$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa File: ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa (raw, json) Hash identifier: Jq/OdlpGsUdPWdiHhDtSPrSkbxMksIYiTMyPxVN11bs= Subject key identifier: 5D:F2:AC:37:F0:F3:17:8A:B1:EC:70:98:FF:C0:73:89:27:4F:DA:89 Certificate issuer: /CN=ddbb9aca-bd57-4f42-b053-a90ac62827fb Certificate serial: 010D0C9F4328584A549B0E8803E71C5E9E74AC80 Authority key identifier: 22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 393336 IP address blocks: 173.0.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:0e:88:03:e7:1c:5e:9e:74:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbb9aca-bd57-4f42-b053-a90ac62827fb Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=85c0f42b-8cdb-4c00-888f-1476bb353391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:da:16:12:1c:f0:89:72:9c:9b:b6:51:fc: 75:36:c9:2b:87:78:a0:b4:8e:83:23:b8:69:8b:08: 49:f8:7c:74:35:a9:06:4e:fe:0b:96:05:cf:f3:e4: 29:b5:e3:7d:bb:5d:82:7e:30:0e:a3:05:38:9a:b5: 6f:f7:bb:8c:7d:68:81:88:3a:c2:d7:39:3b:07:4e: e5:56:4b:89:33:e5:02:99:93:f8:2b:6e:a0:1d:71: 25:e5:b1:08:9f:0d:1f:6e:af:7f:d4:d8:9c:4a:9f: 87:99:c4:c4:e3:5d:ce:d0:ee:31:cb:5d:b0:0d:90: 95:b7:54:0a:b9:a7:e8:18:b2:a2:5a:85:8b:34:f1: 4f:84:4e:12:af:4c:37:23:62:6f:dc:8c:f1:45:e8: 20:62:4a:4c:fa:56:95:3c:ae:a5:7f:cd:b1:1a:e5: fe:36:af:d9:7a:87:6e:43:88:ee:9f:70:8c:9a:d3: 0e:90:ef:a6:6c:5c:02:04:52:bb:61:a1:0c:37:d7: 73:f4:59:ce:5c:20:ce:8f:48:1d:84:22:c5:00:b8: c0:b7:19:db:a1:5d:5f:69:bf:1c:1f:c3:e0:fd:74: 7d:0a:21:8f:c4:12:26:96:f4:0b:1d:db:b7:7c:38: 1f:d2:c3:b5:8a:ea:cf:af:dc:61:e9:ae:ef:b6:b0: d4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F2:AC:37:F0:F3:17:8A:B1:EC:70:98:FF:C0:73:89:27:4F:DA:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.crl X509v3 Authority Key Identifier: keyid:22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer sbgp-ipAddrBlock: critical IPv4: 173.0.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4d:62:5e:4d:72:e5:d4:0b:b3:83:20:6f:27:ac:35:19:e6: 67:4f:41:12:f4:e2:64:d5:21:70:cf:5d:ec:d8:f8:1a:e7:e1: 61:2e:07:0e:3f:8f:b6:46:39:de:02:1a:64:b0:6b:47:45:76: dc:31:3f:2a:be:1c:f3:50:30:1e:b7:fb:4f:9b:80:69:7f:db: 32:6e:70:1e:1f:1d:b0:2c:d4:df:66:67:8c:39:48:23:a6:c1: db:68:ba:3c:2c:e6:04:00:29:b8:f8:d8:9b:3a:5b:e5:bd:2c: 63:df:78:59:c7:3c:8b:27:93:60:17:cf:ee:6f:1e:6c:24:f7: 30:ef:26:63:a3:0d:17:e8:d1:19:bd:37:d3:38:74:0d:c0:29: f4:6d:85:56:23:04:b6:6a:32:ba:b7:3d:8d:5c:7e:ae:1c:3c: 82:48:8e:54:f5:29:f8:3c:2c:3d:db:fd:88:e7:09:2c:9c:34: 90:e6:85:0b:75:02:88:c8:ea:59:23:5d:a6:b9:c3:76:7f:4e: 93:2d:73:a2:d9:74:84:21:1d:2d:82:60:6d:aa:57:7c:9d:dc: 9a:0d:1e:f3:5f:e7:3c:29:3f:34:05:79:0b:4b:ae:ab:6b:cd: 9e:ed:cf:6a:a3:8c:7d:c5:8c:11:93:d4:24:63:00:ab:bd:41: 87:39:a8:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmw6IA+ccXp50rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRiYjlhY2EtYmQ1Ny00ZjQyLWIwNTMtYTkwYWM2Mjgy N2ZiMB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk ODVjMGY0MmItOGNkYi00YzAwLTg4OGYtMTQ3NmJiMzUzMzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmPaFhIc8IlynJu2Ufx1Nskrh3igtI6DI7hp iwhJ+Hx0NakGTv4LlgXP8+QpteN9u12CfjAOowU4mrVv97uMfWiBiDrC1zk7B07l VkuJM+UCmZP4K26gHXEl5bEInw0fbq9/1NicSp+HmcTE413O0O4xy12wDZCVt1QK uafoGLKiWoWLNPFPhE4Sr0w3I2Jv3IzxReggYkpM+laVPK6lf82xGuX+Nq/Zeodu Q4jun3CMmtMOkO+mbFwCBFK7YaEMN9dz9FnOXCDOj0gdhCLFALjAtxnboV1fab8c H8Pg/XR9CiGPxBImlvQLHdu3fDgf0sO1iurPr9xh6a7vtrDUnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3yrDfw8xeKsexwmP/Ac4knT9qJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZGJi OWFjYS1iZDU3LTRmNDItYjA1My1hOTBhYzYyODI3ZmIvYWIwZWJmMWEtZmVkOS0z MzhjLWFlYzEtZDc0MWY4YzA0ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGRiYjlhY2EtYmQ1Ny00ZjQyLWIw NTMtYTkwYWM2MjgyN2ZiL2RkYmI5YWNhLWJkNTctNGY0Mi1iMDUzLWE5MGFjNjI4 MjdmYi5jcmwwHwYDVR0jBBgwFoAUIoWq6nOr3DpuGGjohG0DB87gV2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZGJiOWFjYS1iZDU3LTRmNDItYjA1My1hOTBh YzYyODI3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrQAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFNYl5NcuXUC7ODIG8nrDUZ5mdPQRL04mTVIXDPXezY+Brn4WEuBw4/ j7ZGOd4CGmSwa0dFdtwxPyq+HPNQMB63+0+bgGl/2zJucB4fHbAs1N9mZ4w5SCOm wdtoujws5gQAKbj42Js6W+W9LGPfeFnHPIsnk2AXz+5vHmwk9zDvJmOjDRfo0Rm9 N9M4dA3AKfRthVYjBLZqMrq3PY1cfq4cPIJIjlT1Kfg8LD3b/YjnCSycNJDmhQt1 AojI6lkjXaa5w3Z/TpMtc6LZdIQhHS2CYG2qV3yd3JoNHvNf5zwpPzQFeQtLrqtr zZ7tz2qjjH3FjBGT1CRjAKu9QYc5qC0= -----END CERTIFICATE-----Generated at Sat Jul 26 11:31:20 2025 by rpki-client