$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da3cc7cb-97de-37a7-b7f9-83b8e6f12376.roa File: da3cc7cb-97de-37a7-b7f9-83b8e6f12376.roa (raw, json) Hash identifier: J4d6UwUlxn27/IkBniNDOUWTILwJYArjCLkcQ8KrxTY= Subject key identifier: A1:A4:84:75:45:08:61:B5:A6:AC:6D:67:E1:38:07:C1:A4:91:3F:94 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840A3082AB6D29D4EA8FE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da3cc7cb-97de-37a7-b7f9-83b8e6f12376.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 396551 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0a:30:82:ab:6d:29:d4:ea:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=b9fde1b9-ab7d-485c-a3e7-5cb947d1a412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:e9:da:3f:2b:39:bb:f4:4a:6e:81:1e:68: ba:1a:c0:42:6c:07:88:24:32:b3:e2:9c:31:9a:a7: 0a:8d:76:41:64:e2:d5:a0:a7:2c:88:a0:8f:a9:81: ae:9d:9b:64:ab:6b:8b:d4:d2:34:a8:71:1a:9d:0b: e4:12:4d:21:32:78:76:60:b1:5b:ce:18:af:d7:91: 70:3e:a5:1d:33:40:f4:2b:08:53:88:71:08:79:24: e3:b0:4a:5c:9a:59:db:61:62:c6:7c:ad:ad:7f:87: 05:02:eb:e7:f1:1f:e8:28:6a:ca:9a:2c:7f:fc:b2: 87:1c:5a:1e:d6:09:70:5b:8d:e5:83:67:8f:b4:57: 97:d8:3e:8f:24:ab:e2:a3:45:82:08:19:95:ee:8c: ba:1b:0d:53:14:cf:23:45:cc:c7:07:f5:e0:ab:cd: 8d:36:ff:53:df:f2:2d:57:9d:29:5d:74:64:74:17: 77:0c:d9:60:c3:e3:ce:2a:c8:31:81:fd:b1:09:20: 07:57:fe:d5:7d:08:92:d9:5d:9a:93:1d:78:4e:67: f3:83:57:00:f4:f1:26:fd:21:84:2e:96:b5:5f:5f: 42:89:fc:e1:9f:ad:13:18:da:a1:b0:eb:22:68:f5: ca:07:43:bb:eb:de:e6:88:59:a2:c2:89:f2:40:1a: 20:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A4:84:75:45:08:61:B5:A6:AC:6D:67:E1:38:07:C1:A4:91:3F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da3cc7cb-97de-37a7-b7f9-83b8e6f12376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:bf:a5:eb:e1:af:f7:2b:4e:64:9c:ce:bd:ec:c5:6e:55:86: b9:89:fa:c9:5b:bd:f9:03:ae:4e:34:6b:2b:be:b3:d3:e0:87: 77:2c:97:52:f0:6d:ab:60:ce:4f:51:d0:2b:ab:81:0e:83:fc: a3:ac:dd:78:65:2b:05:13:ff:e6:0f:68:0c:3b:9c:c6:f7:cf: 75:b4:ed:55:56:74:9d:f7:4d:b4:fb:9f:5d:fa:3a:0b:1b:16: 33:a3:87:25:b6:95:96:03:fd:2d:75:80:13:04:c5:a9:f2:a0: d2:4d:b0:00:2c:3a:9b:32:7e:c2:75:c1:44:81:07:19:1b:b5: 59:60:16:1e:4d:78:95:2b:a5:bd:e3:59:71:56:48:74:92:80: 85:5a:2b:81:53:33:df:a4:83:81:5c:ba:e2:5c:42:ae:26:10: 2b:11:75:8f:3d:af:e4:16:bc:bb:8c:d2:47:31:3f:a0:36:47: e4:10:f5:66:5f:1a:cf:43:52:22:a2:13:3a:6e:e3:61:0a:a1: 1f:a3:57:e4:a2:79:d0:06:d9:34:c9:ff:dc:b2:a1:ad:49:64: bd:d9:61:52:76:a1:19:a3:5c:ca:57:a0:b7:a4:50:10:40:c6: da:6f:58:81:a2:fc:a4:5d:9a:58:56:a7:a5:82:0e:87:a3:e7: b3:f5:b6:c1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAowgqttKdTqj+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk YjlmZGUxYjktYWI3ZC00ODVjLWEzZTctNWNiOTQ3ZDFhNDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBPp2j8rObv0Sm6BHmi6GsBCbAeIJDKz4pwx mqcKjXZBZOLVoKcsiKCPqYGunZtkq2uL1NI0qHEanQvkEk0hMnh2YLFbzhiv15Fw PqUdM0D0KwhTiHEIeSTjsEpcmlnbYWLGfK2tf4cFAuvn8R/oKGrKmix//LKHHFoe 1glwW43lg2ePtFeX2D6PJKvio0WCCBmV7oy6Gw1TFM8jRczHB/Xgq82NNv9T3/It V50pXXRkdBd3DNlgw+POKsgxgf2xCSAHV/7VfQiS2V2akx14Tmfzg1cA9PEm/SGE Lpa1X19Cifzhn60TGNqhsOsiaPXKB0O7697miFmiwonyQBogvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKGkhHVFCGG1pqxtZ+E4B8GkkT+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGEzY2M3Y2ItOTdkZS0z N2E3LWI3ZjktODNiOGU2ZjEyMzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBXv6Xr4a/3K05knM697MVuVYa5ifrJW735A65ONGsrvrPT4Id3LJdS 8G2rYM5PUdArq4EOg/yjrN14ZSsFE//mD2gMO5zG9891tO1VVnSd9020+59d+joL GxYzo4cltpWWA/0tdYATBMWp8qDSTbAALDqbMn7CdcFEgQcZG7VZYBYeTXiVK6W9 41lxVkh0koCFWiuBUzPfpIOBXLriXEKuJhArEXWPPa/kFry7jNJHMT+gNkfkEPVm XxrPQ1IiohM6buNhCqEfo1fkonnQBtk0yf/csqGtSWS92WFSdqEZo1zKV6C3pFAQ QMbab1iBovykXZpYVqelgg6Ho+ez9bbB -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:36 2025 by rpki-client