$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c6774a8-98b8-3a57-a608-38afdb985dda.roa File: 9c6774a8-98b8-3a57-a608-38afdb985dda.roa (raw, json) Hash identifier: s+61jbXiuDkicGP8Xhg6li6P/ElVSJU2EPOzvaRsKkI= Subject key identifier: 20:99:90:06:32:1A:09:D7:DA:BC:44:B5:3D:E2:8A:43:F0:70:8F:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5CE6419519F04B9E50080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c6774a8-98b8-3a57-a608-38afdb985dda.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 211369 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:ce:64:19:51:9f:04:b9:e5:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=dcdb62cd-6483-496f-afab-2e92a556370a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:04:98:67:ea:84:6e:af:6d:f9:13:eb:10: 0b:c9:33:6c:51:d5:c3:d2:78:44:c4:f8:b9:29:ed: 7a:65:eb:49:af:15:5b:7f:f5:7e:e3:35:66:5f:f4: 53:49:a9:68:a5:12:f6:4b:04:be:c4:a1:1f:5a:45: 24:3f:33:65:18:29:d7:85:47:37:35:7c:61:fa:a9: 4c:90:06:93:03:46:17:7d:86:ce:28:60:3f:8f:c7: a4:38:7f:95:be:eb:0d:c7:4e:92:96:17:b5:78:e4: fe:a1:77:3a:51:7d:86:bf:72:d4:54:60:ba:eb:d0: 23:31:c4:9b:e0:9f:b4:03:dc:d1:5d:6f:de:93:10: e5:72:7d:97:5e:35:f7:40:ed:16:18:09:83:8f:ea: 32:71:ec:6a:e3:fb:23:db:89:4d:69:72:51:49:a0: d9:b1:15:fe:0e:be:e5:09:b1:c9:b5:42:82:a0:dc: f9:54:8b:6e:47:5d:2b:f0:51:4b:52:6a:22:91:a9: d8:4e:d5:a0:2f:1e:5d:8a:51:9a:25:58:74:d1:0e: 70:5b:84:1d:4a:9e:94:6c:21:3f:59:24:c4:33:e1: 2e:65:9c:a1:41:f0:25:0f:3f:4d:41:4f:94:a0:0f: 4d:cd:e1:1f:58:c4:b3:e9:28:05:87:da:89:41:69: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:99:90:06:32:1A:09:D7:DA:BC:44:B5:3D:E2:8A:43:F0:70:8F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c6774a8-98b8-3a57-a608-38afdb985dda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:15:cb:c6:35:75:70:8a:af:1d:56:27:35:4c:5b:3e:17:7e: 73:4d:ed:f8:b2:73:f6:ff:44:82:b4:30:2b:74:c3:e8:4a:ed: fc:6f:c0:97:33:07:cc:89:35:9d:db:7c:6a:b0:54:02:eb:86: ba:b4:1d:5a:c9:c1:07:15:b7:85:76:2f:41:d3:15:c4:fd:22: f9:5e:51:f0:be:19:08:43:02:88:d8:ae:29:c4:71:1c:0e:30: f1:2f:9a:71:eb:0f:a7:71:f6:8c:d7:9e:89:3d:35:11:2e:ab: 2a:0b:b1:be:cf:5e:a5:47:c8:9b:c2:ac:bf:9e:3e:fe:e8:57: a8:fc:78:cb:ad:5f:97:e3:00:a0:7f:27:06:dd:3f:54:20:0a: 46:c9:c1:69:db:6a:e1:58:d8:f1:5e:10:3f:9f:e4:37:10:83: b1:39:5b:7d:e2:74:3f:25:ef:58:74:fe:8d:be:f3:05:10:96: c8:bb:27:77:89:87:46:e7:cc:1f:3b:23:af:5b:17:e0:78:ad: dc:f8:0f:8d:c8:91:b3:69:41:c4:ba:74:9c:66:eb:41:3b:f6: f4:8f:d8:39:2c:cc:c6:f3:72:2a:d1:e8:72:d4:fd:1c:b8:38: 05:b7:af:71:1e:eb:c9:cc:89:03:60:63:22:40:66:24:71:c7: 82:9c:12:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itc5kGVGfBLnlAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk ZGNkYjYyY2QtNjQ4My00OTZmLWFmYWItMmU5MmE1NTYzNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIcEmGfqhG6vbfkT6xALyTNsUdXD0nhExPi5 Ke16ZetJrxVbf/V+4zVmX/RTSalopRL2SwS+xKEfWkUkPzNlGCnXhUc3NXxh+qlM kAaTA0YXfYbOKGA/j8ekOH+VvusNx06Slhe1eOT+oXc6UX2Gv3LUVGC669AjMcSb 4J+0A9zRXW/ekxDlcn2XXjX3QO0WGAmDj+oycexq4/sj24lNaXJRSaDZsRX+Dr7l CbHJtUKCoNz5VItuR10r8FFLUmoikanYTtWgLx5dilGaJVh00Q5wW4QdSp6UbCE/ WSTEM+EuZZyhQfAlDz9NQU+UoA9NzeEfWMSz6SgFh9qJQWmHWQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCCZkAYyGgnX2rxEtT3iikPwcI/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWM2Nzc0YTgtOThiOC0z YTU3LWE2MDgtMzhhZmRiOTg1ZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0FcvGNXVwiq8dVic1TFs+F35zTe34snP2/0SCtDArdMPoSu38b8CX MwfMiTWd23xqsFQC64a6tB1aycEHFbeFdi9B0xXE/SL5XlHwvhkIQwKI2K4pxHEc DjDxL5px6w+ncfaM156JPTURLqsqC7G+z16lR8ibwqy/nj7+6Feo/HjLrV+X4wCg fycG3T9UIApGycFp22rhWNjxXhA/n+Q3EIOxOVt94nQ/Je9YdP6NvvMFEJbIuyd3 iYdG58wfOyOvWxfgeK3c+A+NyJGzaUHEunScZutBO/b0j9g5LMzG83Iq0ehy1P0c uDgFt69xHuvJzIkDYGMiQGYkcceCnBJb -----END CERTIFICATE-----Generated at Sat Jun 13 15:30:24 2026 by rpki-client