$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa File: 56723a4c-1de9-3acd-814f-f735ade0459c.roa (raw, json) Hash identifier: 2oJc2zPCxSwtLd+JgAtFrsfggmgyE90cIX7tfsq88JM= Subject key identifier: 3D:59:44:08:E6:F9:55:AC:CE:F3:A1:13:B2:3C:FC:44:F5:9C:82:B2 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D2644C7DAD1BC671731A6AFD0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 28753 IP address blocks: 172.98.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:c7:da:d1:bc:67:17:31:a6:af:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=b208b7a8-b804-4423-ad4b-5124fea22b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:90:da:02:fc:46:55:cf:1e:c4:f6:1a:71:39: 1a:23:56:6f:48:1d:4b:56:33:37:77:03:6a:81:13: 2e:a2:6c:94:0f:d3:ad:c7:3e:03:55:ac:d7:6a:bd: a7:04:49:7b:78:9b:1e:1d:ea:3f:60:fb:8f:88:00: b1:e1:cb:12:ec:0b:ea:dc:c5:34:87:b4:b8:6d:eb: 28:30:7b:8b:f5:5f:78:b3:f6:cf:b9:6d:8e:4f:f2: 66:93:5e:be:8a:03:10:39:5a:4f:8b:c4:13:2a:49: 88:0a:b7:8a:be:63:1e:b6:e8:e1:19:77:3c:fc:18: 75:f1:34:3f:3c:c2:c3:cf:49:08:e5:5e:43:ff:42: 93:75:5f:ba:55:0f:fa:a9:86:d2:e7:f4:85:a4:25: c2:97:07:b5:a2:77:87:fe:5c:e6:27:15:9b:4d:11: f8:42:db:69:04:cd:d4:4d:ba:70:22:d7:e4:e6:e2: 61:25:1c:ae:44:7a:53:79:5d:e4:c5:6d:08:d8:42: 72:85:b1:c5:7d:80:e3:33:e2:46:ca:67:c7:fe:0e: 40:a1:fe:90:27:58:c5:56:81:5f:60:0e:fe:4d:25: a4:e4:84:b5:54:3f:3b:d8:20:76:e3:0f:bb:39:b8: ea:4c:60:30:0d:f3:f9:04:02:ad:6d:75:08:07:a0: 23:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:59:44:08:E6:F9:55:AC:CE:F3:A1:13:B2:3C:FC:44:F5:9C:82:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:8f:d9:ac:4d:ab:ce:a1:4c:6b:a0:a9:f6:a2:9e:55:0d:cf: df:20:b7:46:82:d8:d6:1c:68:f9:d3:96:00:a3:ba:76:04:06: 99:92:b0:d1:df:ca:bc:c4:e5:1f:47:31:fb:ec:71:fd:6b:44: 60:af:bd:19:d0:ac:d0:b3:e4:e8:df:4c:86:f0:f3:da:9b:9a: 6c:5c:6d:fd:41:c4:10:cd:af:a4:db:d5:52:eb:d4:e5:2e:a3: d9:73:0d:53:7f:e9:52:ed:93:a4:cc:e9:36:fe:01:e2:54:98: 45:c7:af:16:39:21:ce:c3:0a:24:3a:e9:95:fb:1b:35:c0:c2: d5:70:e2:59:7d:68:97:15:ac:20:c5:9f:6f:61:65:15:0b:93: 86:f0:bc:65:5e:fd:be:20:e0:5b:f8:50:cd:30:1a:a5:c1:f6: 40:e5:a1:f9:c0:e1:2e:97:43:1a:3f:3c:8b:ef:2b:52:69:36: 3e:93:24:0b:76:42:8a:1e:2f:9d:3c:dc:3d:1d:77:bd:4a:2f: 33:fe:1e:e2:be:d4:d6:ed:47:e9:e0:e5:5c:f5:56:36:55:0a: 74:8e:4b:87:12:01:f0:da:4a:9c:72:79:63:0a:74:6f:00:a5: 90:2f:4b:15:ac:99:39:75:51:77:53:82:3f:67:69:45:16:fc: b2:52:d8:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRMfa0bxnFzGmr9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk YjIwOGI3YTgtYjgwNC00NDIzLWFkNGItNTEyNGZlYTIyYjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5DaAvxGVc8exPYacTkaI1ZvSB1LVjM3dwNq gRMuomyUD9Otxz4DVazXar2nBEl7eJseHeo/YPuPiACx4csS7Avq3MU0h7S4beso MHuL9V94s/bPuW2OT/Jmk16+igMQOVpPi8QTKkmICreKvmMetujhGXc8/Bh18TQ/ PMLDz0kI5V5D/0KTdV+6VQ/6qYbS5/SFpCXClwe1oneH/lzmJxWbTRH4QttpBM3U TbpwItfk5uJhJRyuRHpTeV3kxW0I2EJyhbHFfYDjM+JGymfH/g5Aof6QJ1jFVoFf YA7+TSWk5IS1VD872CB24w+7ObjqTGAwDfP5BAKtbXUIB6AjKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1ZRAjm+VWszvOhE7I8/ET1nIKyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNTY3MjNhNGMtMWRlOS0z YWNkLTgxNGYtZjczNWFkZTA0NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWP2axNq86hTGugqfainlUNz98gt0aC2NYcaPnTlgCjunYEBpmSsNHf yrzE5R9HMfvscf1rRGCvvRnQrNCz5OjfTIbw89qbmmxcbf1BxBDNr6Tb1VLr1OUu o9lzDVN/6VLtk6TM6Tb+AeJUmEXHrxY5Ic7DCiQ66ZX7GzXAwtVw4ll9aJcVrCDF n29hZRULk4bwvGVe/b4g4Fv4UM0wGqXB9kDlofnA4S6XQxo/PIvvK1JpNj6TJAt2 QooeL5083D0dd71KLzP+HuK+1NbtR+ng5Vz1VjZVCnSOS4cSAfDaSpxyeWMKdG8A pZAvSxWsmTl1UXdTgj9naUUW/LJS2Cw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:35:44 2026 by rpki-client