$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa File: 56723a4c-1de9-3acd-814f-f735ade0459c.roa (raw, json) Hash identifier: lvBbxYPLLZYJnF19zJIUmNaP3M4wDxuI67dnjNTitHw= Subject key identifier: C2:6F:E2:DB:A5:84:33:F7:C1:67:E3:F1:A7:9D:43:12:3F:58:C1:28 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A857601B31CD698016A9AC840 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 28753 IP address blocks: 172.98.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:01:b3:1c:d6:98:01:6a:9a:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=e5d12d88-9081-43bd-bc2b-a956545ea8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:b1:eb:d1:5d:67:62:cd:27:ac:8b:90:ae: fc:65:3b:dc:7a:50:eb:94:f9:aa:02:ed:9a:64:f3: ab:5d:09:89:f5:29:aa:59:0c:d6:a0:a0:17:d3:97: 18:60:0c:42:6f:9b:20:e9:a9:18:df:2c:7b:c4:3b: ed:f7:48:8c:ac:52:08:70:9d:c0:e3:fc:64:14:7c: cc:36:c1:ee:c1:b6:68:56:46:bd:2d:64:a2:1c:fe: e0:bd:94:dd:94:87:b4:24:75:54:99:9b:7d:02:a5: 08:06:92:1a:cb:82:50:a5:92:59:23:7f:bd:cc:af: 43:fa:4b:b4:15:b9:d5:e3:14:59:fa:c8:0b:89:e3: 50:a5:9a:fd:13:b6:12:9e:ff:ce:6f:45:d6:05:2c: 3f:17:91:95:29:4a:0c:ef:5c:df:ce:e2:e5:36:23: 4a:08:66:fb:15:d2:3a:38:7d:e1:51:f2:24:cc:e0: 33:bd:5f:d3:a4:35:5a:b8:7f:8a:9e:21:04:1c:cd: 5a:f4:d0:7b:30:d9:5f:34:84:ec:99:7c:e5:4b:4a: da:5d:0a:3e:df:0a:2a:e5:d2:35:49:b1:73:ad:c9: bb:ac:b5:fc:e1:9b:56:a8:bb:ba:ce:03:d4:fa:d1: 4b:ed:b5:b6:1d:66:d4:3e:39:c4:88:e2:42:ff:40: d7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6F:E2:DB:A5:84:33:F7:C1:67:E3:F1:A7:9D:43:12:3F:58:C1:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:bf:32:dc:35:11:78:53:a0:48:bd:0d:9a:e4:84:78:54:cc: 5a:61:1b:56:47:e6:65:e5:7b:90:30:2c:68:aa:fb:c5:c3:39: 7f:df:cf:20:81:99:05:23:98:9e:a5:d0:27:f1:4e:27:f5:15: 9d:8c:91:49:9d:88:0a:08:02:df:0a:69:30:85:2e:1d:2f:13: c7:5d:aa:eb:f3:2c:66:30:ad:a4:45:5a:c4:45:61:8a:0f:01: 57:3e:9a:62:d7:f1:e5:6a:7e:30:f4:03:ca:84:90:c3:8c:c7: 4e:3e:f5:e7:4a:ad:76:e9:0a:d2:f4:07:35:34:d1:2c:1a:2c: ac:3c:fc:7c:4f:a1:93:48:d1:f0:28:6b:ce:65:b6:2a:56:86: fb:12:e9:39:57:74:0e:79:06:ce:90:62:95:bb:c6:b8:a0:df: 0c:db:23:71:5a:ce:b1:18:9d:39:ec:9f:af:3b:49:cb:c6:33: 12:e7:8e:de:39:82:35:a5:7e:c7:54:29:5d:f4:ae:83:53:96: 54:e3:9d:c7:b4:b6:60:f1:87:e6:1f:dc:69:5f:30:45:b6:c2: 8e:8e:d8:5b:0b:f0:d5:f6:b2:d6:ea:4c:dd:47:cf:9d:81:8c: 2b:ac:31:28:c5:9c:a3:29:42:9f:51:d9:c5:78:93:95:cc:1f: df:19:41:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdgGzHNaYAWqayEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk ZTVkMTJkODgtOTA4MS00M2JkLWJjMmItYTk1NjU0NWVhOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngax69FdZ2LNJ6yLkK78ZTvcelDrlPmqAu2a ZPOrXQmJ9SmqWQzWoKAX05cYYAxCb5sg6akY3yx7xDvt90iMrFIIcJ3A4/xkFHzM NsHuwbZoVka9LWSiHP7gvZTdlIe0JHVUmZt9AqUIBpIay4JQpZJZI3+9zK9D+ku0 FbnV4xRZ+sgLieNQpZr9E7YSnv/Ob0XWBSw/F5GVKUoM71zfzuLlNiNKCGb7FdI6 OH3hUfIkzOAzvV/TpDVauH+KniEEHM1a9NB7MNlfNITsmXzlS0raXQo+3woq5dI1 SbFzrcm7rLX84ZtWqLu6zgPU+tFL7bW2HWbUPjnEiOJC/0DXlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJv4tulhDP3wWfj8aedQxI/WMEoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNTY3MjNhNGMtMWRlOS0z YWNkLTgxNGYtZjczNWFkZTA0NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm/Mtw1EXhToEi9DZrkhHhUzFphG1ZH5mXle5AwLGiq+8XDOX/fzyCB mQUjmJ6l0CfxTif1FZ2MkUmdiAoIAt8KaTCFLh0vE8ddquvzLGYwraRFWsRFYYoP AVc+mmLX8eVqfjD0A8qEkMOMx04+9edKrXbpCtL0BzU00SwaLKw8/HxPoZNI0fAo a85ltipWhvsS6TlXdA55Bs6QYpW7xrig3wzbI3FazrEYnTnsn687ScvGMxLnjt45 gjWlfsdUKV30roNTllTjnce0tmDxh+Yf3GlfMEW2wo6O2FsL8NX2stbqTN1Hz52B jCusMSjFnKMpQp9R2cV4k5XMH98ZQSs= -----END CERTIFICATE-----Generated at Mon Aug 4 14:08:40 2025 by rpki-client