$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa File: db042f94-eb5b-3bff-b1d0-249ded955868.roa (raw, json) Hash identifier: ZLD3/dV2iDhzWvIt+R/kelE+dCFZiXgcsgahxhTNSJc= Subject key identifier: 38:E8:4E:5A:90:A0:60:5E:70:EC:C0:C0:B0:FF:EA:E7:9E:39:F3:88 Certificate issuer: /CN=fdd167e1-80d8-4633-a835-6e5d62d964bc Certificate serial: 010D0C9F4328584E2D9F10EDD0C77A3183CD94A0 Authority key identifier: 80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 53597 IP address blocks: 172.102.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:10:ed:d0:c7:7a:31:83:cd:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd167e1-80d8-4633-a835-6e5d62d964bc Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=c6e6bf67-98e7-459e-a5a3-581a724abca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:de:27:96:df:f5:17:70:c5:16:d4:6b:66: 9a:86:61:06:69:45:96:e2:42:d4:3d:3a:f8:c9:2e: 11:0f:f1:cb:57:ae:1c:3a:c0:d9:97:0f:30:5e:65: 54:ff:22:8d:b8:ab:0c:1f:87:be:cd:57:32:65:ec: 49:f2:93:41:2c:ea:22:28:c1:33:47:b0:12:64:1a: 11:33:86:3c:a6:78:f9:09:4c:07:63:6f:40:f3:59: 48:a2:1e:2d:dc:1a:f4:81:fe:bc:74:3d:c9:50:45: 7a:58:eb:a0:92:a0:b1:01:1d:3d:a1:9e:d6:69:3d: 7b:43:0f:44:d6:9b:55:a3:87:de:20:2f:c7:c1:55: 4f:60:ff:53:da:99:12:eb:2e:a3:99:08:1b:a0:12: ef:03:a4:1f:21:52:e5:bf:d7:46:8a:f7:da:b0:60: ed:36:54:f0:d2:fd:d0:c8:ba:cb:8d:8f:f8:03:dc: fc:35:f7:80:fd:0a:32:12:d8:03:78:60:a5:4c:84: 87:47:01:3b:c4:eb:56:96:7c:1a:b1:fa:aa:b9:c0: 94:b0:b6:2c:af:26:61:ce:67:12:79:a8:3c:b4:04: c7:b7:5e:6f:06:72:c9:c5:9b:7a:4a:6e:5d:5e:78: cf:a0:98:ef:f2:f1:82:7c:f4:d9:33:cf:3a:0a:68: ae:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E8:4E:5A:90:A0:60:5E:70:EC:C0:C0:B0:FF:EA:E7:9E:39:F3:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl X509v3 Authority Key Identifier: keyid:80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer sbgp-ipAddrBlock: critical IPv4: 172.102.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:df:1c:0d:63:17:cd:30:9d:7c:e0:f7:0e:4d:0a:6e:b2:c7: b6:9a:f4:0b:85:9e:76:67:99:7d:60:16:d5:fb:cf:32:26:9d: a0:17:3b:ca:a1:74:b1:9f:a0:4a:6a:7c:34:ec:bf:70:9d:69: 44:68:0c:02:4f:b5:1e:2f:a9:9a:4a:54:61:23:6d:26:47:1d: c7:02:a3:91:f9:d1:83:a5:b7:7b:64:2b:81:b0:fe:0b:15:87: 88:9e:79:b5:06:d3:15:59:3b:3c:ad:91:e9:e5:6b:55:85:bc: e0:93:85:23:2b:b1:40:3e:47:05:4c:2b:05:01:34:a5:40:e7: d2:c0:ed:cc:28:dc:f1:4d:55:66:37:b8:b7:ed:7a:97:5a:72: 7b:45:c5:69:57:92:4b:f6:b3:ec:40:57:d5:26:97:92:bf:50: e9:55:7e:9c:ff:b5:eb:4d:4f:57:73:32:22:26:1f:39:4b:da: a3:12:73:fc:ba:b8:1f:74:ae:ac:80:45:a1:39:fd:bc:06:f0: 2c:1f:5a:d0:a4:40:0a:db:0a:1b:8d:8f:1e:a7:1a:4a:30:e2: 28:4c:ea:78:2f:3e:10:78:ef:49:0c:17:b6:4f:cd:d0:95:d9: 41:31:35:48:19:79:9b:d0:3b:57:3d:1f:6d:43:a9:d0:f0:29: eb:3b:4b:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnxDt0Md6MYPNlKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkMTY3ZTEtODBkOC00NjMzLWE4MzUtNmU1ZDYyZDk2 NGJjMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk YzZlNmJmNjctOThlNy00NTllLWE1YTMtNTgxYTcyNGFiY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JjeJ5bf9RdwxRbUa2aahmEGaUWW4kLUPTr4 yS4RD/HLV64cOsDZlw8wXmVU/yKNuKsMH4e+zVcyZexJ8pNBLOoiKMEzR7ASZBoR M4Y8pnj5CUwHY29A81lIoh4t3Br0gf68dD3JUEV6WOugkqCxAR09oZ7WaT17Qw9E 1ptVo4feIC/HwVVPYP9T2pkS6y6jmQgboBLvA6QfIVLlv9dGivfasGDtNlTw0v3Q yLrLjY/4A9z8NfeA/QoyEtgDeGClTISHRwE7xOtWlnwasfqqucCUsLYsryZhzmcS eag8tATHt15vBnLJxZt6Sm5dXnjPoJjv8vGCfPTZM886CmiuYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjoTlqQoGBecOzAwLD/6ueeOfOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQx NjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVkNjJkOTY0YmMvZGIwNDJmOTQtZWI1Yi0z YmZmLWIxZDAtMjQ5ZGVkOTU1ODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmRkMTY3ZTEtODBkOC00NjMzLWE4 MzUtNmU1ZDYyZDk2NGJjL2ZkZDE2N2UxLTgwZDgtNDYzMy1hODM1LTZlNWQ2MmQ5 NjRiYy5jcmwwHwYDVR0jBBgwFoAUgNBuBic8afGkRmW5qThCr6CsFK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQxNjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVk NjJkOTY0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDfHA1jF80wnXzg9w5NCm6yx7aa9AuFnnZnmX1gFtX7zzImnaAXO8qh dLGfoEpqfDTsv3CdaURoDAJPtR4vqZpKVGEjbSZHHccCo5H50YOlt3tkK4Gw/gsV h4ieebUG0xVZOzytkenla1WFvOCThSMrsUA+RwVMKwUBNKVA59LA7cwo3PFNVWY3 uLftepdacntFxWlXkkv2s+xAV9Uml5K/UOlVfpz/tetNT1dzMiImHzlL2qMSc/y6 uB90rqyARaE5/bwG8CwfWtCkQArbChuNjx6nGkow4ihM6ngvPhB470kMF7ZPzdCV 2UExNUgZeZvQO1c9H21DqdDwKes7S80= -----END CERTIFICATE-----Generated at Sat Jul 11 02:20:07 2026 by rpki-client