$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/2b894b31-cb01-32f7-a0fc-758fe4734d99.roa File: 2b894b31-cb01-32f7-a0fc-758fe4734d99.roa (raw, json) Hash identifier: mDV87pBY1vdgRrqGSeFiKLZ+xUaK7WdRBQ3H8uNkirg= Subject key identifier: 28:5C:2D:16:54:2E:72:16:CC:51:9A:3E:B8:DC:31:0B:B7:3E:0A:2C Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F4328584F82AD9334F151C7C3422B38C0 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/2b894b31-cb01-32f7-a0fc-758fe4734d99.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 160.32.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:93:34:f1:51:c7:c3:42:2b:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=aaede79c-1acc-406c-9fa8-7f5f89a6738c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:bb:04:94:14:f2:5b:81:b9:ce:e3:2d:24: 4d:4c:45:72:9c:c1:d1:5e:2a:e1:af:98:be:ef:31: 4b:87:c0:89:a1:7e:3f:c7:59:aa:7f:95:03:d9:57: 19:0f:29:3b:df:c7:82:0f:c3:ae:c5:ac:06:89:c7: d0:4a:bf:3a:c2:2f:7f:9d:be:55:88:3d:a9:54:2d: 02:ce:00:0a:9e:a6:78:38:78:e4:e9:5c:f7:7b:a1: 3b:d0:56:db:cb:f6:1e:a8:c3:2d:d4:7b:a5:5b:07: d2:a3:2e:4a:f3:53:58:f6:81:2e:fe:ff:ab:f7:99: 70:ec:a8:35:13:a5:8a:86:d0:49:ea:6d:2a:15:e1: 26:9b:d4:09:ff:b8:97:59:76:40:f3:26:f4:77:47: 67:44:2f:ea:eb:6b:e2:84:ae:2d:85:fb:c8:5c:69: 93:2a:3a:77:9c:3c:4f:59:22:ff:44:92:42:fc:99: aa:25:a6:0a:d1:ba:bd:ae:04:72:88:25:b9:24:39: cc:00:73:b3:51:2c:e0:63:2b:7b:ba:dd:72:77:be: 0d:b5:68:88:97:49:8a:c0:2f:5f:71:02:5d:e8:f6: e3:13:6e:c0:12:18:8e:68:42:83:ab:91:f0:87:97: d8:6e:b2:b4:f8:a5:4c:20:ad:ab:29:0f:05:29:88: 5c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5C:2D:16:54:2E:72:16:CC:51:9A:3E:B8:DC:31:0B:B7:3E:0A:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/2b894b31-cb01-32f7-a0fc-758fe4734d99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7c:fd:1c:00:68:d5:2e:93:2a:97:36:9a:2b:60:2a:5a:f0: 64:73:de:fa:0a:f6:bf:62:07:d4:dc:f1:5e:fa:4d:95:ec:da: 36:05:08:b9:1f:68:a2:25:f0:4c:74:32:4a:7f:4a:36:06:55: c0:ec:d8:5a:5e:d1:a1:85:e6:01:bb:09:39:30:a0:3c:60:7f: b8:98:b3:37:9c:c7:79:60:33:e1:50:0e:61:d3:f4:5c:61:4d: fa:22:69:7d:68:1f:c8:a7:c3:1b:24:e8:5b:ce:9b:73:3c:e6: bc:44:ee:d7:a4:9e:77:90:a5:ee:93:1e:c6:a2:de:ad:de:49: 0b:7c:f4:3f:68:2c:4d:92:0f:ae:20:e2:36:4c:75:d1:fb:01: df:34:6c:7a:37:94:23:fb:a9:98:56:05:24:86:46:2c:8b:81: 81:24:f1:55:c1:f4:7d:03:7b:db:22:60:8c:9a:3d:8c:66:a6: 02:be:68:76:24:1e:29:84:54:16:b6:18:fc:2a:dc:12:09:78: d0:ec:48:d5:0f:b2:49:76:1c:ef:dc:fe:c8:6b:a2:19:67:f2: 61:69:63:c4:28:8d:a3:53:17:aa:98:3f:d3:6f:7e:d7:4f:b1: 82:56:65:7a:60:93:6f:e3:5b:95:5d:2a:36:72:24:84:d2:25: 96:ba:8d:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrZM08VHHw0IrOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk YWFlZGU3OWMtMWFjYy00MDZjLTlmYTgtN2Y1Zjg5YTY3MzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDe7BJQU8luBuc7jLSRNTEVynMHRXirhr5i+ 7zFLh8CJoX4/x1mqf5UD2VcZDyk738eCD8OuxawGicfQSr86wi9/nb5ViD2pVC0C zgAKnqZ4OHjk6Vz3e6E70Fbby/YeqMMt1HulWwfSoy5K81NY9oEu/v+r95lw7Kg1 E6WKhtBJ6m0qFeEmm9QJ/7iXWXZA8yb0d0dnRC/q62vihK4thfvIXGmTKjp3nDxP WSL/RJJC/JmqJaYK0bq9rgRyiCW5JDnMAHOzUSzgYyt7ut1yd74NtWiIl0mKwC9f cQJd6PbjE27AEhiOaEKDq5Hwh5fYbrK0+KVMIK2rKQ8FKYhcQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChcLRZULnIWzFGaPrjcMQu3PgosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvMmI4OTRiMzEtY2IwMS0z MmY3LWEwZmMtNzU4ZmU0NzM0ZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCAOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl8/RwAaNUukyqXNporYCpa8GRz3voK9r9iB9Tc8V76TZXs2jYFCLkf aKIl8Ex0Mkp/SjYGVcDs2Fpe0aGF5gG7CTkwoDxgf7iYszecx3lgM+FQDmHT9Fxh TfoiaX1oH8inwxsk6FvOm3M85rxE7teknneQpe6THsai3q3eSQt89D9oLE2SD64g 4jZMddH7Ad80bHo3lCP7qZhWBSSGRiyLgYEk8VXB9H0De9siYIyaPYxmpgK+aHYk HimEVBa2GPwq3BIJeNDsSNUPskl2HO/c/shrohln8mFpY8QojaNTF6qYP9NvftdP sYJWZXpgk2/jW5VdKjZyJITSJZa6jQg= -----END CERTIFICATE-----Generated at Sun Nov 15 09:51:41 2026 by rpki-client