$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/89cbdbb2-14b8-3187-878e-9d37888c582c.roa File: 89cbdbb2-14b8-3187-878e-9d37888c582c.roa (raw, json) Hash identifier: rm7dUkY0FXJA7+RiJyj65aWRU36/4womF43hQgFdpPI= Subject key identifier: 0C:25:90:8D:D0:32:4C:71:D9:A9:FD:E4:D0:1D:9C:AA:E7:10:0E:02 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584D492A5F0BF265ECD5D9497B40 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/89cbdbb2-14b8-3187-878e-9d37888c582c.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 155.63.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:5f:0b:f2:65:ec:d5:d9:49:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=920ccd9d-73c1-444f-9e48-7e9f29e2895c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:00:0d:c6:a5:89:16:dd:81:ae:0c:d7:86: c1:e8:5e:19:52:c4:1a:a4:0d:46:e1:0c:a8:a1:eb: 52:c5:85:49:e4:79:d4:f3:84:35:d0:ca:a8:77:58: aa:21:6b:8e:47:d4:0b:43:ad:cf:ed:41:a7:3b:ba: 38:66:da:25:84:0c:90:b2:8a:59:12:4f:b1:8f:b5: ee:a2:0c:7b:c7:61:34:80:02:22:98:e8:58:87:78: d3:1b:67:4f:84:f6:be:9f:6b:c0:a2:a1:7b:0b:2f: 90:72:e2:c2:f4:d4:3d:7f:f8:38:f3:15:d0:a5:b7: d2:7f:16:6a:df:86:69:dd:8b:88:9a:d5:2b:15:92: 40:3b:9f:9a:d4:8d:03:43:39:ad:b5:8e:24:d3:37: b7:91:6c:39:6c:74:d4:ee:bb:40:6b:1f:9d:94:51: ea:18:57:1b:f0:43:37:16:00:17:bd:97:c2:da:51: d2:20:52:9a:8c:b0:c8:af:67:31:6b:62:74:17:db: ee:18:0d:9b:d3:64:07:ec:34:d5:84:75:e1:6f:65: ce:34:7b:7d:0a:90:0c:70:c9:e3:ca:46:f6:8e:96: d6:85:94:43:3b:81:06:7b:8c:b6:17:74:b2:a5:24: 96:47:d4:bd:7c:b6:30:fd:c2:6a:2a:ac:33:b1:d2: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:25:90:8D:D0:32:4C:71:D9:A9:FD:E4:D0:1D:9C:AA:E7:10:0E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/89cbdbb2-14b8-3187-878e-9d37888c582c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:77:0e:89:c0:d0:3c:12:5d:82:c6:01:bf:f5:d6:9d:93:a5: 38:79:c3:af:13:33:eb:30:bf:56:fa:10:d8:28:30:6e:69:18: 26:c2:81:0b:9f:4f:61:68:d2:22:b2:49:21:ea:c9:68:a2:c1: 1e:0d:8a:32:f3:72:a1:26:c4:95:0b:da:f9:95:02:e8:f8:d7: 47:fc:de:53:00:4f:4c:d5:32:f1:fe:a6:8e:72:6f:37:50:2e: 70:44:31:77:af:0d:fd:df:44:d2:ef:59:e7:1a:f9:e0:83:4c: bb:ef:35:00:f0:81:d3:a4:5b:87:e4:57:f7:fc:f2:f3:41:2c: 81:fe:96:71:60:03:23:66:eb:8a:fa:ee:54:23:f7:f9:4e:66: 18:fd:80:68:dd:4b:8c:c4:cb:28:c0:5e:93:b8:9b:4d:c3:b4: c3:7a:48:bd:a5:b7:ad:a5:a6:e7:ea:6f:26:50:4d:e6:57:bb: b9:c3:38:a8:8f:a8:49:60:31:e9:0b:6f:82:9c:64:64:b2:b5: 9c:80:ca:27:cd:a4:4c:2f:5c:65:33:9a:70:63:13:5b:d5:f5: 9f:40:3c:ff:3c:b9:6b:ee:b5:36:12:1a:64:bc:78:b4:10:b9: fa:d3:6b:cf:70:5f:a2:34:69:d1:62:7c:5b:30:69:93:71:06: 64:87:a2:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKl8L8mXs1dlJe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk OTIwY2NkOWQtNzNjMS00NDRmLTllNDgtN2U5ZjI5ZTI4OTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrAADcaliRbdga4M14bB6F4ZUsQapA1G4Qyo oetSxYVJ5HnU84Q10Mqod1iqIWuOR9QLQ63P7UGnO7o4ZtolhAyQsopZEk+xj7Xu ogx7x2E0gAIimOhYh3jTG2dPhPa+n2vAoqF7Cy+QcuLC9NQ9f/g48xXQpbfSfxZq 34Zp3YuImtUrFZJAO5+a1I0DQzmttY4k0ze3kWw5bHTU7rtAax+dlFHqGFcb8EM3 FgAXvZfC2lHSIFKajLDIr2cxa2J0F9vuGA2b02QH7DTVhHXhb2XONHt9CpAMcMnj ykb2jpbWhZRDO4EGe4y2F3SypSSWR9S9fLYw/cJqKqwzsdKGAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwlkI3QMkxx2an95NAdnKrnEA4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvODljYmRiYjItMTRiOC0z MTg3LTg3OGUtOWQzNzg4OGM1ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH53DonA0DwSXYLGAb/11p2TpTh5w68TM+swv1b6ENgoMG5pGCbCgQuf T2Fo0iKySSHqyWiiwR4NijLzcqEmxJUL2vmVAuj410f83lMAT0zVMvH+po5ybzdQ LnBEMXevDf3fRNLvWeca+eCDTLvvNQDwgdOkW4fkV/f88vNBLIH+lnFgAyNm64r6 7lQj9/lOZhj9gGjdS4zEyyjAXpO4m03DtMN6SL2lt62lpufqbyZQTeZXu7nDOKiP qElgMekLb4KcZGSytZyAyifNpEwvXGUzmnBjE1vV9Z9APP88uWvutTYSGmS8eLQQ ufrTa89wX6I0adFifFswaZNxBmSHos4= -----END CERTIFICATE-----Generated at Thu Mar 26 03:32:53 2026 by rpki-client