$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/c2bf9992-4eea-346b-8a05-7a766bf6afc4.roa File: c2bf9992-4eea-346b-8a05-7a766bf6afc4.roa (raw, json) Hash identifier: 91sw6KJiNlSvSZReh1MkAXD/o94q17f2dyfNWgcfHYE= Subject key identifier: 4D:08:99:6B:45:2A:07:5A:FC:B9:95:FC:BB:5B:72:44:9F:0E:E1:40 Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F4328584F82ADCC8FC3E5EC6335011600 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/c2bf9992-4eea-346b-8a05-7a766bf6afc4.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 160.32.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:cc:8f:c3:e5:ec:63:35:01:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=83a4ddef-70be-41d8-90f7-5aa4dfe7f527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:b9:fa:c0:e6:50:a8:c1:30:76:ae:7d:d8: 29:c6:9b:12:a1:5c:01:81:dc:40:9b:b9:21:a3:55: c8:9d:f6:e3:bd:b2:9c:66:d4:fa:85:a5:dd:57:98: d3:ba:e7:3d:a1:55:82:e0:9e:09:79:a5:b0:33:43: d2:51:ed:06:ba:47:0d:c2:0c:8d:28:13:64:7a:b8: b5:a4:16:d3:8c:74:cd:db:4a:c6:f0:de:5f:1e:1d: 40:61:59:a8:02:96:22:20:7f:b7:86:6c:69:85:aa: 09:8c:ec:e5:99:f2:76:4c:ca:f5:2e:d6:30:d6:57: 18:37:aa:ea:dc:57:bf:c0:85:f0:d1:05:83:d4:8b: 18:5d:ba:1e:4c:28:40:d6:75:4d:25:e7:4c:a2:fe: e8:af:f6:4f:53:0f:e1:39:01:23:2c:1c:03:4d:13: a3:24:e4:18:dc:92:e0:be:a3:1f:b6:15:c2:1b:5f: 44:c8:9c:75:5c:64:fe:0b:c9:39:2e:a5:cc:e9:0a: a4:a1:b9:c5:96:45:c3:9d:2a:ea:58:d8:ea:80:9f: e7:c4:96:62:72:9e:44:cb:0e:53:aa:7f:1a:09:4d: c1:5b:42:8c:05:2a:04:05:76:d6:2f:5f:a9:07:cb: f1:be:5b:57:11:0d:6b:fb:be:11:75:1e:f9:b5:ca: ec:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:08:99:6B:45:2A:07:5A:FC:B9:95:FC:BB:5B:72:44:9F:0E:E1:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/c2bf9992-4eea-346b-8a05-7a766bf6afc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:57:57:5d:05:a3:f5:9a:e6:7d:fb:7e:68:af:e2:4b:ea:dc: 83:92:e8:2a:fa:f3:05:95:28:65:a8:6a:b7:45:25:6e:d2:f8: 37:42:6a:71:81:c5:50:db:27:e2:e0:aa:56:20:63:e9:51:b1: ce:33:8e:4c:68:40:7f:37:b5:3d:db:04:52:98:90:a7:b9:91: 19:e9:38:f5:e1:6e:42:a0:bd:97:ba:2c:a3:fd:7c:53:96:46: 98:b9:cc:6a:58:11:c6:1d:6b:69:46:bd:af:04:b9:11:72:44: df:03:8d:69:3d:49:c6:45:b7:30:1f:db:57:b4:6b:fd:28:93: 6b:5a:cc:32:b3:4e:3b:c9:c2:83:b1:05:bb:99:42:58:0d:ef: fa:90:8a:27:2c:9f:a5:44:82:9a:6d:8a:43:36:a1:c8:95:8a: d2:07:a6:60:95:b6:97:6d:77:af:43:24:e9:1c:e7:90:8c:19: 7f:f0:7b:41:cf:ab:71:0d:02:4e:23:21:6d:3c:31:cf:e0:ff: 83:70:6d:c3:0a:91:c3:5d:dd:11:8e:42:45:6e:18:4b:58:7a: 0c:0c:06:79:a0:e3:f6:6d:e4:43:06:60:7e:67:4e:07:4c:54: f0:69:39:08:de:d7:14:01:a8:99:c2:7d:ae:e3:0b:43:ba:42: 08:13:9a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrcyPw+XsYzUBFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk ODNhNGRkZWYtNzBiZS00MWQ4LTkwZjctNWFhNGRmZTdmNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruy5+sDmUKjBMHaufdgpxpsSoVwBgdxAm7kh o1XInfbjvbKcZtT6haXdV5jTuuc9oVWC4J4JeaWwM0PSUe0GukcNwgyNKBNkeri1 pBbTjHTN20rG8N5fHh1AYVmoApYiIH+3hmxphaoJjOzlmfJ2TMr1LtYw1lcYN6rq 3Fe/wIXw0QWD1IsYXboeTChA1nVNJedMov7or/ZPUw/hOQEjLBwDTROjJOQY3JLg vqMfthXCG19EyJx1XGT+C8k5LqXM6QqkobnFlkXDnSrqWNjqgJ/nxJZicp5Eyw5T qn8aCU3BW0KMBSoEBXbWL1+pB8vxvltXEQ1r+74RdR75tcrsWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0ImWtFKgda/LmV/LtbckSfDuFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvYzJiZjk5OTItNGVlYS0z NDZiLThhMDUtN2E3NjZiZjZhZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCAPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxXV10Fo/Wa5n37fmiv4kvq3IOS6Cr68wWVKGWoardFJW7S+DdCanGB xVDbJ+LgqlYgY+lRsc4zjkxoQH83tT3bBFKYkKe5kRnpOPXhbkKgvZe6LKP9fFOW Rpi5zGpYEcYda2lGva8EuRFyRN8DjWk9ScZFtzAf21e0a/0ok2tazDKzTjvJwoOx BbuZQlgN7/qQiicsn6VEgpptikM2ociVitIHpmCVtpdtd69DJOkc55CMGX/we0HP q3ENAk4jIW08Mc/g/4NwbcMKkcNd3RGOQkVuGEtYegwMBnmg4/Zt5EMGYH5nTgdM VPBpOQje1xQBqJnCfa7jC0O6QggTmlM= -----END CERTIFICATE-----Generated at Thu Nov 5 04:50:52 2026 by rpki-client