$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa File: ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa (raw, json) Hash identifier: FJjL3BOxzc7Fe3u/KPuo+gOEQDGs0dVQRVpVQgKP4E4= Subject key identifier: 3E:B3:AA:4F:15:0A:D8:13:E8:79:E1:3C:1F:66:AA:E0:7F:10:DC:1C Certificate issuer: /CN=ddbb9aca-bd57-4f42-b053-a90ac62827fb Certificate serial: 010D0C9F4328584B355705897CEEC320F720EC80 Authority key identifier: 22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 393336 IP address blocks: 173.0.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:05:89:7c:ee:c3:20:f7:20:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbb9aca-bd57-4f42-b053-a90ac62827fb Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=91b8fc45-c9f7-4fe2-be4a-23eee32f0842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0c:8a:80:1d:b9:73:68:11:98:14:88:c0:9f: e9:17:0c:2f:2f:4e:25:41:23:00:3f:1f:d3:d8:2f: e1:27:4d:98:b1:e9:7f:4d:ff:c9:ce:23:f6:3a:e3: 1a:f4:df:3f:c4:a7:71:30:07:e9:61:0d:d3:dc:1b: c6:1b:3a:fd:be:43:22:9b:9c:1e:63:fc:b5:68:c7: b3:13:3b:1a:3a:be:f8:2d:d1:03:29:4f:51:02:34: cf:c5:7d:5d:2e:51:de:00:bf:0b:80:fd:0c:15:e2: 9f:6a:b2:24:81:54:c8:28:02:88:a9:98:32:eb:f7: b3:60:8e:99:52:79:37:17:d9:80:a5:b8:9f:4c:e1: 92:6a:21:fc:4c:87:dc:a4:5e:a5:66:c6:35:95:b3: 58:2a:df:24:80:be:b3:a5:21:31:d7:d2:b8:e6:1e: ba:94:f9:ff:24:a2:90:d7:07:3d:cf:8b:7d:0d:e4: ba:4c:a0:74:b7:48:97:77:8f:cb:c9:f8:28:77:ac: a2:c4:c8:ad:69:40:32:41:34:58:0b:d5:f9:01:31: cf:d7:e5:a9:02:a8:56:8e:6e:23:ad:44:ff:70:df: 0c:a4:f4:fa:bd:9f:45:9b:d2:44:5c:b1:11:10:76: 68:4f:ca:b6:03:5f:53:7a:01:92:a5:f7:f0:c4:d2: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B3:AA:4F:15:0A:D8:13:E8:79:E1:3C:1F:66:AA:E0:7F:10:DC:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.crl X509v3 Authority Key Identifier: keyid:22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer sbgp-ipAddrBlock: critical IPv4: 173.0.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ea:07:bc:aa:73:ff:1c:20:b3:e5:97:70:c0:90:e8:4f:cf: ed:2c:7d:1f:7e:5c:42:0e:02:89:e6:e6:bb:39:8d:10:1d:8d: e7:04:1e:54:01:10:ae:1f:12:6e:a9:eb:68:b1:61:5b:d4:4d: 94:bb:ac:f3:a5:95:34:bd:23:01:ec:74:66:a0:09:e5:e8:c7: a4:74:6a:59:0d:c4:bd:3e:7c:61:af:cd:fa:be:f0:51:fe:e3: d0:d7:b9:f9:0d:ac:b6:a2:b0:c5:7c:10:f9:2c:92:22:5c:06: 35:6f:b2:e3:07:c7:f0:ef:ff:b2:d6:e1:92:a9:b7:6c:bf:37: 24:00:98:94:69:6b:e9:df:e0:f1:ef:96:22:86:cd:44:f4:ab: 47:0a:b8:75:68:59:08:a1:c9:b0:2f:2e:19:b0:5e:26:e7:14: 71:01:fe:d8:9d:11:40:0b:58:29:51:87:c3:6f:93:5e:59:46: 6f:e5:d6:b5:f6:20:5d:59:3b:d9:d3:21:1c:a1:ad:45:32:d2: 66:ec:0e:7e:a6:d1:0e:28:a9:87:5f:56:0c:15:f2:c6:33:be: 6e:94:39:1f:c4:ef:0c:6b:b6:96:12:75:bf:a4:c7:ef:75:96: f9:3c:61:4b:e9:c6:6b:7c:84:e1:0c:ac:3a:0c:1a:35:08:27: 6a:1d:c3:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VwWJfO7DIPcg7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRiYjlhY2EtYmQ1Ny00ZjQyLWIwNTMtYTkwYWM2Mjgy N2ZiMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OTFiOGZjNDUtYzlmNy00ZmUyLWJlNGEtMjNlZWUzMmYwODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQyKgB25c2gRmBSIwJ/pFwwvL04lQSMAPx/T 2C/hJ02Ysel/Tf/JziP2OuMa9N8/xKdxMAfpYQ3T3BvGGzr9vkMim5weY/y1aMez EzsaOr74LdEDKU9RAjTPxX1dLlHeAL8LgP0MFeKfarIkgVTIKAKIqZgy6/ezYI6Z Unk3F9mApbifTOGSaiH8TIfcpF6lZsY1lbNYKt8kgL6zpSEx19K45h66lPn/JKKQ 1wc9z4t9DeS6TKB0t0iXd4/Lyfgod6yixMitaUAyQTRYC9X5ATHP1+WpAqhWjm4j rUT/cN8MpPT6vZ9Fm9JEXLEREHZoT8q2A19TegGSpffwxNJItwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6zqk8VCtgT6HnhPB9mquB/ENwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZGJi OWFjYS1iZDU3LTRmNDItYjA1My1hOTBhYzYyODI3ZmIvYWIwZWJmMWEtZmVkOS0z MzhjLWFlYzEtZDc0MWY4YzA0ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGRiYjlhY2EtYmQ1Ny00ZjQyLWIw NTMtYTkwYWM2MjgyN2ZiL2RkYmI5YWNhLWJkNTctNGY0Mi1iMDUzLWE5MGFjNjI4 MjdmYi5jcmwwHwYDVR0jBBgwFoAUIoWq6nOr3DpuGGjohG0DB87gV2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZGJiOWFjYS1iZDU3LTRmNDItYjA1My1hOTBh YzYyODI3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrQAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjqB7yqc/8cILPll3DAkOhPz+0sfR9+XEIOAonm5rs5jRAdjecEHlQB EK4fEm6p62ixYVvUTZS7rPOllTS9IwHsdGagCeXox6R0alkNxL0+fGGvzfq+8FH+ 49DXufkNrLaisMV8EPkskiJcBjVvsuMHx/Dv/7LW4ZKpt2y/NyQAmJRpa+nf4PHv liKGzUT0q0cKuHVoWQihybAvLhmwXibnFHEB/tidEUALWClRh8Nvk15ZRm/l1rX2 IF1ZO9nTIRyhrUUy0mbsDn6m0Q4oqYdfVgwV8sYzvm6UOR/E7wxrtpYSdb+kx+91 lvk8YUvpxmt8hOEMrDoMGjUIJ2odw2k= -----END CERTIFICATE-----Generated at Thu Sep 18 01:19:52 2025 by rpki-client