$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/fb3d9f7f-07e0-37c4-8150-74456102d863.roa File: fb3d9f7f-07e0-37c4-8150-74456102d863.roa (raw, json) Hash identifier: 58Ze9K1UOQf+Gp8SYZMdY9zEuyrKxtaVzG1MIILjumc= Subject key identifier: 1E:72:35:1B:7A:2A:DD:A3:B6:83:85:8E:8B:EA:8E:75:80:5F:42:26 Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F4328584B9E07D56B3DFB8F44D1DD4F30 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/fb3d9f7f-07e0-37c4-8150-74456102d863.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 160.32.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d5:6b:3d:fb:8f:44:d1:dd:4f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=affb62d7-3ca0-490c-bb48-621fd2234c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f6:6c:f8:6a:7b:d5:b4:78:da:87:94:08:a7: 5a:31:34:77:7d:06:a9:7a:68:b3:61:3b:dd:66:72: 60:d7:28:d2:66:4b:61:0f:70:f0:36:b8:27:48:62: 20:e2:6c:ba:72:94:85:f1:d6:ab:f7:cc:47:d3:fe: bf:86:75:e4:f4:2c:e5:6b:f4:2a:37:b6:66:1d:8f: ec:0f:e5:94:be:0a:ec:c4:56:bc:9d:cf:ff:82:95: db:2c:7b:58:c1:b8:72:52:7e:88:c5:e8:ee:6a:bb: 17:36:66:49:b6:3f:d3:22:42:81:e4:f4:ad:6e:55: 1f:70:b9:84:d8:ae:e1:17:76:3f:ac:e8:af:83:d2: a7:6c:8c:fa:83:70:24:50:42:0c:4d:6b:ce:75:2b: df:68:e0:5d:67:62:4b:b0:54:0f:7d:d4:a9:36:86: 02:01:04:8e:80:26:0b:f9:47:55:60:40:20:be:1a: 6d:1d:13:f8:3b:5b:f5:36:f5:77:5a:d0:c2:9c:c9: fc:9c:e1:6f:a3:09:1f:c3:4f:59:69:03:ff:cd:00: fe:17:b1:80:cc:89:fa:61:3c:2f:80:4d:7d:44:43: 3e:5b:e7:12:6d:c8:27:b6:f2:0d:fc:02:e9:c5:43: 6a:e5:d1:e6:73:85:15:40:fe:ee:f9:7e:10:ce:6b: 50:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:72:35:1B:7A:2A:DD:A3:B6:83:85:8E:8B:EA:8E:75:80:5F:42:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/fb3d9f7f-07e0-37c4-8150-74456102d863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ce:36:1d:64:57:07:ed:52:63:91:97:c7:50:57:ff:c3:b0: 56:b5:54:06:a7:e8:43:b7:0a:95:95:db:fa:e4:80:62:3b:76: de:1e:b0:84:74:bb:e0:d9:c0:07:f1:52:59:08:ac:98:3c:87: cb:ef:d5:07:d6:05:1b:fc:a7:49:7f:89:bf:e8:40:6d:15:42: b9:62:fa:d3:f1:55:42:7a:c9:31:ce:55:f7:48:da:3c:e8:b5: 1c:14:b0:f2:30:eb:13:52:cb:64:6a:2f:61:64:20:8a:a6:4a: fd:74:2c:39:f3:75:c8:69:10:06:a3:e2:90:f2:fc:82:52:eb: 8d:84:91:28:8b:1c:51:86:9a:b4:74:cc:d3:f2:d7:ac:33:56: c4:3c:6a:b5:8e:18:ce:be:26:33:37:17:19:5e:7f:68:31:c2: 49:98:f6:a6:40:78:c3:ec:7c:c5:ee:9a:80:79:2e:ca:31:57: 8f:9c:7a:ae:46:ac:6f:ad:9c:da:77:e3:af:09:d0:c0:3a:00: 44:69:e5:76:be:db:b3:c3:23:fe:7c:2d:02:4e:5e:26:b8:e5: a9:8c:e7:02:21:61:93:f0:2e:2f:42:ca:ab:bc:e0:82:cd:8b: ba:56:dd:99:5e:b8:ad:a9:b5:47:05:bc:dc:ec:a4:24:4f:f0: 7d:90:1a:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB9VrPfuPRNHdTzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YWZmYjYyZDctM2NhMC00OTBjLWJiNDgtNjIxZmQyMjM0YzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PZs+Gp71bR42oeUCKdaMTR3fQapemizYTvd ZnJg1yjSZkthD3DwNrgnSGIg4my6cpSF8dar98xH0/6/hnXk9Czla/QqN7ZmHY/s D+WUvgrsxFa8nc//gpXbLHtYwbhyUn6IxejuarsXNmZJtj/TIkKB5PStblUfcLmE 2K7hF3Y/rOivg9KnbIz6g3AkUEIMTWvOdSvfaOBdZ2JLsFQPfdSpNoYCAQSOgCYL +UdVYEAgvhptHRP4O1v1NvV3WtDCnMn8nOFvowkfw09ZaQP/zQD+F7GAzIn6YTwv gE19REM+W+cSbcgntvIN/ALpxUNq5dHmc4UVQP7u+X4QzmtQ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5yNRt6Kt2jtoOFjovqjnWAX0ImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvZmIzZDlmN2YtMDdlMC0z N2M0LTgxNTAtNzQ0NTYxMDJkODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoCAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXONh1kVwftUmORl8dQV//DsFa1VAan6EO3CpWV2/rkgGI7dt4esIR0 u+DZwAfxUlkIrJg8h8vv1QfWBRv8p0l/ib/oQG0VQrli+tPxVUJ6yTHOVfdI2jzo tRwUsPIw6xNSy2RqL2FkIIqmSv10LDnzdchpEAaj4pDy/IJS642EkSiLHFGGmrR0 zNPy16wzVsQ8arWOGM6+JjM3Fxlef2gxwkmY9qZAeMPsfMXumoB5LsoxV4+ceq5G rG+tnNp3468J0MA6AERp5Xa+27PDI/58LQJOXia45amM5wIhYZPwLi9Cyqu84ILN i7pW3ZleuK2ptUcFvNzspCRP8H2QGsQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:53 2025 by rpki-client