$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/cc3f750d-0905-3e47-862f-b41ca36a1c13.roa File: cc3f750d-0905-3e47-862f-b41ca36a1c13.roa (raw, json) Hash identifier: ZVXSBbkHJYPEIzR4q13ojMOlnlz+4be3ZvFyCc13+1o= Subject key identifier: 1D:E4:8C:C6:13:C0:F9:48:A0:BC:23:51:6C:46:7E:A8:1B:58:A0:CC Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584F6F22E0FB8C69CB0599CE6900 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/cc3f750d-0905-3e47-862f-b41ca36a1c13.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 155.63.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:e0:fb:8c:69:cb:05:99:ce:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=2cc272d2-8c4f-4aa9-b600-d58668679674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:81:b5:fb:eb:7f:e6:2a:b2:9c:75:3c:22: aa:d2:e2:ea:95:83:06:ee:a2:52:b7:9e:59:6f:f3: e9:a2:b9:45:df:d7:98:66:94:f9:c1:d5:66:64:01: 63:bc:1a:ce:a1:46:cf:e7:40:fc:e4:38:60:a0:1d: 3f:54:b0:50:c0:76:21:db:fb:90:52:75:dd:20:2e: d5:da:7c:f0:5c:bd:a4:6e:ee:62:ed:6e:7b:d6:6b: 5a:b6:32:e3:a4:a6:da:86:32:ab:9a:20:c7:e3:e6: e2:f5:16:42:fe:4a:94:a6:7d:87:26:23:46:f3:82: 92:67:fd:c7:56:5d:70:74:2c:f5:62:19:2e:2a:f7: cd:e7:0b:67:41:28:89:86:06:82:64:b2:1b:f0:61: f9:69:4a:2e:2d:97:58:2c:3f:42:d2:f1:5a:26:6c: 7a:38:45:31:92:18:54:96:7b:74:ea:16:73:81:5e: 4e:46:f1:c3:7e:8b:be:f3:a4:90:10:db:73:88:a6: 1f:2c:50:ea:0a:cb:d2:8b:ea:9a:0b:f5:29:74:7e: c8:6f:51:b1:08:60:a8:e8:6f:6a:43:59:92:54:db: 87:ff:51:88:90:53:f2:21:ff:ca:15:d4:b7:a1:a0: 0e:86:e2:85:5c:50:1a:2c:f6:e3:75:45:0a:f9:f0: 45:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E4:8C:C6:13:C0:F9:48:A0:BC:23:51:6C:46:7E:A8:1B:58:A0:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/cc3f750d-0905-3e47-862f-b41ca36a1c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:5b:6a:ee:4e:85:e5:15:f1:46:86:07:4b:ac:d2:fc:9d:28: 09:4c:c3:47:d2:86:42:f8:a8:11:1e:fc:13:28:a0:f9:e8:ac: f6:ec:8e:66:9f:5c:52:62:b4:f3:a1:75:7a:70:96:6a:7b:e0: 8d:e3:6b:4d:20:78:c4:31:47:3d:8b:20:e8:42:22:33:1a:1c: e3:b3:9b:2c:8f:d8:0e:56:1e:b7:8d:03:21:cb:b4:51:36:af: c1:28:7e:d2:44:d6:35:3e:e9:b8:69:d8:d0:16:22:0c:ff:7d: 0a:79:3f:42:d6:fd:91:5e:dc:3c:5f:62:68:9e:98:ef:31:21: 60:99:e9:1e:34:7a:c5:ad:49:ac:d2:df:b1:64:ad:dd:24:85: 93:4f:56:eb:dd:b2:c3:87:57:46:12:0f:98:e7:0c:f0:a6:f7: d8:32:d9:5b:52:fc:b7:04:d3:37:dd:01:c8:b2:14:6f:50:cb: 16:b3:b0:b3:9c:f9:39:d4:16:32:1f:ad:a6:59:c8:e3:58:ff: c2:58:02:b7:a0:97:b2:c4:9b:c2:e3:5a:45:ef:4b:33:3c:fa: 49:d8:0f:38:e5:72:ce:c4:26:ac:89:75:8f:df:4e:b5:78:ec: de:ee:0b:e7:33:c3:6e:bf:b0:b9:8d:49:93:dd:96:94:c4:5d: 43:a6:b6:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIuD7jGnLBZnOaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk MmNjMjcyZDItOGM0Zi00YWE5LWI2MDAtZDU4NjY4Njc5Njc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQGBtfvrf+Yqspx1PCKq0uLqlYMG7qJSt55Z b/PporlF39eYZpT5wdVmZAFjvBrOoUbP50D85DhgoB0/VLBQwHYh2/uQUnXdIC7V 2nzwXL2kbu5i7W571mtatjLjpKbahjKrmiDH4+bi9RZC/kqUpn2HJiNG84KSZ/3H Vl1wdCz1YhkuKvfN5wtnQSiJhgaCZLIb8GH5aUouLZdYLD9C0vFaJmx6OEUxkhhU lnt06hZzgV5ORvHDfou+86SQENtziKYfLFDqCsvSi+qaC/UpdH7Ib1GxCGCo6G9q Q1mSVNuH/1GIkFPyIf/KFdS3oaAOhuKFXFAaLPbjdUUK+fBFDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3kjMYTwPlIoLwjUWxGfqgbWKDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvY2MzZjc1MGQtMDkwNS0z ZTQ3LTg2MmYtYjQxY2EzNmExYzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpbau5OheUV8UaGB0us0vydKAlMw0fShkL4qBEe/BMooPnorPbsjmaf XFJitPOhdXpwlmp74I3ja00geMQxRz2LIOhCIjMaHOOzmyyP2A5WHreNAyHLtFE2 r8EoftJE1jU+6bhp2NAWIgz/fQp5P0LW/ZFe3DxfYmiemO8xIWCZ6R40esWtSazS 37Fkrd0khZNPVuvdssOHV0YSD5jnDPCm99gy2VtS/LcE0zfdAciyFG9QyxazsLOc +TnUFjIfraZZyONY/8JYAregl7LEm8LjWkXvSzM8+knYDzjlcs7EJqyJdY/fTrV4 7N7uC+czw26/sLmNSZPdlpTEXUOmtvM= -----END CERTIFICATE-----Generated at Sun Nov 15 16:45:36 2026 by rpki-client