$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f1c78f8b-98d8-317c-b7a5-9d7a8ab4c02d.roa File: f1c78f8b-98d8-317c-b7a5-9d7a8ab4c02d.roa (raw, json) Hash identifier: mjQ8A0D+EVm8OgIHsZhb6c6S0S1w3zXK9deoF+g8eTQ= Subject key identifier: 09:01:A7:17:F2:C9:C9:34:B7:79:73:96:51:2A:0A:35:F7:FA:1D:B7 Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F4328584D5E1A5F3F489905C125EA0A80 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f1c78f8b-98d8-317c-b7a5-9d7a8ab4c02d.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 14618 IP address blocks: 160.32.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5f:3f:48:99:05:c1:25:ea:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=bd780e0b-7dd1-4aec-8188-942ac63fe5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:91:80:57:dc:a7:e6:e2:2e:04:fd:20:c7: bb:89:70:2d:4e:bb:bb:92:97:ee:d9:ac:98:ad:86: 1a:7e:b7:4a:56:d0:95:d2:e0:ae:3b:87:b7:73:ab: cc:8d:2e:92:24:15:41:1e:67:3e:1a:72:e3:f3:04: 4f:69:cd:ae:d8:51:8c:36:88:4a:28:1c:94:f2:70: 4e:e8:b2:f3:0c:2a:7a:69:bd:cb:bf:10:00:a3:f7: 7b:d0:c8:1a:2b:6f:f8:49:20:3f:82:2d:87:58:7d: bc:b4:3d:55:57:72:3b:6a:91:a4:89:4a:99:25:9e: f6:79:6e:42:27:61:fa:34:1e:bf:9c:8a:c2:3c:f8: 41:d6:1f:5b:85:5b:5a:a9:0e:5b:dd:93:d5:2e:2c: 3f:da:d4:ce:fc:61:79:b4:85:0d:f6:ef:3f:e6:d4: 1f:71:7f:9a:d0:6a:1e:94:08:b6:be:57:1d:f8:f8: be:97:d0:c9:5d:c3:89:ba:0e:cb:2c:d4:02:89:d6: fb:8f:0c:f2:21:31:37:34:ce:0c:e2:86:8a:ca:cb: b0:83:47:11:f0:30:57:4f:99:f3:7f:48:c8:f6:3a: 9c:1c:ba:f9:13:84:9e:d8:7e:a5:9b:2c:21:52:ab: 22:dd:14:79:d6:2a:f9:16:e2:2c:7b:85:e8:e7:69: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:01:A7:17:F2:C9:C9:34:B7:79:73:96:51:2A:0A:35:F7:FA:1D:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f1c78f8b-98d8-317c-b7a5-9d7a8ab4c02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ed:5c:5c:90:55:0f:99:96:c5:0d:99:09:c9:67:26:7d:3b: e8:37:09:47:2e:51:aa:e5:16:59:21:d4:8b:3b:12:91:8f:b9: a3:26:bc:27:a4:da:40:e2:22:28:fa:0a:61:55:4d:7a:cb:fb: 15:0a:66:3d:1f:c9:2b:e7:15:be:3b:ff:c8:b8:92:89:81:b2: 22:d8:6d:fa:68:b2:9f:4d:b2:a8:3c:5a:cc:42:b1:74:48:70: 2a:79:d3:3d:bc:21:35:b0:88:30:55:63:cb:86:73:96:36:ec: 9f:dd:d1:a9:7f:eb:16:c2:cf:76:ab:23:48:cb:65:bc:ee:f6: ae:1d:3f:12:c3:41:62:0b:20:68:4e:5d:00:11:ca:a8:cb:1a: 0c:7f:03:0f:c3:18:af:8f:0e:46:a7:2a:53:ed:32:23:59:21: 77:d3:76:ce:39:51:25:8a:2c:04:55:10:6a:28:15:15:dc:ea: 19:e1:f5:dc:f2:1a:e5:22:54:fc:88:c4:b3:8c:9c:2f:b3:63: 25:0e:14:e1:40:07:b5:e8:35:54:b6:96:8f:47:38:d5:90:c1: d7:dd:79:ba:7d:8a:57:6e:c9:b8:00:f0:af:b4:3b:b5:7f:cb: c8:5c:39:73:e0:86:32:9a:a5:37:b9:d7:fd:58:ed:99:43:3d: 59:49:75:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGl8/SJkFwSXqCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YmQ3ODBlMGItN2RkMS00YWVjLTgxODgtOTQyYWM2M2ZlNWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8WRgFfcp+biLgT9IMe7iXAtTru7kpfu2ayY rYYafrdKVtCV0uCuO4e3c6vMjS6SJBVBHmc+GnLj8wRPac2u2FGMNohKKByU8nBO 6LLzDCp6ab3LvxAAo/d70MgaK2/4SSA/gi2HWH28tD1VV3I7apGkiUqZJZ72eW5C J2H6NB6/nIrCPPhB1h9bhVtaqQ5b3ZPVLiw/2tTO/GF5tIUN9u8/5tQfcX+a0Goe lAi2vlcd+Pi+l9DJXcOJug7LLNQCidb7jwzyITE3NM4M4oaKysuwg0cR8DBXT5nz f0jI9jqcHLr5E4Se2H6lmywhUqsi3RR51ir5FuIse4Xo52lW7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkBpxfyyck0t3lzllEqCjX3+h23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvZjFjNzhmOGItOThkOC0z MTdjLWI3YTUtOWQ3YThhYjRjMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3tXFyQVQ+ZlsUNmQnJZyZ9O+g3CUcuUarlFlkh1Is7EpGPuaMmvCek 2kDiIij6CmFVTXrL+xUKZj0fySvnFb47/8i4komBsiLYbfposp9Nsqg8WsxCsXRI cCp50z28ITWwiDBVY8uGc5Y27J/d0al/6xbCz3arI0jLZbzu9q4dPxLDQWILIGhO XQARyqjLGgx/Aw/DGK+PDkanKlPtMiNZIXfTds45USWKLARVEGooFRXc6hnh9dzy GuUiVPyIxLOMnC+zYyUOFOFAB7XoNVS2lo9HONWQwdfdebp9ilduybgA8K+0O7V/ y8hcOXPghjKapTe51/1Y7ZlDPVlJdQs= -----END CERTIFICATE-----Generated at Fri Apr 17 11:03:05 2026 by rpki-client