$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/918523ba-c151-3f99-b377-2e0bfbd7897c.roa File: 918523ba-c151-3f99-b377-2e0bfbd7897c.roa (raw, json) Hash identifier: KiY8DlDRyXrjq5AmfedkeGShLs78QhSxFZMZxIfI5L4= Subject key identifier: D3:CA:1B:97:4B:1B:EB:F7:59:87:BD:FB:2C:BF:41:1A:EF:D4:3A:27 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584D40CA5E22B654BD2E8D756B80 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/918523ba-c151-3f99-b377-2e0bfbd7897c.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 46687 IP address blocks: 208.93.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:5e:22:b6:54:bd:2e:8d:75:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=ceafd59b-d196-46c8-8e71-82275703bbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1d:75:d5:d8:13:b0:b6:30:fe:96:00:a6:73: 1f:40:96:24:53:65:0d:f3:30:4f:bd:6f:a6:cd:1d: c9:17:c1:c6:15:b4:ed:fc:cf:b8:14:54:7d:68:23: 5e:78:c0:c8:c7:19:67:b8:6a:b7:9e:43:7a:68:0f: 71:72:0c:ab:c6:e1:75:f1:20:3f:45:2b:51:90:d5: 1b:86:9d:69:12:c1:00:80:dc:0e:e9:dd:65:82:c7: 19:dd:84:ad:56:f5:76:43:f2:be:d7:bc:c1:ff:9a: c1:cf:4c:4a:bf:73:f3:3b:27:52:46:52:fb:0f:a1: 38:26:22:1a:d5:19:ff:11:b9:57:73:c9:d2:2d:ea: 82:f1:eb:e1:73:40:8b:7c:b1:6a:58:93:ec:2e:1e: 68:12:c0:a8:a9:59:95:54:9c:48:e7:49:2f:b1:05: b8:5c:e6:07:2d:d9:6c:37:6e:d7:ce:4c:e9:a7:c3: f3:81:e1:e1:ba:e7:5b:64:9a:d8:26:63:d9:e1:30: d9:d2:7a:83:c7:30:2c:b9:1b:ff:4e:2c:d4:36:63: 4f:8d:56:eb:0b:7f:58:fa:c0:ad:b2:aa:fc:83:71: 16:6e:47:12:34:ca:ea:80:b6:8b:18:8d:15:1c:96: b7:31:a8:1b:a2:0c:1f:f6:7b:c3:52:55:5a:64:bb: 46:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CA:1B:97:4B:1B:EB:F7:59:87:BD:FB:2C:BF:41:1A:EF:D4:3A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/918523ba-c151-3f99-b377-2e0bfbd7897c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 208.93.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:80:10:d7:dd:50:31:eb:5f:21:a6:b3:c1:be:d3:8e:27:b5: c6:95:28:ac:48:59:77:63:b4:36:82:82:b3:52:77:64:a3:94: de:64:fb:fb:c6:f1:e3:33:26:19:87:44:81:bf:c9:73:3a:06: 29:b2:23:49:b3:23:48:d6:c5:33:a9:ee:62:2c:3d:8f:cd:3e: 25:02:80:5f:db:db:a6:c2:5a:bd:f2:da:5c:65:06:59:17:8f: 14:cb:49:17:02:a6:95:f1:fa:d6:2f:0b:07:ed:af:35:6d:9d: 43:36:76:00:f2:23:18:b2:ef:df:84:e8:93:fa:b6:50:db:47: 25:05:5c:d0:7e:c8:d7:0a:f9:49:e9:6f:aa:88:78:e8:49:94: b8:52:40:4d:cd:fc:6f:9f:73:79:13:80:37:cd:64:6c:52:ab: ff:b4:dc:79:1f:2a:ca:81:1c:86:a1:85:2c:94:2e:bd:b5:9f: 70:f1:2c:50:c5:9c:9e:9e:99:1b:cd:72:f8:24:35:4d:30:83: 73:4d:0f:eb:dc:ba:ac:6d:79:b5:33:3b:90:e0:2b:a0:7a:65: 3f:cc:0e:12:50:23:24:ec:0e:54:1d:6d:3f:25:52:95:45:a2: 29:57:39:67:36:de:9f:51:78:90:d8:41:5b:bc:49:31:f4:19: 5a:ef:10:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayl4itlS9Lo11a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk Y2VhZmQ1OWItZDE5Ni00NmM4LThlNzEtODIyNzU3MDNiYmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh111dgTsLYw/pYApnMfQJYkU2UN8zBPvW+m zR3JF8HGFbTt/M+4FFR9aCNeeMDIxxlnuGq3nkN6aA9xcgyrxuF18SA/RStRkNUb hp1pEsEAgNwO6d1lgscZ3YStVvV2Q/K+17zB/5rBz0xKv3PzOydSRlL7D6E4JiIa 1Rn/EblXc8nSLeqC8evhc0CLfLFqWJPsLh5oEsCoqVmVVJxI50kvsQW4XOYHLdls N27Xzkzpp8PzgeHhuudbZJrYJmPZ4TDZ0nqDxzAsuRv/TizUNmNPjVbrC39Y+sCt sqr8g3EWbkcSNMrqgLaLGI0VHJa3Magbogwf9nvDUlVaZLtGIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPKG5dLG+v3WYe9+yy/QRrv1DonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvOTE4NTIzYmEtYzE1MS0z Zjk5LWIzNzctMmUwYmZiZDc4OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0F1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMmAENfdUDHrXyGms8G+044ntcaVKKxIWXdjtDaCgrNSd2SjlN5k+/vG 8eMzJhmHRIG/yXM6BimyI0mzI0jWxTOp7mIsPY/NPiUCgF/b26bCWr3y2lxlBlkX jxTLSRcCppXx+tYvCwftrzVtnUM2dgDyIxiy79+E6JP6tlDbRyUFXNB+yNcK+Unp b6qIeOhJlLhSQE3N/G+fc3kTgDfNZGxSq/+03HkfKsqBHIahhSyULr21n3DxLFDF nJ6emRvNcvgkNU0wg3NND+vcuqxtebUzO5DgK6B6ZT/MDhJQIyTsDlQdbT8lUpVF oilXOWc23p9ReJDYQVu8STH0GVrvEJM= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:15 2026 by rpki-client