$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa File: 56723a4c-1de9-3acd-814f-f735ade0459c.roa (raw, json) Hash identifier: ALmvRWOT8FJRty1BL+5ytQMK8FR6qzGYB9OeOYV6Vc8= Subject key identifier: 59:73:1C:FA:6D:62:BC:16:D5:6C:3B:9D:86:A4:92:F2:BE:7F:7D:FD Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584E07009AF840BB1F83844F1480 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 28753 IP address blocks: 172.98.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:9a:f8:40:bb:1f:83:84:4f:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=90fecb39-7026-44cf-8a28-409cdc523de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:45:ee:1f:f5:52:8e:b3:65:e0:24:e0:fc:32: 07:75:8a:ef:90:f3:ed:a5:03:de:59:d4:dd:aa:33: 55:35:3a:ea:ce:87:ff:e2:8d:16:cd:74:46:65:4f: 36:b6:3f:a2:a3:ae:a5:f0:fe:f6:d7:82:2c:4e:f6: cd:d2:96:a9:75:30:c9:30:37:98:47:ab:4e:6c:5e: 61:b7:7a:3a:af:d0:52:4c:56:2b:56:c9:c5:17:c7: b7:38:f3:2b:71:f9:06:9f:b0:c2:32:6c:a6:7d:0f: 80:f0:3d:06:d2:b2:c6:5f:49:28:fa:ee:6e:61:8b: 0d:c8:d9:96:59:60:ba:22:39:3b:47:94:b3:77:b2: 27:15:6c:fa:89:5d:c1:7c:c7:ca:27:a3:58:ed:21: c1:7d:87:28:0a:fa:74:b0:4a:4f:79:68:37:e4:42: 21:1b:c3:cf:8c:8f:f8:37:1a:2f:82:10:42:6a:00: 5a:35:7f:39:5e:28:4e:e6:28:91:ab:86:eb:e0:7a: dc:49:65:2e:7e:ae:2f:43:6f:29:c4:3c:83:5f:d0: 95:54:8f:65:74:d9:91:53:6f:d4:fd:27:5f:13:50: 6d:a1:2d:17:d2:2c:82:a6:86:7b:7a:24:2a:5a:31: 0f:96:30:f3:c3:f6:32:d4:49:88:e5:72:12:a5:af: 42:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:73:1C:FA:6D:62:BC:16:D5:6C:3B:9D:86:A4:92:F2:BE:7F:7D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5b:af:3e:0d:8a:a4:b3:57:a3:54:fe:da:eb:74:9f:a9:18: 10:ed:02:6b:d2:7f:f9:4e:d4:08:42:e8:9d:e9:bf:8d:6a:8c: 48:18:5c:51:73:1c:e2:27:78:37:67:8e:4a:73:d8:9b:8f:f8: 43:4b:66:5f:73:d5:bd:d1:15:d4:c9:0c:2a:1f:96:f5:6b:1c: 45:06:94:46:81:66:6a:8a:83:d9:c0:93:8c:ee:e7:2d:1a:bd: 59:bf:13:42:dd:ee:7d:2e:5d:e1:39:ea:e6:52:89:bd:76:c1: 00:87:28:a7:b0:7a:f6:ae:97:d0:77:6e:8b:ae:0d:a3:52:ee: 43:1b:d4:eb:ce:c6:2b:07:4f:07:33:43:14:cf:fa:07:da:46: 82:49:89:ff:92:74:d3:5e:9f:bd:c0:e4:0f:48:dd:0d:ec:a7: 2e:c5:f5:00:cf:a6:56:19:bb:d7:15:fc:71:d7:54:19:b0:24: 29:9e:c4:3d:dc:97:e1:11:dc:2e:cb:bd:eb:a6:bf:94:2c:77: b5:12:f7:85:24:5f:c3:40:93:41:90:87:69:9e:78:99:d8:b0: 07:84:ef:87:de:ed:eb:0e:0b:0e:66:67:7c:7f:0b:80:14:3c: ee:97:89:27:bf:dc:7b:fb:b8:41:28:ec:21:af:e7:c3:67:f5: a0:ba:4a:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAJr4QLsfg4RPFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk OTBmZWNiMzktNzAyNi00NGNmLThhMjgtNDA5Y2RjNTIzZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUXuH/VSjrNl4CTg/DIHdYrvkPPtpQPeWdTd qjNVNTrqzof/4o0WzXRGZU82tj+io66l8P7214IsTvbN0papdTDJMDeYR6tObF5h t3o6r9BSTFYrVsnFF8e3OPMrcfkGn7DCMmymfQ+A8D0G0rLGX0ko+u5uYYsNyNmW WWC6Ijk7R5Szd7InFWz6iV3BfMfKJ6NY7SHBfYcoCvp0sEpPeWg35EIhG8PPjI/4 NxovghBCagBaNX85XihO5iiRq4br4HrcSWUufq4vQ28pxDyDX9CVVI9ldNmRU2/U /SdfE1BtoS0X0iyCpoZ7eiQqWjEPljDzw/Yy1EmI5XISpa9ClwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlzHPptYrwW1Ww7nYakkvK+f339MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNTY3MjNhNGMtMWRlOS0z YWNkLTgxNGYtZjczNWFkZTA0NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9brz4NiqSzV6NU/trrdJ+pGBDtAmvSf/lO1AhC6J3pv41qjEgYXFFz HOIneDdnjkpz2JuP+ENLZl9z1b3RFdTJDCoflvVrHEUGlEaBZmqKg9nAk4zu5y0a vVm/E0Ld7n0uXeE56uZSib12wQCHKKewevaul9B3bouuDaNS7kMb1OvOxisHTwcz QxTP+gfaRoJJif+SdNNen73A5A9I3Q3spy7F9QDPplYZu9cV/HHXVBmwJCmexD3c l+ER3C7Lveumv5Qsd7US94UkX8NAk0GQh2meeJnYsAeE74fe7esOCw5mZ3x/C4AU PO6XiSe/3Hv7uEEo7CGv58Nn9aC6Sjw= -----END CERTIFICATE-----Generated at Tue Jun 2 22:10:21 2026 by rpki-client