$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa File: df9fbe6f-515f-3477-80a6-5583acda8eff.roa (raw, json) Hash identifier: 0TQJ56omTnf9CkxndzwYcFR9+em/Xu5+1GyNttnKUtA= Subject key identifier: E1:52:15:BB:79:78:7D:26:07:30:50:CC:90:03:D0:83:DD:5B:EF:A0 Certificate issuer: /CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Certificate serial: 010D0C9F4328584CAFBC8599104C4A82C9738FC0 Authority key identifier: 5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 397942 IP address blocks: 192.103.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:85:99:10:4c:4a:82:c9:73:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=f5ddb1d0-2d0f-4c1e-8775-bea8dd103d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8f:9e:5e:ec:96:02:55:94:71:7c:e2:e4:55: 4b:c7:0b:d7:68:e8:d8:94:41:75:16:3e:ba:4c:cb: 7a:9f:63:da:cd:58:a4:d3:fe:cb:b8:88:6d:a6:df: ce:67:0e:62:72:46:4e:15:7c:52:54:56:aa:d9:39: 48:61:ee:a4:b2:44:f4:99:2b:95:18:df:fa:89:0d: 48:e2:ce:5e:cb:c3:9e:f5:13:86:57:05:d7:1f:d1: e0:40:ae:34:d4:f3:36:90:50:a1:b9:40:62:8e:2f: 5b:e0:de:34:32:5c:f2:79:b6:09:62:c1:da:a1:71: 7e:1e:fc:0d:4d:8d:17:70:2d:8a:7d:4e:1c:cd:38: 45:ae:00:85:82:2b:0f:c0:2e:c6:74:34:46:28:35: 98:6f:c1:b4:69:10:d7:0b:48:5f:98:9b:65:61:d8: f3:56:db:9e:ae:bb:be:dc:bb:23:28:e6:d1:95:be: 3e:6e:d0:fe:bd:20:bb:45:27:95:77:21:cb:73:23: db:0e:42:2e:df:8a:45:09:9d:41:78:4d:7a:80:42: 8c:81:61:f0:12:f5:85:7b:07:e8:ec:22:fc:10:5e: 3e:f3:f6:b5:55:e0:96:f2:b8:29:ad:2c:7c:23:fb: a9:f6:e9:59:5a:b1:25:49:fd:df:8e:ab:b5:64:da: 3e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:52:15:BB:79:78:7D:26:07:30:50:CC:90:03:D0:83:DD:5B:EF:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl X509v3 Authority Key Identifier: keyid:5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer sbgp-ipAddrBlock: critical IPv4: 192.103.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b1:d0:60:18:4d:9c:aa:5d:0f:e6:6e:26:3c:be:fd:38:54: 89:70:8f:57:79:bb:d7:ee:d8:49:55:a0:a7:08:db:b2:05:46: 17:87:12:e6:13:85:b8:16:62:08:7c:51:cc:38:cf:48:0e:4b: 1b:e2:e8:42:9a:c3:fc:61:7e:b4:d8:e4:64:6a:01:dd:38:17: 69:4a:f8:c7:b1:b8:63:9f:96:3b:e2:ca:b0:65:7a:9a:27:18: c9:cf:98:48:fe:f2:8f:c8:76:49:27:95:99:09:07:b6:41:cc: 3b:93:ef:cd:4f:1b:c3:7f:a5:56:8c:88:5f:8b:d5:37:99:92: 84:79:9e:73:44:0c:d8:28:f2:6d:5c:e9:b9:2e:08:7d:93:8b: 09:3d:fe:5f:c4:01:13:53:4f:06:25:a0:c5:71:59:47:47:50: e4:c2:fc:c7:f4:7b:7e:e5:34:07:b0:09:fc:ce:2e:44:00:3d: 10:ef:d4:5d:f0:ff:3e:9d:e7:d0:6a:5d:49:72:10:fe:7f:cc: 45:31:dc:e8:33:8a:4e:e5:f8:ae:31:02:17:3e:38:8d:5a:f1: b1:cc:55:6f:fe:57:35:3e:3d:ce:71:04:f0:25:8f:70:0c:a3: 9f:5f:1f:d0:08:5a:f1:54:97:14:ce:2f:a0:7c:63:0d:5e:92: 25:bd:13:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIWZEExKgslzj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVmZjgyZTQtY2QzNy00NWM2LWI3MTQtYWIwYTA0OTI3 OTY0MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZjVkZGIxZDAtMmQwZi00YzFlLTg3NzUtYmVhOGRkMTAzZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7I+eXuyWAlWUcXzi5FVLxwvXaOjYlEF1Fj66 TMt6n2PazVik0/7LuIhtpt/OZw5ickZOFXxSVFaq2TlIYe6kskT0mSuVGN/6iQ1I 4s5ey8Oe9ROGVwXXH9HgQK401PM2kFChuUBiji9b4N40MlzyebYJYsHaoXF+HvwN TY0XcC2KfU4czThFrgCFgisPwC7GdDRGKDWYb8G0aRDXC0hfmJtlYdjzVtuerru+ 3LsjKObRlb4+btD+vSC7RSeVdyHLcyPbDkIu34pFCZ1BeE16gEKMgWHwEvWFewfo 7CL8EF4+8/a1VeCW8rgprSx8I/up9ulZWrElSf3fjqu1ZNo+GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFSFbt5eH0mBzBQzJAD0IPdW++gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWZm ODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBhMDQ5Mjc5NjQvZGY5ZmJlNmYtNTE1Zi0z NDc3LTgwYTYtNTU4M2FjZGE4ZWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODVmZjgyZTQtY2QzNy00NWM2LWI3 MTQtYWIwYTA0OTI3OTY0Lzg1ZmY4MmU0LWNkMzctNDVjNi1iNzE0LWFiMGEwNDky Nzk2NC5jcmwwHwYDVR0jBBgwFoAUXku/GGCREN/OFiWbiwhlqRxiUBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWZmODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBh MDQ5Mjc5NjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGeFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqx0GAYTZyqXQ/mbiY8vv04VIlwj1d5u9fu2ElVoKcI27IFRheHEuYT hbgWYgh8Ucw4z0gOSxvi6EKaw/xhfrTY5GRqAd04F2lK+MexuGOfljviyrBlepon GMnPmEj+8o/IdkknlZkJB7ZBzDuT781PG8N/pVaMiF+L1TeZkoR5nnNEDNgo8m1c 6bkuCH2Tiwk9/l/EARNTTwYloMVxWUdHUOTC/Mf0e37lNAewCfzOLkQAPRDv1F3w /z6d59BqXUlyEP5/zEUx3Ogzik7l+K4xAhc+OI1a8bHMVW/+VzU+Pc5xBPAlj3AM o59fH9AIWvFUlxTOL6B8Yw1ekiW9E5s= -----END CERTIFICATE-----Generated at Fri Feb 27 23:59:37 2026 by rpki-client