$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/636fe258-29db-3ab1-9122-bcd648393e79.roa File: 636fe258-29db-3ab1-9122-bcd648393e79.roa (raw, json) Hash identifier: qOBY4ZcQOfQi3n6yzf9irvvTKX/qYsg2ZYsVgknnYxo= Subject key identifier: 3E:94:83:29:AC:96:97:52:A9:C5:A9:79:CC:CB:E0:95:64:3D:90:E0 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584B84E79B0E826444AB43AB4EC0 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/636fe258-29db-3ab1-9122-bcd648393e79.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 18841 IP address blocks: 155.63.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:9b:0e:82:64:44:ab:43:ab:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=cd60760b-8059-40a7-ab47-1da106b9dc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bf:52:58:fd:43:23:eb:37:f9:1f:07:7e:5c: 56:8e:31:36:73:cf:80:a4:e0:23:59:dc:7e:d4:4b: c7:fb:d8:ee:ad:d6:86:a1:fd:31:50:5c:b1:09:32: dc:d6:ab:ad:5a:4f:02:82:6d:96:1d:53:d0:62:c5: c4:f9:cd:9f:9a:33:cd:c1:bd:a7:44:32:e1:60:8e: eb:48:2e:f5:9f:58:bb:8a:01:7b:7e:e7:9b:73:2d: 6e:0d:c8:8d:bf:4a:6b:86:d0:13:5a:69:74:ba:08: 3f:fd:c4:fb:aa:ae:ac:02:73:cd:3a:6f:82:e8:6f: ac:90:17:31:9d:0a:f7:43:f5:89:93:89:18:24:7f: 1d:93:52:f8:48:27:d8:05:7c:ae:76:29:71:17:e9: 69:82:c6:4a:46:3f:7e:c9:04:71:73:51:66:e3:cf: 50:7b:c4:ba:84:c1:f8:37:27:aa:32:dc:91:6a:17: 20:eb:12:c6:c0:ee:7e:f8:f1:43:34:b3:0b:6e:99: 5f:0b:dd:9a:8a:88:db:ff:6c:09:a5:ae:61:d6:4f: c9:0a:9b:b9:db:b0:c0:1c:14:87:9a:81:c5:8c:d0: c0:a3:0a:ec:c7:9b:ba:f2:2e:1e:84:d7:e3:27:26: 21:2b:3c:53:ff:fe:bf:aa:90:4e:fc:39:6e:8e:4f: b0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:94:83:29:AC:96:97:52:A9:C5:A9:79:CC:CB:E0:95:64:3D:90:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/636fe258-29db-3ab1-9122-bcd648393e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:20:f1:0f:56:18:af:06:b2:6b:ed:7d:36:9d:b3:cb:c2:22: e5:a1:a5:78:95:7d:5a:c2:a1:c3:88:75:07:19:c4:d3:cf:39: 77:85:4b:c3:3a:f8:7c:c7:8c:ba:8a:38:f6:1a:54:a0:7f:8e: 1a:40:28:7d:00:e5:88:5c:ea:88:c7:cb:e3:62:99:71:b9:73: 51:d3:0e:02:38:a0:9c:d1:5e:ce:13:fa:d0:7d:a9:da:7f:c8: c0:0b:a7:01:7c:d5:16:3b:4f:30:f1:bc:54:08:d5:6d:a4:f0: 84:87:bd:4d:15:3e:84:f6:4b:fb:6a:cd:13:74:bf:f7:51:62: 20:6a:c4:96:c2:d9:3f:57:eb:2e:e3:72:47:d0:e5:19:04:25: 59:6c:1d:e7:5b:a1:45:c4:3d:e1:92:9b:e2:35:31:f9:9c:77: 6a:bc:bc:6c:1b:90:bb:01:82:e8:31:0b:0b:e2:fa:f1:52:fe: d7:1c:d3:a8:e2:8a:5c:22:13:b8:1e:2d:b1:72:c6:89:b5:d2: c1:4a:6e:37:b9:76:03:0a:87:a2:3b:b6:24:17:e7:b5:16:d1: 41:d5:43:66:ed:6f:33:b0:c1:ed:c0:cf:75:9e:dd:14:da:e0: 85:2f:e9:ef:d4:df:9b:14:89:7c:4f:45:34:25:fd:70:d9:81: 2f:21:1e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE55sOgmREq0OrTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk Y2Q2MDc2MGItODA1OS00MGE3LWFiNDctMWRhMTA2YjlkYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj79SWP1DI+s3+R8HflxWjjE2c8+ApOAjWdx+ 1EvH+9jurdaGof0xUFyxCTLc1qutWk8Cgm2WHVPQYsXE+c2fmjPNwb2nRDLhYI7r SC71n1i7igF7fuebcy1uDciNv0prhtATWml0ugg//cT7qq6sAnPNOm+C6G+skBcx nQr3Q/WJk4kYJH8dk1L4SCfYBXyudilxF+lpgsZKRj9+yQRxc1Fm489Qe8S6hMH4 NyeqMtyRahcg6xLGwO5++PFDNLMLbplfC92aiojb/2wJpa5h1k/JCpu527DAHBSH moHFjNDAowrsx5u68i4ehNfjJyYhKzxT//6/qpBO/Dlujk+wnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6UgymslpdSqcWpeczL4JVkPZDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvNjM2ZmUyNTgtMjlkYi0z YWIxLTkxMjItYmNkNjQ4MzkzZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz9ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIg8Q9WGK8GsmvtfTads8vCIuWhpXiVfVrCocOIdQcZxNPPOXeFS8M6 +HzHjLqKOPYaVKB/jhpAKH0A5Yhc6ojHy+NimXG5c1HTDgI4oJzRXs4T+tB9qdp/ yMALpwF81RY7TzDxvFQI1W2k8ISHvU0VPoT2S/tqzRN0v/dRYiBqxJbC2T9X6y7j ckfQ5RkEJVlsHedboUXEPeGSm+I1Mfmcd2q8vGwbkLsBgugxCwvi+vFS/tcc06ji ilwiE7geLbFyxom10sFKbje5dgMKh6I7tiQX57UW0UHVQ2btbzOwwe3Az3We3RTa 4IUv6e/U35sUiXxPRTQl/XDZgS8hHkc= -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:24 2025 by rpki-client