$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa File: 214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa (raw, json) Hash identifier: luAt9dB1zgsnFPCI84AV43sOc7qLKVvEGDAkFmu6a0g= Subject key identifier: A1:1A:A9:3E:8D:07:03:46:DB:4B:2C:74:2D:6B:46:39:65:76:BE:22 Certificate issuer: /CN=dfb59d70-0c69-4135-b2f0-61bd4d1a8263 Certificate serial: 010D0C9F4328584AC9DBA5B37187390C108BA900 Authority key identifier: 3E:F6:00:B6:1A:9D:FA:34:50:F0:1A:87:6B:57:D8:E0:CE:C5:87:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 11110 IP address blocks: 204.13.52.0/22 maxlen: 24 2604:3500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a5:b3:71:87:39:0c:10:8b:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfb59d70-0c69-4135-b2f0-61bd4d1a8263 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=41dbebc2-0aed-4f6f-8512-8e91352c8ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:9c:5f:a2:48:fb:16:c7:50:42:c2:29:75: 30:9e:5b:d9:c0:58:b6:a0:22:c1:45:da:f8:50:3d: 5e:f7:4d:2c:48:34:77:96:b5:09:96:97:c4:d0:76: 66:1d:33:ea:17:ee:56:fc:57:bf:7c:73:3f:b5:62: e7:5c:b7:67:ae:eb:8e:6a:3e:89:a5:f1:0b:01:85: c3:84:37:43:53:a6:e9:47:ca:59:ff:4b:98:1c:34: c1:44:c3:0e:8a:46:c9:0c:f4:03:bc:62:09:ed:f2: 7c:cd:de:32:1d:78:23:50:72:17:60:85:4d:d4:6d: 7c:f0:bc:81:2a:33:31:e9:52:32:d7:d2:af:31:12: 94:b4:db:7c:58:41:9f:50:c5:c1:45:8a:cd:52:d8: e3:70:9f:d1:34:28:d8:50:79:cc:3e:f9:e7:70:83: ae:f9:83:3b:a4:95:d1:66:57:21:66:ac:62:49:14: e3:19:f5:46:d8:61:83:92:cb:89:d5:cb:4e:91:57: f7:85:c4:da:24:c6:02:1b:4c:e2:b6:29:82:89:82: 79:0a:76:f5:e2:89:45:f2:93:63:d9:5e:f5:eb:95: 86:dd:58:28:b7:21:ca:d1:17:55:85:2f:60:48:4a: 59:ef:4b:10:bb:e0:3f:a0:73:db:f2:16:ff:64:22: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1A:A9:3E:8D:07:03:46:DB:4B:2C:74:2D:6B:46:39:65:76:BE:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.crl X509v3 Authority Key Identifier: keyid:3E:F6:00:B6:1A:9D:FA:34:50:F0:1A:87:6B:57:D8:E0:CE:C5:87:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer sbgp-ipAddrBlock: critical IPv4: 204.13.52.0/22 IPv6: 2604:3500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f9:1b:23:42:b8:a8:e2:3c:41:ad:f7:fa:c8:40:96:31:ef: bd:bf:42:48:e2:90:1c:55:52:a5:55:da:1f:df:7f:0b:91:90: db:3d:d1:9b:19:ae:0b:a2:fa:51:5e:6a:d9:9d:b8:92:38:ea: 44:c4:30:8e:6a:69:73:d5:ee:37:16:35:fa:77:b8:5a:04:0f: 6f:3a:32:e2:de:6a:11:b9:da:7f:33:f1:71:74:e7:2e:54:74: 6f:21:32:20:b5:33:4e:fd:2e:3d:6a:0a:d3:e8:5c:5f:f8:be: 43:d2:c5:34:3a:dd:18:46:ca:2d:0a:a1:ba:f2:39:35:27:ff: 1e:bf:78:67:32:c1:a7:e8:e3:a3:6c:0b:83:a4:1a:15:ff:4f: 4d:6c:0a:df:7a:8f:d5:bf:c3:24:53:c6:2b:e4:8f:d4:de:50: cc:7a:96:84:ad:f9:45:d6:2e:03:cf:98:d8:5b:ec:d0:fc:b6: 20:92:70:f3:bc:4b:65:d9:96:33:02:62:e9:5c:ad:a0:ae:51: d7:23:43:8b:a0:3a:57:82:ae:30:73:4f:88:44:bc:44:36:ed: b7:b7:7c:36:d0:d9:2a:cb:30:36:76:2f:8a:63:29:20:85:f0: 34:35:d1:14:e1:65:7a:97:c4:95:fb:de:94:bb:67:1e:88:20: a1:eb:40:59 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWErJ26WzcYc5DBCLqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZiNTlkNzAtMGM2OS00MTM1LWIyZjAtNjFiZDRkMWE4 MjYzMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk NDFkYmViYzItMGFlZC00ZjZmLTg1MTItOGU5MTM1MmM4ZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3+cX6JI+xbHUELCKXUwnlvZwFi2oCLBRdr4 UD1e900sSDR3lrUJlpfE0HZmHTPqF+5W/Fe/fHM/tWLnXLdnruuOaj6JpfELAYXD hDdDU6bpR8pZ/0uYHDTBRMMOikbJDPQDvGIJ7fJ8zd4yHXgjUHIXYIVN1G188LyB KjMx6VIy19KvMRKUtNt8WEGfUMXBRYrNUtjjcJ/RNCjYUHnMPvnncIOu+YM7pJXR ZlchZqxiSRTjGfVG2GGDksuJ1ctOkVf3hcTaJMYCG0zitimCiYJ5Cnb14olF8pNj 2V7165WG3VgotyHK0RdVhS9gSEpZ70sQu+A/oHPb8hb/ZCLkwwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFKEaqT6NBwNG20ssdC1rRjlldr4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZmI1 OWQ3MC0wYzY5LTQxMzUtYjJmMC02MWJkNGQxYTgyNjMvMjE0ZDdhYzYtYTMwNC0z Zjk1LWJmMmUtNjBjZmI0MmI2YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGZiNTlkNzAtMGM2OS00MTM1LWIy ZjAtNjFiZDRkMWE4MjYzL2RmYjU5ZDcwLTBjNjktNDEzNS1iMmYwLTYxYmQ0ZDFh ODI2My5jcmwwHwYDVR0jBBgwFoAUPvYAthqd+jRQ8BqHa1fY4M7FhycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kZmI1OWQ3MC0wYzY5LTQxMzUtYjJmMC02MWJk NGQxYTgyNjMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCzA00MA0E AgACMAcDBQAmBDUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHL5GyNCuKjiPEGt9/rIQJYx772/QkjikBxV UqVV2h/ffwuRkNs90ZsZrgui+lFeatmduJI46kTEMI5qaXPV7jcWNfp3uFoED286 MuLeahG52n8z8XF05y5UdG8hMiC1M079Lj1qCtPoXF/4vkPSxTQ63RhGyi0Kobry OTUn/x6/eGcywafo46NsC4OkGhX/T01sCt96j9W/wyRTxivkj9TeUMx6loSt+UXW LgPPmNhb7ND8tiCScPO8S2XZljMCYulcraCuUdcjQ4ugOleCrjBzT4hEvEQ27be3 fDbQ2SrLMDZ2L4pjKSCF8DQ10RThZXqXxJX73pS7Zx6IIKHrQFk= -----END CERTIFICATE-----Generated at Sun Aug 24 01:04:51 2025 by rpki-client