$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa File: 214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa (raw, json) Hash identifier: 7R2WWgmT+2mO9MuoK9vaxQN5ZT/W0psMAN2V4F0y6/I= Subject key identifier: 44:95:C1:04:61:68:E8:24:16:4E:1C:71:86:E6:47:1B:2D:06:CE:99 Certificate issuer: /CN=dfb59d70-0c69-4135-b2f0-61bd4d1a8263 Certificate serial: 010D0C9F4328584BAA97A7530CFF4726DE491400 Authority key identifier: 3E:F6:00:B6:1A:9D:FA:34:50:F0:1A:87:6B:57:D8:E0:CE:C5:87:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 11110 IP address blocks: 204.13.52.0/22 maxlen: 24 2604:3500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a7:53:0c:ff:47:26:de:49:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfb59d70-0c69-4135-b2f0-61bd4d1a8263 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=eaf0fc81-6649-4971-8183-2f9f72486096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:84:74:71:e4:51:23:0f:70:56:b8:cf:42: 27:ac:59:bf:99:d4:97:b7:d5:d3:e7:54:81:6b:63: 2a:5b:71:dc:48:2c:0c:19:86:cf:dc:ff:b6:f0:58: db:02:f5:e7:2b:d1:f9:dd:fa:46:17:84:15:c3:8e: 14:be:89:81:f6:13:97:a9:f5:dc:f1:f6:28:de:a5: 28:e6:20:14:7d:92:e2:56:31:a4:34:9e:f0:48:fa: ac:be:4a:12:91:2d:c2:a0:6d:44:ee:ed:e7:e1:55: 17:54:b3:39:63:ec:60:12:5c:b6:83:da:4d:7d:93: 74:25:25:08:0c:b9:2d:a3:32:bc:7d:9c:e3:40:9f: c5:5e:13:48:ed:3c:91:96:ea:6c:b7:d3:5d:9e:f1: 41:34:91:fc:1b:c0:21:10:39:4e:d4:af:ea:e0:85: f5:5b:91:9a:20:91:e3:de:ed:b4:b1:34:bf:af:d7: f5:be:7b:35:f0:54:da:4f:6d:ce:7c:b4:95:b8:3a: d1:23:e3:dc:6f:a3:9a:9a:0a:98:c8:aa:51:75:e6: 97:97:bd:5b:9f:12:b1:76:63:62:63:27:2a:05:52: a0:f9:2b:0d:fd:54:0a:a6:bf:53:99:6a:66:62:4d: 38:11:32:8b:38:3f:d0:76:1f:7c:59:58:3d:8f:fe: de:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:95:C1:04:61:68:E8:24:16:4E:1C:71:86:E6:47:1B:2D:06:CE:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.crl X509v3 Authority Key Identifier: keyid:3E:F6:00:B6:1A:9D:FA:34:50:F0:1A:87:6B:57:D8:E0:CE:C5:87:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer sbgp-ipAddrBlock: critical IPv4: 204.13.52.0/22 IPv6: 2604:3500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:8f:aa:fb:f1:1c:60:0a:04:27:3d:3f:c0:a4:8c:53:bb:4b: ba:72:eb:38:2e:f5:4c:0c:d8:12:46:63:c3:51:7f:9d:42:0a: 14:ca:ed:d6:99:04:22:7e:89:ec:7b:bb:9d:b4:86:c8:14:de: 06:c3:ff:9c:1d:2c:8c:10:77:89:af:fb:47:3f:d6:18:29:5a: 6a:56:72:13:c5:34:1a:0d:b8:4a:e5:26:b0:4d:bf:e8:26:35: 6b:5d:86:e4:8d:78:a5:ab:cd:0e:14:3f:52:48:5d:f5:d1:1f: a6:46:80:00:73:d1:40:82:a3:38:83:1f:46:a5:1e:e6:9a:dd: 47:bd:d0:b9:65:04:d2:b8:c6:11:e5:79:ce:05:ec:94:ae:aa: f9:56:a6:f5:26:3c:61:e0:d5:3e:56:d7:07:60:db:98:97:22: 67:ba:3a:7c:77:6a:db:74:d6:3b:e1:d6:ef:be:a1:e4:84:31: b6:03:18:8a:31:3e:d2:4f:c6:ec:bc:93:7e:a0:63:59:32:9c: 44:b3:7d:8e:41:10:dd:00:78:69:9b:0c:22:8f:6f:47:7c:1b: 7d:fe:21:08:de:1e:00:84:37:3b:f4:43:22:e0:e7:52:f6:7b: cc:7a:a8:a8:f7:e5:63:b1:f5:29:1e:e6:40:76:e7:4e:df:10: 12:48:da:f3 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEuql6dTDP9HJt5JFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZiNTlkNzAtMGM2OS00MTM1LWIyZjAtNjFiZDRkMWE4 MjYzMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZWFmMGZjODEtNjY0OS00OTcxLTgxODMtMmY5ZjcyNDg2MDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX2EdHHkUSMPcFa4z0InrFm/mdSXt9XT51SB a2MqW3HcSCwMGYbP3P+28FjbAvXnK9H53fpGF4QVw44UvomB9hOXqfXc8fYo3qUo 5iAUfZLiVjGkNJ7wSPqsvkoSkS3CoG1E7u3n4VUXVLM5Y+xgEly2g9pNfZN0JSUI DLktozK8fZzjQJ/FXhNI7TyRlupst9NdnvFBNJH8G8AhEDlO1K/q4IX1W5GaIJHj 3u20sTS/r9f1vns18FTaT23OfLSVuDrRI+Pcb6OamgqYyKpRdeaXl71bnxKxdmNi YycqBVKg+SsN/VQKpr9TmWpmYk04ETKLOD/Qdh98WVg9j/7eVQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFESVwQRhaOgkFk4ccYbmRxstBs6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZmI1 OWQ3MC0wYzY5LTQxMzUtYjJmMC02MWJkNGQxYTgyNjMvMjE0ZDdhYzYtYTMwNC0z Zjk1LWJmMmUtNjBjZmI0MmI2YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGZiNTlkNzAtMGM2OS00MTM1LWIy ZjAtNjFiZDRkMWE4MjYzL2RmYjU5ZDcwLTBjNjktNDEzNS1iMmYwLTYxYmQ0ZDFh ODI2My5jcmwwHwYDVR0jBBgwFoAUPvYAthqd+jRQ8BqHa1fY4M7FhycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kZmI1OWQ3MC0wYzY5LTQxMzUtYjJmMC02MWJk NGQxYTgyNjMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCzA00MA0E AgACMAcDBQAmBDUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHGPqvvxHGAKBCc9P8CkjFO7S7py6zgu9UwM 2BJGY8NRf51CChTK7daZBCJ+iex7u520hsgU3gbD/5wdLIwQd4mv+0c/1hgpWmpW chPFNBoNuErlJrBNv+gmNWtdhuSNeKWrzQ4UP1JIXfXRH6ZGgABz0UCCoziDH0al Huaa3Ue90LllBNK4xhHlec4F7JSuqvlWpvUmPGHg1T5W1wdg25iXIme6Onx3att0 1jvh1u++oeSEMbYDGIoxPtJPxuy8k36gY1kynESzfY5BEN0AeGmbDCKPb0d8G33+ IQjeHgCENzv0QyLg51L2e8x6qKj35WOx9Ske5kB2507fEBJI2vM= -----END CERTIFICATE-----Generated at Thu Nov 6 03:29:03 2025 by rpki-client