$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa File: a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa (raw, json) Hash identifier: DnDMrOoZlLx2dOkK7kYKxXlkZFHnfTyJccLYPhubkho= Subject key identifier: 10:3F:4B:AA:6E:80:AE:BD:07:53:82:5C:AC:07:BF:4F:92:CA:E2:A8 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584D40CA5DC2BDD1886A0B771A00 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 46687 IP address blocks: 64.82.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:5d:c2:bd:d1:88:6a:0b:77:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=c9436556-75d0-4810-b43b-8a55aacf42ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:03:ef:f2:64:a6:52:f0:7c:88:8a:18:a9: a5:41:cd:30:fe:b6:cd:86:f5:f6:99:f8:1a:16:e5: 3b:ac:e2:a8:76:00:b5:ef:dd:7b:f3:e1:a7:81:0d: 03:12:06:0c:5a:fe:1b:09:25:90:ad:7f:d2:e5:6d: 56:88:ba:ef:3d:aa:ec:ff:d1:ff:08:d6:91:93:cc: 06:93:44:e1:ee:fc:e1:b6:bd:67:25:b9:17:14:a7: 7f:f5:9f:b9:1e:4a:0f:b8:f6:fd:09:f1:64:9a:39: 0c:a5:16:ce:24:08:7a:96:ac:89:73:6b:cf:19:01: a6:fb:31:2d:83:0d:36:2e:ef:87:fa:35:ff:06:51: 44:6c:f5:93:29:94:f4:04:79:71:36:fc:fd:d2:c7: 21:d2:bf:85:a2:05:29:2d:e9:07:b2:e4:df:dd:83: 19:dd:66:80:46:62:ad:c2:a7:a8:03:d5:b0:15:3b: 26:81:cc:c6:87:73:3e:03:8c:95:6c:38:21:ca:95: df:03:13:74:79:25:cb:a9:f8:4c:88:fa:74:bd:16: b7:af:3f:d0:c0:0e:84:09:e5:cc:5a:d1:54:eb:fa: 69:8b:08:d3:34:fb:ea:87:89:ff:30:d5:45:4b:69: 41:45:31:4e:0b:7c:ea:f4:32:aa:9d:68:4f:4a:53: d3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:4B:AA:6E:80:AE:BD:07:53:82:5C:AC:07:BF:4F:92:CA:E2:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 64.82.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:44:8f:b6:73:f9:63:dc:2d:ba:c6:8c:5b:fc:4f:09:70:26: 6a:5b:d6:88:ca:4f:3b:9a:c1:dc:cf:d5:6c:31:05:0c:eb:97: b9:02:63:ac:45:fd:f2:2b:3f:ca:66:70:49:29:69:68:c2:a5: 42:fa:16:00:62:8f:d6:4e:44:22:e8:93:bf:38:69:05:3c:20: 06:68:f3:95:fa:84:f3:6f:67:4c:bd:08:89:83:37:f6:2a:a0: 25:78:d9:e4:db:d0:e1:d6:f1:99:b0:4d:16:a0:b2:45:a9:8b: d9:c0:c2:5d:7e:c1:65:62:36:49:01:68:52:da:7f:73:e0:2b: bd:45:0a:3d:0a:bd:e2:77:25:05:8c:17:c4:6f:55:2f:3c:76: 08:fb:19:a2:3a:eb:fb:9c:31:59:ff:07:44:ae:0e:cd:19:7e: 7e:e9:62:68:64:43:df:a1:7e:34:a3:5b:ff:8a:ff:c3:dd:41: d0:91:c9:a6:40:9a:ea:38:41:c6:85:06:e0:9c:d9:da:a5:65: 3e:f8:c9:c7:86:62:93:03:48:06:a2:99:df:ff:b4:b8:a7:42: 7f:47:19:91:69:76:76:0f:46:e6:f9:61:34:54:1a:31:e8:8a: f8:78:78:f8:52:83:cb:0f:72:25:a4:a7:1b:a9:96:35:78:7c: f3:bf:4f:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayl3CvdGIagt3GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk Yzk0MzY1NTYtNzVkMC00ODEwLWI0M2ItOGE1NWFhY2Y0MmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxMD7/JkplLwfIiKGKmlQc0w/rbNhvX2mfga FuU7rOKodgC179178+GngQ0DEgYMWv4bCSWQrX/S5W1WiLrvPars/9H/CNaRk8wG k0Th7vzhtr1nJbkXFKd/9Z+5HkoPuPb9CfFkmjkMpRbOJAh6lqyJc2vPGQGm+zEt gw02Lu+H+jX/BlFEbPWTKZT0BHlxNvz90sch0r+FogUpLekHsuTf3YMZ3WaARmKt wqeoA9WwFTsmgczGh3M+A4yVbDghypXfAxN0eSXLqfhMiPp0vRa3rz/QwA6ECeXM WtFU6/ppiwjTNPvqh4n/MNVFS2lBRTFOC3zq9DKqnWhPSlPTXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA/S6pugK69B1OCXKwHv0+SyuKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvYTY0YmJmYWEtYTE0Ny0z OWY5LWJmMWYtZGJhZTk5NzFkOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQFKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM5Ej7Zz+WPcLbrGjFv8TwlwJmpb1ojKTzuawdzP1WwxBQzrl7kCY6xF /fIrP8pmcEkpaWjCpUL6FgBij9ZORCLok784aQU8IAZo85X6hPNvZ0y9CImDN/Yq oCV42eTb0OHW8ZmwTRagskWpi9nAwl1+wWViNkkBaFLaf3PgK71FCj0KveJ3JQWM F8RvVS88dgj7GaI66/ucMVn/B0SuDs0Zfn7pYmhkQ9+hfjSjW/+K/8PdQdCRyaZA muo4QcaFBuCc2dqlZT74yceGYpMDSAaimd//tLinQn9HGZFpdnYPRub5YTRUGjHo ivh4ePhSg8sPciWkpxupljV4fPO/T48= -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:02 2026 by rpki-client