$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/36703e51-a530-337a-a02e-63a5f97ecf12.roa File: 36703e51-a530-337a-a02e-63a5f97ecf12.roa (raw, json) Hash identifier: MR+kJrAiWygw8jA5vqBQki9lVFuQUWb5zc1955Wag5k= Subject key identifier: DE:9E:81:05:A8:0D:6D:E2:EF:0F:17:AA:96:8E:8E:94:A4:CD:37:1C Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F4328584F82ADD827C0C6C2C6F410EB40 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/36703e51-a530-337a-a02e-63a5f97ecf12.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 160.32.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:d8:27:c0:c6:c2:c6:f4:10:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=01d5b309-dc0f-41e5-aeb0-b1133c8106f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:24:fb:b9:5f:e7:24:e1:82:74:8a:af:e5:5f: 65:cd:b5:14:a9:74:13:67:25:b6:a9:1e:cf:58:01: da:32:af:e1:50:8f:ef:be:a4:d2:f7:56:bf:ba:de: 93:b6:ad:24:fd:97:a3:be:6f:1a:60:73:d0:d4:b1: 78:25:45:2a:cf:5d:e1:40:9b:65:7e:af:2b:ea:26: 45:1a:2f:bd:18:09:fd:00:61:a6:37:1e:22:44:79: c3:96:6e:ed:02:82:03:1c:b1:94:54:18:70:15:a4: d1:4b:69:18:ac:a6:eb:de:3c:06:07:72:a5:b6:63: 5d:01:4f:d7:e2:8e:6c:2f:a8:20:31:24:44:45:70: 65:21:34:a8:38:73:4c:05:7c:50:ac:f0:c0:89:1f: 91:88:4a:68:90:c6:c5:26:5c:42:3d:47:9a:60:ce: dd:75:de:84:11:c0:43:cd:54:81:ec:9e:93:cf:ba: 72:45:c3:cf:b8:24:8b:9f:3f:3f:5f:5b:50:7f:7e: 06:f5:66:4b:4f:a2:1f:c7:84:fc:72:5c:b1:4c:8c: e2:94:a2:86:7e:7f:36:f9:6e:a0:22:7d:80:af:6f: d1:da:ab:be:95:33:35:dd:a0:da:cc:87:9f:49:fb: af:cc:9c:ee:ba:0f:65:e9:a2:ef:38:fb:5e:52:08: 8f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9E:81:05:A8:0D:6D:E2:EF:0F:17:AA:96:8E:8E:94:A4:CD:37:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/36703e51-a530-337a-a02e-63a5f97ecf12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:27:0b:46:ac:88:21:25:d8:d4:8d:7d:97:b0:99:3d:e1:ae: 07:2b:dd:0a:23:fe:53:8c:f7:aa:75:95:ad:e0:99:48:82:5b: 89:ce:de:ee:33:a4:ff:09:6a:5c:ff:03:13:f8:86:e2:38:24: a2:41:f2:44:33:88:fb:aa:1a:54:ed:d8:c4:d9:41:8c:25:76: ab:f7:9c:5b:35:ee:c7:29:08:72:1a:4f:dc:2e:a6:c3:28:76: 3a:82:5c:7e:f8:8e:3b:3b:2e:1b:e0:b1:7c:d3:0b:9e:3e:9d: 69:27:fa:2c:a9:9c:f3:40:96:e5:41:86:ff:ec:10:2a:f9:db: b9:fd:92:8a:64:be:4e:df:e2:8e:0c:cc:a3:20:2a:14:39:b9: b6:41:a9:27:9d:2a:5a:64:6c:ff:c4:08:e3:12:a2:cc:d8:09: c0:55:e9:37:50:44:73:38:9c:3f:e7:52:d2:14:b0:92:c8:46: cc:38:98:82:d9:39:42:cc:1f:0e:9f:23:e0:b2:eb:98:7c:76: 6a:a4:e5:4e:58:86:a9:9d:24:a5:2f:0f:00:69:62:24:5f:84: e1:21:a3:6e:25:45:1a:38:be:6e:10:a0:cd:5c:a1:f9:2a:7d: 83:f5:86:aa:44:b5:0e:86:ec:27:eb:08:3b:de:54:1f:86:48: 33:80:22:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrdgnwMbCxvQQ60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk MDFkNWIzMDktZGMwZi00MWU1LWFlYjAtYjExMzNjODEwNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iT7uV/nJOGCdIqv5V9lzbUUqXQTZyW2qR7P WAHaMq/hUI/vvqTS91a/ut6Ttq0k/Zejvm8aYHPQ1LF4JUUqz13hQJtlfq8r6iZF Gi+9GAn9AGGmNx4iRHnDlm7tAoIDHLGUVBhwFaTRS2kYrKbr3jwGB3KltmNdAU/X 4o5sL6ggMSRERXBlITSoOHNMBXxQrPDAiR+RiEpokMbFJlxCPUeaYM7ddd6EEcBD zVSB7J6Tz7pyRcPPuCSLnz8/X1tQf34G9WZLT6Ifx4T8clyxTIzilKKGfn82+W6g In2Ar2/R2qu+lTM13aDazIefSfuvzJzuug9l6aLvOPteUgiPLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6egQWoDW3i7w8XqpaOjpSkzTccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvMzY3MDNlNTEtYTUzMC0z MzdhLWEwMmUtNjNhNWY5N2VjZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCANMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4nC0asiCEl2NSNfZewmT3hrgcr3Qoj/lOM96p1la3gmUiCW4nO3u4z pP8Jalz/AxP4huI4JKJB8kQziPuqGlTt2MTZQYwldqv3nFs17scpCHIaT9wupsMo djqCXH74jjs7LhvgsXzTC54+nWkn+iypnPNAluVBhv/sECr527n9kopkvk7f4o4M zKMgKhQ5ubZBqSedKlpkbP/ECOMSoszYCcBV6TdQRHM4nD/nUtIUsJLIRsw4mILZ OULMHw6fI+Cy65h8dmqk5U5YhqmdJKUvDwBpYiRfhOEho24lRRo4vm4QoM1cofkq fYP1hqpEtQ6G7CfrCDveVB+GSDOAIu4= -----END CERTIFICATE-----Generated at Sun Nov 15 18:06:08 2026 by rpki-client