$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/73d252ea-14b2-39d0-bf0f-0733665369b3.roa File: 73d252ea-14b2-39d0-bf0f-0733665369b3.roa (raw, json) Hash identifier: ba1ShJvVfBCJd7VI+psmjJa5M6TiPAOJLJyH9nDOYxQ= Subject key identifier: BC:5F:71:B7:81:0B:3F:B4:B5:DC:53:4F:93:54:03:21:F2:1C:BE:6A Certificate issuer: /CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Certificate serial: 010D0C9F4328584BA7CD17A1FB7BED751340FA00 Authority key identifier: 06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/73d252ea-14b2-39d0-bf0f-0733665369b3.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 397477 IP address blocks: 172.98.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:17:a1:fb:7b:ed:75:13:40:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=e132fc01-e03e-4a50-bd2c-d8e84e8edb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d7:96:3b:df:04:79:22:bf:20:16:a7:1d:a8: bb:01:12:75:df:d1:6b:0d:44:92:4f:05:e3:01:3d: 8d:b4:94:5a:70:97:af:71:78:c4:9f:64:78:06:a4: 8f:df:fa:ac:51:37:c5:71:3b:b6:d9:02:41:c0:53: 77:c6:e2:9b:4e:3c:a8:33:5c:58:a3:1b:e2:01:f8: ae:46:1d:d5:da:25:38:63:3b:8c:3d:98:42:9c:cd: fe:e4:68:28:f3:9b:9c:fb:7f:3f:08:56:01:85:35: 11:c8:70:86:b7:b4:13:b4:b6:0a:9c:3e:4f:e0:11: d5:8f:8a:07:33:65:85:9b:5e:3d:2e:d8:d0:3e:df: 1c:c9:e6:df:15:88:50:c4:c7:a5:b7:ae:b9:d9:ed: 4b:db:3f:6d:d4:ce:dc:f8:54:c1:78:dc:fa:b9:22: 2f:64:d5:b8:90:9b:e9:69:e2:89:95:36:8d:2a:52: 8f:9c:15:03:34:9e:be:1d:e6:c5:45:58:23:46:c6: 80:56:6a:0d:8d:f9:9b:a4:e6:30:e3:fd:fa:cc:35: a5:3c:3c:a6:0d:5c:f6:65:fb:aa:54:59:d6:b2:63: 07:eb:8c:74:f2:b9:84:44:33:3d:e8:16:44:b8:c3: bf:2d:70:dd:d6:cc:98:ab:37:e4:87:c6:51:6d:6e: b7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5F:71:B7:81:0B:3F:B4:B5:DC:53:4F:93:54:03:21:F2:1C:BE:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/73d252ea-14b2-39d0-bf0f-0733665369b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl X509v3 Authority Key Identifier: keyid:06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer sbgp-ipAddrBlock: critical IPv4: 172.98.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:bf:f5:4f:31:a5:12:ae:80:f7:fe:f4:9d:c8:53:6c:9c:ce: c9:85:fb:e3:05:78:d6:39:72:72:88:10:08:94:02:d8:09:d5: 58:35:05:45:08:2b:54:57:81:0e:5d:28:11:85:cf:1d:57:b6: 89:5d:68:42:c1:8c:7e:4a:a3:e4:23:85:db:41:07:9f:31:3e: 42:9d:09:74:80:87:02:12:93:bd:a5:2d:41:44:d0:19:35:40: 29:2f:75:59:34:c5:1b:81:b7:ec:d0:b3:2f:d9:96:ff:aa:5d: 72:c6:70:93:14:bd:59:a5:e8:f8:71:d6:68:fc:7e:e1:d5:ff: bc:12:14:57:fa:28:1f:d3:08:df:3b:52:67:5d:30:11:4c:3a: 37:d9:d4:2c:81:2b:54:43:2a:04:45:c7:00:33:69:49:4d:e4: 98:b1:19:a6:e9:87:f7:12:64:27:8a:21:44:c5:33:53:04:c3: 53:a9:52:b3:9c:72:fe:ee:f2:4c:82:44:a5:c1:72:10:46:78: 08:8f:e2:34:c0:cb:f3:ca:f8:23:81:0d:55:b5:b3:57:e9:d3: aa:c0:d9:ed:e4:07:56:e0:7d:6d:b5:ac:0d:30:4f:eb:09:c9: 55:ab:67:86:89:07:ff:91:2d:1c:66:60:81:25:7c:e6:03:93: 96:07:dc:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzReh+3vtdRNA+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk2NDJjZjUtODJmNy00YmUzLWE2OGUtMWQyOWM1YzJk MDEyMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZTEzMmZjMDEtZTAzZS00YTUwLWJkMmMtZDhlODRlOGVkYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndeWO98EeSK/IBanHai7ARJ139FrDUSSTwXj AT2NtJRacJevcXjEn2R4BqSP3/qsUTfFcTu22QJBwFN3xuKbTjyoM1xYoxviAfiu Rh3V2iU4YzuMPZhCnM3+5Ggo85uc+38/CFYBhTURyHCGt7QTtLYKnD5P4BHVj4oH M2WFm149LtjQPt8cyebfFYhQxMelt6652e1L2z9t1M7c+FTBeNz6uSIvZNW4kJvp aeKJlTaNKlKPnBUDNJ6+HebFRVgjRsaAVmoNjfmbpOYw4/36zDWlPDymDVz2Zfuq VFnWsmMH64x08rmERDM96BZEuMO/LXDd1syYqzfkh8ZRbW635wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxfcbeBCz+0tdxTT5NUAyHyHL5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTY0 MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5YzVjMmQwMTIvNzNkMjUyZWEtMTRiMi0z OWQwLWJmMGYtMDczMzY2NTM2OWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk2NDJjZjUtODJmNy00YmUzLWE2 OGUtMWQyOWM1YzJkMDEyLzk5NjQyY2Y1LTgyZjctNGJlMy1hNjhlLTFkMjljNWMy ZDAxMi5jcmwwHwYDVR0jBBgwFoAUBlckr8XLoVXY6ngUnCW6YVx8Xt8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTY0MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5 YzVjMmQwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGI+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi/9U8xpRKugPf+9J3IU2yczsmF++MFeNY5cnKIEAiUAtgJ1Vg1BUUI K1RXgQ5dKBGFzx1XtoldaELBjH5Ko+QjhdtBB58xPkKdCXSAhwISk72lLUFE0Bk1 QCkvdVk0xRuBt+zQsy/Zlv+qXXLGcJMUvVml6Phx1mj8fuHV/7wSFFf6KB/TCN87 UmddMBFMOjfZ1CyBK1RDKgRFxwAzaUlN5JixGabph/cSZCeKIUTFM1MEw1OpUrOc cv7u8kyCRKXBchBGeAiP4jTAy/PK+COBDVW1s1fp06rA2e3kB1bgfW21rA0wT+sJ yVWrZ4aJB/+RLRxmYIElfOYDk5YH3Hw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:43:16 2025 by rpki-client