$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbe9a9a-6cbb-3da7-a3dc-8c180ec33039.roa File: ddbe9a9a-6cbb-3da7-a3dc-8c180ec33039.roa (raw, json) Hash identifier: BIg0pDBZ3TwLCKKMyTJ5Ot6DuJTncWkDa7RYxEQ0Qd0= Subject key identifier: 75:C4:FA:E0:BF:D4:F5:52:81:3E:C8:53:1C:55:71:C9:2A:07:3A:6C Certificate issuer: /CN=ddbb9aca-bd57-4f42-b053-a90ac62827fb Certificate serial: 010D0C9F4328584F0D6CD103ADE80012E443C780 Authority key identifier: 22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbe9a9a-6cbb-3da7-a3dc-8c180ec33039.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 2914 IP address blocks: 173.0.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d1:03:ad:e8:00:12:e4:43:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbb9aca-bd57-4f42-b053-a90ac62827fb Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=2853a966-4510-4cd5-93d9-256ee112a88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:62:ec:06:39:98:4a:ad:f0:f2:69:ee:85:a5: c4:2c:19:d0:82:f0:cb:69:08:44:48:03:2d:86:00: 79:6f:a7:d9:99:3f:bd:43:e2:3e:3c:e7:24:36:03: 07:72:d6:61:4e:ba:0e:4b:33:96:ba:c9:32:28:ce: 03:8e:75:56:7d:f5:56:8d:db:34:2a:b2:ec:36:28: d9:55:cf:ba:fa:4b:74:c4:02:dd:e8:c2:2a:4b:45: 40:82:c7:a1:98:c5:0f:bd:04:33:ed:54:0f:5d:99: 32:b0:5c:00:a3:03:45:42:cf:ca:0c:23:d5:93:14: de:be:98:ed:3a:8f:a4:74:66:5e:b7:b0:08:79:d1: 5e:91:58:27:02:d3:a4:4c:6c:60:11:18:40:da:d1: 07:5a:c4:0c:8c:0c:74:f4:ee:d3:d2:4f:44:32:f2: 10:af:71:78:d5:6c:44:1b:33:37:ba:e3:c8:a4:3b: 60:c1:3d:8c:48:f7:a2:1d:a7:da:fd:ff:d3:30:1b: 70:52:a4:1e:a7:09:71:7f:8f:d4:5c:63:e9:b3:24: da:81:08:61:0b:cb:c0:b7:69:53:cc:1c:52:5b:c5: 45:58:a8:ec:f3:3f:65:43:fa:aa:e0:c4:88:36:71: 81:6e:3e:ac:f9:2a:b2:34:39:46:72:f4:8d:18:2e: 85:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C4:FA:E0:BF:D4:F5:52:81:3E:C8:53:1C:55:71:C9:2A:07:3A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbe9a9a-6cbb-3da7-a3dc-8c180ec33039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.crl X509v3 Authority Key Identifier: keyid:22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer sbgp-ipAddrBlock: critical IPv4: 173.0.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:bf:91:9a:86:c8:aa:41:f2:46:f1:42:91:68:49:e3:03:66: c5:9e:ca:6e:f2:58:33:59:3a:8b:c6:ff:76:f8:d6:a7:f3:4c: 74:13:99:2d:ee:d8:6a:9d:e3:cd:4e:98:6b:a1:35:e1:1a:6e: 2f:8b:db:24:d9:05:cd:f4:ef:ec:ce:ad:e5:92:27:ac:92:ff: 50:e5:b7:d0:de:c5:d3:6d:53:53:9e:a2:03:8b:50:fe:78:9d: d1:02:23:3a:77:71:bc:e6:55:79:e5:ae:98:55:e8:7b:f9:e7: 3e:25:fe:a5:63:ce:9e:2b:74:4f:77:77:3f:15:b3:42:5f:49: 2a:c5:72:5e:06:e7:5c:34:2d:bb:19:10:b5:81:2b:08:55:ef: 33:b3:da:89:e3:95:ba:31:97:ff:94:86:bc:b4:3e:ae:30:a9: a0:3f:f6:34:0f:1e:ba:52:5c:35:85:ef:18:e5:5c:e8:c1:39: ad:62:b7:b8:3e:5a:7e:db:d3:f8:b6:18:3f:1b:f4:7f:f7:fe: 60:95:ea:14:d0:a3:06:06:8b:b6:7d:54:ce:2e:89:26:2a:29: f7:fd:89:94:af:b6:33:24:02:0d:26:1d:79:0a:6e:57:a9:06: 7d:b5:b3:54:a8:bd:3b:27:60:61:48:9f:f6:e6:4a:b1:2c:92: 03:aa:50:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNEDregAEuRDx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRiYjlhY2EtYmQ1Ny00ZjQyLWIwNTMtYTkwYWM2Mjgy N2ZiMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk Mjg1M2E5NjYtNDUxMC00Y2Q1LTkzZDktMjU2ZWUxMTJhODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmLsBjmYSq3w8mnuhaXELBnQgvDLaQhESAMt hgB5b6fZmT+9Q+I+POckNgMHctZhTroOSzOWuskyKM4DjnVWffVWjds0KrLsNijZ Vc+6+kt0xALd6MIqS0VAgsehmMUPvQQz7VQPXZkysFwAowNFQs/KDCPVkxTevpjt Oo+kdGZet7AIedFekVgnAtOkTGxgERhA2tEHWsQMjAx09O7T0k9EMvIQr3F41WxE GzM3uuPIpDtgwT2MSPeiHafa/f/TMBtwUqQepwlxf4/UXGPpsyTagQhhC8vAt2lT zBxSW8VFWKjs8z9lQ/qq4MSINnGBbj6s+SqyNDlGcvSNGC6FWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXE+uC/1PVSgT7IUxxVcckqBzpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZGJi OWFjYS1iZDU3LTRmNDItYjA1My1hOTBhYzYyODI3ZmIvZGRiZTlhOWEtNmNiYi0z ZGE3LWEzZGMtOGMxODBlYzMzMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGRiYjlhY2EtYmQ1Ny00ZjQyLWIw NTMtYTkwYWM2MjgyN2ZiL2RkYmI5YWNhLWJkNTctNGY0Mi1iMDUzLWE5MGFjNjI4 MjdmYi5jcmwwHwYDVR0jBBgwFoAUIoWq6nOr3DpuGGjohG0DB87gV2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZGJiOWFjYS1iZDU3LTRmNDItYjA1My1hOTBh YzYyODI3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArQAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG/kZqGyKpB8kbxQpFoSeMDZsWeym7yWDNZOovG/3b41qfzTHQTmS3u 2Gqd481OmGuhNeEabi+L2yTZBc307+zOreWSJ6yS/1Dlt9DexdNtU1OeogOLUP54 ndECIzp3cbzmVXnlrphV6Hv55z4l/qVjzp4rdE93dz8Vs0JfSSrFcl4G51w0LbsZ ELWBKwhV7zOz2onjlboxl/+Uhry0Pq4wqaA/9jQPHrpSXDWF7xjlXOjBOa1it7g+ Wn7b0/i2GD8b9H/3/mCV6hTQowYGi7Z9VM4uiSYqKff9iZSvtjMkAg0mHXkKblep Bn21s1SovTsnYGFIn/bmSrEskgOqUPc= -----END CERTIFICATE-----Generated at Sat Sep 26 23:35:42 2026 by rpki-client