$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/96859fb6-e123-3c38-9ed7-250cc3c60b91.roa File: 96859fb6-e123-3c38-9ed7-250cc3c60b91.roa (raw, json) Hash identifier: j59wsyn36WjehJA4eY7IKYhGrjh0RcreGYRmpcynosY= Subject key identifier: CB:CC:BE:2C:5F:8C:DA:DD:B7:62:D6:F4:88:4D:8D:71:52:C5:A0:DA Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F4328584ABBE6410E206E68C44A18A9C0 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/96859fb6-e123-3c38-9ed7-250cc3c60b91.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 16509 IP address blocks: 160.32.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:41:0e:20:6e:68:c4:4a:18:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=72c883bf-594c-4d1a-8f02-545ce42a0ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ac:0d:84:13:99:5a:fd:5b:6e:2a:57:9b:5b: 23:8b:da:d7:e4:44:1b:3c:0b:53:1d:6c:f8:af:78: e5:28:76:3f:96:94:ea:c8:c1:47:e6:9c:a5:dd:39: 11:c8:6d:06:2a:d5:54:41:73:5c:02:2e:78:f2:5d: 0a:29:03:e1:27:2f:db:86:74:cf:ab:7d:a5:fd:43: fd:03:37:b2:59:e7:be:58:dc:32:fb:e7:c2:22:42: 4e:65:15:25:19:1e:cd:88:ff:38:9a:da:98:89:a9: c2:a0:56:08:5a:1a:b1:75:a2:29:f6:e9:6e:3f:eb: 48:50:56:af:30:af:b3:a3:05:4e:e4:83:87:fe:c5: e9:42:61:7b:e5:91:7c:84:09:b2:36:2e:c8:48:25: 15:da:53:bb:99:05:5e:b4:52:18:48:a5:a6:da:be: 62:ad:84:4c:4f:d5:0b:29:3c:de:e4:f6:ba:27:39: d9:b6:f7:ad:86:b6:af:0b:8d:96:b5:eb:e7:3d:15: 79:78:39:7d:aa:58:4f:31:3d:b6:d2:e5:bb:9f:1c: 1f:d9:8d:ff:26:16:7c:c9:6f:12:96:5c:db:63:17: b7:2e:92:f6:79:eb:85:0a:3b:bb:26:28:36:ca:5b: 1e:8f:14:50:3e:80:1c:d8:e8:61:fa:b5:c7:b3:8e: cb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CC:BE:2C:5F:8C:DA:DD:B7:62:D6:F4:88:4D:8D:71:52:C5:A0:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/96859fb6-e123-3c38-9ed7-250cc3c60b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:63:e9:01:3e:2d:05:a4:bc:39:c9:e6:f3:03:89:21:54:e2: d3:3d:4e:28:94:fd:39:c8:df:83:4d:56:73:b8:5a:af:3a:be: 28:97:10:e5:d0:eb:4a:d7:5d:84:83:65:3b:c3:36:19:e7:38: 4d:57:7f:f1:e1:88:62:9c:27:51:4a:66:c3:e9:de:ef:c5:fe: 4c:77:df:1f:ae:ca:e6:bd:59:e2:77:3c:dc:ec:bd:1f:a4:0d: 7a:2a:60:28:57:2d:22:33:dc:1b:ff:38:7d:88:94:7e:7b:69: 8c:58:bb:ba:8e:0c:e1:3a:05:41:e5:4a:29:40:46:dc:24:49: e6:85:97:92:e0:d8:5b:dc:1c:d8:68:2c:69:41:fb:54:56:11: 36:8c:1b:2e:db:15:de:d8:1f:75:af:a6:82:f3:a0:01:25:47: 8c:e4:e9:ae:fb:a2:c7:f1:3e:5b:55:16:1d:7e:8c:2e:16:dd: 49:fb:b1:51:6a:67:29:c9:1b:65:88:54:b1:49:96:13:0e:16: 53:1b:fa:35:ea:75:6d:89:ab:03:5a:5f:9e:31:7e:ba:32:51: ee:03:78:db:7c:59:2a:79:64:ef:3e:7d:bb:14:ff:61:1a:15: 8a:a7:d0:c7:c7:27:3e:18:8b:5d:07:cb:04:cc:53:9b:61:2d: 45:e5:b5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq75kEOIG5oxEoYqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk NzJjODgzYmYtNTk0Yy00ZDFhLThmMDItNTQ1Y2U0MmEwYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmawNhBOZWv1bbipXm1sji9rX5EQbPAtTHWz4 r3jlKHY/lpTqyMFH5pyl3TkRyG0GKtVUQXNcAi548l0KKQPhJy/bhnTPq32l/UP9 AzeyWee+WNwy++fCIkJOZRUlGR7NiP84mtqYianCoFYIWhqxdaIp9uluP+tIUFav MK+zowVO5IOH/sXpQmF75ZF8hAmyNi7ISCUV2lO7mQVetFIYSKWm2r5irYRMT9UL KTze5Pa6JznZtvethravC42WtevnPRV5eDl9qlhPMT220uW7nxwf2Y3/JhZ8yW8S llzbYxe3LpL2eeuFCju7Jig2ylsejxRQPoAc2Ohh+rXHs47LowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvMvixfjNrdt2LW9IhNjXFSxaDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvOTY4NTlmYjYtZTEyMy0z YzM4LTllZDctMjUwY2MzYzYwYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpj6QE+LQWkvDnJ5vMDiSFU4tM9TiiU/TnI34NNVnO4Wq86viiXEOXQ 60rXXYSDZTvDNhnnOE1Xf/HhiGKcJ1FKZsPp3u/F/kx33x+uyua9WeJ3PNzsvR+k DXoqYChXLSIz3Bv/OH2IlH57aYxYu7qODOE6BUHlSilARtwkSeaFl5Lg2FvcHNho LGlB+1RWETaMGy7bFd7YH3WvpoLzoAElR4zk6a77osfxPltVFh1+jC4W3Un7sVFq ZynJG2WIVLFJlhMOFlMb+jXqdW2JqwNaX54xfroyUe4DeNt8WSp5ZO8+fbsU/2Ea FYqn0MfHJz4Yi10HywTMU5thLUXltVk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:52:37 2025 by rpki-client