$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/dceb4a7f-6a33-3d77-9d2b-b2b7e7fd739d.roa File: dceb4a7f-6a33-3d77-9d2b-b2b7e7fd739d.roa (raw, json) Hash identifier: HcXorS7nhdenAB3jt1lnXgxG0gAMiHKNZywKWh8cEhc= Subject key identifier: 39:7A:EA:78:71:1B:FF:E5:CB:27:3D:59:86:24:AE:53:E7:62:E0:5E Certificate issuer: /CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56 Certificate serial: 010D0C9F4328584F093CDA79B54AD5BB313BC980 Authority key identifier: EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/dceb4a7f-6a33-3d77-9d2b-b2b7e7fd739d.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 207.167.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:da:79:b5:4a:d5:bb:31:3b:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=243b57b4-14f4-4d62-a77f-09a3bfee6307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:3f:52:5a:a1:67:86:ab:8e:94:34:7c:19: 96:7d:6e:ec:0a:8a:a9:40:71:41:81:a5:c8:31:73: 9d:92:32:8f:09:21:67:2e:53:f4:e9:00:9d:c4:42: 4c:cb:ee:3c:12:27:66:f7:38:b5:fa:40:fc:c9:e4: 2a:1d:74:6e:20:df:c1:26:3a:1a:dd:9d:20:1c:56: b7:30:32:30:0d:50:a9:b8:c7:93:10:6b:51:80:77: 96:92:4e:fd:69:b3:9c:4d:28:a9:72:0c:ba:ea:1e: a9:ba:bd:f4:7a:72:a6:a7:43:fa:7b:f2:90:26:b8: f3:31:b5:2a:6c:4a:fb:b8:a4:09:0e:17:1f:7b:76: 83:c7:96:0c:9b:4a:4c:ed:db:23:62:0d:06:59:dc: ae:e7:15:ec:eb:98:95:9c:dc:e6:58:c7:1d:ef:82: f8:31:9f:12:80:7e:6d:70:71:e5:45:b9:f1:be:00: ad:c3:26:e0:7b:92:29:dc:e7:ec:70:8b:7a:0d:96: c4:1d:10:3e:7b:5b:90:72:33:f3:69:46:cf:7e:56: c3:14:86:08:08:2e:af:0f:b1:89:b1:db:bf:dd:2a: 9f:63:19:37:bf:23:95:11:0a:b8:be:d8:55:1c:42: 77:69:cb:b6:fe:24:90:ff:b2:1c:9f:cb:0a:25:99: 6f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7A:EA:78:71:1B:FF:E5:CB:27:3D:59:86:24:AE:53:E7:62:E0:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/dceb4a7f-6a33-3d77-9d2b-b2b7e7fd739d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.crl X509v3 Authority Key Identifier: keyid:EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer sbgp-ipAddrBlock: critical IPv4: 207.167.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:69:d5:30:1e:61:a9:0f:19:24:53:a3:ab:a6:69:4e:03:d2: 64:b4:1f:25:97:c1:91:bf:2f:12:e1:0e:1b:e0:c3:97:9e:d2: 90:12:7a:ec:32:a0:16:40:9e:fc:39:12:cf:c0:aa:d5:5f:f4: 5b:35:8c:75:60:ce:d2:b1:a3:5a:52:71:9d:ba:e4:67:95:a7: 2d:c3:d8:bc:1d:02:84:7a:03:75:1a:d7:3f:5d:16:3b:e4:df: b4:3a:65:59:ad:35:5c:3a:30:de:88:18:08:63:29:f9:be:e0: 28:31:77:fb:54:b1:15:05:47:ee:67:52:7b:62:17:16:9c:2d: 37:6e:ff:cf:a7:70:b1:1d:3b:93:50:89:72:2e:08:97:3d:60: 88:8a:b8:2d:17:4e:67:cb:83:a5:50:0b:0a:7b:9e:c8:40:ff: 11:24:24:19:ea:0b:f2:81:a8:dc:2b:7a:b8:01:9e:94:62:35: 10:82:cb:4b:aa:c9:1a:c8:9f:ec:81:0d:6f:0c:8e:40:63:d4: ad:9f:4e:b4:bd:d3:f0:11:15:7f:cd:92:a9:a1:c0:7c:58:35: 32:ed:0e:60:a3:31:e0:b9:6a:91:95:db:8c:ed:cf:ff:10:e9: 57:47:d1:40:1c:f3:90:8a:b2:63:4f:73:af:73:b3:cd:1c:be: 15:62:3e:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNp5tUrVuzE7yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyNjBmMDQtZDg1Ni00ZTlmLTlkY2MtZjE2ZDkzYzNh YjU2MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MjQzYjU3YjQtMTRmNC00ZDYyLWE3N2YtMDlhM2JmZWU2MzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6I/UlqhZ4arjpQ0fBmWfW7sCoqpQHFBgaXI MXOdkjKPCSFnLlP06QCdxEJMy+48Eidm9zi1+kD8yeQqHXRuIN/BJjoa3Z0gHFa3 MDIwDVCpuMeTEGtRgHeWkk79abOcTSipcgy66h6pur30enKmp0P6e/KQJrjzMbUq bEr7uKQJDhcfe3aDx5YMm0pM7dsjYg0GWdyu5xXs65iVnNzmWMcd74L4MZ8SgH5t cHHlRbnxvgCtwybge5Ip3OfscIt6DZbEHRA+e1uQcjPzaUbPflbDFIYICC6vD7GJ sdu/3SqfYxk3vyOVEQq4vthVHEJ3acu2/iSQ/7Icn8sKJZlvLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDl66nhxG//lyyc9WYYkrlPnYuBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzI2 MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZkOTNjM2FiNTYvZGNlYjRhN2YtNmEzMy0z ZDc3LTlkMmItYjJiN2U3ZmQ3MzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWMyNjBmMDQtZDg1Ni00ZTlmLTlk Y2MtZjE2ZDkzYzNhYjU2L2FjMjYwZjA0LWQ4NTYtNGU5Zi05ZGNjLWYxNmQ5M2Mz YWI1Ni5jcmwwHwYDVR0jBBgwFoAU7yEh5J/N86BToYwMH70Ba5lsi5swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzI2MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZk OTNjM2FiNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6d+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBp1TAeYakPGSRTo6umaU4D0mS0HyWXwZG/LxLhDhvgw5ee0pASeuwy oBZAnvw5Es/AqtVf9Fs1jHVgztKxo1pScZ265GeVpy3D2LwdAoR6A3Ua1z9dFjvk 37Q6ZVmtNVw6MN6IGAhjKfm+4Cgxd/tUsRUFR+5nUntiFxacLTdu/8+ncLEdO5NQ iXIuCJc9YIiKuC0XTmfLg6VQCwp7nshA/xEkJBnqC/KBqNwrergBnpRiNRCCy0uq yRrIn+yBDW8MjkBj1K2fTrS90/ARFX/NkqmhwHxYNTLtDmCjMeC5apGV24ztz/8Q 6VdH0UAc85CKsmNPc69zs80cvhViPiU= -----END CERTIFICATE-----Generated at Mon Sep 21 17:57:57 2026 by rpki-client