$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa File: 2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa (raw, json) Hash identifier: 3bL6cupwAid8LdzjA0YAPV/jAQAFulpnnVD6DjDd4mo= Subject key identifier: 5F:5A:D0:9D:05:5D:B7:E8:3F:2D:8F:7E:3E:30:AE:DA:7C:61:DE:BA Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584B3DB6FF202DC51B100D001340 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 40509 IP address blocks: 209.198.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:ff:20:2d:c5:1b:10:0d:00:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=12745067-60e8-444f-9207-9847df1b5a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:14:f6:82:06:62:4d:82:59:01:4d:0e:79: 0f:9c:fa:db:36:61:7a:89:ce:f2:77:96:4a:42:a1: 6c:35:0d:89:14:a7:94:ba:33:28:26:b6:df:9e:9b: 00:a6:a0:31:3b:82:f8:55:41:ef:a2:3e:11:eb:88: 9c:98:d2:d5:ef:20:a1:e3:e4:54:4c:bc:45:70:50: 0d:e0:4a:8f:5a:b5:00:9a:d8:0d:5a:e0:10:a5:a5: 9e:db:e5:38:e8:b0:19:dc:b4:f4:a4:dc:d8:bc:9a: bb:77:29:44:01:bf:39:0a:9a:f1:d6:c4:22:0a:db: 73:29:64:8a:64:cd:14:d9:ae:1c:03:cb:28:a9:0d: 6d:9b:46:93:2f:47:a4:03:f8:3f:83:8d:9a:86:d7: 67:bc:26:c6:8d:f0:0f:b3:de:6f:e5:a5:b8:22:e3: eb:e5:db:54:6d:51:71:73:66:0e:43:6f:73:ae:07: ed:d6:7d:7b:62:79:3b:5f:24:5a:63:e6:3f:22:a3: 80:00:97:59:eb:b6:d9:27:71:cb:1e:98:78:82:45: 4d:e6:50:01:2c:48:98:19:33:ad:50:b4:9f:d1:84: 4c:f5:ec:56:64:4b:65:1c:20:d6:63:3d:ff:4c:7c: 49:c7:f4:b2:2c:12:9e:71:b7:db:36:98:9b:7d:66: 96:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5A:D0:9D:05:5D:B7:E8:3F:2D:8F:7E:3E:30:AE:DA:7C:61:DE:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 209.198.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:81:be:ec:b4:c9:50:1f:b9:f8:15:80:50:10:0c:5a:65:72: 4c:62:3a:07:82:ce:ac:09:46:46:18:af:b2:bf:a1:bc:88:eb: c4:7e:1d:0a:b5:cc:9c:c9:49:d0:f8:c2:b6:27:f3:3e:87:ac: f1:14:67:b8:d9:cd:43:5f:29:36:92:da:68:8f:6a:45:7d:bf: 10:4a:97:ca:29:cc:bf:7a:79:56:8b:9e:da:63:41:97:1d:25: c2:e1:0d:9a:90:35:0b:37:66:17:b2:bb:88:a8:83:1d:1e:a5: 02:37:25:e4:3a:e9:98:14:be:c4:95:e6:2b:d8:b6:dc:36:f5: 33:b2:b8:ce:5e:6d:57:0c:4e:ca:4c:0a:47:22:40:9a:31:4b: b0:2f:98:7f:41:30:b8:b6:ef:7d:55:41:98:0f:65:ba:8e:84: 26:f5:17:15:82:4e:5b:e8:e4:16:ac:2b:e7:c1:74:60:26:89: 1c:40:97:bc:d6:1d:54:a4:1f:46:a9:74:2c:14:ea:43:74:5b: ce:02:28:1c:c0:b3:19:5d:7c:a2:c7:04:58:2e:e6:35:c1:c7: 3a:b3:33:19:1f:c1:8c:ef:91:3e:2b:8e:f7:22:3f:00:9c:e4: 65:1d:60:3a:e5:49:f4:23:ff:ae:98:0d:19:79:94:8b:d8:a4: 86:95:43:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tv8gLcUbEA0AE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTI3NDUwNjctNjBlOC00NDRmLTkyMDctOTg0N2RmMWI1YTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6AU9oIGYk2CWQFNDnkPnPrbNmF6ic7yd5ZK QqFsNQ2JFKeUujMoJrbfnpsApqAxO4L4VUHvoj4R64icmNLV7yCh4+RUTLxFcFAN 4EqPWrUAmtgNWuAQpaWe2+U46LAZ3LT0pNzYvJq7dylEAb85Cprx1sQiCttzKWSK ZM0U2a4cA8soqQ1tm0aTL0ekA/g/g42ahtdnvCbGjfAPs95v5aW4IuPr5dtUbVFx c2YOQ29zrgft1n17Ynk7XyRaY+Y/IqOAAJdZ67bZJ3HLHph4gkVN5lABLEiYGTOt ULSf0YRM9exWZEtlHCDWYz3/THxJx/SyLBKecbfbNpibfWaWrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9a0J0FXbfoPy2Pfj4wrtp8Yd66MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMmU2YzVlMzAtYTVlMS0z YjA3LWFmZTAtYzIxNDYzMTMwNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0cbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6Bvuy0yVAfufgVgFAQDFplckxiOgeCzqwJRkYYr7K/obyI68R+HQq1 zJzJSdD4wrYn8z6HrPEUZ7jZzUNfKTaS2miPakV9vxBKl8opzL96eVaLntpjQZcd JcLhDZqQNQs3Zheyu4iogx0epQI3JeQ66ZgUvsSV5ivYttw29TOyuM5ebVcMTspM CkciQJoxS7AvmH9BMLi2731VQZgPZbqOhCb1FxWCTlvo5BasK+fBdGAmiRxAl7zW HVSkH0apdCwU6kN0W84CKBzAsxldfKLHBFgu5jXBxzqzMxkfwYzvkT4rjvciPwCc 5GUdYDrlSfQj/66YDRl5lIvYpIaVQ+w= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:47 2025 by rpki-client