$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa File: db042f94-eb5b-3bff-b1d0-249ded955868.roa (raw, json) Hash identifier: O/8NfbfNPtKncqPqQZuqDWA4pYYwwCcaor7jd4LS668= Subject key identifier: EB:2E:14:95:25:D8:D3:AD:C9:BD:11:76:56:BA:E4:C7:C4:65:22:D8 Certificate issuer: /CN=fdd167e1-80d8-4633-a835-6e5d62d964bc Certificate serial: 010D0C9F4328584B8EACCA7E62199D8DDBF30120 Authority key identifier: 80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 53597 IP address blocks: 172.102.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ca:7e:62:19:9d:8d:db:f3:01:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd167e1-80d8-4633-a835-6e5d62d964bc Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=390f796d-a486-45e5-9ab8-ea69d65a7bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:01:63:e4:39:d9:bf:5f:92:9a:9b:46:c1:e9: e1:3c:9b:da:95:af:b9:26:c0:93:87:c3:67:bc:9f: 5f:2a:40:8f:9d:dc:88:03:8b:9f:cc:54:f4:02:c7: 18:b7:f3:ca:c7:e8:27:9b:be:dc:e0:1d:52:c9:3c: 93:1b:e6:37:fa:5b:1e:e7:cf:39:a3:8d:02:8c:cf: 74:40:d3:c1:6f:cd:66:18:0a:43:bc:cd:cf:24:74: af:65:e7:e9:b4:d2:da:d5:46:46:3c:58:70:cf:09: d1:61:d0:fd:b5:e0:18:78:c3:e2:c4:60:1d:95:85: 79:d0:93:75:13:9e:c7:cb:38:4f:65:84:ff:d3:9f: 99:e1:df:bc:53:ce:5e:03:be:80:7b:0c:6a:c5:03: 5d:f6:fc:bd:89:3c:64:42:0a:6b:ca:c4:6e:38:3d: a4:f1:7f:96:7f:f7:86:6e:bb:18:49:4b:c7:30:0c: 59:9f:41:7b:d1:b4:d6:a9:70:ad:2b:ab:7e:0f:3b: 37:95:b6:19:51:49:d0:eb:86:95:02:be:de:23:41: 0b:cd:22:0d:44:27:f6:48:be:54:25:d4:c9:32:bb: 81:4a:3c:4a:74:17:2d:25:f3:32:20:f3:15:62:95: c2:ba:ae:aa:76:8b:f5:51:0a:3e:2d:8a:ff:b1:d2: 84:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2E:14:95:25:D8:D3:AD:C9:BD:11:76:56:BA:E4:C7:C4:65:22:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl X509v3 Authority Key Identifier: keyid:80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer sbgp-ipAddrBlock: critical IPv4: 172.102.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:2f:18:8e:35:90:c8:e1:dd:36:5f:af:27:d7:82:7b:63:7d: 10:b9:63:68:e5:e0:47:5e:d3:3f:26:d5:bf:88:92:94:f2:1d: 1e:29:6c:bd:9c:7a:85:8e:7c:2c:57:16:3a:dd:1b:96:3a:c6: bc:51:e4:da:65:cc:0a:55:8f:70:4b:3e:16:c3:a8:43:7b:40: 2f:f7:6a:53:44:f6:bf:0e:da:ed:dc:e5:42:b4:cd:5a:b4:72: c6:e2:17:41:ea:e2:2b:bc:60:67:0c:46:20:c6:00:2d:3a:d3: 07:23:67:2e:03:8d:93:d2:c8:f1:95:0e:78:8f:c5:74:4d:1b: d8:65:fe:25:0c:0e:57:fa:50:24:ad:f5:39:4b:3f:99:29:d3: 15:c0:9d:32:26:74:f6:68:6e:41:62:8c:cb:ae:29:d3:84:9d: e2:70:50:d3:aa:e1:c7:d1:87:c1:1f:bb:aa:c3:d8:17:9e:e1: 7d:5c:54:8f:e9:4d:f3:c8:6d:e1:fe:3d:24:a9:bc:9f:aa:17: 17:0d:46:04:8a:c4:03:e4:e1:96:03:6a:71:13:00:9d:39:04: d1:e0:39:bf:bd:c4:00:42:71:52:d3:16:0e:1b:bd:6a:37:97: 89:a3:2b:be:e5:ae:cd:fd:05:5a:69:45:c1:69:e1:0a:90:17: df:ce:0c:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMp+YhmdjdvzASAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkMTY3ZTEtODBkOC00NjMzLWE4MzUtNmU1ZDYyZDk2 NGJjMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MzkwZjc5NmQtYTQ4Ni00NWU1LTlhYjgtZWE2OWQ2NWE3YmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAFj5DnZv1+SmptGwenhPJvala+5JsCTh8Nn vJ9fKkCPndyIA4ufzFT0AscYt/PKx+gnm77c4B1SyTyTG+Y3+lse5885o40CjM90 QNPBb81mGApDvM3PJHSvZefptNLa1UZGPFhwzwnRYdD9teAYeMPixGAdlYV50JN1 E57HyzhPZYT/05+Z4d+8U85eA76AewxqxQNd9vy9iTxkQgprysRuOD2k8X+Wf/eG brsYSUvHMAxZn0F70bTWqXCtK6t+Dzs3lbYZUUnQ64aVAr7eI0ELzSINRCf2SL5U JdTJMruBSjxKdBctJfMyIPMVYpXCuq6qdov1UQo+LYr/sdKEGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsuFJUl2NOtyb0Rdla65MfEZSLYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQx NjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVkNjJkOTY0YmMvZGIwNDJmOTQtZWI1Yi0z YmZmLWIxZDAtMjQ5ZGVkOTU1ODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmRkMTY3ZTEtODBkOC00NjMzLWE4 MzUtNmU1ZDYyZDk2NGJjL2ZkZDE2N2UxLTgwZDgtNDYzMy1hODM1LTZlNWQ2MmQ5 NjRiYy5jcmwwHwYDVR0jBBgwFoAUgNBuBic8afGkRmW5qThCr6CsFK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQxNjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVk NjJkOTY0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8vGI41kMjh3TZfryfXgntjfRC5Y2jl4Ede0z8m1b+IkpTyHR4pbL2c eoWOfCxXFjrdG5Y6xrxR5NplzApVj3BLPhbDqEN7QC/3alNE9r8O2u3c5UK0zVq0 csbiF0Hq4iu8YGcMRiDGAC060wcjZy4DjZPSyPGVDniPxXRNG9hl/iUMDlf6UCSt 9TlLP5kp0xXAnTImdPZobkFijMuuKdOEneJwUNOq4cfRh8Efu6rD2Bee4X1cVI/p TfPIbeH+PSSpvJ+qFxcNRgSKxAPk4ZYDanETAJ05BNHgOb+9xABCcVLTFg4bvWo3 l4mjK77lrs39BVppRcFp4QqQF9/ODO0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:24:23 2025 by rpki-client