$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6ae0f9e-a617-310b-86bd-7a087197da52.roa File: a6ae0f9e-a617-310b-86bd-7a087197da52.roa (raw, json) Hash identifier: hM0cPqgzOdUjyfM8fF5ta9WBCZMj8N7hgiT0iKTblow= Subject key identifier: 27:F3:19:95:6B:68:85:C9:E5:C7:9D:0E:51:E8:8F:10:14:7F:75:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6284116BD03A7703A6413180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6ae0f9e-a617-310b-86bd-7a087197da52.roa Signing time: Wed 02 Jul 2025 12:36:05 +0000 ROA not before: Wed 02 Jul 2025 12:36:05 +0000 ROA not after: Tue 30 Sep 2025 12:36:05 +0000 asID: 396616 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:11:6b:d0:3a:77:03:a6:41:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:05 2025 GMT Not After : Sep 30 12:36:05 2025 GMT Subject: CN=a8a9a883-2a42-4ecd-8014-275f9f961e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b2:be:09:ee:18:53:52:7a:0f:10:38:43:23: 46:74:0b:cb:62:d2:e3:d5:af:b4:73:1e:4f:a8:50: 28:59:ce:12:2f:7c:eb:ea:d0:76:5f:c8:cd:21:3f: a8:50:f4:31:f8:9b:4a:e6:51:8a:58:7d:cb:83:b1: 8b:e4:68:10:a6:b0:25:65:94:a7:0c:85:fb:cc:12: a6:ab:99:e2:15:4f:c3:17:11:ce:f8:02:1b:f2:a6: 6e:bb:d6:1f:12:8d:28:a8:95:07:ce:e7:f3:4c:86: f3:77:f2:a5:47:b7:e8:ca:94:73:d0:99:f0:bb:db: 26:5d:bf:7b:77:26:f7:aa:e7:9d:d5:85:2e:7c:0e: 91:a6:77:36:7a:ba:75:c7:69:0d:8f:3b:a6:53:95: 16:36:40:3e:e5:56:85:15:22:7c:f4:da:94:88:c3: 29:e0:7f:89:2c:ea:f2:f4:13:41:e8:a6:9c:5e:07: bd:14:74:ff:54:c0:9a:3f:a5:c3:7f:06:10:a6:0f: 74:30:41:da:0a:16:dd:83:25:b7:c9:09:d6:e2:09: e3:6c:ee:5c:4c:14:3e:17:a4:6c:c2:ca:ec:3d:1f: f9:41:77:b9:ec:28:19:e6:7f:33:17:95:a3:bc:9c: b2:80:d8:b8:d4:ba:1d:14:8c:57:57:ab:bc:43:00: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F3:19:95:6B:68:85:C9:E5:C7:9D:0E:51:E8:8F:10:14:7F:75:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6ae0f9e-a617-310b-86bd-7a087197da52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:26:ec:b1:17:d4:ac:f3:9c:f1:fe:c0:b7:94:74:66:38:23: 98:5f:9a:88:f0:40:08:12:59:ee:1c:ca:98:f4:70:69:e4:12: 1c:dd:51:b3:33:d9:17:d4:94:75:0c:4f:46:03:e6:07:d0:ce: bd:9f:01:b4:db:61:b8:be:a5:76:73:ba:8e:3f:60:30:22:f4: 1b:2a:ec:a6:3f:eb:28:7d:99:55:b0:99:e9:a3:ff:b3:87:61: 7d:46:6e:b8:55:8d:db:38:8e:ba:db:cd:c0:1f:3b:4b:32:00: 36:bc:40:e7:7c:f8:41:82:46:b7:39:f9:8a:08:05:bd:be:13: 15:35:f7:25:6e:14:bc:e7:ed:f9:cb:0c:e1:c5:9d:c5:32:48: c7:8a:5d:4f:f3:04:79:af:a4:01:a6:c5:c0:e9:fc:cf:e8:dd: 7b:10:d4:73:df:47:e9:eb:05:9a:68:9b:5b:5b:d7:ee:92:9b: 31:25:0a:c1:c1:c5:47:15:4e:5e:2c:f9:9a:9a:61:bb:c5:d2: e5:38:1a:5b:9e:db:ef:0a:12:bf:3e:5a:50:67:ea:70:1a:fc: 24:ac:4b:3e:69:31:da:be:0f:60:7e:43:67:ad:43:1c:05:14: bb:8f:06:46:39:ad:a3:8a:40:df:27:9b:b5:6d:f3:8b:08:95: 05:45:e1:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBFr0Dp3A6ZBMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNVoXDTI1MDkzMDEyMzYwNVowLzEtMCsGA1UEAxMk YThhOWE4ODMtMmE0Mi00ZWNkLTgwMTQtMjc1ZjlmOTYxZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbK+Ce4YU1J6DxA4QyNGdAvLYtLj1a+0cx5P qFAoWc4SL3zr6tB2X8jNIT+oUPQx+JtK5lGKWH3Lg7GL5GgQprAlZZSnDIX7zBKm q5niFU/DFxHO+AIb8qZuu9YfEo0oqJUHzufzTIbzd/KlR7foypRz0Jnwu9smXb97 dyb3qued1YUufA6Rpnc2erp1x2kNjzumU5UWNkA+5VaFFSJ89NqUiMMp4H+JLOry 9BNB6KacXge9FHT/VMCaP6XDfwYQpg90MEHaChbdgyW3yQnW4gnjbO5cTBQ+F6Rs wsrsPR/5QXe57CgZ5n8zF5WjvJyygNi41LodFIxXV6u8QwBuvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCfzGZVraIXJ5cedDlHojxAUf3WxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTZhZTBmOWUtYTYxNy0z MTBiLTg2YmQtN2EwODcxOTdkYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcJuyxF9Ss85zx/sC3lHRmOCOYX5qI8EAIElnuHMqY9HBp5BIc3VGz M9kX1JR1DE9GA+YH0M69nwG022G4vqV2c7qOP2AwIvQbKuymP+sofZlVsJnpo/+z h2F9Rm64VY3bOI66283AHztLMgA2vEDnfPhBgka3OfmKCAW9vhMVNfclbhS85+35 ywzhxZ3FMkjHil1P8wR5r6QBpsXA6fzP6N17ENRz30fp6wWaaJtbW9fukpsxJQrB wcVHFU5eLPmammG7xdLlOBpbntvvChK/PlpQZ+pwGvwkrEs+aTHavg9gfkNnrUMc BRS7jwZGOa2jikDfJ5u1bfOLCJUFReGb -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:37 2025 by rpki-client