$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b14a861d-627f-3443-a30d-58f5ca0da609.roa File: b14a861d-627f-3443-a30d-58f5ca0da609.roa (raw, json) Hash identifier: VT2eOo7bw1dYF0W1xTr1ll5VQ712JAb7XaTTRFPnGsk= Subject key identifier: 2C:EA:B4:14:E5:E9:A9:78:CB:8A:39:BF:43:5A:B3:DF:CE:73:BE:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840ADB485FEFD630F60D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b14a861d-627f-3443-a30d-58f5ca0da609.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 397197 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0a:db:48:5f:ef:d6:30:f6:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=37ceb927-e604-4a93-b025-30808eea6745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:28:75:b9:d8:04:cb:80:2e:d0:46:aa:6e:7a: 9f:26:bb:fa:2d:69:71:46:25:06:c4:bc:36:f4:d7: 68:c0:3a:f2:5f:d7:a6:6f:bc:45:ea:63:65:fc:98: 5c:37:b0:1c:92:1f:de:b8:94:2e:fb:12:29:22:a8: d3:7f:c4:4d:08:0d:17:fa:7d:0a:12:c6:8e:d1:09: 9c:60:b8:78:00:92:d6:3e:5d:f0:87:24:7d:09:e1: 32:48:ee:ac:91:51:44:0f:e1:15:84:3c:50:c3:97: c8:ac:19:ff:e2:6a:a2:cb:1e:a3:24:f9:a5:76:c1: a0:12:f2:a6:63:9a:ed:b5:81:9b:53:5d:da:4c:7d: be:a7:e5:43:54:50:16:a7:3a:38:04:a3:c9:94:dc: 91:9e:67:b8:1f:e3:75:4c:f4:33:1e:b6:c5:d5:fb: 2c:67:a1:c2:8e:ca:e7:b9:0e:27:ad:9d:d1:95:f1: 27:7b:ad:3d:8c:bc:ef:4e:21:84:03:a2:87:60:bc: 31:02:0c:f7:01:c9:5a:25:f8:c2:88:40:08:c7:28: 4f:a4:1d:b3:a3:76:81:2f:6f:c6:50:66:eb:5c:d9: 10:6d:4b:80:74:4e:62:ea:f4:8e:73:25:7a:05:32: e6:11:1a:18:58:67:3a:70:83:bc:27:71:80:f6:5c: 11:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EA:B4:14:E5:E9:A9:78:CB:8A:39:BF:43:5A:B3:DF:CE:73:BE:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b14a861d-627f-3443-a30d-58f5ca0da609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:85:9b:9c:01:35:23:51:66:42:23:6f:b8:0e:7a:1a:34:62: e2:af:52:ab:08:55:39:26:20:9b:fc:f3:16:ad:95:14:30:e2: 30:3e:a8:db:f9:2b:3a:e3:89:c1:17:a5:a0:55:de:7f:9c:7c: ae:85:2f:3e:b1:1f:e5:9f:b9:2e:7a:c4:24:79:27:81:e7:54: 75:63:2b:c8:85:41:16:29:37:03:52:8a:62:f2:fd:d3:dd:da: 8c:8d:34:aa:3a:63:6a:53:98:f3:ab:ab:6e:ca:0b:40:31:7f: b3:9d:0c:a8:85:24:cf:3d:8e:c1:5a:ba:ee:52:0d:4c:1b:4a: b9:a7:49:14:f6:7c:18:6e:23:c2:61:7c:2f:06:3e:76:ff:f0: ec:11:cf:78:f9:2a:30:05:44:2f:20:c3:1a:e6:d7:79:dc:13: 7b:de:01:2a:29:8e:26:a6:d7:a9:60:d2:18:91:57:0f:e6:b3: 12:ed:28:d7:47:8a:5b:c9:49:48:50:08:b3:75:17:da:06:07: 17:cf:13:ee:a2:38:8c:cb:0b:74:8b:f4:fc:11:38:7b:ce:b2: 98:61:97:e5:03:e1:f9:4e:cf:a8:b6:bd:cf:6a:a9:1e:b6:b2: 42:dc:e5:ee:5e:d7:f0:26:2a:92:b6:3f:91:88:68:f7:3e:63: 66:2f:26:62 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihArbSF/v1jD2DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk MzdjZWI5MjctZTYwNC00YTkzLWIwMjUtMzA4MDhlZWE2NzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Sh1udgEy4Au0EaqbnqfJrv6LWlxRiUGxLw2 9NdowDryX9emb7xF6mNl/JhcN7Ackh/euJQu+xIpIqjTf8RNCA0X+n0KEsaO0Qmc YLh4AJLWPl3whyR9CeEySO6skVFED+EVhDxQw5fIrBn/4mqiyx6jJPmldsGgEvKm Y5rttYGbU13aTH2+p+VDVFAWpzo4BKPJlNyRnme4H+N1TPQzHrbF1fssZ6HCjsrn uQ4nrZ3RlfEne609jLzvTiGEA6KHYLwxAgz3AclaJfjCiEAIxyhPpB2zo3aBL2/G UGbrXNkQbUuAdE5i6vSOcyV6BTLmERoYWGc6cIO8J3GA9lwRjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCzqtBTl6al4y4o5v0Nas9/Oc77wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjE0YTg2MWQtNjI3Zi0z NDQzLWEzMGQtNThmNWNhMGRhNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNhZucATUjUWZCI2+4DnoaNGLir1KrCFU5JiCb/PMWrZUUMOIwPqjb +Ss644nBF6WgVd5/nHyuhS8+sR/ln7kuesQkeSeB51R1YyvIhUEWKTcDUopi8v3T 3dqMjTSqOmNqU5jzq6tuygtAMX+znQyohSTPPY7BWrruUg1MG0q5p0kU9nwYbiPC YXwvBj52//DsEc94+SowBUQvIMMa5td53BN73gEqKY4mptepYNIYkVcP5rMS7SjX R4pbyUlIUAizdRfaBgcXzxPuojiMywt0i/T8ETh7zrKYYZflA+H5Ts+otr3Paqke trJC3OXuXtfwJiqStj+RiGj3PmNmLyZi -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:03 2025 by rpki-client