$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/86be15bc-c9db-36f2-a8ec-79e72ef82ccf.roa File: 86be15bc-c9db-36f2-a8ec-79e72ef82ccf.roa (raw, json) Hash identifier: dBq3swHERtLwzDi+LiNi1aeG3gZ59cQkR46ov3YaCeE= Subject key identifier: B7:36:A0:70:5E:AB:EB:F2:12:27:F1:68:8C:86:0A:24:CC:8D:48:2D Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F4328584B9CA23ADD523764A197B3B170 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/86be15bc-c9db-36f2-a8ec-79e72ef82ccf.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 160.32.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:3a:dd:52:37:64:a1:97:b3:b1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=b1ef0637-d840-4a72-bee2-b112a7d3b801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d9:a2:e5:ac:05:38:80:e9:72:bd:36:86:4b: 4c:b3:7c:00:ee:1c:c1:1c:e9:3b:df:63:9d:69:bd: 88:02:1b:99:5e:79:52:22:a3:f5:63:2f:7e:5b:45: db:66:3f:09:11:1e:5d:f0:16:e8:de:f0:97:9c:03: 51:bf:73:35:ad:1c:b2:bb:fb:b7:20:79:63:3c:b3: 8b:70:de:b1:12:bf:ef:45:92:0f:51:9b:6d:88:fc: c9:43:28:7e:84:02:9e:f0:ea:67:3e:fe:9e:a1:92: 5a:48:05:f5:57:81:3d:1f:02:f7:8d:ac:c4:dd:5a: cf:4a:59:71:55:67:9c:3b:00:ef:8e:f3:4a:40:e3: 18:54:75:9e:78:39:29:61:ca:50:96:4c:21:43:4e: e0:6d:eb:e9:b9:50:a0:a5:19:f3:9c:0a:3a:66:01: 4a:64:2e:f4:05:cb:df:17:3f:4a:3d:74:56:e6:f7: 67:2c:fb:71:69:55:15:40:a1:10:cc:f6:43:5c:1f: 40:bc:c6:81:b1:56:48:b6:75:89:0c:f0:d6:0b:c5: ac:e4:d3:f6:8f:ca:cd:c3:6c:07:f6:90:8f:b8:3b: a3:77:58:6a:2a:89:39:f2:05:a3:2c:70:e0:49:96: 41:59:d3:30:c2:e4:2d:20:81:98:fe:84:66:d0:52: db:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:36:A0:70:5E:AB:EB:F2:12:27:F1:68:8C:86:0A:24:CC:8D:48:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/86be15bc-c9db-36f2-a8ec-79e72ef82ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:cb:87:61:87:0c:9b:b4:46:16:43:82:20:a4:42:0d:e1:0b: b2:50:7f:f5:37:bc:93:2d:dc:db:3c:ad:69:b7:b7:da:e6:bc: d8:66:d3:9c:46:5e:4c:43:d1:38:52:c5:c6:74:34:57:f3:a2: 57:61:ea:c1:b2:ee:b9:9e:84:6c:d7:38:50:55:43:68:41:68: 88:9a:43:22:77:0a:fe:80:db:3b:21:22:fd:08:b5:58:6a:3b: 7e:29:63:46:b6:2a:e8:a0:b2:8c:2c:44:37:d2:49:5c:10:1b: 5c:5a:55:e2:d4:fa:8e:34:88:a4:8e:c8:bd:d8:9d:68:fd:0c: 12:fe:06:ff:27:d6:23:25:9c:3d:f0:6d:0a:29:63:a4:18:a3: 6f:02:4d:82:f1:9f:bd:a6:4d:0a:dd:b2:3c:38:de:44:d6:ce: e8:36:df:d3:2b:59:01:f3:d5:19:16:e3:ef:40:96:39:95:4f: 15:a8:7c:ce:f1:ad:32:d9:d3:50:e9:ad:41:e4:87:86:23:78: 76:9e:91:c1:e4:d9:0a:48:46:2f:38:f4:bf:f4:6b:46:b9:ae: 9e:63:2d:fd:4b:b8:79:7b:48:55:f4:b5:00:e5:03:ce:61:71: be:c6:c4:1a:18:a1:08:0d:b4:34:07:f0:ef:36:b2:7d:c7:58: ba:d9:18:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucojrdUjdkoZezsXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk YjFlZjA2MzctZDg0MC00YTcyLWJlZTItYjExMmE3ZDNiODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndmi5awFOIDpcr02hktMs3wA7hzBHOk732Od ab2IAhuZXnlSIqP1Yy9+W0XbZj8JER5d8Bbo3vCXnANRv3M1rRyyu/u3IHljPLOL cN6xEr/vRZIPUZttiPzJQyh+hAKe8OpnPv6eoZJaSAX1V4E9HwL3jazE3VrPSllx VWecOwDvjvNKQOMYVHWeeDkpYcpQlkwhQ07gbevpuVCgpRnznAo6ZgFKZC70Bcvf Fz9KPXRW5vdnLPtxaVUVQKEQzPZDXB9AvMaBsVZItnWJDPDWC8Ws5NP2j8rNw2wH 9pCPuDujd1hqKok58gWjLHDgSZZBWdMwwuQtIIGY/oRm0FLbTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLc2oHBeq+vyEifxaIyGCiTMjUgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvODZiZTE1YmMtYzlkYi0z NmYyLWE4ZWMtNzllNzJlZjgyY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3Lh2GHDJu0RhZDgiCkQg3hC7JQf/U3vJMt3Ns8rWm3t9rmvNhm05xG XkxD0ThSxcZ0NFfzoldh6sGy7rmehGzXOFBVQ2hBaIiaQyJ3Cv6A2zshIv0ItVhq O34pY0a2KuigsowsRDfSSVwQG1xaVeLU+o40iKSOyL3YnWj9DBL+Bv8n1iMlnD3w bQopY6QYo28CTYLxn72mTQrdsjw43kTWzug239MrWQHz1RkW4+9AljmVTxWofM7x rTLZ01DprUHkh4YjeHaekcHk2QpIRi849L/0a0a5rp5jLf1LuHl7SFX0tQDlA85h cb7GxBoYoQgNtDQH8O82sn3HWLrZGHM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:46 2025 by rpki-client