$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/b7d769e1-833a-3c32-8a0d-9a20ef8db8d4.roa File: b7d769e1-833a-3c32-8a0d-9a20ef8db8d4.roa (raw, json) Hash identifier: FixNKDbr6WFwBISt8TdvPoXUZWN0AXFsZjTnf/L5iE8= Subject key identifier: 67:8F:A7:4F:06:49:96:A2:1B:AB:AF:63:2E:C1:E8:80:5F:EB:76:32 Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F4328584E3E5F53F2935DB6AFD610F280 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/b7d769e1-833a-3c32-8a0d-9a20ef8db8d4.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 160.32.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:53:f2:93:5d:b6:af:d6:10:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=f631ecc7-cac8-4007-8e2d-cf393efe5333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3e:5e:ae:f5:38:c4:09:6b:e6:cf:68:0d:eb: 56:cf:67:76:6a:db:6a:ff:08:f1:de:e8:d0:12:82: 98:d9:c1:91:00:8a:2f:7e:41:44:e8:78:12:90:ab: 7c:fb:03:2c:2f:56:59:fd:7e:31:f5:f6:6a:52:73: b6:9b:ed:75:04:74:ee:86:73:ae:fe:e6:43:7b:af: 0b:cb:19:ef:51:50:8c:62:de:21:16:75:92:85:7d: e2:ac:1e:f7:6a:43:64:ca:24:f3:2a:90:94:f1:48: 21:8f:92:fe:ae:f0:6d:75:79:c7:46:5f:d8:09:b9: 8a:eb:d7:d3:60:0f:80:86:a2:ed:90:bf:af:fc:e7: 26:be:94:10:ea:62:3e:4e:69:6c:28:a9:f6:d6:1f: 40:ea:a6:74:65:af:1f:2a:ba:cd:b5:17:05:70:91: 35:21:df:d1:9b:1c:5e:1c:cb:fb:50:7d:21:fc:da: 24:c7:a6:50:2c:7c:0b:ea:3e:66:c5:20:19:92:2d: b7:40:0f:16:cd:d2:0c:cd:2c:1f:49:03:a9:e1:fd: 72:d6:7a:35:87:41:ca:8c:68:d1:ff:54:33:b1:85: b7:e2:6b:d9:a7:6c:91:7c:ce:14:6b:0c:f7:48:17: 15:14:c6:28:45:9e:0c:c0:5e:6d:8f:d7:db:5c:fb: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8F:A7:4F:06:49:96:A2:1B:AB:AF:63:2E:C1:E8:80:5F:EB:76:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/b7d769e1-833a-3c32-8a0d-9a20ef8db8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:49:71:9f:2f:46:35:10:54:6f:b4:3d:88:ad:d5:95:1c:39: af:7b:45:6a:c8:d5:4a:79:5d:a1:bb:46:75:7b:f4:1b:23:cf: 5c:68:2a:08:a3:5f:b6:eb:28:5b:4f:d4:b9:48:f2:f4:3c:ce: 49:31:d8:06:65:75:e4:7c:a2:15:3e:e3:04:9a:5f:ad:86:73: 5e:6a:07:69:22:7c:1f:b3:5f:cd:a4:ce:2f:1b:ad:23:40:a9: 35:b2:62:13:dd:07:fd:c8:c9:e1:60:84:fb:33:a6:bc:f9:52: 36:40:72:6f:28:da:51:0e:ef:a4:c9:65:ae:78:07:78:e4:fc: 64:a6:c5:be:ac:7a:32:51:ac:15:0e:b6:56:1a:32:af:57:43: c3:99:2f:81:67:61:cf:e7:cd:5e:49:ce:e9:44:94:4d:4b:02: c9:07:e9:e7:57:26:3e:54:d6:f0:5f:3f:e4:da:27:12:7d:db: 08:3f:24:93:aa:a3:bf:19:fb:61:f2:38:6f:a9:ed:3e:a9:db: a5:5c:ff:88:78:1c:39:0b:09:4e:63:b9:c0:ea:05:84:a0:55: ed:0f:25:f8:f6:5a:70:65:16:57:19:6d:73:c9:57:e6:73:50: f7:8f:8b:58:75:4f:b8:70:d5:91:b5:ac:9a:36:85:5d:a8:05: ca:d6:00:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X1Pyk122r9YQ8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk ZjYzMWVjYzctY2FjOC00MDA3LThlMmQtY2YzOTNlZmU1MzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT5ervU4xAlr5s9oDetWz2d2attq/wjx3ujQ EoKY2cGRAIovfkFE6HgSkKt8+wMsL1ZZ/X4x9fZqUnO2m+11BHTuhnOu/uZDe68L yxnvUVCMYt4hFnWShX3irB73akNkyiTzKpCU8Ughj5L+rvBtdXnHRl/YCbmK69fT YA+AhqLtkL+v/OcmvpQQ6mI+TmlsKKn21h9A6qZ0Za8fKrrNtRcFcJE1Id/Rmxxe HMv7UH0h/Nokx6ZQLHwL6j5mxSAZki23QA8WzdIMzSwfSQOp4f1y1no1h0HKjGjR /1QzsYW34mvZp2yRfM4Uawz3SBcVFMYoRZ4MwF5tj9fbXPvvLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGePp08GSZaiG6uvYy7B6IBf63YyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvYjdkNzY5ZTEtODMzYS0z YzMyLThhMGQtOWEyMGVmOGRiOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCAMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJJcZ8vRjUQVG+0PYit1ZUcOa97RWrI1Up5XaG7RnV79Bsjz1xoKgij X7brKFtP1LlI8vQ8zkkx2AZldeR8ohU+4wSaX62Gc15qB2kifB+zX82kzi8brSNA qTWyYhPdB/3IyeFghPszprz5UjZAcm8o2lEO76TJZa54B3jk/GSmxb6sejJRrBUO tlYaMq9XQ8OZL4FnYc/nzV5JzulElE1LAskH6edXJj5U1vBfP+TaJxJ92wg/JJOq o78Z+2HyOG+p7T6p26Vc/4h4HDkLCU5jucDqBYSgVe0PJfj2WnBlFlcZbXPJV+Zz UPePi1h1T7hw1ZG1rJo2hV2oBcrWAOY= -----END CERTIFICATE-----Generated at Wed Jun 24 22:23:49 2026 by rpki-client