$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/c2bf9992-4eea-346b-8a05-7a766bf6afc4.roa File: c2bf9992-4eea-346b-8a05-7a766bf6afc4.roa (raw, json) Hash identifier: h6VK1DMpi+DEZ+lpZiQzy+p3P6n3EAwmAbeU7n1obx0= Subject key identifier: 17:8F:F2:F9:B7:EF:32:33:00:89:43:57:FB:00:0D:19:5A:9D:9A:79 Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F4328584ABBE641A70018A307AC9C4DC0 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/c2bf9992-4eea-346b-8a05-7a766bf6afc4.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 14618 IP address blocks: 160.32.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:41:a7:00:18:a3:07:ac:9c:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=ae5add61-2ca5-4955-9a18-9d1fecd5cebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e5:c7:2b:f3:3c:7f:05:79:42:0b:6d:aa:e0: 75:18:c6:f9:de:65:9c:82:81:fc:8c:21:45:69:87: 3a:b0:73:49:c8:f8:f6:7f:17:12:3f:bb:99:af:61: b2:11:e6:1e:1b:17:11:5a:db:65:9d:1b:6b:52:36: fb:0b:fe:0d:57:d0:0b:58:3c:06:5f:c0:a7:f0:a1: 80:30:7f:54:b1:bb:0b:10:f7:b3:c1:a7:6a:0a:29: 5a:d5:fb:f2:8d:d3:eb:4c:a6:f0:d6:3a:4a:30:06: 16:e7:6a:5e:ba:16:5e:96:4a:f6:e6:9a:1c:7b:3f: 6f:3c:5c:05:10:0b:7d:35:c2:bf:7c:d5:6a:cf:1a: 85:98:e2:2a:84:f0:26:d0:b9:37:6d:05:79:5d:bd: e4:4d:2d:95:82:0a:5f:c2:69:6c:f6:dd:f2:b8:77: 7e:6d:1e:95:87:0c:5b:28:ad:0d:51:c5:00:cb:db: bf:18:56:b3:f5:79:9d:5f:26:1b:2f:09:67:fe:0d: 1d:95:76:ac:8f:27:f3:a7:ca:d3:95:18:7b:67:31: 4e:00:45:b0:ce:45:d0:a4:dd:46:53:12:40:81:90: 5a:b4:ae:2e:de:17:95:7b:44:4d:bb:c0:38:0e:84: 26:cd:3a:c7:79:db:99:fe:d8:b5:c0:f5:7e:9e:08: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8F:F2:F9:B7:EF:32:33:00:89:43:57:FB:00:0D:19:5A:9D:9A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/c2bf9992-4eea-346b-8a05-7a766bf6afc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:62:ea:1b:78:bb:d5:29:26:85:61:00:60:2d:d4:ba:a6:b7: 6a:c4:08:bf:fa:4e:a8:a0:22:d9:d9:70:35:42:d5:ac:21:43: 30:a4:d3:7b:a6:0d:5c:91:b0:f1:91:cc:76:bd:6d:99:31:e8: 02:5f:46:78:b4:c8:fe:37:a2:29:f1:7d:87:8c:9f:99:70:d3: 95:4e:e7:f8:08:31:39:dc:c1:c1:28:4f:a2:56:8f:35:41:c2: 25:4c:ca:28:88:d7:38:51:6f:83:c8:99:b1:13:1c:c3:ea:7e: fc:45:72:65:b5:f3:3e:4f:59:6b:98:98:4d:5d:f8:ca:8e:4e: 00:12:3d:39:6a:83:64:25:e2:ef:0f:a5:85:b9:7c:22:1a:55: cd:40:cb:ab:ed:36:33:a9:c7:86:8d:ff:b4:42:a0:46:a4:b5: b1:84:8a:6d:67:19:d7:81:a5:aa:6e:18:35:a0:77:99:fc:80: 29:cb:57:dc:c1:28:4e:9b:6d:c8:86:7d:38:2c:ba:2e:c5:f7: 02:0f:23:d0:33:9d:7a:07:c6:ae:e0:98:32:3c:f3:bf:a1:c0: 2a:2e:2b:2b:8a:b8:70:ba:b6:28:71:2a:f9:89:9a:67:c9:35: e6:df:b6:2c:81:0d:63:a0:e5:64:5b:2d:71:ca:a8:03:8c:70: 59:c8:b4:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq75kGnABijB6ycTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk YWU1YWRkNjEtMmNhNS00OTU1LTlhMTgtOWQxZmVjZDVjZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeXHK/M8fwV5QgttquB1GMb53mWcgoH8jCFF aYc6sHNJyPj2fxcSP7uZr2GyEeYeGxcRWttlnRtrUjb7C/4NV9ALWDwGX8Cn8KGA MH9UsbsLEPezwadqCila1fvyjdPrTKbw1jpKMAYW52peuhZelkr25pocez9vPFwF EAt9NcK/fNVqzxqFmOIqhPAm0Lk3bQV5Xb3kTS2Vggpfwmls9t3yuHd+bR6Vhwxb KK0NUcUAy9u/GFaz9XmdXyYbLwln/g0dlXasjyfzp8rTlRh7ZzFOAEWwzkXQpN1G UxJAgZBatK4u3heVe0RNu8A4DoQmzTrHeduZ/ti1wPV+ngggMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeP8vm37zIzAIlDV/sADRlanZp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvYzJiZjk5OTItNGVlYS0z NDZiLThhMDUtN2E3NjZiZjZhZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCAPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5i6ht4u9UpJoVhAGAt1Lqmt2rECL/6TqigItnZcDVC1awhQzCk03um DVyRsPGRzHa9bZkx6AJfRni0yP43oinxfYeMn5lw05VO5/gIMTncwcEoT6JWjzVB wiVMyiiI1zhRb4PImbETHMPqfvxFcmW18z5PWWuYmE1d+MqOTgASPTlqg2Ql4u8P pYW5fCIaVc1Ay6vtNjOpx4aN/7RCoEaktbGEim1nGdeBpapuGDWgd5n8gCnLV9zB KE6bbciGfTgsui7F9wIPI9AznXoHxq7gmDI887+hwCouKyuKuHC6tihxKvmJmmfJ NebftiyBDWOg5WRbLXHKqAOMcFnItJE= -----END CERTIFICATE-----Generated at Sat Aug 23 08:07:41 2025 by rpki-client