$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa File: fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa (raw, json) Hash identifier: Vc0EbxyxNSKlZE+7wIQUoJEESbYrvAM9QOkmdMs9ObI= Subject key identifier: BB:1B:0A:77:CF:D9:F3:5B:A6:5B:C4:8E:F5:94:5A:D0:60:1E:1D:75 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584B8EACCA693B7A20F2B831C748 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 155.63.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ca:69:3b:7a:20:f2:b8:31:c7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=d8858b92-3c70-4b6d-a39c-96e55b7f496c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dd:5c:d9:d7:71:3b:af:32:c4:64:00:52:a0: 23:b3:64:a1:76:4a:f0:87:f8:cf:ce:bc:6c:95:00: 04:5f:6a:fb:6f:ce:21:ac:e7:bc:2d:02:58:ec:bc: 34:86:fa:b7:f8:dc:5b:14:66:43:b0:96:65:e5:83: 4e:22:eb:c0:bb:9c:61:6c:7e:cf:b8:95:a7:85:77: a1:77:8f:49:41:65:ac:25:2a:b5:eb:d7:ee:b6:f3: 43:bc:64:6a:84:7d:9f:60:c6:47:6d:7b:88:4b:0b: 45:20:35:24:39:42:e0:70:ca:57:e0:dc:98:b5:d7: ef:c4:6e:08:64:67:cf:98:f6:84:a5:b7:de:1e:14: 8d:a2:77:f6:73:98:08:75:d2:56:58:13:cf:f4:c5: f6:c1:c1:36:86:40:ea:ae:43:44:e4:22:45:45:a2: 93:5e:da:fd:50:91:4b:11:e9:68:d3:91:68:0b:09: 1f:74:49:f9:84:f6:d6:85:ff:35:d1:f5:01:1d:9c: 87:8e:40:4e:00:2a:b3:a5:12:18:ea:6f:c4:cd:97: ef:a6:07:b4:75:c1:cf:95:22:39:3d:e8:54:f2:1e: 62:be:8e:b6:c6:bc:17:b4:7d:02:ef:f8:7e:4b:ac: 1e:80:7c:bc:08:01:7b:1c:39:ae:80:1a:7e:99:52: 1f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1B:0A:77:CF:D9:F3:5B:A6:5B:C4:8E:F5:94:5A:D0:60:1E:1D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:80:b0:e1:41:df:3b:ca:91:cd:6e:78:d9:bb:39:f9:c3:3b: b6:5d:f3:e8:6b:45:54:c4:15:fe:d3:4c:9c:ea:03:60:7a:32: 97:74:b5:71:54:02:6d:8d:97:59:2d:aa:2e:37:14:73:05:26: 3e:64:70:23:cb:20:fd:61:eb:71:fe:d4:60:e1:a6:b8:2f:d4: 1b:1b:a3:64:73:b2:78:c7:74:ac:67:81:fc:03:bb:81:4d:58: a2:ff:d2:ff:36:24:8a:41:74:63:36:b5:68:18:0f:a5:81:23: c1:ef:20:d4:d2:d8:27:50:d2:6b:fa:95:9e:62:b5:50:33:c4: 5e:05:e8:0e:84:ab:37:c0:a5:d5:2e:1b:df:ce:27:94:77:43: 69:b6:81:a6:fd:68:b7:99:af:f5:04:56:c2:b7:35:b7:ae:7f: 07:79:ec:cf:b1:fd:91:83:6e:1a:f3:93:f5:60:68:ac:57:36: 93:10:06:c6:39:dd:20:2d:8c:8e:2a:57:4b:76:4f:54:19:a3: dd:60:90:ec:f0:9d:3a:3c:6e:9d:24:d5:d9:f4:52:be:cf:54: fc:89:67:60:80:17:65:2f:0e:29:cd:3b:7b:4b:fc:80:f4:72: 2d:ed:2c:e3:d0:12:ab:b4:66:42:7f:75:46:d4:ca:b3:d5:de: 0b:9e:b8:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMppO3og8rgxx0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZDg4NThiOTItM2M3MC00YjZkLWEzOWMtOTZlNTViN2Y0OTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN1c2ddxO68yxGQAUqAjs2Shdkrwh/jPzrxs lQAEX2r7b84hrOe8LQJY7Lw0hvq3+NxbFGZDsJZl5YNOIuvAu5xhbH7PuJWnhXeh d49JQWWsJSq169futvNDvGRqhH2fYMZHbXuISwtFIDUkOULgcMpX4NyYtdfvxG4I ZGfPmPaEpbfeHhSNonf2c5gIddJWWBPP9MX2wcE2hkDqrkNE5CJFRaKTXtr9UJFL Eelo05FoCwkfdEn5hPbWhf810fUBHZyHjkBOACqzpRIY6m/EzZfvpge0dcHPlSI5 PehU8h5ivo62xrwXtH0C7/h+S6wegHy8CAF7HDmugBp+mVIf/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsbCnfP2fNbplvEjvWUWtBgHh11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvZmQ3ZDI3ZTEtMjg0NC0z NDg1LTk3ZWItYmVlZDY1YzdjNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz9VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGAsOFB3zvKkc1ueNm7OfnDO7Zd8+hrRVTEFf7TTJzqA2B6Mpd0tXFU Am2Nl1ktqi43FHMFJj5kcCPLIP1h63H+1GDhprgv1Bsbo2RzsnjHdKxngfwDu4FN WKL/0v82JIpBdGM2tWgYD6WBI8HvINTS2CdQ0mv6lZ5itVAzxF4F6A6EqzfApdUu G9/OJ5R3Q2m2gab9aLeZr/UEVsK3Nbeufwd57M+x/ZGDbhrzk/VgaKxXNpMQBsY5 3SAtjI4qV0t2T1QZo91gkOzwnTo8bp0k1dn0Ur7PVPyJZ2CAF2UvDinNO3tL/ID0 ci3tLOPQEqu0ZkJ/dUbUyrPV3gueuCs= -----END CERTIFICATE-----Generated at Mon Oct 20 20:36:11 2025 by rpki-client