$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa File: 56723a4c-1de9-3acd-814f-f735ade0459c.roa (raw, json) Hash identifier: WcZYjPG0/CLqUHOPkppWCC4gnoUK0FzwZEJeqO64LAs= Subject key identifier: 3E:20:9C:64:1C:19:96:66:04:40:04:0B:73:DE:4A:E7:A9:F9:2F:D3 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F4C3D54F9C75AA8D61EF2D220 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 28753 IP address blocks: 172.98.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:54:f9:c7:5a:a8:d6:1e:f2:d2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=fc162843-e971-42d3-a586-4283d770aade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f9:61:6a:ca:51:e9:4e:56:35:62:8c:26:65: bc:4f:f0:d4:c8:7d:57:50:a9:64:ca:fc:ed:53:27: 02:89:6d:04:34:ec:22:ad:73:94:9c:0d:f4:8d:5f: a6:f0:38:61:44:03:f6:9b:8b:45:91:fd:5c:87:6e: d6:94:c9:b9:a4:81:5d:c7:8e:35:c0:38:eb:d1:89: 51:4e:74:33:41:40:a7:68:e1:36:67:f8:e2:98:da: 19:cb:57:51:72:2d:5f:26:ef:7a:f8:4c:6b:48:e9: b2:31:fa:ee:26:05:1a:66:bd:6b:ff:a6:96:2a:ef: 60:b0:b7:e9:be:7f:1c:4e:65:c2:2c:e4:07:49:f9: b1:de:d7:d3:04:4a:5e:5c:37:cc:1a:ea:8a:14:95: e5:bc:a8:88:e3:27:61:81:16:03:09:58:db:fd:0f: 0c:78:a9:9d:d5:6f:79:49:1b:e8:4e:37:62:44:22: 84:be:cc:01:54:2b:b6:e1:84:4b:94:4f:ff:ed:19: 10:9e:f9:4c:d7:dc:f5:a6:b4:1b:01:74:34:30:20: 8b:d9:59:27:c4:86:54:b1:4f:08:68:31:5b:e0:02: 87:55:4c:7f:86:82:c9:30:db:ce:84:cd:ec:2f:34: 7f:af:ff:a9:71:25:7e:85:04:d7:de:9d:76:a4:9f: dd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:20:9C:64:1C:19:96:66:04:40:04:0B:73:DE:4A:E7:A9:F9:2F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:cc:86:df:25:74:01:94:12:37:56:ba:f3:ac:f2:b8:14:4d: b2:80:f4:f3:73:c4:8f:ba:cd:51:18:9b:56:7e:89:17:04:fb: 46:d0:63:b1:cb:b2:ac:42:68:14:ab:ec:43:c9:63:cb:e8:e2: 52:de:e7:d5:ae:b2:82:5a:31:c5:04:d1:ff:b0:a3:ac:16:6b: c3:e4:94:57:0f:e9:8b:50:b7:97:b3:53:12:72:22:de:b8:48: c5:66:2e:82:ec:cd:47:2b:e9:fd:9d:21:5c:39:cc:d6:fd:ef: 7a:a4:20:7a:e5:21:8c:3f:57:4b:75:2c:42:f4:df:13:3d:69: 4d:88:13:b8:e9:de:52:15:5a:04:41:0d:c0:5d:40:00:09:71: 6a:e2:26:3c:e3:a3:98:8b:7f:5c:ae:a4:f0:d0:e9:87:20:20: d2:9f:96:b5:dd:8e:54:b7:a9:2f:d3:e8:a8:aa:cd:56:cb:bb: a3:0a:bd:89:6f:0a:48:11:40:32:c7:6e:ff:dd:cb:f5:75:50: 80:d0:75:6c:ae:9b:b5:55:9f:27:b9:6c:59:91:37:06:a8:7a: fd:6b:3c:01:7d:f1:b1:9a:d9:ce:0d:a0:c2:88:95:ee:0b:4f: 34:0b:84:60:fd:ec:62:6d:5c:03:d9:28:e4:d5:2a:e3:29:c5: 10:f7:e9:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVT5x1qo1h7y0iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZmMxNjI4NDMtZTk3MS00MmQzLWE1ODYtNDI4M2Q3NzBhYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPlhaspR6U5WNWKMJmW8T/DUyH1XUKlkyvzt UycCiW0ENOwirXOUnA30jV+m8DhhRAP2m4tFkf1ch27WlMm5pIFdx441wDjr0YlR TnQzQUCnaOE2Z/jimNoZy1dRci1fJu96+ExrSOmyMfruJgUaZr1r/6aWKu9gsLfp vn8cTmXCLOQHSfmx3tfTBEpeXDfMGuqKFJXlvKiI4ydhgRYDCVjb/Q8MeKmd1W95 SRvoTjdiRCKEvswBVCu24YRLlE//7RkQnvlM19z1prQbAXQ0MCCL2VknxIZUsU8I aDFb4AKHVUx/hoLJMNvOhM3sLzR/r/+pcSV+hQTX3p12pJ/dZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4gnGQcGZZmBEAEC3PeSuep+S/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNTY3MjNhNGMtMWRlOS0z YWNkLTgxNGYtZjczNWFkZTA0NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3Mht8ldAGUEjdWuvOs8rgUTbKA9PNzxI+6zVEYm1Z+iRcE+0bQY7HL sqxCaBSr7EPJY8vo4lLe59WusoJaMcUE0f+wo6wWa8PklFcP6YtQt5ezUxJyIt64 SMVmLoLszUcr6f2dIVw5zNb973qkIHrlIYw/V0t1LEL03xM9aU2IE7jp3lIVWgRB DcBdQAAJcWriJjzjo5iLf1yupPDQ6YcgINKflrXdjlS3qS/T6KiqzVbLu6MKvYlv CkgRQDLHbv/dy/V1UIDQdWyum7VVnye5bFmRNwaoev1rPAF98bGa2c4NoMKIle4L TzQLhGD97GJtXAPZKOTVKuMpxRD36bM= -----END CERTIFICATE-----Generated at Sun Oct 4 20:46:29 2026 by rpki-client