$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/6cb8200e-007d-3896-8882-dbf73400a647.roa File: 6cb8200e-007d-3896-8882-dbf73400a647.roa (raw, json) Hash identifier: oDMS2+1P9b2Gmx5MVhDlpbO1gU7wkGVc1Vz7LBLtQEc= Subject key identifier: 26:B8:66:6D:50:0E:95:95:B2:17:B3:F9:6E:49:21:C4:B6:64:55:38 Certificate issuer: /CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d Certificate serial: 010D0C9F4328584EF717636F9B1DE44BAA3ADC80 Authority key identifier: 56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/6cb8200e-007d-3896-8882-dbf73400a647.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 167.94.127.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:63:6f:9b:1d:e4:4b:aa:3a:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=f067bdd9-7c12-4374-b8e8-3aac0024f04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:cb:9c:f9:24:4b:ab:1e:1b:95:32:1c:88:43: 18:e6:33:12:8d:40:a9:bd:b9:23:67:d6:f9:4d:3e: f7:84:12:7f:ca:39:89:cb:c5:60:c9:a0:86:c8:34: 75:52:60:fe:79:53:f0:bf:52:20:ae:16:9f:ed:1c: 9b:0d:fa:f8:4d:97:af:6d:cb:9a:b4:a8:95:3d:46: fc:87:6e:a6:93:92:ef:bf:e5:18:ce:82:5a:20:69: 65:1a:4a:2a:ad:04:3d:e4:2e:57:d2:8e:8d:80:be: 9e:f6:a9:66:19:92:1b:d7:7b:30:55:c4:6c:55:41: 8d:4c:51:6c:02:e7:1c:54:b1:a4:1b:e6:f2:e4:ba: fc:a3:ea:14:48:56:1b:74:7f:bd:d4:7d:1b:34:e8: df:0c:e7:35:6b:da:f3:3c:aa:ba:7c:13:42:44:43: e9:a1:c8:d1:24:df:db:66:42:10:75:a8:04:35:0a: 8a:5c:df:c8:f3:48:a7:61:1d:74:11:36:18:51:e8: 79:d2:4f:f4:a7:21:fe:dc:5b:70:a7:09:b5:af:82: 2b:fe:f1:27:4d:f4:59:60:89:7c:3f:c9:6c:5a:cf: 72:85:e6:27:6a:c3:ea:f6:96:f8:dd:77:a6:81:ac: 81:cb:fd:1e:ee:34:a0:a1:8f:a6:2d:4d:82:32:a7: ac:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B8:66:6D:50:0E:95:95:B2:17:B3:F9:6E:49:21:C4:B6:64:55:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/6cb8200e-007d-3896-8882-dbf73400a647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl X509v3 Authority Key Identifier: keyid:56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer sbgp-ipAddrBlock: critical IPv4: 167.94.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:64:5c:5f:a1:e9:27:8f:b8:52:3b:de:0c:96:b8:dc:3a:0c: aa:8c:b6:fd:cc:c0:ed:2c:23:6e:55:99:19:17:04:46:11:cc: 87:50:f5:41:f3:de:e5:6a:55:34:34:2d:88:86:b6:b8:d1:92: 17:07:12:97:c6:30:9b:51:21:83:36:c7:fc:53:ee:ef:cf:35: 9e:05:5c:77:f5:68:7d:be:dd:25:48:b2:17:b8:87:d7:68:c1: 62:a6:b4:eb:26:14:3c:ce:d6:54:51:3c:cc:41:17:e5:7f:61: 67:54:f3:15:2c:1c:b8:d8:a2:ae:4e:d8:46:7f:d1:16:39:51: bf:88:2f:1f:55:69:45:67:8e:2a:69:83:30:55:17:0b:0e:aa: a1:e6:3e:3c:fc:5c:24:f5:74:42:fb:80:2d:b0:dc:e4:83:55: 6a:73:e8:2b:34:16:c7:b1:26:2f:c4:8b:b6:57:37:10:77:22: 32:23:77:f6:5e:32:b9:a9:33:0a:38:72:32:ca:29:1d:de:20: ac:4a:f7:44:21:f0:f2:3d:b0:3d:67:ef:eb:34:b4:2b:03:4e: 50:8d:ce:51:c6:1c:4c:a2:da:72:71:ab:a4:ea:cf:72:73:a4: 20:54:45:a1:2c:01:23:83:69:3b:39:36:22:d6:57:32:ff:10: 59:28:36:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2Nvmx3kS6o63IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzA3ODQ4YTEtMDFlNS00MTI0LWFjNWYtOGQ5OGEzYWJh YTBkMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZjA2N2JkZDktN2MxMi00Mzc0LWI4ZTgtM2FhYzAwMjRmMDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cuc+SRLqx4blTIciEMY5jMSjUCpvbkjZ9b5 TT73hBJ/yjmJy8VgyaCGyDR1UmD+eVPwv1Igrhaf7RybDfr4TZevbcuatKiVPUb8 h26mk5Lvv+UYzoJaIGllGkoqrQQ95C5X0o6NgL6e9qlmGZIb13swVcRsVUGNTFFs AuccVLGkG+by5Lr8o+oUSFYbdH+91H0bNOjfDOc1a9rzPKq6fBNCREPpocjRJN/b ZkIQdagENQqKXN/I80inYR10ETYYUeh50k/0pyH+3Ftwpwm1r4Ir/vEnTfRZYIl8 P8lsWs9yheYnasPq9pb43XemgayBy/0e7jSgoY+mLU2CMqesFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCa4Zm1QDpWVshez+W5JIcS2ZFU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMDc4 NDhhMS0wMWU1LTQxMjQtYWM1Zi04ZDk4YTNhYmFhMGQvNmNiODIwMGUtMDA3ZC0z ODk2LTg4ODItZGJmNzM0MDBhNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzA3ODQ4YTEtMDFlNS00MTI0LWFj NWYtOGQ5OGEzYWJhYTBkLzMwNzg0OGExLTAxZTUtNDEyNC1hYzVmLThkOThhM2Fi YWEwZC5jcmwwHwYDVR0jBBgwFoAUVmEF5XhZ4A7Vaq4KnNWTnbo1yEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMDc4NDhhMS0wMWU1LTQxMjQtYWM1Zi04ZDk4 YTNhYmFhMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp15/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFkXF+h6SePuFI73gyWuNw6DKqMtv3MwO0sI25VmRkXBEYRzIdQ9UHz 3uVqVTQ0LYiGtrjRkhcHEpfGMJtRIYM2x/xT7u/PNZ4FXHf1aH2+3SVIshe4h9do wWKmtOsmFDzO1lRRPMxBF+V/YWdU8xUsHLjYoq5O2EZ/0RY5Ub+ILx9VaUVnjipp gzBVFwsOqqHmPjz8XCT1dEL7gC2w3OSDVWpz6Cs0FsexJi/Ei7ZXNxB3IjIjd/Ze MrmpMwo4cjLKKR3eIKxK90Qh8PI9sD1n7+s0tCsDTlCNzlHGHEyi2nJxq6Tqz3Jz pCBURaEsASODaTs5NiLWVzL/EFkoNlQ= -----END CERTIFICATE-----Generated at Thu Sep 24 10:18:02 2026 by rpki-client