$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03386b3d-f357-38ca-9477-a17b49756beb.roa File: 03386b3d-f357-38ca-9477-a17b49756beb.roa (raw, json) Hash identifier: NCChJHMU8mIcm0NI3F9IATkhgcxhUYnRSXzEQRNhwZQ= Subject key identifier: DA:2B:5D:AC:DF:08:85:98:B8:EB:3B:D0:05:71:B4:96:1F:12:51:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB2871717FF1489936C03EC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03386b3d-f357-38ca-9477-a17b49756beb.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 213120 IP address blocks: 209.200.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:17:17:ff:14:89:93:6c:03:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=1f48aeb7-0128-4562-a1b2-70bfac75e568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:78:d5:5f:00:11:f1:fd:bb:04:6d:7b:f8:f9: 7e:11:c7:df:d7:34:1b:8d:35:32:6e:1a:32:ea:79: 3d:2f:b1:2d:c9:5d:d3:a1:4e:d5:ca:a6:8c:66:19: ce:46:09:45:49:d5:e4:3d:72:0e:4f:bc:4e:64:55: f3:e1:d2:1b:7d:58:65:4c:6f:ec:87:c2:bc:bc:33: 9d:c3:79:43:55:c6:23:0f:c2:d4:24:41:c8:b2:63: f8:e7:95:27:a0:a5:2d:8e:eb:78:bb:76:34:af:b4: 6b:4d:96:d0:6d:22:6e:39:3b:0d:87:1e:1c:2c:52: 88:28:63:a7:40:30:22:f5:35:2b:92:0c:77:53:cf: a4:6d:b9:39:94:18:0e:a6:55:12:e0:b8:47:71:a8: 67:bb:e3:2e:95:0f:49:39:62:bb:22:62:a8:82:cc: 71:2f:2c:24:2a:f4:62:7e:71:bc:d7:10:18:e4:49: 92:4b:1a:02:ed:6e:23:7f:37:d0:f6:7e:75:93:df: 0e:21:93:8e:34:8a:ac:93:09:9e:98:40:69:e9:52: 11:c0:e1:a5:48:4f:38:b8:2a:b5:10:d7:9e:37:e0: 25:e1:6a:f0:1c:02:89:9b:dc:6f:e5:7e:67:e4:03: 19:e8:10:31:8f:b6:1b:2e:35:a6:cf:d8:f9:fe:e2: 29:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2B:5D:AC:DF:08:85:98:B8:EB:3B:D0:05:71:B4:96:1F:12:51:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03386b3d-f357-38ca-9477-a17b49756beb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ef:ef:66:b4:0a:a1:32:79:d4:e3:e7:1e:de:a9:23:49:72: 8b:30:78:ac:1c:d1:73:6a:3d:f5:d8:52:58:0b:57:16:91:cc: b0:f8:20:c0:76:75:a8:cc:2e:89:19:99:3c:d9:57:4e:17:18: 45:12:08:f0:b0:0a:93:02:3b:a4:65:cb:ab:83:29:51:ea:e1: fc:5f:1b:e8:ec:6c:a1:b6:bc:c2:47:45:5a:38:f6:6d:a1:6a: ff:bd:5f:3f:08:45:20:59:64:c0:25:33:b3:42:b7:17:9a:0c: 8e:1d:cc:dd:6e:88:48:11:5a:dd:4f:ef:90:54:94:20:4e:2c: 90:ef:85:8f:1c:e2:94:10:07:27:2d:ea:c3:2b:1e:d4:ec:58: fc:72:1d:28:6c:01:67:64:de:09:17:ce:93:95:9e:c4:41:94: b4:52:89:bb:68:a8:d4:b6:85:1e:1d:35:73:37:10:24:fe:bc: 3b:6b:a9:ae:eb:84:b8:16:c7:59:88:5a:43:0d:2b:fc:93:65: 77:13:fa:16:fc:de:f0:f6:6a:22:6f:18:1e:f9:24:5b:97:28: 05:48:7c:1e:47:96:b2:01:74:a7:24:3b:d8:60:ee:92:72:df: 8d:d9:6a:0c:0a:4b:fc:23:b1:a0:51:8e:be:ce:2c:ab:0e:13: e4:a3:24:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhxcX/xSJk2wD7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk MWY0OGFlYjctMDEyOC00NTYyLWExYjItNzBiZmFjNzVlNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnjVXwAR8f27BG17+Pl+Ecff1zQbjTUybhoy 6nk9L7EtyV3ToU7VyqaMZhnORglFSdXkPXIOT7xOZFXz4dIbfVhlTG/sh8K8vDOd w3lDVcYjD8LUJEHIsmP455UnoKUtjut4u3Y0r7RrTZbQbSJuOTsNhx4cLFKIKGOn QDAi9TUrkgx3U8+kbbk5lBgOplUS4LhHcahnu+MulQ9JOWK7ImKogsxxLywkKvRi fnG81xAY5EmSSxoC7W4jfzfQ9n51k98OIZOONIqskwmemEBp6VIRwOGlSE84uCq1 ENeeN+Al4WrwHAKJm9xv5X5n5AMZ6BAxj7YbLjWmz9j5/uIpgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNorXazfCIWYuOs70AVxtJYfElE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDMzODZiM2QtZjM1Ny0z OGNhLTk0NzctYTE3YjQ5NzU2YmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPv72a0CqEyedTj5x7eqSNJcosweKwc0XNqPfXYUlgLVxaRzLD4IMB2 dajMLokZmTzZV04XGEUSCPCwCpMCO6Rly6uDKVHq4fxfG+jsbKG2vMJHRVo49m2h av+9Xz8IRSBZZMAlM7NCtxeaDI4dzN1uiEgRWt1P75BUlCBOLJDvhY8c4pQQByct 6sMrHtTsWPxyHShsAWdk3gkXzpOVnsRBlLRSibtoqNS2hR4dNXM3ECT+vDtrqa7r hLgWx1mIWkMNK/yTZXcT+hb83vD2aiJvGB75JFuXKAVIfB5HlrIBdKckO9hg7pJy 343ZagwKS/wjsaBRjr7OLKsOE+SjJHw= -----END CERTIFICATE-----Generated at Mon Mar 2 09:50:24 2026 by rpki-client