$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/b7d769e1-833a-3c32-8a0d-9a20ef8db8d4.roa File: b7d769e1-833a-3c32-8a0d-9a20ef8db8d4.roa (raw, json) Hash identifier: nYtBeYvHiXjOX1+gsDn7RFY2FrFHBbuphyWwd2Pd15A= Subject key identifier: EB:5E:58:71:5F:91:A3:B9:4E:9C:B3:5B:42:5B:D4:4C:CD:18:93:18 Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F43285849DC850496210161CEED345FA0 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/b7d769e1-833a-3c32-8a0d-9a20ef8db8d4.roa Signing time: Thu 15 May 2025 12:39:41 +0000 ROA not before: Thu 15 May 2025 12:39:41 +0000 ROA not after: Wed 13 Aug 2025 12:39:41 +0000 asID: 16509 IP address blocks: 160.32.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:85:04:96:21:01:61:ce:ed:34:5f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: May 15 12:39:41 2025 GMT Not After : Aug 13 12:39:41 2025 GMT Subject: CN=e626e3ab-8794-48f8-aae0-b81b5f07d6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:56:a2:d5:b1:97:4b:fb:c1:94:b9:28:77: bb:26:42:7e:36:c9:10:35:60:0e:bb:c0:11:d5:70: 68:37:ff:ca:05:e3:e6:fb:ee:e8:3d:6f:03:24:7b: 88:10:b0:02:39:e8:33:f2:6d:70:11:e0:d1:ce:c5: dd:3e:d6:30:11:66:3e:27:c0:fa:30:c9:e9:b2:62: 6d:e2:ee:f4:da:fb:4e:cc:fb:4e:0f:a7:1f:6c:e6: 87:ac:07:0e:90:2a:52:90:7b:c7:cd:57:db:99:8e: 24:9f:ae:a7:92:44:07:47:26:70:c3:57:b5:af:53: 98:17:cb:e0:6f:00:3f:fb:45:dd:a9:ee:e8:1c:bd: 7d:f9:30:bf:24:c9:1c:c8:95:39:98:2d:ee:4f:89: 36:67:58:7f:62:95:e4:d8:2f:e9:c1:c7:ec:7c:98: f7:6c:62:b5:6a:f7:4f:81:35:41:7d:fd:df:f2:6d: d1:a5:f3:9a:1a:fe:7d:ec:ff:b2:6b:06:bb:72:4e: 91:10:35:72:95:df:ee:38:2f:ff:a4:0d:45:ca:a2: 11:17:36:7f:ad:05:28:79:8a:89:8e:97:b8:15:20: 2d:df:6e:3c:bf:97:af:b7:29:a4:f4:10:6e:c2:71: ab:83:47:4a:6c:2c:35:20:c7:4d:2d:68:ea:63:76: 79:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5E:58:71:5F:91:A3:B9:4E:9C:B3:5B:42:5B:D4:4C:CD:18:93:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/b7d769e1-833a-3c32-8a0d-9a20ef8db8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:44:a1:d6:b0:8e:d7:9b:85:6f:21:97:24:a2:d9:4f:d6:7d: 84:0a:27:a6:f7:52:4e:12:58:09:8d:a8:4a:54:e7:cc:7d:47: 5a:3e:c7:02:d0:aa:d2:44:dd:b1:4e:66:aa:2e:6b:f2:39:a1: e1:25:2e:03:10:67:e3:27:37:2c:80:f4:23:e9:93:f8:bd:29: 27:30:84:79:2c:ed:49:21:dd:e5:fc:34:ab:e6:4b:ed:26:92: e6:2f:c7:34:61:a6:4a:b0:5f:e1:92:41:8d:3a:c6:c9:4a:73: a1:87:17:f4:05:68:e2:c1:55:81:f2:40:74:58:20:b8:20:d2: 99:1c:e9:7b:5f:74:b1:3f:34:02:84:eb:44:a0:b4:40:09:09: f3:38:68:23:1e:e6:71:53:af:b8:f0:19:46:70:92:be:ac:13: ac:b9:7d:ec:27:2b:1b:bb:b2:fc:a7:67:9e:03:c2:d9:35:b0: 97:03:c6:fb:63:aa:af:74:65:9a:29:6f:af:09:04:41:e1:25: 10:3d:ce:0f:c7:21:ed:e6:ae:15:5c:45:da:db:c3:60:6b:01: 29:7e:8c:75:f2:41:18:cb:8b:d4:2b:0c:c4:7a:de:64:b1:11: 0d:d0:93:66:e6:46:68:7a:3d:7c:e6:b5:47:2f:69:52:6d:a1: 23:0c:c0:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnchQSWIQFhzu00X6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI1MDUxNTEyMzk0MVoXDTI1MDgxMzEyMzk0MVowLzEtMCsGA1UEAxMk ZTYyNmUzYWItODc5NC00OGY4LWFhZTAtYjgxYjVmMDdkNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvClWotWxl0v7wZS5KHe7JkJ+NskQNWAOu8AR 1XBoN//KBePm++7oPW8DJHuIELACOegz8m1wEeDRzsXdPtYwEWY+J8D6MMnpsmJt 4u702vtOzPtOD6cfbOaHrAcOkCpSkHvHzVfbmY4kn66nkkQHRyZww1e1r1OYF8vg bwA/+0Xdqe7oHL19+TC/JMkcyJU5mC3uT4k2Z1h/YpXk2C/pwcfsfJj3bGK1avdP gTVBff3f8m3RpfOaGv597P+yawa7ck6REDVyld/uOC//pA1FyqIRFzZ/rQUoeYqJ jpe4FSAt3248v5evtymk9BBuwnGrg0dKbCw1IMdNLWjqY3Z5dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOteWHFfkaO5TpyzW0Jb1EzNGJMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvYjdkNzY5ZTEtODMzYS0z YzMyLThhMGQtOWEyMGVmOGRiOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCAMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFEodawjtebhW8hlySi2U/WfYQKJ6b3Uk4SWAmNqEpU58x9R1o+xwLQ qtJE3bFOZqoua/I5oeElLgMQZ+MnNyyA9CPpk/i9KScwhHks7Ukh3eX8NKvmS+0m kuYvxzRhpkqwX+GSQY06xslKc6GHF/QFaOLBVYHyQHRYILgg0pkc6XtfdLE/NAKE 60SgtEAJCfM4aCMe5nFTr7jwGUZwkr6sE6y5fewnKxu7svynZ54Dwtk1sJcDxvtj qq90ZZopb68JBEHhJRA9zg/HIe3mrhVcRdrbw2BrASl+jHXyQRjLi9QrDMR63mSx EQ3Qk2bmRmh6PXzmtUcvaVJtoSMMwLk= -----END CERTIFICATE-----Generated at Sat Jun 14 06:14:07 2025 by rpki-client