$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d9acdab0-aaa1-3527-a872-ab0322e1875b.roa File: d9acdab0-aaa1-3527-a872-ab0322e1875b.roa (raw, json) Hash identifier: VTTsiOm2i5EZcvX0QbyWU7yroMp1aI0JVWf+RWcGwIc= Subject key identifier: 48:BE:57:27:60:24:78:55:85:2B:B5:60:48:9B:98:70:D1:C6:C8:A9 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584D00B29483C56D2A60F098C580 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d9acdab0-aaa1-3527-a872-ab0322e1875b.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 19165 IP address blocks: 208.80.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:94:83:c5:6d:2a:60:f0:98:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=0d223c41-ab3d-4468-b201-2713ddd0fd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:c9:c2:d9:9f:86:12:c3:73:20:b5:3b:12: d3:74:82:23:5e:e5:7c:31:3a:89:7f:84:5b:af:46: ba:ed:5c:fe:53:e7:b3:45:23:f2:2a:6a:27:e2:8e: 7b:29:18:12:71:97:e2:45:89:4d:cf:61:74:72:fa: 8d:50:9b:ca:50:70:05:dd:15:bf:e4:47:43:a4:c1: 59:23:3d:67:6c:74:ad:5c:c9:cb:03:ec:89:c9:e5: 6c:e1:f6:89:af:7e:0d:71:9c:f5:cb:3b:d2:75:9e: 09:17:c3:36:f2:da:7c:6d:55:e1:77:33:05:a1:0b: 35:85:e7:fd:44:b3:df:91:7c:d0:f5:05:c1:7c:5b: d9:0e:d9:53:f7:dd:d2:3f:81:ec:12:df:1e:12:87: ec:54:b2:13:12:e0:f9:e8:05:15:2f:86:80:db:aa: 75:f9:43:76:eb:b4:52:9a:fc:5e:ae:e3:47:98:6a: 04:1e:d3:80:37:00:a5:54:76:40:9e:e3:d6:7f:dd: 22:8a:a1:b7:06:c1:c8:73:ae:ed:be:9b:96:80:a5: e5:53:6b:31:9a:b4:da:28:10:33:8b:6d:9d:41:08: 59:0b:db:9a:ef:ef:9a:8b:8d:d5:2e:06:a1:d4:3f: 81:6f:1a:f5:ed:fd:f7:25:d5:de:bf:7b:16:ae:4f: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BE:57:27:60:24:78:55:85:2B:B5:60:48:9B:98:70:D1:C6:C8:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d9acdab0-aaa1-3527-a872-ab0322e1875b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 208.80.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b1:3d:80:e2:87:42:2b:1b:de:63:4d:83:08:b5:31:be:50: 2c:0e:ee:29:9d:68:30:a1:59:5d:61:66:c5:9c:07:d9:9f:db: 25:16:5d:f8:67:f3:a2:79:b6:7b:56:0d:3b:3d:8c:9e:d2:78: 9f:ae:51:52:78:73:b4:e5:28:8e:bc:37:90:0b:45:bb:00:1c: 66:4d:4d:88:41:c6:60:5a:6d:7f:6d:89:e5:2f:cb:cf:7d:7a: c1:72:39:da:7e:5f:ad:77:19:4c:c1:41:2f:57:59:5b:90:fa: 0e:f9:32:81:23:31:f9:ce:de:31:67:51:08:6d:6a:a0:db:43: 7d:60:35:07:bc:0f:8b:14:ce:29:1a:47:07:f6:76:13:28:db: 8f:3b:62:7e:15:e3:e3:59:bc:33:e6:83:b5:ee:6f:bd:39:a6: 7b:5c:49:87:2a:9d:74:8c:b2:62:74:63:67:78:a7:0d:7f:83: f8:36:25:d1:1e:b5:7e:46:3f:16:06:21:5c:2d:36:9f:ca:d3: 75:5f:19:a3:2d:35:98:00:a7:2e:bd:39:3a:cf:6c:b7:b7:45: 7a:4e:bf:76:d0:7b:6d:94:ce:3c:96:47:c2:51:c3:ad:b1:21: 16:7a:4a:07:48:30:f5:66:f9:b5:2b:d6:59:81:3a:44:f5:6f: a0:f0:74:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AspSDxW0qYPCYxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MGQyMjNjNDEtYWIzZC00NDY4LWIyMDEtMjcxM2RkZDBmZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDzJwtmfhhLDcyC1OxLTdIIjXuV8MTqJf4Rb r0a67Vz+U+ezRSPyKmon4o57KRgScZfiRYlNz2F0cvqNUJvKUHAF3RW/5EdDpMFZ Iz1nbHStXMnLA+yJyeVs4faJr34NcZz1yzvSdZ4JF8M28tp8bVXhdzMFoQs1hef9 RLPfkXzQ9QXBfFvZDtlT993SP4HsEt8eEofsVLITEuD56AUVL4aA26p1+UN267RS mvxeruNHmGoEHtOANwClVHZAnuPWf90iiqG3BsHIc67tvpuWgKXlU2sxmrTaKBAz i22dQQhZC9ua7++ai43VLgah1D+Bbxr17f33JdXev3sWrk/PbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi+VydgJHhVhSu1YEibmHDRxsipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZDlhY2RhYjAtYWFhMS0z NTI3LWE4NzItYWIwMzIyZTE4NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGxPYDih0IrG95jTYMItTG+UCwO7imdaDChWV1hZsWcB9mf2yUWXfhn 86J5tntWDTs9jJ7SeJ+uUVJ4c7TlKI68N5ALRbsAHGZNTYhBxmBabX9tieUvy899 esFyOdp+X613GUzBQS9XWVuQ+g75MoEjMfnO3jFnUQhtaqDbQ31gNQe8D4sUzika Rwf2dhMo2487Yn4V4+NZvDPmg7Xub705pntcSYcqnXSMsmJ0Y2d4pw1/g/g2JdEe tX5GPxYGIVwtNp/K03VfGaMtNZgApy69OTrPbLe3RXpOv3bQe22UzjyWR8JRw62x IRZ6SgdIMPVm+bUr1lmBOkT1b6DwdKU= -----END CERTIFICATE-----Generated at Mon Mar 2 14:41:14 2026 by rpki-client