$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/b46460c6-16e8-3a48-8444-3a9c50536a3e.roa File: b46460c6-16e8-3a48-8444-3a9c50536a3e.roa (raw, json) Hash identifier: lzWMT9uxLwmz98VlJBsCcuJagSEqmBjN/TC7u2dnjRE= Subject key identifier: 62:15:77:69:FB:A1:B2:3E:80:6B:A8:7B:AB:3A:93:C0:9B:BF:06:A1 Certificate issuer: /CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56 Certificate serial: 010D0C9F4328584D95EFF5C3DD71915C3E36C500 Authority key identifier: EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/b46460c6-16e8-3a48-8444-3a9c50536a3e.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 207.167.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f5:c3:dd:71:91:5c:3e:36:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=5a34260c-3680-4304-8bb2-42fa94c7618e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4b:7e:b0:d0:4c:18:f8:9f:05:0e:cb:49:c7: 1e:d7:f2:e3:70:90:da:43:48:a3:74:e9:ea:b2:0b: 89:fc:08:47:db:3f:b5:47:16:94:8c:02:68:3a:51: 61:18:63:2d:fc:23:12:c6:99:3b:73:99:30:de:3b: 70:45:30:71:f7:09:a8:04:be:38:68:fb:eb:ad:25: 55:67:91:4b:ec:ca:f6:db:0e:24:27:4b:2f:37:17: 08:6e:6c:de:c3:48:4f:45:39:2a:52:87:a9:b6:e0: b5:05:0d:73:7f:77:25:c5:ec:6b:3d:f3:9e:17:14: 2b:af:f4:89:5d:a9:6b:94:cd:f6:d5:98:bc:e6:35: 6b:d3:6a:c8:f3:70:46:ca:5d:84:e6:fe:2e:08:6a: 8e:d9:db:06:22:11:c6:aa:fa:82:66:4b:65:2b:70: 28:0c:36:ae:40:1f:e5:50:30:7c:d4:34:a3:f0:7f: fc:ad:60:4e:54:5a:02:da:0b:07:d2:22:7c:eb:16: aa:87:28:88:e3:b9:5f:ba:c2:ba:df:ce:fa:5e:51: a9:34:a8:9c:31:7a:dc:14:21:9c:c2:a7:7d:ed:eb: ee:b3:d7:78:9f:5b:d3:95:ed:91:29:98:73:27:5d: 51:31:6f:12:64:0e:1f:75:77:99:37:87:a1:55:98: a2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:15:77:69:FB:A1:B2:3E:80:6B:A8:7B:AB:3A:93:C0:9B:BF:06:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/b46460c6-16e8-3a48-8444-3a9c50536a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.crl X509v3 Authority Key Identifier: keyid:EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer sbgp-ipAddrBlock: critical IPv4: 207.167.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e4:73:d7:5a:c0:3d:11:f7:fb:be:c7:79:11:f7:b1:85:ac: 68:22:a3:e0:2d:79:85:c8:33:82:73:5d:7a:88:02:c2:49:a0: 0a:4c:cf:ab:51:89:9d:49:32:8a:06:61:ee:69:4f:d2:fa:7f: 24:aa:ac:1d:1d:d9:7e:88:a8:75:dc:02:51:69:5b:4a:00:c3: c3:88:9b:87:72:2a:26:2e:be:4e:38:f3:d2:7a:e6:e0:3a:74: 1c:3c:36:d9:65:d1:61:4a:fc:f1:09:a9:4c:87:a0:76:2a:48: c3:2f:f9:4e:48:3b:4d:8c:87:bd:34:40:dc:c1:7d:15:6a:d0: 59:12:f6:da:9c:ec:f0:93:ff:9c:80:bc:95:9f:e5:33:56:d5: 28:4f:f3:b9:8f:7f:41:d3:dc:d3:1a:d3:be:30:89:06:1f:31: 52:90:eb:df:0d:3e:76:48:e9:be:3b:05:95:74:d0:93:65:35: 13:96:55:98:e6:39:9d:6c:11:26:ec:ec:02:22:1b:f7:61:cc: 17:12:53:86:4d:c1:5c:f6:6e:13:40:a0:f7:7e:31:15:2b:95: d6:44:7e:fe:33:a7:8f:93:43:89:30:d0:c2:e5:8f:e2:d6:7d: 70:54:88:7b:22:fc:bd:28:01:b5:bb:a4:d9:42:e8:6b:e4:78: a8:ff:7b:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7/XD3XGRXD42xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyNjBmMDQtZDg1Ni00ZTlmLTlkY2MtZjE2ZDkzYzNh YjU2MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NWEzNDI2MGMtMzY4MC00MzA0LThiYjItNDJmYTk0Yzc2MThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkt+sNBMGPifBQ7LScce1/LjcJDaQ0ijdOnq sguJ/AhH2z+1RxaUjAJoOlFhGGMt/CMSxpk7c5kw3jtwRTBx9wmoBL44aPvrrSVV Z5FL7Mr22w4kJ0svNxcIbmzew0hPRTkqUoeptuC1BQ1zf3clxexrPfOeFxQrr/SJ XalrlM321Zi85jVr02rI83BGyl2E5v4uCGqO2dsGIhHGqvqCZktlK3AoDDauQB/l UDB81DSj8H/8rWBOVFoC2gsH0iJ86xaqhyiI47lfusK63876XlGpNKicMXrcFCGc wqd97evus9d4n1vTle2RKZhzJ11RMW8SZA4fdXeZN4ehVZii7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIVd2n7obI+gGuoe6s6k8CbvwahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzI2 MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZkOTNjM2FiNTYvYjQ2NDYwYzYtMTZlOC0z YTQ4LTg0NDQtM2E5YzUwNTM2YTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWMyNjBmMDQtZDg1Ni00ZTlmLTlk Y2MtZjE2ZDkzYzNhYjU2L2FjMjYwZjA0LWQ4NTYtNGU5Zi05ZGNjLWYxNmQ5M2Mz YWI1Ni5jcmwwHwYDVR0jBBgwFoAU7yEh5J/N86BToYwMH70Ba5lsi5swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzI2MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZk OTNjM2FiNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6d/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbkc9dawD0R9/u+x3kR97GFrGgio+AteYXIM4JzXXqIAsJJoApMz6tR iZ1JMooGYe5pT9L6fySqrB0d2X6IqHXcAlFpW0oAw8OIm4dyKiYuvk4489J65uA6 dBw8Ntll0WFK/PEJqUyHoHYqSMMv+U5IO02Mh700QNzBfRVq0FkS9tqc7PCT/5yA vJWf5TNW1ShP87mPf0HT3NMa074wiQYfMVKQ698NPnZI6b47BZV00JNlNROWVZjm OZ1sESbs7AIiG/dhzBcSU4ZNwVz2bhNAoPd+MRUrldZEfv4zp4+TQ4kw0MLlj+LW fXBUiHsi/L0oAbW7pNlC6GvkeKj/e6s= -----END CERTIFICATE-----Generated at Mon Apr 27 14:02:06 2026 by rpki-client