$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa File: ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa (raw, json) Hash identifier: 6FEsWsum2r8sN6pc087jDuZfsjboUegFxeOoCeQR9pE= Subject key identifier: 08:EB:73:54:83:F3:47:BA:B9:73:5A:EA:F3:B1:BE:58:F8:BB:3B:76 Certificate issuer: /CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Certificate serial: 010D0C9F4328584D117294F55E90D458F3140000 Authority key identifier: 06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 216050 IP address blocks: 172.98.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:94:f5:5e:90:d4:58:f3:14:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=32b6db3b-5d0f-4bc6-9a63-b6a03b7c7a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:41:ca:99:9e:99:b7:10:5b:d5:53:ff:7a:84: b1:01:ac:3c:5e:eb:c0:3b:bf:b1:80:ce:b3:a2:fc: 8a:1e:15:de:6e:ff:66:a8:88:c7:51:d4:82:0a:c7: ed:61:f6:96:4f:68:5e:ac:33:9d:41:1e:c9:5d:69: e6:68:16:3b:e9:0d:54:97:2f:31:86:3d:7e:86:4e: 5d:44:24:32:ca:94:a4:e3:47:94:e9:1b:5b:dc:0b: 9d:05:32:b6:f6:b5:08:e2:c5:a6:84:a7:f1:41:af: 2b:0c:7f:69:ad:e8:96:c3:f6:1e:13:21:68:7f:1b: 5a:61:b0:47:09:3e:e8:c2:57:60:c3:0e:e2:f5:92: de:e5:39:9b:84:a7:cd:de:72:d1:df:00:fe:ba:4e: 34:13:ec:db:ad:ba:bf:d7:e9:f6:1a:37:3d:28:c8: 3c:91:da:4b:00:78:bd:a6:73:8b:d2:ea:32:cc:96: b2:30:e7:b7:28:99:50:e3:5f:a4:9a:3f:04:ca:7f: a8:e4:9b:c4:86:02:0b:6b:47:bc:36:f4:ff:bf:08: 3e:72:16:13:46:27:cb:32:e0:d5:55:12:d7:a6:61: b4:00:be:18:94:bf:34:c1:e3:04:bf:2e:69:a6:f1: d5:d2:3b:4d:63:a0:0f:ac:77:c4:ad:e1:75:e9:72: b6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EB:73:54:83:F3:47:BA:B9:73:5A:EA:F3:B1:BE:58:F8:BB:3B:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl X509v3 Authority Key Identifier: keyid:06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer sbgp-ipAddrBlock: critical IPv4: 172.98.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:4a:56:58:65:61:52:29:6f:ca:9b:ac:87:af:8a:3e:f7:c2: 69:2b:5f:64:88:c3:66:1d:d8:39:3b:f6:ca:05:2d:b2:88:8b: df:0d:de:f2:68:cd:fc:4a:58:e5:7b:fa:4a:a6:dd:40:34:f6: b6:b4:85:d8:9d:a9:a7:ef:6f:d3:f3:f7:02:a7:f2:f7:8f:6c: ef:49:36:74:58:b6:c7:8c:6f:6b:1c:a3:9e:92:f5:be:71:69: 24:e0:cf:ef:eb:b6:b5:ec:75:93:a7:81:a2:3d:66:be:cb:69: df:2d:6a:64:37:b1:57:c1:5d:bb:ec:a3:42:20:f7:a6:ac:1f: bd:15:de:5e:50:db:5c:30:04:13:e0:b5:03:c7:88:e5:bb:c2: 60:a4:7f:c0:0d:8e:df:87:42:a1:5b:07:2b:cd:7d:6b:66:c6: ff:c5:20:38:35:1b:6c:30:50:1b:45:d3:e3:0e:33:0c:96:d4: 27:26:88:0f:c2:b1:52:3f:cf:bb:c7:f5:f6:bc:5d:8b:dd:ab: 72:6a:d9:dd:f5:c8:ae:39:85:92:d5:f3:4c:05:c4:cc:12:33: 60:a1:70:14:b4:81:00:de:6a:d5:7d:3b:8a:93:ba:5c:b2:a3: c1:2e:3d:a9:10:b7:b2:73:c5:87:fd:ec:55:48:db:1d:8d:5f: 1f:36:b4:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcpT1XpDUWPMUAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk2NDJjZjUtODJmNy00YmUzLWE2OGUtMWQyOWM1YzJk MDEyMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MzJiNmRiM2ItNWQwZi00YmM2LTlhNjMtYjZhMDNiN2M3YTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0HKmZ6ZtxBb1VP/eoSxAaw8XuvAO7+xgM6z ovyKHhXebv9mqIjHUdSCCsftYfaWT2herDOdQR7JXWnmaBY76Q1Uly8xhj1+hk5d RCQyypSk40eU6Rtb3AudBTK29rUI4sWmhKfxQa8rDH9preiWw/YeEyFofxtaYbBH CT7owldgww7i9ZLe5TmbhKfN3nLR3wD+uk40E+zbrbq/1+n2Gjc9KMg8kdpLAHi9 pnOL0uoyzJayMOe3KJlQ41+kmj8Eyn+o5JvEhgILa0e8NvT/vwg+chYTRifLMuDV VRLXpmG0AL4YlL80weMEvy5ppvHV0jtNY6APrHfEreF16XK2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjrc1SD80e6uXNa6vOxvlj4uzt2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTY0 MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5YzVjMmQwMTIvYWUwYmExYjctYzcyZi0z YTA5LThhOTktMDE1MzUyYmZkMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk2NDJjZjUtODJmNy00YmUzLWE2 OGUtMWQyOWM1YzJkMDEyLzk5NjQyY2Y1LTgyZjctNGJlMy1hNjhlLTFkMjljNWMy ZDAxMi5jcmwwHwYDVR0jBBgwFoAUBlckr8XLoVXY6ngUnCW6YVx8Xt8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTY0MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5 YzVjMmQwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGI8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpKVlhlYVIpb8qbrIevij73wmkrX2SIw2Yd2Dk79soFLbKIi98N3vJo zfxKWOV7+kqm3UA09ra0hdidqafvb9Pz9wKn8vePbO9JNnRYtseMb2sco56S9b5x aSTgz+/rtrXsdZOngaI9Zr7Lad8tamQ3sVfBXbvso0Ig96asH70V3l5Q21wwBBPg tQPHiOW7wmCkf8ANjt+HQqFbByvNfWtmxv/FIDg1G2wwUBtF0+MOMwyW1CcmiA/C sVI/z7vH9fa8XYvdq3Jq2d31yK45hZLV80wFxMwSM2ChcBS0gQDeatV9O4qTulyy o8EuPakQt7JzxYf97FVI2x2NXx82tBw= -----END CERTIFICATE-----Generated at Sat Mar 7 17:28:26 2026 by rpki-client