$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/d86439cc-2774-3a35-9de0-f1f92e20d2c4.roa File: d86439cc-2774-3a35-9de0-f1f92e20d2c4.roa (raw, json) Hash identifier: SCgB4OKd5CMg7JQiNBsQ5n44ty70NK4hZ3BC+k5qVAw= Subject key identifier: 41:90:4E:B0:ED:71:18:EA:3B:CE:CF:D6:E8:B6:F2:02:53:23:B3:55 Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F4328584B9CA22AEB4FEE1378C98A78E0 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/d86439cc-2774-3a35-9de0-f1f92e20d2c4.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 160.32.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2a:eb:4f:ee:13:78:c9:8a:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=a306067f-4f5f-4bbb-9b6f-887045122b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:7e:47:31:dc:51:52:7c:0f:33:a9:54:39: 1e:c2:65:6d:24:7f:50:2d:a8:55:4e:1d:2d:37:9a: 1c:1c:ca:9f:3d:96:bd:78:58:6f:89:d5:8e:b5:e3: d9:4b:72:1c:05:d5:da:b7:4a:55:ab:e9:d2:f7:28: 24:06:66:20:a5:80:7e:c9:b5:5f:b8:83:88:60:6f: 2f:0f:6f:66:ad:0b:56:07:9f:75:4f:24:3e:bf:97: b3:bb:5a:75:3a:0b:b0:a5:7d:ac:fe:41:7e:76:5f: a3:07:cd:16:11:3a:49:10:7d:20:f3:3c:e0:d7:6a: 42:fc:0a:99:52:b3:01:c4:22:f8:bc:a0:5f:8d:53: bb:20:dd:d4:af:73:e8:66:37:ba:65:83:83:54:5c: 87:4f:e9:13:a1:64:25:31:6b:fd:89:b4:bb:05:4b: e8:ac:6a:b7:fb:0f:71:12:39:e6:ef:30:f2:d7:87: 24:d8:ba:21:1d:a7:d4:09:67:9f:72:85:30:5e:df: 3b:23:66:fe:99:ed:a4:58:6c:74:3c:00:c3:f2:4e: 39:be:99:a9:72:6d:f4:5e:1d:72:21:71:c6:a5:f0: 9a:90:0e:5f:d5:95:d9:89:1f:00:67:d5:e3:76:5d: be:56:8f:18:91:3e:c4:4d:7f:e4:d0:40:16:71:b8: df:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:90:4E:B0:ED:71:18:EA:3B:CE:CF:D6:E8:B6:F2:02:53:23:B3:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/d86439cc-2774-3a35-9de0-f1f92e20d2c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d5:d5:5b:c3:0d:54:1a:cc:30:d6:a8:9a:1c:2d:7e:c2:83: f2:3f:45:76:e2:bb:aa:7e:52:ce:a0:cb:c3:1f:ad:d3:ec:9a: 65:41:5f:46:03:aa:22:58:90:ae:35:12:a7:f4:2d:fd:58:89: 67:31:44:62:75:7c:72:9e:6a:76:d8:d8:dd:f5:e0:bf:eb:d5: 60:86:7a:6b:41:4c:d0:5d:83:b3:eb:58:28:77:d3:2e:e9:e3: 38:20:d8:69:c0:92:7d:6d:da:d0:74:3f:08:fb:c6:5a:64:ad: af:2b:00:ba:31:b2:97:26:fd:bf:a2:a2:50:c8:67:1c:91:6d: 26:b9:10:02:74:c2:dd:27:4e:98:63:f0:dc:a1:11:d0:48:c0: 02:81:f3:00:9e:17:53:ac:08:49:34:c7:43:b9:22:2b:d4:4b: 1d:fe:a4:dd:45:1c:fa:32:f7:75:72:c1:cf:1e:b6:67:12:42: 1c:ec:69:e6:34:b0:bd:0c:1d:bf:ba:4a:ee:cb:a7:31:11:7a: 6c:15:c2:8b:75:e0:06:8f:fc:09:a2:1e:8d:15:62:f9:25:f0: b8:73:a7:ed:13:b8:d6:28:4e:48:fd:1b:b8:c5:36:7e:b4:9b: 65:ca:98:aa:9e:af:21:44:ed:43:eb:84:12:28:63:52:23:aa: c9:32:cc:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucoirrT+4TeMmKeOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk YTMwNjA2N2YtNGY1Zi00YmJiLTliNmYtODg3MDQ1MTIyYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7N+RzHcUVJ8DzOpVDkewmVtJH9QLahVTh0t N5ocHMqfPZa9eFhvidWOtePZS3IcBdXat0pVq+nS9ygkBmYgpYB+ybVfuIOIYG8v D29mrQtWB591TyQ+v5ezu1p1OguwpX2s/kF+dl+jB80WETpJEH0g8zzg12pC/AqZ UrMBxCL4vKBfjVO7IN3Ur3PoZje6ZYODVFyHT+kToWQlMWv9ibS7BUvorGq3+w9x Ejnm7zDy14ck2LohHafUCWefcoUwXt87I2b+me2kWGx0PADD8k45vpmpcm30Xh1y IXHGpfCakA5f1ZXZiR8AZ9Xjdl2+Vo8YkT7ETX/k0EAWcbjf6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGQTrDtcRjqO87P1ui28gJTI7NVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvZDg2NDM5Y2MtMjc3NC0z YTM1LTlkZTAtZjFmOTJlMjBkMmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3V1VvDDVQazDDWqJocLX7Cg/I/RXbiu6p+Us6gy8MfrdPsmmVBX0YD qiJYkK41Eqf0Lf1YiWcxRGJ1fHKeanbY2N314L/r1WCGemtBTNBdg7PrWCh30y7p 4zgg2GnAkn1t2tB0Pwj7xlpkra8rALoxspcm/b+iolDIZxyRbSa5EAJ0wt0nTphj 8NyhEdBIwAKB8wCeF1OsCEk0x0O5IivUSx3+pN1FHPoy93Vywc8etmcSQhzsaeY0 sL0MHb+6Su7LpzERemwVwot14AaP/AmiHo0VYvkl8Lhzp+0TuNYoTkj9G7jFNn60 m2XKmKqeryFE7UPrhBIoY1IjqskyzKQ= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:22 2025 by rpki-client