$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa File: d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa (raw, json) Hash identifier: u+4Rl3/mmrdJ32O2Q32beE52+RR2NRF0y2GoXEP3gO0= Subject key identifier: 41:02:AF:7E:9D:1E:5F:1B:CC:25:EE:D1:CE:5C:74:67:6A:E9:53:60 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584ACB40DFA5AB8A969A852BC700 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 155.63.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:df:a5:ab:8a:96:9a:85:2b:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=4a6b8497-406a-4432-a3b0-b0efa6dda957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:3f:3d:05:c3:0c:db:7d:f0:ad:73:8e:d0: d5:90:71:fa:98:31:e0:30:e0:5e:8c:d5:03:96:67: da:eb:27:37:b6:09:1e:0a:7d:3b:81:7a:aa:44:35: 23:db:41:57:6c:52:b8:2f:6f:01:83:ba:e7:66:3e: 92:14:a0:b4:2e:d1:a7:4e:0c:67:c1:f7:7d:66:56: f4:54:92:76:96:58:1b:4b:77:9b:a6:e5:4e:24:5c: 7f:f8:5a:38:cf:7d:a6:e6:45:9a:72:ec:cd:08:c2: 15:b9:b0:c3:36:06:5b:e5:1c:10:a0:b5:e2:21:66: 52:3c:25:ad:ff:e1:50:ec:4a:ae:37:ac:93:ae:89: 0f:ad:18:fc:3d:96:d8:91:56:ef:ae:79:af:a3:93: db:17:d2:d9:5f:a4:ed:85:b5:40:69:44:b2:82:3d: 0d:52:45:4a:5b:b4:20:c7:0b:ef:bc:06:ad:ab:64: a8:27:65:34:98:29:68:fb:c4:48:84:17:aa:a8:2f: 28:b6:a6:80:5d:c3:a8:c8:fb:2f:ef:2a:c5:99:a6: 59:c1:1b:47:94:7e:6c:fd:9f:e4:a2:78:6c:ea:dd: a0:e2:0f:4f:75:f3:1d:db:23:0a:7b:e6:6f:96:40: 80:74:58:fb:d9:b1:f9:f8:ee:f1:de:3e:16:b2:27: 21:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:02:AF:7E:9D:1E:5F:1B:CC:25:EE:D1:CE:5C:74:67:6A:E9:53:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:08:dc:39:b1:c8:96:98:98:91:dc:a1:84:48:6e:6a:b8:89: b7:b3:24:ac:27:1f:f1:b8:fa:29:31:3e:53:35:ef:4c:38:d4: b7:23:5d:de:a2:02:7e:20:6a:d5:e4:3b:34:49:b3:80:83:3d: 92:bc:90:fd:94:1c:1d:34:6a:76:1e:7e:2a:cb:68:98:6b:20: 94:35:1f:33:40:d8:55:9a:41:7d:50:b5:f2:7f:04:2b:61:e8: 64:46:7c:06:60:d3:56:a1:57:0d:39:a7:27:0d:42:ac:fd:99: 1b:9c:d2:3a:11:0a:67:18:5e:58:4a:cd:d5:4a:4b:90:61:9b: c4:69:bf:79:d3:6b:9c:96:65:27:1e:47:2c:ab:b5:e9:b4:60: 47:03:37:e2:4e:68:ad:18:8f:67:0c:c3:97:f7:ca:3d:f9:3c: ae:f0:07:df:b2:20:72:3c:a5:34:f7:ef:07:e9:df:e9:e0:3b: 4d:21:64:a4:da:5f:7d:66:a6:0d:4c:7f:d2:62:c0:7f:65:68: 9e:3c:1a:d4:89:8b:76:91:e8:e2:10:b1:07:c5:96:70:fa:c0: 01:f6:29:a2:a6:e3:76:89:94:ad:25:43:11:cd:47:2b:07:22: f8:97:01:33:83:6b:68:9e:ac:f4:6c:0f:ee:bc:d8:cc:95:bc: 19:00:e5:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQN+lq4qWmoUrxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk NGE2Yjg0OTctNDA2YS00NDMyLWEzYjAtYjBlZmE2ZGRhOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP4/PQXDDNt98K1zjtDVkHH6mDHgMOBejNUD lmfa6yc3tgkeCn07gXqqRDUj20FXbFK4L28Bg7rnZj6SFKC0LtGnTgxnwfd9Zlb0 VJJ2llgbS3ebpuVOJFx/+Fo4z32m5kWacuzNCMIVubDDNgZb5RwQoLXiIWZSPCWt /+FQ7EquN6yTrokPrRj8PZbYkVbvrnmvo5PbF9LZX6TthbVAaUSygj0NUkVKW7Qg xwvvvAatq2SoJ2U0mClo+8RIhBeqqC8otqaAXcOoyPsv7yrFmaZZwRtHlH5s/Z/k onhs6t2g4g9PdfMd2yMKe+ZvlkCAdFj72bH5+O7x3j4WsichOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEECr36dHl8bzCXu0c5cdGdq6VNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvZDlkOThhYWEtZTU2YS0z ZjIyLWE0NDktM2FkOGNhOWRkNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmz/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIII3DmxyJaYmJHcoYRIbmq4ibezJKwnH/G4+ikxPlM170w41LcjXd6i An4gatXkOzRJs4CDPZK8kP2UHB00anYefirLaJhrIJQ1HzNA2FWaQX1QtfJ/BCth 6GRGfAZg01ahVw05pycNQqz9mRuc0joRCmcYXlhKzdVKS5Bhm8Rpv3nTa5yWZSce Ryyrtem0YEcDN+JOaK0Yj2cMw5f3yj35PK7wB9+yIHI8pTT37wfp3+ngO00hZKTa X31mpg1Mf9JiwH9laJ48GtSJi3aR6OIQsQfFlnD6wAH2KaKm43aJlK0lQxHNRysH IviXATODa2ierPRsD+682MyVvBkA5eo= -----END CERTIFICATE-----Generated at Sat Aug 23 10:08:10 2025 by rpki-client