$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa File: db042f94-eb5b-3bff-b1d0-249ded955868.roa (raw, json) Hash identifier: OCopFMpoZLAPyj1O+ZZomdaCpYiP8SCwIMnk5/0sQY4= Subject key identifier: 83:71:2F:CE:4F:40:7F:2A:2D:2E:03:8F:06:BC:7F:DE:65:34:C2:3F Certificate issuer: /CN=fdd167e1-80d8-4633-a835-6e5d62d964bc Certificate serial: 010D0C9F4328584F71ED8D6A9228E806B2846B80 Authority key identifier: 80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 53597 IP address blocks: 172.102.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:8d:6a:92:28:e8:06:b2:84:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd167e1-80d8-4633-a835-6e5d62d964bc Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=4ab4c47b-968e-41be-ad76-21db7b3b8d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:ab:17:b0:3d:dd:7f:82:3b:47:7a:18:00: 8c:f1:27:db:01:eb:83:28:c9:42:97:60:89:26:9f: 9f:6c:74:9e:ac:f9:65:8f:d1:57:db:ac:4c:d8:77: ff:7f:a4:ae:d4:3f:ee:8d:d5:c8:43:92:ea:7b:0d: 11:1f:94:48:1a:b6:c8:9a:b0:c3:ce:95:6c:9c:44: 6b:c1:16:33:66:ee:76:1e:32:72:f3:71:a0:f2:f3: ef:8d:0d:14:91:62:f6:0d:72:0e:36:41:14:3c:11: 7a:0d:10:32:d0:e9:d8:f3:68:34:9e:2b:f2:02:99: b6:6b:2f:e6:35:a6:e5:52:04:08:ae:07:66:75:a8: 55:0b:9f:fb:4b:ea:f5:49:29:1b:11:b2:cb:6a:ce: a3:4f:37:78:df:36:47:4d:e5:ba:67:b5:45:4e:91: 59:6e:ec:40:d4:96:ce:43:54:4a:d4:54:b3:93:dd: f7:4e:50:73:2f:61:c1:01:3c:c8:a8:4b:b5:cc:b9: 1c:de:6e:4c:c3:52:76:2c:fa:52:60:2b:7a:0f:2e: c9:2d:c7:ce:16:53:32:ef:b9:99:2a:3a:64:8e:cf: bf:f3:83:77:b1:d6:dc:0d:da:36:3b:25:43:58:f9: 10:ed:3f:38:53:0f:83:91:bf:06:18:ed:b5:54:ea: 07:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:71:2F:CE:4F:40:7F:2A:2D:2E:03:8F:06:BC:7F:DE:65:34:C2:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl X509v3 Authority Key Identifier: keyid:80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer sbgp-ipAddrBlock: critical IPv4: 172.102.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:31:87:fa:af:01:d4:01:ca:af:68:40:72:a7:61:e8:85:46: 8c:2e:eb:88:17:16:81:f1:2f:7f:1f:df:3a:ad:01:d5:81:0c: 08:09:af:99:68:e3:58:d1:d3:9b:54:89:59:62:6b:f0:a2:62: 0a:5f:1c:95:28:bd:c4:43:3f:96:79:80:03:1c:b9:c1:61:71: b4:2b:e8:f8:55:1c:12:95:08:91:1e:91:90:d3:ca:12:9a:66: 06:f0:16:43:8f:dc:6f:cc:10:7a:75:d8:ea:92:3b:89:a5:28: 96:2b:e5:5b:3a:07:f3:f1:8b:d0:bf:66:c9:d3:a1:28:34:19: 02:03:74:fb:79:03:01:4d:53:40:9e:a6:c9:a5:05:3d:c5:79: 9c:9d:23:72:f1:cc:3b:08:a4:d6:dd:a2:66:3e:cc:54:07:78: 8b:48:bf:d0:87:24:70:22:db:14:40:66:53:80:ab:f1:ae:fb: b2:62:ab:10:b6:4a:ac:67:de:2d:2d:3c:35:56:b2:90:07:ee: 7c:4f:88:57:3a:a4:69:12:a5:5f:37:d2:9c:6c:58:3c:d4:72: 65:51:ff:97:6a:8a:9b:f1:da:5e:8a:6c:8d:b1:33:ef:b5:76: 30:39:aa:87:f1:a8:14:5a:59:f3:35:78:cb:24:d5:23:40:d8: c2:da:f3:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Y1qkijoBrKEa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkMTY3ZTEtODBkOC00NjMzLWE4MzUtNmU1ZDYyZDk2 NGJjMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NGFiNGM0N2ItOTY4ZS00MWJlLWFkNzYtMjFkYjdiM2I4ZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5KrF7A93X+CO0d6GACM8SfbAeuDKMlCl2CJ Jp+fbHSerPllj9FX26xM2Hf/f6Su1D/ujdXIQ5Lqew0RH5RIGrbImrDDzpVsnERr wRYzZu52HjJy83Gg8vPvjQ0UkWL2DXIONkEUPBF6DRAy0OnY82g0nivyApm2ay/m NablUgQIrgdmdahVC5/7S+r1SSkbEbLLas6jTzd43zZHTeW6Z7VFTpFZbuxA1JbO Q1RK1FSzk933TlBzL2HBATzIqEu1zLkc3m5Mw1J2LPpSYCt6Dy7JLcfOFlMy77mZ Kjpkjs+/84N3sdbcDdo2OyVDWPkQ7T84Uw+Dkb8GGO21VOoH8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINxL85PQH8qLS4Djwa8f95lNMI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQx NjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVkNjJkOTY0YmMvZGIwNDJmOTQtZWI1Yi0z YmZmLWIxZDAtMjQ5ZGVkOTU1ODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmRkMTY3ZTEtODBkOC00NjMzLWE4 MzUtNmU1ZDYyZDk2NGJjL2ZkZDE2N2UxLTgwZDgtNDYzMy1hODM1LTZlNWQ2MmQ5 NjRiYy5jcmwwHwYDVR0jBBgwFoAUgNBuBic8afGkRmW5qThCr6CsFK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQxNjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVk NjJkOTY0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAxh/qvAdQByq9oQHKnYeiFRowu64gXFoHxL38f3zqtAdWBDAgJr5lo 41jR05tUiVlia/CiYgpfHJUovcRDP5Z5gAMcucFhcbQr6PhVHBKVCJEekZDTyhKa ZgbwFkOP3G/MEHp12OqSO4mlKJYr5Vs6B/Pxi9C/ZsnToSg0GQIDdPt5AwFNU0Ce psmlBT3FeZydI3LxzDsIpNbdomY+zFQHeItIv9CHJHAi2xRAZlOAq/Gu+7JiqxC2 Sqxn3i0tPDVWspAH7nxPiFc6pGkSpV830pxsWDzUcmVR/5dqipvx2l6KbI2xM++1 djA5qofxqBRaWfM1eMsk1SNA2MLa80E= -----END CERTIFICATE-----Generated at Mon Oct 12 14:38:52 2026 by rpki-client