$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa File: db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa (raw, json) Hash identifier: D4BefKXeGV5mt2aWeHzQJtz9Wqbmk8eaTHU6FWKf724= Subject key identifier: E4:0F:AC:DB:3E:2B:47:35:89:09:A8:B2:59:9D:41:D5:42:F6:E4:E1 Certificate issuer: /CN=8f0b1fb6-c822-4463-9321-b88b9a81302c Certificate serial: 010D0C9F4328584E8C8A4419A3E6C4E4277FF849 Authority key identifier: 01:F6:42:9E:0B:5B:80:A4:DC:E4:64:15:83:C6:8C:41:69:C7:33:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 400204 IP address blocks: 207.167.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:44:19:a3:e6:c4:e4:27:7f:f8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0b1fb6-c822-4463-9321-b88b9a81302c Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=9e121cf7-5792-4fca-8138-0a00b11accf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:54:2c:3b:91:3c:da:66:9c:39:8c:4f:ae: 64:1e:80:c5:df:c6:90:f5:22:7c:67:ed:eb:33:49: 1e:9d:66:93:c8:96:f9:66:0f:b2:51:4d:51:56:3b: 46:29:f1:82:99:a4:89:44:b6:73:d3:ed:52:2c:9f: 47:f3:a7:2c:10:f6:75:8e:aa:61:8e:03:93:d3:f6: de:93:2b:e8:1a:84:71:7c:81:2f:29:42:33:ae:dc: 71:0b:b8:ef:f7:44:c8:ad:c5:6c:05:14:06:c7:b2: 9b:3a:9f:b3:8a:ca:39:f9:62:be:91:ed:8c:d0:b6: fc:d9:9f:f0:73:49:59:06:8e:07:28:63:1e:f0:05: ff:26:a1:0f:a4:6b:03:28:86:21:2d:ae:a8:c3:3e: 16:fa:cc:75:ae:fc:33:10:0a:63:ff:e9:de:33:74: 22:bc:cc:6a:ab:f6:bb:48:22:24:de:51:66:12:ad: d6:d7:f1:bd:aa:f0:e8:5c:08:95:0c:62:50:b2:63: e7:5b:e8:8b:a7:ab:d6:8b:61:53:1d:c1:10:e6:76: cc:04:76:9f:9e:fa:bc:a1:06:ee:8f:d3:5b:7c:b9: 92:52:65:9e:e1:51:90:64:85:5d:cb:a1:d3:ac:93: 78:27:b5:c3:26:65:c5:d8:83:87:3d:45:63:73:4d: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0F:AC:DB:3E:2B:47:35:89:09:A8:B2:59:9D:41:D5:42:F6:E4:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.crl X509v3 Authority Key Identifier: keyid:01:F6:42:9E:0B:5B:80:A4:DC:E4:64:15:83:C6:8C:41:69:C7:33:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer sbgp-ipAddrBlock: critical IPv4: 207.167.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e0:cb:cc:3e:23:84:0c:e7:28:a7:7f:c6:6f:98:61:b1:1a: 69:bb:59:a9:ff:85:69:2d:21:2b:25:b9:5c:07:3c:1c:9c:80: 7b:5f:1e:8e:30:1e:50:83:94:f8:c1:6e:56:ff:74:c7:fd:dd: cc:c9:da:8d:06:2a:15:4a:60:a1:8f:4f:94:af:58:9b:8c:08: 65:2b:81:d1:7f:b6:bc:30:53:ee:e4:56:ba:c6:e7:72:4e:10: ae:b3:fc:02:a3:cc:0a:97:77:51:06:bd:7e:22:ee:55:14:52: b0:77:29:75:67:16:1a:5f:91:4a:b7:e3:f0:68:d1:d5:55:81: 7f:00:30:71:c8:3d:3f:bd:e2:b5:5e:cd:01:e4:ed:82:e6:ab: 85:58:51:1e:4c:04:86:47:c3:5a:62:bf:66:7e:89:65:32:4f: 48:5f:43:28:45:8e:ff:ea:8a:22:dd:a5:90:53:0f:b9:16:eb: 52:0e:62:03:e5:03:2a:4b:8a:fe:6e:61:4a:f1:56:fd:9e:65: af:7a:d9:1b:0a:d0:7d:5c:9a:b8:29:a5:aa:ee:d4:18:fe:e1: 26:3a:15:23:7c:13:95:42:09:d9:16:07:b2:e2:05:98:ab:be: c3:f0:88:f4:13:00:b2:ba:cb:e6:9f:9d:9c:1c:c1:64:0f:71: b3:81:c4:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6MikQZo+bE5Cd/+EkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYjFmYjYtYzgyMi00NDYzLTkzMjEtYjg4YjlhODEz MDJjMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk OWUxMjFjZjctNTc5Mi00ZmNhLTgxMzgtMGEwMGIxMWFjY2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukFULDuRPNpmnDmMT65kHoDF38aQ9SJ8Z+3r M0kenWaTyJb5Zg+yUU1RVjtGKfGCmaSJRLZz0+1SLJ9H86csEPZ1jqphjgOT0/be kyvoGoRxfIEvKUIzrtxxC7jv90TIrcVsBRQGx7KbOp+ziso5+WK+ke2M0Lb82Z/w c0lZBo4HKGMe8AX/JqEPpGsDKIYhLa6owz4W+sx1rvwzEApj/+neM3QivMxqq/a7 SCIk3lFmEq3W1/G9qvDoXAiVDGJQsmPnW+iLp6vWi2FTHcEQ5nbMBHafnvq8oQbu j9NbfLmSUmWe4VGQZIVdy6HTrJN4J7XDJmXF2IOHPUVjc029NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQPrNs+K0c1iQmoslmdQdVC9uThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjBi MWZiNi1jODIyLTQ0NjMtOTMyMS1iODhiOWE4MTMwMmMvZGI2MjIxYjAtMmEzNS0z N2RjLWIwMmQtNzQyOWNkM2QzZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGYwYjFmYjYtYzgyMi00NDYzLTkz MjEtYjg4YjlhODEzMDJjLzhmMGIxZmI2LWM4MjItNDQ2My05MzIxLWI4OGI5YTgx MzAyYy5jcmwwHwYDVR0jBBgwFoAUAfZCngtbgKTc5GQVg8aMQWnHMw8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjBiMWZiNi1jODIyLTQ0NjMtOTMyMS1iODhi OWE4MTMwMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6d7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPgy8w+I4QM5yinf8ZvmGGxGmm7Wan/hWktISsluVwHPBycgHtfHo4w HlCDlPjBblb/dMf93czJ2o0GKhVKYKGPT5SvWJuMCGUrgdF/trwwU+7kVrrG53JO EK6z/AKjzAqXd1EGvX4i7lUUUrB3KXVnFhpfkUq34/Bo0dVVgX8AMHHIPT+94rVe zQHk7YLmq4VYUR5MBIZHw1piv2Z+iWUyT0hfQyhFjv/qiiLdpZBTD7kW61IOYgPl AypLiv5uYUrxVv2eZa962RsK0H1cmrgpparu1Bj+4SY6FSN8E5VCCdkWB7LiBZir vsPwiPQTALK6y+afnZwcwWQPcbOBxLc= -----END CERTIFICATE-----Generated at Fri Jul 24 17:04:45 2026 by rpki-client