$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/8f386266-f980-30cc-9881-94e02fabf1ae.roa File: 8f386266-f980-30cc-9881-94e02fabf1ae.roa (raw, json) Hash identifier: yzxAnC7fY6bl3NGTj/B9JD36Ene3rY6HOwGstYgG2Zc= Subject key identifier: 49:AD:56:40:E0:B5:58:BE:22:77:EC:25:9C:F0:14:47:BF:E5:C8:C9 Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F4328584B9E07CF7287433B8ADEE92620 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/8f386266-f980-30cc-9881-94e02fabf1ae.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 160.32.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cf:72:87:43:3b:8a:de:e9:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=d020fba5-0c5a-48bd-ae7c-6a35dff51b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:65:7d:29:a3:50:ca:a5:05:97:be:34:15: 98:8e:d6:67:1e:8e:b9:87:53:e8:ce:0b:7b:ed:98: 76:c3:4b:3c:1f:fb:d8:5c:97:df:ed:ac:1c:71:72: b0:50:73:6a:72:2f:2a:7e:f2:3e:d5:70:89:33:73: b6:e8:eb:7e:3d:dc:25:d7:f9:70:fc:8a:17:69:1d: 06:36:f5:14:23:a6:15:85:07:e2:39:c4:34:1a:e0: f0:ff:7f:d3:d0:82:de:b2:f3:5b:48:58:b7:81:7a: db:ef:dd:84:c2:26:ed:cc:cf:07:64:8c:2e:d4:4d: fd:c7:eb:3a:28:a9:73:81:50:8e:62:93:92:6b:bc: 44:69:ae:88:42:97:01:25:c7:28:b5:08:1a:6c:e3: 79:09:77:3b:df:43:c9:c9:06:bf:fc:3e:51:91:0e: 5a:f6:2b:06:d4:22:81:2c:30:27:14:46:0c:27:a9: d3:2b:94:85:b6:12:06:34:a8:b6:5f:c9:99:ad:9d: f0:5b:d6:a1:a5:0b:36:99:5d:b7:2e:08:39:c9:97: 72:1f:e0:15:e7:09:c2:3b:59:c5:23:97:b7:c2:7d: d7:e8:2b:89:b4:54:bc:e0:b5:65:2c:c5:08:cb:c4: 07:35:87:8e:b0:14:52:02:b8:46:2d:f0:6d:44:bd: 43:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AD:56:40:E0:B5:58:BE:22:77:EC:25:9C:F0:14:47:BF:E5:C8:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/8f386266-f980-30cc-9881-94e02fabf1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:47:0f:ba:57:2b:39:45:f2:26:01:23:f3:68:37:3e:60:03: 9d:44:8f:9b:87:b9:9d:fb:66:4d:44:4f:84:03:54:d4:69:41: 02:98:7a:d5:87:c0:94:3e:d0:68:57:ae:01:6f:0d:55:be:89: f6:f5:d2:fa:45:5d:d1:02:eb:74:15:1f:43:0c:95:b9:56:34: 4e:63:b2:f6:1e:10:ce:42:b0:68:4b:83:b2:0f:bb:83:00:78: 06:80:0a:b7:41:3a:9e:2f:45:ee:17:23:af:56:75:63:6e:f7: f5:87:d4:70:f3:c0:26:64:fa:5a:6f:5d:46:28:59:6f:b1:9b: c2:8e:c1:90:07:29:47:12:68:ba:f8:c8:62:de:cf:40:e7:6c: 1d:5d:cc:86:a1:16:9b:fc:57:86:e0:f8:83:7b:1f:c2:10:38: 04:a4:ac:32:21:7a:da:9f:8e:2e:59:61:e4:ca:c1:eb:2f:f3: a2:de:06:d9:2f:6d:63:c5:b9:cc:d2:35:b3:a9:12:54:51:2f: b3:4f:31:89:bb:2c:69:37:a5:5a:f2:f6:98:c9:4e:e4:85:64: 63:0d:9c:f4:32:86:a0:87:4f:e4:2b:1c:71:d3:a4:4f:f2:34: bb:de:6d:fe:a1:f8:83:68:b1:4d:31:c9:91:75:ec:97:0b:8b: 8f:8a:78:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB89yh0M7it7pJiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZDAyMGZiYTUtMGM1YS00OGJkLWFlN2MtNmEzNWRmZjUxYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIBlfSmjUMqlBZe+NBWYjtZnHo65h1Pozgt7 7Zh2w0s8H/vYXJff7awccXKwUHNqci8qfvI+1XCJM3O26Ot+Pdwl1/lw/IoXaR0G NvUUI6YVhQfiOcQ0GuDw/3/T0ILesvNbSFi3gXrb792EwibtzM8HZIwu1E39x+s6 KKlzgVCOYpOSa7xEaa6IQpcBJccotQgabON5CXc730PJyQa//D5RkQ5a9isG1CKB LDAnFEYMJ6nTK5SFthIGNKi2X8mZrZ3wW9ahpQs2mV23Lgg5yZdyH+AV5wnCO1nF I5e3wn3X6CuJtFS84LVlLMUIy8QHNYeOsBRSArhGLfBtRL1DZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmtVkDgtVi+InfsJZzwFEe/5cjJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvOGYzODYyNjYtZjk4MC0z MGNjLTk4ODEtOTRlMDJmYWJmMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoCAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFHD7pXKzlF8iYBI/NoNz5gA51Ej5uHuZ37Zk1ET4QDVNRpQQKYetWH wJQ+0GhXrgFvDVW+ifb10vpFXdEC63QVH0MMlblWNE5jsvYeEM5CsGhLg7IPu4MA eAaACrdBOp4vRe4XI69WdWNu9/WH1HDzwCZk+lpvXUYoWW+xm8KOwZAHKUcSaLr4 yGLez0DnbB1dzIahFpv8V4bg+IN7H8IQOASkrDIhetqfji5ZYeTKwesv86LeBtkv bWPFuczSNbOpElRRL7NPMYm7LGk3pVry9pjJTuSFZGMNnPQyhqCHT+QrHHHTpE/y NLvebf6h+INosU0xyZF17JcLi4+KeCM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:12 2025 by rpki-client