$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2c51a7fc-3a18-3da6-a218-e69ba6f00410.roa File: 2c51a7fc-3a18-3da6-a218-e69ba6f00410.roa (raw, json) Hash identifier: GbmeRy4H5UuXwBD54ak1y6WQ6CTRspOYUCrTqxqztyY= Subject key identifier: B5:C4:0A:0F:01:DB:6B:07:ED:10:3B:12:6E:15:FE:9F:91:38:BF:FA Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584B59A1C823D5CF6CF30F378D00 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2c51a7fc-3a18-3da6-a218-e69ba6f00410.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 36007 IP address blocks: 209.182.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:c8:23:d5:cf:6c:f3:0f:37:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=62a1ded7-6e74-4a56-ba1b-3036e1fd27c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3d:ce:93:d7:33:04:67:a7:9f:08:a7:e0:d7: b7:7b:f8:5d:77:3e:58:61:fa:33:58:27:7d:44:48: b9:2e:ec:48:da:03:f1:9c:bd:1c:a4:a2:b9:6d:bf: 2d:9a:30:ff:c0:9a:b3:01:a6:a2:38:54:6e:f9:fc: de:a1:82:db:c4:cb:8c:21:2b:f7:88:34:9e:e4:c4: c6:aa:9e:6f:f1:73:70:76:2f:d9:15:b8:1b:fb:b0: ef:56:25:61:6d:1d:0f:cf:3f:98:f5:6e:b3:56:a3: 39:36:f6:c0:13:6a:26:c4:41:4d:c7:74:cb:f1:34: d5:d1:ff:8f:bc:6d:2d:76:f7:29:c5:66:e0:37:11: 66:27:fc:a4:1a:8e:5f:aa:27:37:ba:66:6a:7b:49: ec:2b:8d:e7:27:13:07:76:37:f4:c9:af:a2:f6:7e: fb:5f:25:9d:13:43:32:11:00:14:44:ab:56:a4:25: e2:bc:e1:30:58:a5:9f:87:d0:16:af:7c:af:11:16: e0:70:fd:c3:7d:15:ed:14:9c:05:b2:72:b0:d2:2d: ec:de:d9:40:e2:be:a3:b3:b9:04:66:b8:33:fa:a8: 68:2c:a5:1b:5f:07:39:c3:23:bf:63:df:eb:36:64: c0:5f:73:3a:28:40:61:c7:86:37:c3:ae:44:f1:7f: 9a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C4:0A:0F:01:DB:6B:07:ED:10:3B:12:6E:15:FE:9F:91:38:BF:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2c51a7fc-3a18-3da6-a218-e69ba6f00410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 209.182.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:48:e0:5f:4e:4e:27:bd:81:8b:d4:d1:22:76:d6:3b:e2:35: 63:aa:a5:15:90:0a:e3:a7:af:c0:1e:89:e5:9c:59:d5:ec:5f: 8e:ed:fc:f5:be:2b:e8:bf:db:55:a8:96:48:d1:96:22:1a:8c: fa:5b:a0:31:13:3e:be:e2:3f:cc:a7:91:64:75:9e:85:e1:1c: 04:ab:b3:b7:4a:28:ff:42:98:09:86:be:05:cd:7e:91:c5:2d: 5e:f4:01:7c:32:9a:ea:d5:95:06:0b:01:f0:b1:53:b1:98:67: d4:2a:2d:41:ac:0f:cc:6e:c0:0a:75:b7:f5:7f:1a:fc:93:e1: b9:89:6e:13:d5:c0:2b:ca:6b:47:ba:c7:ae:92:b1:d2:7c:7f: e6:80:70:43:bc:6c:cc:b5:8c:f7:9a:00:51:a4:1a:ba:cd:a1: f2:b1:cd:a6:e2:56:e0:9a:78:66:9c:be:ab:55:ec:15:8d:8f: 14:0a:f7:5f:b5:f1:c5:da:1d:39:06:cf:03:e8:b8:25:6f:04: 3a:68:de:e7:d0:c9:da:9f:37:1c:ac:0c:50:23:7c:87:8a:98: 47:d6:f0:de:44:c1:5b:7d:e4:05:9b:86:f3:ec:7b:dc:9b:11: 55:09:76:f6:99:b1:54:bf:3e:15:7c:93:e7:1e:a1:60:f9:49: 94:25:6f:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZocgj1c9s8w83jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk NjJhMWRlZDctNmU3NC00YTU2LWJhMWItMzAzNmUxZmQyN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz3Ok9czBGennwin4Ne3e/hddz5YYfozWCd9 REi5LuxI2gPxnL0cpKK5bb8tmjD/wJqzAaaiOFRu+fzeoYLbxMuMISv3iDSe5MTG qp5v8XNwdi/ZFbgb+7DvViVhbR0Pzz+Y9W6zVqM5NvbAE2omxEFNx3TL8TTV0f+P vG0tdvcpxWbgNxFmJ/ykGo5fqic3umZqe0nsK43nJxMHdjf0ya+i9n77XyWdE0My EQAURKtWpCXivOEwWKWfh9AWr3yvERbgcP3DfRXtFJwFsnKw0i3s3tlA4r6js7kE Zrgz+qhoLKUbXwc5wyO/Y9/rNmTAX3M6KEBhx4Y3w65E8X+aHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXECg8B22sH7RA7Em4V/p+ROL/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvMmM1MWE3ZmMtM2ExOC0z ZGE2LWEyMTgtZTY5YmE2ZjAwNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtI4F9OTie9gYvU0SJ21jviNWOqpRWQCuOnr8AeieWcWdXsX47t/PW+ K+i/21WolkjRliIajPpboDETPr7iP8ynkWR1noXhHASrs7dKKP9CmAmGvgXNfpHF LV70AXwymurVlQYLAfCxU7GYZ9QqLUGsD8xuwAp1t/V/GvyT4bmJbhPVwCvKa0e6 x66SsdJ8f+aAcEO8bMy1jPeaAFGkGrrNofKxzabiVuCaeGacvqtV7BWNjxQK91+1 8cXaHTkGzwPouCVvBDpo3ufQydqfNxysDFAjfIeKmEfW8N5EwVt95AWbhvPse9yb EVUJdvaZsVS/PhV8k+ceoWD5SZQlb7w= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:33 2025 by rpki-client