$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa File: df9fbe6f-515f-3477-80a6-5583acda8eff.roa (raw, json) Hash identifier: RaqKhe2cbHJXemK0Ggs20LFdMTL7vkUjpkl8VbNs5p4= Subject key identifier: 8D:15:4B:D0:04:B8:C2:48:E8:2C:A0:C4:6F:D3:67:F7:0E:36:AD:51 Certificate issuer: /CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Certificate serial: 010D0C9F4328584F13024A614F420F6443CF3680 Authority key identifier: 5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 397942 IP address blocks: 192.103.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:4a:61:4f:42:0f:64:43:cf:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=5759cc7c-2a76-4504-aec4-05f3227ad7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:a8:22:dd:1c:db:40:82:65:97:b2:78:cb: 8c:5c:3c:fc:dd:82:40:69:c9:0f:d7:88:6d:f0:52: f1:b0:c0:da:85:df:9d:f1:ac:04:3d:48:ce:59:9b: f4:eb:19:87:41:24:f3:5b:a8:21:a1:4d:37:82:56: 2d:26:e1:2d:03:af:db:04:66:4a:95:11:0e:ae:3a: 89:62:e9:3a:15:e9:d0:25:92:f2:65:5d:76:68:50: 53:46:2c:6b:77:ed:b8:f4:1f:98:4d:86:97:20:61: ce:83:ee:9d:16:9c:3f:be:56:bd:69:9d:a7:57:34: e9:4f:3b:a2:70:2d:eb:d7:36:8a:c4:e4:91:c5:12: 4a:fe:36:86:e2:f6:88:01:34:fd:1c:10:6c:c7:9c: 47:f7:46:b8:c0:ee:38:9a:d8:78:ae:38:91:86:c2: 8c:a3:08:9a:26:04:92:a0:fb:49:58:2a:c2:ec:ce: 55:31:bd:c8:39:86:f3:23:da:e3:14:c3:74:c9:21: 54:6b:28:c8:2a:08:bb:7c:c2:89:5e:3f:5d:a4:46: 71:9e:07:f3:b6:6a:e4:86:c1:5f:cf:f1:86:6e:1e: e4:25:b1:c7:d1:e0:92:e4:8c:48:56:be:cd:f0:eb: dd:c7:62:f7:30:59:5c:fe:44:80:d9:47:f4:5f:46: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:15:4B:D0:04:B8:C2:48:E8:2C:A0:C4:6F:D3:67:F7:0E:36:AD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl X509v3 Authority Key Identifier: keyid:5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer sbgp-ipAddrBlock: critical IPv4: 192.103.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:82:35:4c:9b:47:a3:46:1e:dc:59:a2:25:5e:96:08:23:ed: 4b:a5:12:9a:9e:0d:3c:ee:77:bb:ee:15:17:83:68:27:70:28: f1:de:12:f7:b6:af:7d:7b:a3:e6:fa:ca:e5:67:5f:81:03:00: 9a:ee:12:92:64:f3:55:34:66:fb:29:15:f0:73:c2:bc:22:57: 2e:9b:4a:5e:19:d8:3a:a3:d4:ba:c4:00:d7:ea:05:9d:6d:6d: 29:f9:58:50:0b:3a:85:47:15:f1:c4:ce:ed:81:ba:28:31:50: ae:34:0d:61:f7:86:23:11:83:03:a8:c9:d3:d6:84:4f:95:ea: e3:62:0d:e8:ae:de:05:92:1a:46:0f:78:ea:c4:0c:db:01:9b: 3c:c3:fa:9c:ed:0c:2a:aa:f9:b9:15:d9:05:79:b4:71:b2:c9: 4b:22:35:b8:6f:ea:a1:c8:8e:7e:49:4b:a1:5b:5e:ce:59:37: ce:9c:b1:42:d6:70:c1:d6:7b:f6:d9:a0:71:1c:4c:4e:fd:ca: 8a:03:83:d4:03:1c:1e:da:a5:a5:1d:2d:17:87:fa:26:20:b3: 8f:65:11:54:d2:bc:35:fc:38:5e:37:8a:48:69:c6:02:02:2d: 2a:fe:75:da:74:85:1d:b4:52:4e:15:72:0b:47:8c:b6:2a:b6: f3:d6:93:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkphT0IPZEPPNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVmZjgyZTQtY2QzNy00NWM2LWI3MTQtYWIwYTA0OTI3 OTY0MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk NTc1OWNjN2MtMmE3Ni00NTA0LWFlYzQtMDVmMzIyN2FkN2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6CoIt0c20CCZZeyeMuMXDz83YJAackP14ht 8FLxsMDahd+d8awEPUjOWZv06xmHQSTzW6ghoU03glYtJuEtA6/bBGZKlREOrjqJ Yuk6FenQJZLyZV12aFBTRixrd+249B+YTYaXIGHOg+6dFpw/vla9aZ2nVzTpTzui cC3r1zaKxOSRxRJK/jaG4vaIATT9HBBsx5xH90a4wO44mth4rjiRhsKMowiaJgSS oPtJWCrC7M5VMb3IOYbzI9rjFMN0ySFUayjIKgi7fMKJXj9dpEZxngfztmrkhsFf z/GGbh7kJbHH0eCS5IxIVr7N8Ovdx2L3MFlc/kSA2Uf0X0bRBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0VS9AEuMJI6CygxG/TZ/cONq1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWZm ODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBhMDQ5Mjc5NjQvZGY5ZmJlNmYtNTE1Zi0z NDc3LTgwYTYtNTU4M2FjZGE4ZWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODVmZjgyZTQtY2QzNy00NWM2LWI3 MTQtYWIwYTA0OTI3OTY0Lzg1ZmY4MmU0LWNkMzctNDVjNi1iNzE0LWFiMGEwNDky Nzk2NC5jcmwwHwYDVR0jBBgwFoAUXku/GGCREN/OFiWbiwhlqRxiUBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWZmODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBh MDQ5Mjc5NjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGeFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASCNUybR6NGHtxZoiVelggj7UulEpqeDTzud7vuFReDaCdwKPHeEve2 r317o+b6yuVnX4EDAJruEpJk81U0ZvspFfBzwrwiVy6bSl4Z2Dqj1LrEANfqBZ1t bSn5WFALOoVHFfHEzu2BuigxUK40DWH3hiMRgwOoydPWhE+V6uNiDeiu3gWSGkYP eOrEDNsBmzzD+pztDCqq+bkV2QV5tHGyyUsiNbhv6qHIjn5JS6FbXs5ZN86csULW cMHWe/bZoHEcTE79yooDg9QDHB7apaUdLReH+iYgs49lEVTSvDX8OF43ikhpxgIC LSr+ddp0hR20Uk4VcgtHjLYqtvPWk8w= -----END CERTIFICATE-----Generated at Fri Oct 9 20:42:49 2026 by rpki-client