$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa File: ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa (raw, json) Hash identifier: G71RyIduuDTKRcWCGxs+blaZ3ZZzNZGpZBSXEdke5og= Subject key identifier: 1C:5C:9E:D7:1B:D0:58:DC:33:B7:75:A7:17:93:B5:91:32:5B:80:4B Certificate issuer: /CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Certificate serial: 010D0C9F432858499065B72AC1933C8C84960D00 Authority key identifier: 06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa Signing time: Fri 18 Apr 2025 06:15:10 +0000 ROA not before: Fri 18 Apr 2025 06:15:10 +0000 ROA not after: Thu 17 Jul 2025 06:15:10 +0000 asID: 216050 IP address blocks: 172.98.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:90:65:b7:2a:c1:93:3c:8c:84:96:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Validity Not Before: Apr 18 06:15:10 2025 GMT Not After : Jul 17 06:15:10 2025 GMT Subject: CN=d4831a56-be72-4420-9761-11a0051d1c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9e:57:f3:34:bf:ab:7a:38:3f:78:f8:0b:20: 4a:87:dd:91:9a:f8:8d:04:03:11:65:45:e6:b1:92: 71:ba:91:61:6d:8d:c5:ea:99:83:dc:0c:c5:ad:c8: b8:44:a9:dc:3d:e7:7c:17:14:47:f1:02:71:ce:a1: 55:3c:a4:db:70:6b:ea:79:1c:f1:13:e3:92:0a:94: c3:25:17:fe:02:7e:88:89:c0:8c:e1:ce:b0:8e:9d: 47:51:3e:2a:ea:43:a5:55:87:90:07:49:42:a7:38: 53:f6:f4:99:12:d1:65:32:9b:fc:05:eb:76:af:ea: 6b:b3:9b:30:3f:51:8c:b1:03:76:bb:f6:bb:cc:04: 47:42:2c:85:2d:c5:35:ac:02:cc:1f:3c:ef:f3:df: 06:2b:4d:11:ef:15:2c:c1:bf:c3:ee:74:e6:6c:d1: cc:69:3c:f9:b6:22:dc:5f:f0:e5:c5:fc:41:98:1d: 5e:2e:1a:e4:e2:83:8c:49:ee:dc:4a:9a:cb:08:e5: 90:97:a2:e7:18:c1:4c:a8:d4:c6:0e:f0:5c:4f:f8: a9:c7:88:50:32:21:85:9f:26:a0:03:52:60:13:d0: e9:77:39:fa:b9:c0:69:b9:09:2d:4a:99:7c:b5:84: 26:82:c0:dc:30:26:26:5a:9b:ef:8e:eb:c1:26:2b: b3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5C:9E:D7:1B:D0:58:DC:33:B7:75:A7:17:93:B5:91:32:5B:80:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl X509v3 Authority Key Identifier: keyid:06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer sbgp-ipAddrBlock: critical IPv4: 172.98.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:72:b8:bc:a9:6c:e7:3e:b0:23:33:c0:df:99:32:83:3f:69: 96:c3:6c:cc:ab:c3:aa:49:c8:ff:0c:38:16:84:c4:77:c8:fd: 0a:a3:0d:4b:76:e6:29:ec:71:dd:0e:d6:78:b5:3f:11:ea:01: e4:ed:63:fd:f3:3f:00:55:6e:bf:51:96:b4:ae:9a:71:99:eb: 2f:1f:c8:42:a3:fe:52:ad:23:68:8f:de:5a:2e:b0:00:fc:01: 15:14:1c:7a:5f:7e:10:72:42:69:a5:38:9e:26:43:08:2b:5e: 8b:82:35:b0:03:f6:da:7c:a4:df:4c:1b:3b:65:02:64:56:23: 42:33:3a:82:cb:d5:b8:ba:20:62:86:5f:85:69:86:c2:9b:26: 09:8c:7a:dc:90:dc:88:9d:45:04:22:00:74:f6:a1:18:5c:4e: b1:4e:da:76:02:4c:48:0b:9b:e1:cf:9d:a5:c5:68:15:46:54: 14:fe:94:56:a1:08:fd:38:d1:70:4c:c1:12:83:df:0a:14:95: 34:03:c9:34:63:2b:d9:9a:ad:b2:18:3c:d9:79:40:ad:b2:62: c5:e4:e8:27:28:fb:e9:1c:bb:51:3d:de:6a:83:c0:84:fc:40: 17:48:5e:e3:e9:f0:dc:68:e1:06:50:c0:4b:e2:d3:cf:54:fe: 1f:c8:3e:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmQZbcqwZM8jISWDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk2NDJjZjUtODJmNy00YmUzLWE2OGUtMWQyOWM1YzJk MDEyMB4XDTI1MDQxODA2MTUxMFoXDTI1MDcxNzA2MTUxMFowLzEtMCsGA1UEAxMk ZDQ4MzFhNTYtYmU3Mi00NDIwLTk3NjEtMTFhMDA1MWQxYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z5X8zS/q3o4P3j4CyBKh92RmviNBAMRZUXm sZJxupFhbY3F6pmD3AzFrci4RKncPed8FxRH8QJxzqFVPKTbcGvqeRzxE+OSCpTD JRf+An6IicCM4c6wjp1HUT4q6kOlVYeQB0lCpzhT9vSZEtFlMpv8Bet2r+prs5sw P1GMsQN2u/a7zARHQiyFLcU1rALMHzzv898GK00R7xUswb/D7nTmbNHMaTz5tiLc X/DlxfxBmB1eLhrk4oOMSe7cSprLCOWQl6LnGMFMqNTGDvBcT/ipx4hQMiGFnyag A1JgE9Dpdzn6ucBpuQktSpl8tYQmgsDcMCYmWpvvjuvBJiuzNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxcntcb0FjcM7d1pxeTtZEyW4BLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTY0 MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5YzVjMmQwMTIvYWUwYmExYjctYzcyZi0z YTA5LThhOTktMDE1MzUyYmZkMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk2NDJjZjUtODJmNy00YmUzLWE2 OGUtMWQyOWM1YzJkMDEyLzk5NjQyY2Y1LTgyZjctNGJlMy1hNjhlLTFkMjljNWMy ZDAxMi5jcmwwHwYDVR0jBBgwFoAUBlckr8XLoVXY6ngUnCW6YVx8Xt8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTY0MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5 YzVjMmQwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGI8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdyuLypbOc+sCMzwN+ZMoM/aZbDbMyrw6pJyP8MOBaExHfI/QqjDUt2 5inscd0O1ni1PxHqAeTtY/3zPwBVbr9RlrSumnGZ6y8fyEKj/lKtI2iP3lousAD8 ARUUHHpffhByQmmlOJ4mQwgrXouCNbAD9tp8pN9MGztlAmRWI0IzOoLL1bi6IGKG X4VphsKbJgmMetyQ3IidRQQiAHT2oRhcTrFO2nYCTEgLm+HPnaXFaBVGVBT+lFah CP040XBMwRKD3woUlTQDyTRjK9marbIYPNl5QK2yYsXk6Cco++kcu1E93mqDwIT8 QBdIXuPp8Nxo4QZQwEvi089U/h/IPqI= -----END CERTIFICATE-----Generated at Sat Apr 26 21:38:11 2025 by rpki-client