWgj k9u3tFLnPI5wU/s4XAm1ilOhOKlQjctEPGZOnMdVf9h5iGLLqJxZZsirLzfHM9z2 ojSfqTSk2DD5ZjLFvoEn+P1oqq9svjcLpcW474LFLMFDFG4CZtuYIwv0Xd0ODFIc R9uSD8U7f12NvDxR/15c9t1pHkjW4R6g4UPccnFq3+FZnqfD6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGiMBAXYJ0vTV7N4BZNXBb7PbPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvMzczMmNkMjktZDU5Zi0z N2M0LTg5N2UtZWIzZmQxNTI4ZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtsivUk5uuHOBPQonFnjnHOaEroLrn08layLtOai9laKEjm1GsEMv43 vjZjN4IaUWf6+3N96ckHnZIc1P6qVPh0u0n5LuXO6k0uXhWNjppCw5SHJX1NtwHa S1qlHQjfH+2iKoE41d/xcFs9ArkYEIrhwXHHLsY14XkxqJt2sRwuPKHK1D4GW/4U qOBuA/aioXfxZsPkM9PrD9J4HXGByKQ4nYeSDYxQnAorSaA4IN81H/PNLvGcWAyl WiTUy8aBuEyEOnxOEAzAHtaxt7tefDI7OD0xqT01C9JX6z0ahuQAIrVn00vJU65q MAhY/siKCnboIkQ/tdXZ3AmV6ottco4= -----END CERTIFICATE-----Generated at Fri Jul 24 02:47:39 2026 by rpki-client