$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa File: ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa (raw, json) Hash identifier: xYvOl++xVijhNuXgihxwWPEQeqff1gL688PGjxh80Fk= Subject key identifier: 6A:29:30:43:54:D0:26:F2:C6:7B:F8:E9:41:7F:D6:8C:B1:18:D0:80 Certificate issuer: /CN=ddbb9aca-bd57-4f42-b053-a90ac62827fb Certificate serial: 010D0C9F4328584973E91FC2E554B9EDE7528E80 Authority key identifier: 22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa Signing time: Tue 08 Apr 2025 01:21:30 +0000 ROA not before: Tue 08 Apr 2025 01:21:30 +0000 ROA not after: Mon 07 Jul 2025 01:21:30 +0000 asID: 393336 IP address blocks: 173.0.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:e9:1f:c2:e5:54:b9:ed:e7:52:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbb9aca-bd57-4f42-b053-a90ac62827fb Validity Not Before: Apr 8 01:21:30 2025 GMT Not After : Jul 7 01:21:30 2025 GMT Subject: CN=9f89fd30-bee2-430b-bd7f-13e20c454844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9c:48:54:c9:db:ae:ec:a5:69:e7:81:4b:1f: a7:36:a8:27:2c:41:41:d9:c2:a3:5d:0c:37:02:12: 3e:5d:96:b8:02:05:d4:c8:db:26:90:9d:b9:aa:05: 3d:36:99:cd:09:38:28:ff:7c:e8:da:59:4d:0c:35: 35:0e:e1:28:2c:be:e3:90:09:1a:9c:8a:f0:a7:53: a4:29:af:a0:0e:d9:d9:2d:ca:05:6c:e1:cb:b1:eb: c3:69:51:89:92:7c:9e:da:6e:3e:55:a0:0d:ea:15: 62:bf:49:92:94:22:3e:e7:55:ed:09:a7:dc:21:8c: 7f:49:f1:b0:bd:53:98:01:86:76:1b:89:ea:43:ec: 4d:49:d8:82:04:a5:b6:52:14:1a:3d:9e:a8:6d:4c: e4:08:0c:1a:ea:4c:ef:b0:ec:86:c9:27:5b:9a:cb: aa:6d:f6:78:d8:ff:0c:23:41:b2:13:c2:59:d5:bf: 65:9d:9c:74:f7:45:3c:52:3f:17:64:21:81:c6:33: ef:75:f6:bb:ec:76:f3:78:7b:c4:8f:9f:dd:b5:c1: f5:7f:0f:f8:51:56:2c:0a:15:3c:be:f9:40:35:a1: 73:0d:d6:6a:34:43:a0:40:36:b9:3d:e8:1d:39:b7: ed:a5:47:50:d3:4b:62:6e:d9:de:e1:27:a8:e5:c7: a2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:29:30:43:54:D0:26:F2:C6:7B:F8:E9:41:7F:D6:8C:B1:18:D0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.crl X509v3 Authority Key Identifier: keyid:22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer sbgp-ipAddrBlock: critical IPv4: 173.0.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:5b:62:e1:26:44:52:bc:5c:1e:9b:60:30:a2:c6:79:91:02: 75:a3:ee:09:56:a3:62:44:cf:40:8d:95:5f:20:00:e7:c1:29: 7d:dc:ac:0f:bd:36:5e:15:1b:44:4c:34:61:66:92:c4:27:3b: 37:43:49:e5:9b:6a:cb:c4:48:d5:52:ec:47:23:2c:4d:8d:34: 20:33:2e:cf:af:ef:9f:cf:a8:37:e7:09:ab:30:23:df:d4:da: 19:fc:c9:6e:1c:d9:1f:43:71:4d:5b:f5:05:35:15:8a:58:8f: 41:d2:ba:48:c1:fa:71:57:eb:82:bb:5e:aa:40:b6:86:18:9e: 6f:aa:43:49:3a:2d:6f:26:72:32:dc:54:1c:19:ce:be:32:84: a4:dc:a9:0b:fd:f4:04:5d:6b:2d:04:f4:42:7d:ae:60:7d:a5: ea:bb:52:59:d4:b9:e1:bf:13:ef:5e:ef:54:56:aa:4a:68:df: 68:d8:a0:5c:8a:52:e3:8f:3a:54:52:69:e6:14:15:fe:24:19: 5a:28:36:45:f8:72:1c:2a:f6:74:19:5e:b4:44:97:3f:6c:71: bc:17:b2:2c:ab:19:5a:4e:01:5c:89:25:17:1f:d4:88:3d:ca: f1:a6:b0:d8:77:53:d5:06:57:30:42:f3:1a:9d:cb:d7:1a:eb: b2:ab:e3:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz6R/C5VS57edSjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRiYjlhY2EtYmQ1Ny00ZjQyLWIwNTMtYTkwYWM2Mjgy N2ZiMB4XDTI1MDQwODAxMjEzMFoXDTI1MDcwNzAxMjEzMFowLzEtMCsGA1UEAxMk OWY4OWZkMzAtYmVlMi00MzBiLWJkN2YtMTNlMjBjNDU0ODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZxIVMnbruylaeeBSx+nNqgnLEFB2cKjXQw3 AhI+XZa4AgXUyNsmkJ25qgU9NpnNCTgo/3zo2llNDDU1DuEoLL7jkAkanIrwp1Ok Ka+gDtnZLcoFbOHLsevDaVGJknye2m4+VaAN6hViv0mSlCI+51XtCafcIYx/SfGw vVOYAYZ2G4nqQ+xNSdiCBKW2UhQaPZ6obUzkCAwa6kzvsOyGySdbmsuqbfZ42P8M I0GyE8JZ1b9lnZx090U8Uj8XZCGBxjPvdfa77HbzeHvEj5/dtcH1fw/4UVYsChU8 vvlANaFzDdZqNEOgQDa5PegdObftpUdQ00tibtne4Seo5ceiKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGopMENU0Cbyxnv46UF/1oyxGNCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZGJi OWFjYS1iZDU3LTRmNDItYjA1My1hOTBhYzYyODI3ZmIvYWIwZWJmMWEtZmVkOS0z MzhjLWFlYzEtZDc0MWY4YzA0ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGRiYjlhY2EtYmQ1Ny00ZjQyLWIw NTMtYTkwYWM2MjgyN2ZiL2RkYmI5YWNhLWJkNTctNGY0Mi1iMDUzLWE5MGFjNjI4 MjdmYi5jcmwwHwYDVR0jBBgwFoAUIoWq6nOr3DpuGGjohG0DB87gV2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZGJiOWFjYS1iZDU3LTRmNDItYjA1My1hOTBh YzYyODI3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrQAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChbYuEmRFK8XB6bYDCixnmRAnWj7glWo2JEz0CNlV8gAOfBKX3crA+9 Nl4VG0RMNGFmksQnOzdDSeWbasvESNVS7EcjLE2NNCAzLs+v75/PqDfnCaswI9/U 2hn8yW4c2R9DcU1b9QU1FYpYj0HSukjB+nFX64K7XqpAtoYYnm+qQ0k6LW8mcjLc VBwZzr4yhKTcqQv99ARday0E9EJ9rmB9peq7UlnUueG/E+9e71RWqkpo32jYoFyK UuOPOlRSaeYUFf4kGVooNkX4chwq9nQZXrRElz9scbwXsiyrGVpOAVyJJRcf1Ig9 yvGmsNh3U9UGVzBC8xqdy9ca67Kr49M= -----END CERTIFICATE-----Generated at Thu Apr 17 03:21:25 2025 by rpki-client