$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/42595bcf-6395-3a09-aa56-88a1c857f0e6.roa File: 42595bcf-6395-3a09-aa56-88a1c857f0e6.roa (raw, json) Hash identifier: vjwc1L4eaAposM/6DQ0ti6WmmEK4d3rXpSzEOrA4lm8= Subject key identifier: 51:8B:A7:48:C6:F7:14:7C:07:33:52:8C:48:F6:3C:21:FF:FD:CC:5A Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584F6F23052C10F127B6FAB66500 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/42595bcf-6395-3a09-aa56-88a1c857f0e6.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 3807 IP address blocks: 207.196.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:05:2c:10:f1:27:b6:fa:b6:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=f621d426-59d9-4933-b68c-e116c145998c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ff:15:d9:b4:34:9f:09:b7:56:09:c5:1b:84: c2:c8:f9:c2:18:90:39:47:85:e7:58:90:90:6e:50: a3:02:b9:36:79:b0:63:be:4c:7f:03:c3:51:28:7e: 6a:c8:c3:b0:33:1e:a2:c4:52:fc:00:35:bc:9c:09: bb:26:e3:3f:e7:b1:39:d9:b7:5e:9e:0e:29:6e:14: 1e:87:f1:3c:49:84:77:5c:2b:10:d3:bd:71:a1:fa: de:6f:88:a8:00:60:d5:c8:1a:c8:80:38:53:50:b5: f4:a0:7b:ac:8e:1f:53:6c:61:c6:b8:b8:68:79:70: a9:34:c4:fc:7c:fe:72:fc:8b:c0:39:60:42:4c:94: 2d:c2:1d:4c:2b:a7:69:ca:d8:84:be:8a:cf:d3:cb: 20:15:7c:21:ef:02:32:47:7b:dd:9d:8c:d8:80:d1: 44:bb:38:4e:ab:f3:6a:d5:72:ce:b4:a3:4b:59:95: 83:ed:44:91:1a:70:b8:2f:2a:b8:12:06:8b:64:da: 97:b6:74:f5:6e:9b:1a:60:12:4a:56:cd:2b:cb:5e: 21:80:9e:79:61:00:d9:a7:a6:7b:00:cc:45:8f:79: 68:64:54:1e:43:7e:f4:b9:06:c0:33:3f:67:94:70: 9d:b5:ad:61:e5:b0:77:fa:f9:33:d4:d9:23:95:80: 7c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8B:A7:48:C6:F7:14:7C:07:33:52:8C:48:F6:3C:21:FF:FD:CC:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/42595bcf-6395-3a09-aa56-88a1c857f0e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:75:28:13:69:b0:28:3a:99:a2:83:d5:21:71:b5:8a:81:7c: 42:39:7e:ff:28:af:8a:75:4f:2e:a1:b5:29:5c:79:b1:f8:87: 87:31:3e:bc:46:36:da:30:28:25:8b:28:56:82:e6:a0:b8:e4: 75:79:e1:e3:88:fb:95:ce:48:90:47:56:9e:67:82:24:82:63: 8b:11:05:90:f0:bd:1a:20:69:0b:b0:0d:40:a1:ff:cc:e8:5e: 91:99:09:a9:fb:64:af:c2:9d:13:c2:33:63:69:cb:05:5e:36: e7:a8:95:05:cf:5b:e1:9d:ee:fb:34:7e:ce:44:15:f8:2e:07: ea:67:83:d6:3b:89:5b:55:1d:3b:2b:52:dd:65:54:dc:b5:6d: b7:78:35:fe:8e:8e:08:86:f8:99:be:68:de:0b:b1:5b:be:73: a4:e2:e1:1a:f4:01:cd:39:14:96:36:01:1d:b5:ab:94:84:99: 72:e4:1f:22:9d:2c:0e:bd:43:b8:c7:30:aa:1d:87:13:e1:ad: 50:03:b0:9b:cb:5e:0a:96:a3:91:ed:ea:dd:d4:48:0c:7d:81: f7:e8:a6:23:e3:f6:ba:d9:87:86:db:92:1a:81:f1:97:e6:c6: a3:86:bc:67:84:0a:7f:db:12:c6:92:dd:1a:08:d8:17:06:57: bd:eb:33:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwUsEPEntvq2ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjYyMWQ0MjYtNTlkOS00OTMzLWI2OGMtZTExNmMxNDU5OThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf8V2bQ0nwm3VgnFG4TCyPnCGJA5R4XnWJCQ blCjArk2ebBjvkx/A8NRKH5qyMOwMx6ixFL8ADW8nAm7JuM/57E52bdeng4pbhQe h/E8SYR3XCsQ071xofreb4ioAGDVyBrIgDhTULX0oHusjh9TbGHGuLhoeXCpNMT8 fP5y/IvAOWBCTJQtwh1MK6dpytiEvorP08sgFXwh7wIyR3vdnYzYgNFEuzhOq/Nq 1XLOtKNLWZWD7USRGnC4Lyq4EgaLZNqXtnT1bpsaYBJKVs0ry14hgJ55YQDZp6Z7 AMxFj3loZFQeQ370uQbAMz9nlHCdta1h5bB3+vkz1NkjlYB8+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGLp0jG9xR8BzNSjEj2PCH//cxaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvNDI1OTViY2YtNjM5NS0z YTA5LWFhNTYtODhhMWM4NTdmMGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8SZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl1KBNpsCg6maKD1SFxtYqBfEI5fv8or4p1Ty6htSlcebH4h4cxPrxG NtowKCWLKFaC5qC45HV54eOI+5XOSJBHVp5ngiSCY4sRBZDwvRogaQuwDUCh/8zo XpGZCan7ZK/CnRPCM2NpywVeNueolQXPW+Gd7vs0fs5EFfguB+png9Y7iVtVHTsr Ut1lVNy1bbd4Nf6OjgiG+Jm+aN4LsVu+c6Ti4Rr0Ac05FJY2AR21q5SEmXLkHyKd LA69Q7jHMKodhxPhrVADsJvLXgqWo5Ht6t3USAx9gffopiPj9rrZh4bbkhqB8Zfm xqOGvGeECn/bEsaS3RoI2BcGV73rM2w= -----END CERTIFICATE-----Generated at Tue Oct 13 16:04:36 2026 by rpki-client