
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa
File: df9fbe6f-515f-3477-80a6-5583acda8eff.roa (raw, json)
Hash identifier: mceY1+yhYuBR5riQ+l3HvkjB5++cgEdgNZmDxoSkbZs=
Subject key identifier: 77:89:18:D5:D6:2E:59:A6:91:92:DD:21:A9:BE:62:03:F0:EF:3D:EC
Certificate issuer: /CN=85ff82e4-cd37-45c6-b714-ab0a04927964
Certificate serial: 010D0C9F4328584D905A9F6EBF869495A4E12300
Authority key identifier: 5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa
Signing time: Mon 20 Apr 2026 01:00:24 +0000
ROA not before: Mon 20 Apr 2026 01:00:24 +0000
ROA not after: Sun 19 Jul 2026 01:00:24 +0000
asID: 397942
IP address blocks: 192.103.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:90:5a:9f:6e:bf:86:94:95:a4:e1:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ff82e4-cd37-45c6-b714-ab0a04927964
Validity
Not Before: Apr 20 01:00:24 2026 GMT
Not After : Jul 19 01:00:24 2026 GMT
Subject: CN=43f29fd8-efa5-46a9-beaf-5002a5d6afed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:39:98:e9:64:9e:59:62:66:20:1b:78:6a:92:
9e:99:52:18:8f:08:36:f8:ca:4e:6d:53:1e:15:79:
32:de:78:4c:36:89:42:b9:27:b7:0f:e2:6a:7c:45:
e0:90:49:fb:b3:51:54:ca:d2:59:ac:a3:c1:74:30:
90:85:fe:9d:9c:43:c2:54:84:f0:cf:6e:5f:36:16:
44:d6:df:8e:fd:a0:4e:a9:72:bc:4a:d5:7c:0c:c3:
a8:db:f6:d4:a1:aa:8a:24:4d:66:8a:77:81:6b:44:
49:4d:b1:15:c3:89:b1:eb:ca:c8:08:77:2f:79:58:
14:ef:04:e1:00:ea:d8:30:05:1a:20:3d:c7:77:7d:
e4:1c:f5:35:0f:d3:2f:1c:f5:dc:63:64:87:61:7c:
75:3a:d1:ac:bf:15:36:d7:50:a8:73:5b:83:4c:de:
80:0d:ad:58:4f:7c:01:a1:de:0d:0f:9f:04:b0:95:
18:c7:04:00:47:6d:b5:93:80:61:c0:ca:3a:0b:a4:
66:ae:a0:7f:5d:a8:4f:87:80:e3:36:74:56:7c:c3:
26:2b:cb:19:89:9a:5f:1d:50:25:90:1c:c8:46:de:
9d:fd:f4:e5:9c:40:82:18:00:53:0d:ae:cf:b3:89:
f5:89:81:aa:a3:8e:52:4d:60:9e:59:ea:7a:43:f5:
04:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:89:18:D5:D6:2E:59:A6:91:92:DD:21:A9:BE:62:03:F0:EF:3D:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl
X509v3 Authority Key Identifier:
keyid:5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer
sbgp-ipAddrBlock: critical
IPv4:
192.103.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:40:91:33:f4:78:02:df:c5:e1:94:75:43:03:17:db:9f:35:
44:f7:ef:1e:fa:47:2a:52:4f:01:05:5a:ce:b1:97:a2:64:72:
32:e0:4d:e1:fa:b3:8c:5e:48:d7:88:19:4b:20:7b:b7:be:43:
e3:19:e8:94:5b:fb:b1:4b:22:7c:26:b7:d4:f1:18:05:05:66:
52:d7:ca:c0:64:85:ee:0f:59:ad:ad:41:2c:22:cc:74:ef:3d:
7b:92:6a:91:b7:e9:cd:d7:fa:4e:e2:a0:74:f4:a9:34:76:56:
6a:99:40:98:b9:0b:c4:1f:84:48:fd:2e:2e:6d:40:d4:7c:96:
a3:92:70:fb:47:5e:28:e0:39:4d:4e:72:8b:6b:d6:c6:44:0f:
b6:36:84:b5:93:d6:c8:aa:e1:2e:cb:9b:56:c5:c9:90:b0:b6:
a2:a7:81:b5:c9:e6:81:ad:f3:ff:02:83:76:f9:bf:5a:b6:6d:
3f:a5:50:d5:1b:37:db:ec:20:0a:7a:55:59:53:7b:58:21:fc:
46:de:7b:48:ac:7a:13:8d:04:25:06:e1:90:42:27:70:11:c5:
6b:0c:fd:27:58:20:26:a1:c6:50:d1:b6:ba:cd:09:99:e1:e5:
cf:44:1d:db:70:a2:5f:c1:86:79:71:bf:d8:2d:9c:cb:73:00:
60:87:92:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:33:45 2026 by rpki-client