$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa File: db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa (raw, json) Hash identifier: H+kDNqvsl/T5KtI5HxvU7dxTCWaAHj3HGUrNgRGozzo= Subject key identifier: 69:C3:6D:82:FC:BF:B1:90:FC:E7:F9:64:81:CF:2C:9F:45:CE:B6:C7 Certificate issuer: /CN=8f0b1fb6-c822-4463-9321-b88b9a81302c Certificate serial: 010D0C9F4328584F2EED118391BB3B809157AD00 Authority key identifier: 01:F6:42:9E:0B:5B:80:A4:DC:E4:64:15:83:C6:8C:41:69:C7:33:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 400204 IP address blocks: 207.167.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:11:83:91:bb:3b:80:91:57:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0b1fb6-c822-4463-9321-b88b9a81302c Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=6a5216ef-f640-46bd-86b5-9b485a73e70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:26:9c:5f:d1:99:00:7f:ad:ca:b8:01:df: 9f:fd:97:2a:7b:3e:3c:39:bd:a4:00:f2:77:c7:83: ec:c7:de:b6:ea:85:8c:58:d7:75:fc:46:40:c3:bd: 1d:13:0e:37:ba:b6:c1:20:69:00:78:f2:0f:00:78: a0:2f:88:aa:89:42:de:23:28:ee:a2:ff:01:d3:ec: 59:9f:41:97:36:ed:22:53:bb:97:98:7d:a8:38:a2: 36:30:de:50:e2:c5:9a:86:6a:b8:26:68:fd:cb:3d: 2b:4d:97:94:65:f1:44:0b:dc:3a:04:dd:fe:f9:06: fc:0f:27:7c:b6:ac:a1:2d:93:8c:c2:bc:fc:8e:67: 94:00:ba:d3:ad:2e:fb:90:6e:30:36:95:f5:cf:ab: 35:ad:76:20:bf:ac:2a:4d:51:f2:ed:2e:3f:21:a6: 51:9e:67:12:34:5a:68:c0:18:a2:99:58:26:3c:72: 2f:f9:e6:d7:f9:96:b3:5c:7f:25:10:2a:b5:b9:66: 0a:57:7a:7a:07:30:2e:59:76:ff:38:92:9a:fd:f5: 7e:36:ba:d5:27:67:0f:a3:3e:a9:5a:6f:9d:26:1b: 27:72:8f:1f:f5:d4:cf:ee:5d:b4:f5:8d:be:f1:40: 91:69:69:32:d3:a1:81:0e:00:7b:8c:2d:26:e4:68: 49:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C3:6D:82:FC:BF:B1:90:FC:E7:F9:64:81:CF:2C:9F:45:CE:B6:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.crl X509v3 Authority Key Identifier: keyid:01:F6:42:9E:0B:5B:80:A4:DC:E4:64:15:83:C6:8C:41:69:C7:33:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer sbgp-ipAddrBlock: critical IPv4: 207.167.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:85:71:02:6d:0d:f1:ee:59:e7:e4:93:5f:ce:6d:42:6f:f4: d6:92:20:32:b6:85:5a:47:a4:12:35:6b:69:c7:93:2d:58:6b: 4c:80:bf:13:38:cb:f3:b5:19:05:75:1c:95:de:f6:ed:e8:9b: 25:b1:e6:96:e0:c1:05:d2:9d:72:60:62:e1:d3:05:eb:c0:c6: e9:1e:e8:ef:9b:34:65:24:eb:9b:1f:c3:ca:50:ce:28:f6:08: 12:48:2d:76:a8:2c:1c:ae:4b:a6:62:18:e0:91:3a:29:ec:29: ca:dd:ca:2a:04:d8:da:f7:8d:d3:8a:d6:b1:6a:dd:6f:ce:3d: 68:d4:9a:cf:c3:98:f0:36:17:5b:b0:6e:8f:db:81:8f:d8:de: c7:57:30:27:dc:a7:7a:80:e1:f0:a1:d3:98:8b:2c:61:a5:6a: 2a:2e:5f:13:10:cd:9b:25:c1:b6:10:3b:06:3f:76:eb:24:0d: 20:5f:07:99:dc:cf:1f:bf:f3:e7:2f:32:8d:39:c3:97:7f:c8: 18:65:36:30:c0:da:7b:23:cc:33:17:77:2a:49:1f:ca:27:59: 8a:3e:61:d3:db:9a:0b:ae:1b:a7:f7:51:3f:c1:10:76:68:99: 8d:10:06:a4:06:ff:f2:8a:13:bb:9e:eb:f3:38:5b:f0:bb:d2: 82:07:a1:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RGDkbs7gJFXrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYjFmYjYtYzgyMi00NDYzLTkzMjEtYjg4YjlhODEz MDJjMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NmE1MjE2ZWYtZjY0MC00NmJkLTg2YjUtOWI0ODVhNzNlNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZomnF/RmQB/rcq4Ad+f/Zcqez48Ob2kAPJ3 x4Psx9626oWMWNd1/EZAw70dEw43urbBIGkAePIPAHigL4iqiULeIyjuov8B0+xZ n0GXNu0iU7uXmH2oOKI2MN5Q4sWahmq4Jmj9yz0rTZeUZfFEC9w6BN3++Qb8Dyd8 tqyhLZOMwrz8jmeUALrTrS77kG4wNpX1z6s1rXYgv6wqTVHy7S4/IaZRnmcSNFpo wBiimVgmPHIv+ebX+ZazXH8lECq1uWYKV3p6BzAuWXb/OJKa/fV+NrrVJ2cPoz6p Wm+dJhsnco8f9dTP7l209Y2+8UCRaWky06GBDgB7jC0m5GhJfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnDbYL8v7GQ/Of5ZIHPLJ9FzrbHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjBi MWZiNi1jODIyLTQ0NjMtOTMyMS1iODhiOWE4MTMwMmMvZGI2MjIxYjAtMmEzNS0z N2RjLWIwMmQtNzQyOWNkM2QzZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGYwYjFmYjYtYzgyMi00NDYzLTkz MjEtYjg4YjlhODEzMDJjLzhmMGIxZmI2LWM4MjItNDQ2My05MzIxLWI4OGI5YTgx MzAyYy5jcmwwHwYDVR0jBBgwFoAUAfZCngtbgKTc5GQVg8aMQWnHMw8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjBiMWZiNi1jODIyLTQ0NjMtOTMyMS1iODhi OWE4MTMwMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6d7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeFcQJtDfHuWefkk1/ObUJv9NaSIDK2hVpHpBI1a2nHky1Ya0yAvxM4 y/O1GQV1HJXe9u3omyWx5pbgwQXSnXJgYuHTBevAxuke6O+bNGUk65sfw8pQzij2 CBJILXaoLByuS6ZiGOCROinsKcrdyioE2Nr3jdOK1rFq3W/OPWjUms/DmPA2F1uw bo/bgY/Y3sdXMCfcp3qA4fCh05iLLGGlaiouXxMQzZslwbYQOwY/duskDSBfB5nc zx+/8+cvMo05w5d/yBhlNjDA2nsjzDMXdypJH8onWYo+YdPbmguuG6f3UT/BEHZo mY0QBqQG//KKE7ue6/M4W/C70oIHocE= -----END CERTIFICATE-----Generated at Sat Oct 10 16:47:54 2026 by rpki-client