$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa File: db042f94-eb5b-3bff-b1d0-249ded955868.roa (raw, json) Hash identifier: 8dWP0UxhBxS90Mtp0oxm8fIIhgGL//s9Ru7yeGpNUrc= Subject key identifier: DD:50:0F:24:01:86:37:E6:9C:7D:14:F4:77:3E:E1:D3:5F:3E:99:0D Certificate issuer: /CN=fdd167e1-80d8-4633-a835-6e5d62d964bc Certificate serial: 010D0C9F4328584D4D5A54C30547F8C1D5293384 Authority key identifier: 80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 53597 IP address blocks: 172.102.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:54:c3:05:47:f8:c1:d5:29:33:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd167e1-80d8-4633-a835-6e5d62d964bc Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=8f40ce34-37c3-46e5-b3b3-e51949649231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0b:bd:bf:53:66:95:56:6b:e7:b9:e5:e8:c5: 5a:12:7c:79:42:ad:f0:5c:d1:3c:23:9b:0d:30:e3: cb:d3:1b:45:aa:36:cb:35:bd:49:5f:fa:8b:c1:07: 6d:a3:b2:a1:8e:0a:e9:f4:37:67:19:ff:87:5a:f6: 44:f0:0d:1e:f0:6b:89:f8:48:51:3c:f5:e8:5b:ca: 0b:53:e5:ff:eb:17:ae:ff:38:88:e0:77:77:a3:0b: 05:1f:f8:6a:d3:04:06:fb:86:fc:3c:94:03:4d:6f: d9:53:1f:48:e1:14:74:0b:20:5f:dc:77:fc:44:79: dd:db:cb:ed:a0:7f:f0:c9:cd:72:92:2b:da:51:aa: 26:75:52:34:16:e6:d5:e5:55:7a:e4:8f:b2:23:a6: c9:3c:1e:5d:90:8a:3c:fb:15:37:e9:39:21:97:48: b9:6f:85:df:78:3d:69:84:af:c7:c5:f7:b7:b3:15: 58:f9:6b:02:ce:ea:b8:de:4b:c3:87:76:47:ef:26: 7d:e9:35:72:d0:e6:d9:48:95:93:fa:6e:41:4a:b9: 62:ae:5f:3c:2a:ec:9a:25:74:ab:7e:0b:64:4d:20: 42:d4:3e:44:99:86:ba:63:af:d3:9e:cf:93:d2:a2: be:e4:3d:de:07:51:cd:5f:ec:eb:5b:f9:8b:39:5e: 82:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:50:0F:24:01:86:37:E6:9C:7D:14:F4:77:3E:E1:D3:5F:3E:99:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl X509v3 Authority Key Identifier: keyid:80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer sbgp-ipAddrBlock: critical IPv4: 172.102.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:8e:d8:a1:4e:05:0f:ad:21:cd:35:83:e2:02:2e:21:d7:03: 8b:5d:72:e6:88:88:a3:fa:db:b3:f1:62:19:a9:c1:ea:46:73: 59:08:8c:a0:42:53:6a:25:36:c9:9e:bb:d7:f7:a0:75:c7:44: bb:f1:49:db:f5:45:1c:d9:68:0b:6f:8c:4c:ba:5a:94:56:e6: 2d:65:99:6b:0f:94:06:9a:ec:78:93:c2:38:06:ee:76:ae:9e: 4a:2b:a3:a8:10:aa:8f:f2:6e:a6:68:9b:b9:34:10:da:50:78: ad:b6:d1:7b:d6:86:e7:e3:ed:0d:e6:ad:b9:fa:79:4e:4a:87: fa:2d:ca:c2:c2:bf:d5:37:2e:4f:14:2a:95:3e:84:8e:35:43: 53:60:53:92:66:de:10:d4:0c:e7:00:87:02:8d:cf:eb:6d:b6: 39:23:52:2b:ae:c6:9a:7e:22:99:0d:0a:95:d9:10:fd:24:c2: 22:54:d1:db:13:34:b8:e7:3f:95:71:f8:2b:90:5d:e4:54:f0: 4d:22:9e:85:27:43:aa:c7:68:36:36:08:1d:88:88:f2:3a:1a: f1:b3:40:0d:86:5e:87:27:22:1b:db:d6:58:82:f7:0d:6e:44: 08:94:81:27:fb:b2:39:fe:ae:48:7e:63:c5:74:b1:e5:41:78: 76:34:e8:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWlTDBUf4wdUpM4QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkMTY3ZTEtODBkOC00NjMzLWE4MzUtNmU1ZDYyZDk2 NGJjMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk OGY0MGNlMzQtMzdjMy00NmU1LWIzYjMtZTUxOTQ5NjQ5MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQu9v1NmlVZr57nl6MVaEnx5Qq3wXNE8I5sN MOPL0xtFqjbLNb1JX/qLwQdto7Khjgrp9DdnGf+HWvZE8A0e8GuJ+EhRPPXoW8oL U+X/6xeu/ziI4Hd3owsFH/hq0wQG+4b8PJQDTW/ZUx9I4RR0CyBf3Hf8RHnd28vt oH/wyc1ykivaUaomdVI0FubV5VV65I+yI6bJPB5dkIo8+xU36Tkhl0i5b4XfeD1p hK/Hxfe3sxVY+WsCzuq43kvDh3ZH7yZ96TVy0ObZSJWT+m5BSrlirl88KuyaJXSr fgtkTSBC1D5EmYa6Y6/Tns+T0qK+5D3eB1HNX+zrW/mLOV6CJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1QDyQBhjfmnH0U9Hc+4dNfPpkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQx NjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVkNjJkOTY0YmMvZGIwNDJmOTQtZWI1Yi0z YmZmLWIxZDAtMjQ5ZGVkOTU1ODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmRkMTY3ZTEtODBkOC00NjMzLWE4 MzUtNmU1ZDYyZDk2NGJjL2ZkZDE2N2UxLTgwZDgtNDYzMy1hODM1LTZlNWQ2MmQ5 NjRiYy5jcmwwHwYDVR0jBBgwFoAUgNBuBic8afGkRmW5qThCr6CsFK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQxNjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVk NjJkOTY0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGO2KFOBQ+tIc01g+ICLiHXA4tdcuaIiKP627PxYhmpwepGc1kIjKBC U2olNsmeu9f3oHXHRLvxSdv1RRzZaAtvjEy6WpRW5i1lmWsPlAaa7HiTwjgG7nau nkoro6gQqo/ybqZom7k0ENpQeK220XvWhufj7Q3mrbn6eU5Kh/otysLCv9U3Lk8U KpU+hI41Q1NgU5Jm3hDUDOcAhwKNz+tttjkjUiuuxpp+IpkNCpXZEP0kwiJU0dsT NLjnP5Vx+CuQXeRU8E0inoUnQ6rHaDY2CB2IiPI6GvGzQA2GXocnIhvb1liC9w1u RAiUgSf7sjn+rkh+Y8V0seVBeHY06EE= -----END CERTIFICATE-----Generated at Fri Apr 3 20:16:34 2026 by rpki-client