$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa File: 56723a4c-1de9-3acd-814f-f735ade0459c.roa (raw, json) Hash identifier: dIbNy2en5H1MXVfgcTfD9d+eNniffM6a0NOi339OlFo= Subject key identifier: 61:34:F7:E2:E5:0D:03:09:81:42:23:C4:9D:91:84:09:E9:81:A6:AE Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B663202CD590D9941098F8680 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 28753 IP address blocks: 172.98.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:02:cd:59:0d:99:41:09:8f:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=e0d166d7-1eca-46ac-82fb-50aaa7de910a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f6:f5:4e:d0:25:37:12:36:28:73:5e:df:60: 0c:4f:ac:49:c2:cd:20:bd:d0:0c:7d:73:64:32:d0: bf:3e:07:0e:e8:3b:26:ae:98:6e:61:cc:34:f3:55: 01:d9:12:87:7c:4a:ea:cb:3d:2f:b1:e1:93:2d:7b: 74:e2:2d:97:2e:48:d9:42:fc:f4:b7:b5:2d:4a:25: 2c:0a:a1:03:4e:74:9c:dc:bb:e6:3d:5c:15:26:9b: b1:07:0d:67:a6:5a:14:f7:8b:ac:a2:0c:78:38:58: 76:b9:c1:04:f6:7d:05:8a:6c:1a:15:14:3c:c0:6a: 6c:61:27:c0:10:65:92:f0:6a:2f:40:20:77:89:ce: c1:59:ea:2e:ca:b2:ed:53:ec:db:67:73:49:f6:2f: c6:94:22:e8:f3:6a:23:a8:9d:74:0a:e8:ca:57:4c: c4:29:45:f9:a1:a8:8c:16:6a:1b:5f:5a:cf:ec:b9: 24:61:1f:47:b9:78:a1:c2:21:88:b8:b9:a5:39:b3: 22:37:06:c9:4e:43:07:24:dd:35:be:22:14:a5:ed: 96:d3:ed:48:f7:e7:68:ca:88:80:4c:cd:a0:1b:9a: 9b:2b:30:9c:18:4b:6e:4d:86:85:e7:52:fd:7b:a6: 3f:4a:52:58:bd:59:2b:f6:d5:bc:fa:8c:e5:35:e6: f4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:34:F7:E2:E5:0D:03:09:81:42:23:C4:9D:91:84:09:E9:81:A6:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:04:d7:27:56:90:29:00:45:b2:0c:e3:48:bf:f4:49:8e:74: 36:13:9e:a7:54:45:42:00:fd:99:3d:6f:da:b9:16:4c:74:4c: e6:0d:70:55:d8:c5:d0:3c:06:03:1e:08:38:b9:20:ae:24:a4: 12:b2:69:64:3b:b8:eb:f9:6b:29:c9:52:f2:51:94:4d:6e:58: af:8b:73:b3:72:93:2f:17:3c:71:99:3c:5f:38:6c:99:50:4c: 77:d8:0e:e9:41:fe:3b:c2:4c:2a:63:c4:e2:6b:a1:50:eb:91: 37:25:e5:15:bd:7e:1e:4e:d4:02:eb:98:26:cd:6c:84:38:91: a1:f0:eb:6a:a4:56:11:cb:04:e8:e3:67:52:6c:a9:7e:79:d5: fe:5a:5b:9c:77:11:be:a2:24:0e:4c:86:88:13:ee:c7:c2:75: 81:54:bf:79:2c:e2:11:50:81:38:e0:3e:38:da:0b:7b:eb:96: 71:17:6d:8b:df:23:64:be:55:ee:f4:98:f0:05:80:77:51:d7: 78:e0:4f:85:b5:8b:81:cf:91:76:21:d8:b0:4a:b3:78:bc:70: 9b:11:bd:be:37:2d:bf:28:d6:55:bd:c7:b7:29:76:39:d3:de: ad:e0:38:8a:c6:6e:b3:4c:0f:5b:68:cc:44:f7:42:1c:05:ac: 13:5f:7e:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgLNWQ2ZQQmPhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZTBkMTY2ZDctMWVjYS00NmFjLTgyZmItNTBhYWE3ZGU5MTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfb1TtAlNxI2KHNe32AMT6xJws0gvdAMfXNk MtC/PgcO6DsmrphuYcw081UB2RKHfErqyz0vseGTLXt04i2XLkjZQvz0t7UtSiUs CqEDTnSc3LvmPVwVJpuxBw1nploU94usogx4OFh2ucEE9n0FimwaFRQ8wGpsYSfA EGWS8GovQCB3ic7BWeouyrLtU+zbZ3NJ9i/GlCLo82ojqJ10CujKV0zEKUX5oaiM FmobX1rP7LkkYR9HuXihwiGIuLmlObMiNwbJTkMHJN01viIUpe2W0+1I9+doyoiA TM2gG5qbKzCcGEtuTYaF51L9e6Y/SlJYvVkr9tW8+ozlNeb0ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE09+LlDQMJgUIjxJ2RhAnpgaauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNTY3MjNhNGMtMWRlOS0z YWNkLTgxNGYtZjczNWFkZTA0NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcE1ydWkCkARbIM40i/9EmOdDYTnqdURUIA/Zk9b9q5Fkx0TOYNcFXY xdA8BgMeCDi5IK4kpBKyaWQ7uOv5aynJUvJRlE1uWK+Lc7Nyky8XPHGZPF84bJlQ THfYDulB/jvCTCpjxOJroVDrkTcl5RW9fh5O1ALrmCbNbIQ4kaHw62qkVhHLBOjj Z1JsqX551f5aW5x3Eb6iJA5MhogT7sfCdYFUv3ks4hFQgTjgPjjaC3vrlnEXbYvf I2S+Ve70mPAFgHdR13jgT4W1i4HPkXYh2LBKs3i8cJsRvb43Lb8o1lW9x7cpdjnT 3q3gOIrGbrNMD1tozET3QhwFrBNfflw= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:08 2025 by rpki-client