$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/0ef086cf-516b-31fd-b0fa-1122e8b749cd.roa File: 0ef086cf-516b-31fd-b0fa-1122e8b749cd.roa (raw, json) Hash identifier: 4bN8iy+kqTlbm9L8M5RldyIxDEGykqLv5KEIC7bMj98= Subject key identifier: A4:26:37:71:20:89:5A:33:5D:B4:7E:57:4E:C9:AA:34:9C:70:ED:BE Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584CAA271A8358FAF1E9B22539C0 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/0ef086cf-516b-31fd-b0fa-1122e8b749cd.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 35946 IP address blocks: 207.45.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:1a:83:58:fa:f1:e9:b2:25:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=4ddb1bfa-9091-4792-b4e1-d9d00c7da3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:49:37:86:a2:79:87:cd:b5:fe:9b:07:c8:e8: 79:68:9c:48:89:37:2d:5b:c9:e2:b4:54:49:f5:50: d2:14:88:59:ea:b6:93:b7:fd:bf:41:f0:bd:e7:88: ad:4a:85:f3:84:a8:7c:1b:16:d0:d4:5c:de:02:ee: d8:ab:42:8f:c1:29:20:4f:13:1d:0e:b1:87:09:44: 20:88:8b:c5:c7:59:c4:64:f4:c0:12:8e:d6:df:2d: 42:f1:0e:57:c3:f7:e9:54:e3:25:30:3a:0a:6a:d9: e2:6e:23:e0:48:02:46:23:ad:1c:a3:c4:05:9a:1b: df:d6:cc:7e:ce:3e:5b:36:a7:e6:bb:55:b2:7c:8c: b3:b9:ab:1a:3b:60:f4:5a:12:41:3c:04:94:e8:6f: 4b:8a:40:fa:65:ee:8e:c6:5e:59:bd:16:7c:b3:e0: e9:af:cd:6d:f4:51:98:9b:96:a4:ad:78:28:b6:77: f4:02:7c:c8:e9:e2:75:9c:4a:80:39:cf:1c:79:a4: 27:ce:6f:a9:c0:16:ee:e1:d6:ff:52:b6:80:48:90: 89:c4:2b:e1:07:9c:40:f2:53:f3:72:3b:ed:e2:7c: ca:d3:c8:18:af:71:e6:eb:2d:e8:a5:63:23:3f:f4: dd:b6:1c:5a:c7:19:7e:75:7e:88:04:6d:d0:f3:4c: 84:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:26:37:71:20:89:5A:33:5D:B4:7E:57:4E:C9:AA:34:9C:70:ED:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/0ef086cf-516b-31fd-b0fa-1122e8b749cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 207.45.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:2d:ac:38:c4:f1:16:f2:e0:9a:c5:4f:5e:ca:1b:bf:02:9e: 50:6d:ea:bd:e5:4f:40:ba:89:f1:ca:0b:36:b9:e7:b9:9c:54: 7d:49:71:5f:ed:58:1b:8b:cf:57:c2:80:52:fd:3d:5a:42:12: 98:83:09:98:cb:34:50:e2:11:92:b5:fc:41:ef:c2:c8:cb:dd: 9f:1e:6e:a6:04:f2:23:8d:3a:80:91:d0:2d:5f:b4:70:ba:72: a1:3f:5e:0b:bb:a0:f6:0a:2d:2e:1b:60:cc:de:d3:55:3e:0b: fc:b1:79:14:cb:01:b8:5f:f6:b2:09:4f:40:8b:14:8a:c5:d6: ac:84:88:98:2f:f9:ba:42:0f:d0:29:74:31:dd:e4:8a:25:da: 64:52:f6:7c:ef:c3:1d:fb:40:fd:17:5f:d5:68:86:b1:d0:8c: 38:39:ae:2c:2b:d1:bf:37:6c:9a:83:37:6e:2e:bb:6b:b0:6d: df:1d:1d:ec:11:76:99:e2:01:40:f5:b1:a7:29:26:22:0c:51: e8:e4:8e:52:42:89:7b:49:c0:75:6c:c5:3f:1c:62:af:1f:6c: 7f:e8:b8:94:d7:39:6d:07:00:25:12:89:01:ee:e5:aa:e4:ad: 4f:de:08:b9:38:ba:96:20:3e:91:13:4d:0b:35:f8:1a:44:5c: 97:35:54:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxqDWPrx6bIlOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NGRkYjFiZmEtOTA5MS00NzkyLWI0ZTEtZDlkMDBjN2RhM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Uk3hqJ5h821/psHyOh5aJxIiTctW8nitFRJ 9VDSFIhZ6raTt/2/QfC954itSoXzhKh8GxbQ1FzeAu7Yq0KPwSkgTxMdDrGHCUQg iIvFx1nEZPTAEo7W3y1C8Q5Xw/fpVOMlMDoKatnibiPgSAJGI60co8QFmhvf1sx+ zj5bNqfmu1WyfIyzuasaO2D0WhJBPASU6G9LikD6Ze6Oxl5ZvRZ8s+Dpr81t9FGY m5akrXgotnf0AnzI6eJ1nEqAOc8ceaQnzm+pwBbu4db/UraASJCJxCvhB5xA8lPz cjvt4nzK08gYr3Hm6y3opWMjP/Tdthxaxxl+dX6IBG3Q80yEMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQmN3EgiVozXbR+V07JqjSccO2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvMGVmMDg2Y2YtNTE2Yi0z MWZkLWIwZmEtMTEyMmU4Yjc0OWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzy2kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAtrDjE8Rby4JrFT17KG78CnlBt6r3lT0C6ifHKCza557mcVH1JcV/t WBuLz1fCgFL9PVpCEpiDCZjLNFDiEZK1/EHvwsjL3Z8ebqYE8iONOoCR0C1ftHC6 cqE/Xgu7oPYKLS4bYMze01U+C/yxeRTLAbhf9rIJT0CLFIrF1qyEiJgv+bpCD9Ap dDHd5Iol2mRS9nzvwx37QP0XX9VohrHQjDg5riwr0b83bJqDN24uu2uwbd8dHewR dpniAUD1sacpJiIMUejkjlJCiXtJwHVsxT8cYq8fbH/ouJTXOW0HACUSiQHu5ark rU/eCLk4upYgPpETTQs1+BpEXJc1VLM= -----END CERTIFICATE-----Generated at Mon Mar 2 01:58:58 2026 by rpki-client