$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa File: 3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa (raw, json) Hash identifier: 6bzStI/5wGhd3L7p1/cLDD93T8EtylqfXXG07tiz/Cg= Subject key identifier: 37:55:17:3C:93:AD:88:F3:F3:F6:D6:9D:CD:43:83:7C:D3:4D:10:FD Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584A86DB753D5C12CD2C60A9EFC0 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 33322 IP address blocks: 204.16.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:75:3d:5c:12:cd:2c:60:a9:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=25c6ef83-e35b-49d3-9951-bced137fea18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d4:f7:33:8b:a0:88:19:11:46:e4:c2:6d:ae: ab:4a:1e:7e:c2:46:2f:04:01:56:c8:dc:c3:b6:fa: fd:f6:bb:b7:9d:2d:b3:1f:d6:42:e8:3f:79:a2:cf: 2f:63:ee:cf:6d:ef:c7:8f:63:ab:f8:ae:c3:9d:0e: 70:05:56:c3:23:1e:be:1a:21:ba:d9:fc:84:69:a0: dd:70:73:38:fa:d4:47:ca:aa:92:01:ce:61:cb:b0: a2:34:01:ad:f0:bb:ed:ee:ca:f8:c9:db:04:94:80: fd:d6:d2:d0:60:44:48:cb:20:90:f0:3b:b0:d7:24: b2:ca:e3:9e:71:c7:22:25:a9:98:88:a7:d5:10:73: fc:91:ad:72:13:0c:3f:88:cd:b8:4e:d9:1b:60:bc: 74:de:5a:a0:bc:52:8b:78:4a:a6:f3:56:35:11:ee: 45:43:3e:dc:4d:14:ea:dc:f5:92:b4:d9:64:67:be: d8:29:74:e2:8b:8b:b8:9a:78:2d:61:4c:f0:f9:87: d1:13:85:b0:95:7a:a9:b2:5f:1d:8b:16:19:d1:93: 1b:89:84:1e:dd:ae:89:9d:29:40:a1:09:c3:22:d5: 04:91:d5:2e:35:97:8a:10:ea:5e:82:4b:24:fc:3a: c0:35:fb:f8:b8:10:78:a2:17:73:65:e4:64:f8:7a: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:55:17:3C:93:AD:88:F3:F3:F6:D6:9D:CD:43:83:7C:D3:4D:10:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.16.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:63:31:e4:87:f7:e0:47:14:73:28:cb:af:52:cc:5f:b2:68: 28:33:9e:91:4d:73:69:69:d6:6a:1a:f9:ad:8b:dd:95:71:4c: eb:1e:c8:9a:aa:bd:f6:c4:fa:85:e1:ca:47:13:7c:ec:a1:16: e1:b5:60:26:cb:08:d2:9d:74:ad:ed:6f:c1:27:39:e5:c9:38: ce:c0:1b:58:b1:9d:e3:43:9a:7e:82:03:02:e5:dd:6e:48:d7: 8b:a7:d7:db:04:74:64:bc:fe:12:af:e9:d1:ad:52:47:ba:9e: 48:5a:ce:ea:c4:c9:1c:e3:81:6e:d3:c8:d7:90:93:4a:67:c7: ed:c8:e7:45:b8:f8:9d:51:e4:31:7e:a4:c8:3c:7b:dc:00:29: 62:03:91:fb:bd:88:77:b9:65:f2:b3:a5:8e:90:90:99:7b:d1: f3:80:ec:b4:d0:06:cc:94:6b:62:5f:cd:70:aa:2e:65:14:c4: 8a:3b:94:c1:83:69:c6:c7:5d:43:16:8d:32:c1:5c:22:f5:14: 97:3d:59:bf:db:22:3a:ef:ff:53:2c:9d:63:33:35:f6:2a:c9: fe:85:68:14:64:fb:6f:a9:b3:82:50:15:4c:37:9f:19:33:57: ca:fd:01:ec:13:88:fc:1e:a7:d6:e7:fa:f2:6a:12:29:76:1d: bf:64:de:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23U9XBLNLGCp78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MjVjNmVmODMtZTM1Yi00OWQzLTk5NTEtYmNlZDEzN2ZlYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9T3M4ugiBkRRuTCba6rSh5+wkYvBAFWyNzD tvr99ru3nS2zH9ZC6D95os8vY+7Pbe/Hj2Or+K7DnQ5wBVbDIx6+GiG62fyEaaDd cHM4+tRHyqqSAc5hy7CiNAGt8Lvt7sr4ydsElID91tLQYERIyyCQ8Duw1ySyyuOe ccciJamYiKfVEHP8ka1yEww/iM24TtkbYLx03lqgvFKLeEqm81Y1Ee5FQz7cTRTq 3PWStNlkZ77YKXTii4u4mngtYUzw+YfRE4WwlXqpsl8dixYZ0ZMbiYQe3a6JnSlA oQnDItUEkdUuNZeKEOpegksk/DrANfv4uBB4ohdzZeRk+Hoq+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdVFzyTrYjz8/bWnc1Dg3zTTRD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvM2Q0NThiMTAtMDBkOC0z ZjAwLWEwYzctMmZjNmM5ZGUzMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVjMeSH9+BHFHMoy69SzF+yaCgznpFNc2lp1moa+a2L3ZVxTOseyJqq vfbE+oXhykcTfOyhFuG1YCbLCNKddK3tb8EnOeXJOM7AG1ixneNDmn6CAwLl3W5I 14un19sEdGS8/hKv6dGtUke6nkhazurEyRzjgW7TyNeQk0pnx+3I50W4+J1R5DF+ pMg8e9wAKWIDkfu9iHe5ZfKzpY6QkJl70fOA7LTQBsyUa2JfzXCqLmUUxIo7lMGD acbHXUMWjTLBXCL1FJc9Wb/bIjrv/1MsnWMzNfYqyf6FaBRk+2+ps4JQFUw3nxkz V8r9AewTiPwep9bn+vJqEil2Hb9k3pU= -----END CERTIFICATE-----Generated at Sun Aug 10 15:57:31 2025 by rpki-client