$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa File: ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa (raw, json) Hash identifier: wRZ4fqIvy/YuDArQ3BvS+jbUDT1532wlHV9vAWIhB7c= Subject key identifier: 9E:5A:CE:54:85:32:D7:BA:28:C5:57:83:AA:C8:34:17:67:DF:D9:2E Certificate issuer: /CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Certificate serial: 010D0C9F4328584A7085E9B3A6C752B400FD6600 Authority key identifier: 06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 216050 IP address blocks: 172.98.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:e9:b3:a6:c7:52:b4:00:fd:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=f01fb4a1-055c-45ae-b225-3f6b5fc4a0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bc:9e:0e:fd:fc:4e:0d:29:27:04:8c:ac:09: be:6e:37:81:0c:2b:43:4f:de:82:48:99:2c:ed:9e: 76:a1:6d:60:b7:81:23:12:b5:26:e5:05:f8:a9:89: ca:70:e9:0e:b7:59:34:24:96:62:97:fc:06:97:da: 82:63:5f:59:65:a3:f7:33:de:b7:2c:61:59:69:7f: a1:d2:fa:a8:e9:77:12:dd:a8:12:ac:8e:f7:e6:77: 11:54:05:d1:e6:6c:25:17:aa:09:4f:e6:93:1a:92: 5f:fd:43:9e:66:a3:41:b5:37:b3:81:a4:19:bf:d1: 71:04:28:6e:99:9d:4f:21:3c:32:8a:d8:d5:b9:c7: c0:a1:5e:14:2b:4f:65:c4:1b:cc:c3:86:e7:6f:b1: e9:47:55:fa:11:eb:cd:6b:2d:4d:3c:17:ed:68:96: 39:cd:5f:de:e5:59:2c:2b:2b:c6:15:db:7c:70:a6: 18:b8:b5:c6:e5:77:4d:d2:58:41:50:61:d2:6e:ef: 98:18:a4:3a:70:a2:77:73:1b:e6:43:81:ff:fa:cc: b6:64:5b:eb:f9:1f:82:cb:d0:19:e5:75:e0:c8:31: 52:f4:a9:ef:1d:c0:06:51:3f:9c:66:e5:b3:c2:94: 54:e3:3b:a6:a5:f3:c4:f9:38:13:06:f4:80:e6:f5: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5A:CE:54:85:32:D7:BA:28:C5:57:83:AA:C8:34:17:67:DF:D9:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl X509v3 Authority Key Identifier: keyid:06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer sbgp-ipAddrBlock: critical IPv4: 172.98.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:87:d6:53:5e:c8:c7:b1:e3:92:f9:da:91:71:73:cf:cd:5b: d4:95:67:68:fa:cc:23:a2:d6:d2:7c:e7:ee:c7:17:de:9a:9f: 12:1e:11:fc:88:ba:cc:c9:c1:2b:01:a3:35:57:fa:45:9a:18: 70:92:ee:7e:ad:dd:44:0b:dc:99:4d:83:68:97:8b:7a:03:02: bd:17:97:03:47:cd:30:d5:c1:b9:8f:c0:13:6f:19:fa:6a:50: 96:12:90:cb:10:9e:c6:00:92:db:70:a7:d9:bb:35:3f:ac:de: 91:cf:9b:4e:e1:75:65:a1:ec:1c:42:47:e5:e8:01:1e:64:71: 1b:d0:e5:24:66:dc:25:5c:4a:cb:cf:09:1c:8a:bf:e1:56:4b: 28:19:bf:59:a1:91:55:39:30:e1:ed:1e:c3:70:86:9e:97:f0: b4:e8:15:0c:0f:c9:87:f3:31:88:e6:ed:91:11:a3:7c:ea:9c: 5b:97:04:7d:aa:77:c1:b8:7e:c0:cf:e5:95:f4:ee:fd:9e:79: 6c:bd:f0:85:4f:0b:8b:9d:13:52:48:bb:84:1d:26:24:19:7f: cc:9e:aa:48:01:2d:7c:62:57:b1:b5:c0:61:17:d6:39:67:59: 80:65:a2:02:fe:2c:48:dc:b6:0e:10:47:a3:14:34:78:2c:9d: 54:2a:ae:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhemzpsdStAD9ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk2NDJjZjUtODJmNy00YmUzLWE2OGUtMWQyOWM1YzJk MDEyMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk ZjAxZmI0YTEtMDU1Yy00NWFlLWIyMjUtM2Y2YjVmYzRhMGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLyeDv38Tg0pJwSMrAm+bjeBDCtDT96CSJks 7Z52oW1gt4EjErUm5QX4qYnKcOkOt1k0JJZil/wGl9qCY19ZZaP3M963LGFZaX+h 0vqo6XcS3agSrI735ncRVAXR5mwlF6oJT+aTGpJf/UOeZqNBtTezgaQZv9FxBChu mZ1PITwyitjVucfAoV4UK09lxBvMw4bnb7HpR1X6EevNay1NPBftaJY5zV/e5Vks KyvGFdt8cKYYuLXG5XdN0lhBUGHSbu+YGKQ6cKJ3cxvmQ4H/+sy2ZFvr+R+Cy9AZ 5XXgyDFS9KnvHcAGUT+cZuWzwpRU4zumpfPE+TgTBvSA5vWRYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5azlSFMte6KMVXg6rINBdn39kuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTY0 MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5YzVjMmQwMTIvYWUwYmExYjctYzcyZi0z YTA5LThhOTktMDE1MzUyYmZkMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk2NDJjZjUtODJmNy00YmUzLWE2 OGUtMWQyOWM1YzJkMDEyLzk5NjQyY2Y1LTgyZjctNGJlMy1hNjhlLTFkMjljNWMy ZDAxMi5jcmwwHwYDVR0jBBgwFoAUBlckr8XLoVXY6ngUnCW6YVx8Xt8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTY0MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5 YzVjMmQwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGI8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaH1lNeyMex45L52pFxc8/NW9SVZ2j6zCOi1tJ85+7HF96anxIeEfyI uszJwSsBozVX+kWaGHCS7n6t3UQL3JlNg2iXi3oDAr0XlwNHzTDVwbmPwBNvGfpq UJYSkMsQnsYAkttwp9m7NT+s3pHPm07hdWWh7BxCR+XoAR5kcRvQ5SRm3CVcSsvP CRyKv+FWSygZv1mhkVU5MOHtHsNwhp6X8LToFQwPyYfzMYjm7ZERo3zqnFuXBH2q d8G4fsDP5ZX07v2eeWy98IVPC4udE1JIu4QdJiQZf8yeqkgBLXxiV7G1wGEX1jln WYBlogL+LEjctg4QR6MUNHgsnVQqrpE= -----END CERTIFICATE-----Generated at Mon Jul 21 08:32:41 2025 by rpki-client