$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa File: ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa (raw, json) Hash identifier: SS/t8eIhtbLfRmUQTfsyLLFEBXQWM1MGdkZpSNt8CsY= Subject key identifier: DF:D2:4B:1A:34:D5:BC:14:26:11:D0:F1:B6:CC:C5:1A:62:A0:45:F4 Certificate issuer: /CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Certificate serial: 010D0C9F4328584B5141EF2C37BEE1CEF19B7360 Authority key identifier: 06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 216050 IP address blocks: 172.98.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ef:2c:37:be:e1:ce:f1:9b:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=0b19479a-0eff-4319-abd8-544e8f6c30f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f6:3c:41:f9:74:ff:5c:ec:96:b9:63:a6:d8: e2:38:3f:da:04:75:ff:d2:ee:9a:84:f3:d3:14:9c: 94:65:8c:1d:c1:36:e5:5d:0d:c4:4d:4b:0b:18:cb: 89:16:dc:cb:59:46:28:b3:6d:a3:e5:0e:f6:a7:21: 66:54:48:f5:7d:3c:71:91:0b:6a:72:e9:ee:58:13: 44:51:c8:8e:ee:a4:49:da:46:25:76:e2:86:0e:8f: 70:b5:4c:e6:96:36:b8:19:74:df:96:94:b1:f0:c0: b9:e9:5d:d4:8d:14:ae:bc:21:0f:b6:f5:39:5d:07: d3:14:a5:e6:6a:0b:bc:b6:ed:26:7c:26:b4:e0:05: a0:8a:18:ef:22:8d:b9:43:30:3c:01:9c:69:4a:c8: 87:51:85:ca:ca:d0:11:b0:a8:43:ce:6e:b4:40:fd: bd:85:8d:8e:03:4b:a0:48:00:0a:99:c0:c8:1a:87: 8b:d1:06:6a:c8:40:3f:6a:87:a7:9d:b0:97:4c:2a: ca:cf:76:e9:37:30:46:f9:68:12:e1:ce:14:70:f5: 99:30:83:62:c7:5b:81:59:ce:ae:02:8b:23:f9:50: b1:f5:93:be:a4:c0:29:8a:7d:fc:91:85:ff:4a:cd: d1:dc:8d:79:12:6f:21:19:5b:40:81:16:23:5e:fb: a8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D2:4B:1A:34:D5:BC:14:26:11:D0:F1:B6:CC:C5:1A:62:A0:45:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl X509v3 Authority Key Identifier: keyid:06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer sbgp-ipAddrBlock: critical IPv4: 172.98.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d6:84:6e:c4:8a:a0:8a:70:5a:82:24:44:79:7b:0f:90:72: 43:87:97:50:76:46:0a:5b:38:bb:2f:d5:17:92:91:89:29:11: 62:fb:78:f5:e5:bb:06:53:ea:ee:1f:97:c4:8d:7c:6a:e5:fd: 21:d8:c8:07:95:13:e4:ba:2b:3b:be:8b:25:2f:7f:9e:77:2a: 1c:dd:74:a6:1b:4b:7f:59:2c:3a:4d:3e:8a:3a:2e:bf:4f:f2: 5e:c1:06:32:54:41:e2:ca:9c:2a:42:fc:e2:d9:55:b2:35:9d: 93:db:e7:35:7d:b3:b3:94:14:66:a6:cc:e6:67:8e:74:64:37: 31:6f:04:96:8c:10:02:f4:f8:3e:d0:34:a9:5c:dc:ab:b7:bd: f5:ba:3b:1d:b5:22:16:cf:f9:ca:0e:0f:cc:af:2c:b3:bf:f0: b8:b7:e3:46:84:c5:78:f1:b7:e4:47:c8:86:0a:2a:59:fc:ab: 9e:13:30:e0:4e:0a:54:d1:60:17:10:58:be:b0:52:c8:40:ec: aa:00:0b:58:03:24:1e:00:52:ff:40:85:84:b6:cd:9c:55:d2: db:19:b6:40:59:ee:72:ef:a1:1b:a6:b2:31:d9:8d:aa:5c:1c: 5d:a3:2b:56:bc:02:f3:86:a3:1e:b9:b5:ad:0e:7b:63:bc:ed: 7a:61:74:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQe8sN77hzvGbc2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk2NDJjZjUtODJmNy00YmUzLWE2OGUtMWQyOWM1YzJk MDEyMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MGIxOTQ3OWEtMGVmZi00MzE5LWFiZDgtNTQ0ZThmNmMzMGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PY8Qfl0/1zslrljptjiOD/aBHX/0u6ahPPT FJyUZYwdwTblXQ3ETUsLGMuJFtzLWUYos22j5Q72pyFmVEj1fTxxkQtqcunuWBNE UciO7qRJ2kYlduKGDo9wtUzmlja4GXTflpSx8MC56V3UjRSuvCEPtvU5XQfTFKXm agu8tu0mfCa04AWgihjvIo25QzA8AZxpSsiHUYXKytARsKhDzm60QP29hY2OA0ug SAAKmcDIGoeL0QZqyEA/aoennbCXTCrKz3bpNzBG+WgS4c4UcPWZMINix1uBWc6u Aosj+VCx9ZO+pMApin38kYX/Ss3R3I15Em8hGVtAgRYjXvuozQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/SSxo01bwUJhHQ8bbMxRpioEX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTY0 MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5YzVjMmQwMTIvYWUwYmExYjctYzcyZi0z YTA5LThhOTktMDE1MzUyYmZkMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk2NDJjZjUtODJmNy00YmUzLWE2 OGUtMWQyOWM1YzJkMDEyLzk5NjQyY2Y1LTgyZjctNGJlMy1hNjhlLTFkMjljNWMy ZDAxMi5jcmwwHwYDVR0jBBgwFoAUBlckr8XLoVXY6ngUnCW6YVx8Xt8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTY0MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5 YzVjMmQwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGI8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrWhG7EiqCKcFqCJER5ew+QckOHl1B2RgpbOLsv1ReSkYkpEWL7ePXl uwZT6u4fl8SNfGrl/SHYyAeVE+S6Kzu+iyUvf553KhzddKYbS39ZLDpNPoo6Lr9P 8l7BBjJUQeLKnCpC/OLZVbI1nZPb5zV9s7OUFGamzOZnjnRkNzFvBJaMEAL0+D7Q NKlc3Ku3vfW6Ox21IhbP+coOD8yvLLO/8Li340aExXjxt+RHyIYKKln8q54TMOBO ClTRYBcQWL6wUshA7KoAC1gDJB4AUv9AhYS2zZxV0tsZtkBZ7nLvoRumsjHZjapc HF2jK1a8AvOGox65ta0Oe2O87XphdA4= -----END CERTIFICATE-----Generated at Mon Oct 20 20:36:07 2025 by rpki-client