$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce77bbe3-2bd7-3030-bccc-4b00551bae3a.roa File: ce77bbe3-2bd7-3030-bccc-4b00551bae3a.roa (raw, json) Hash identifier: 7wRRwYdJN4HIiJ0b3x7YjuJYX0IGluG/FGa5feEuzoE= Subject key identifier: DA:C1:E8:C6:1B:C1:89:B0:27:94:FC:0C:55:4E:3A:B7:09:F8:2F:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5D850EDC158A8027E6600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce77bbe3-2bd7-3030-bccc-4b00551bae3a.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 27544 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:d8:50:ed:c1:58:a8:02:7e:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=2ab68003-cbc0-4e2d-aab4-29ef9f12eb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:7f:8d:1c:11:58:9d:c9:bf:8f:58:6d:80: 27:55:2e:f1:e5:63:a4:7d:2f:0a:94:e6:54:8e:12: 17:30:51:de:63:48:61:b6:e1:50:61:10:c2:7c:35: 26:47:c7:79:31:5f:8f:8d:c0:96:98:26:4a:54:a5: 3c:ec:45:fc:b5:6e:46:6c:c5:3b:fc:20:c9:2c:2c: 32:27:7f:0a:51:7b:a5:16:29:c8:3c:3d:91:a4:9e: 37:88:5a:8c:c8:e5:6e:9e:74:b4:77:bd:59:4b:82: 05:96:97:03:33:1f:5b:d9:63:f2:42:27:af:7c:fa: 2e:16:3d:42:fb:01:57:83:95:b0:44:28:40:bb:d0: 01:a5:f0:b1:ef:00:2b:d7:99:19:11:46:17:54:8c: 32:61:6a:e4:fa:fb:ad:81:ed:10:22:a6:87:ad:e4: 8c:6b:57:17:f7:dd:a5:0a:75:6b:d5:6a:5d:de:3e: 2f:47:a1:b7:06:4b:4e:b1:4c:8d:c9:ff:9f:56:3d: 86:d5:20:1c:6b:c5:08:cb:84:91:48:aa:b5:6e:b2: d1:0d:cd:ed:78:4a:d2:f2:03:df:5f:57:b2:a7:34: 48:10:25:e0:7b:6d:b4:b7:40:b8:bd:ed:56:71:96: b4:eb:db:51:1c:e6:4f:d7:e2:56:94:d0:73:d2:63: 31:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C1:E8:C6:1B:C1:89:B0:27:94:FC:0C:55:4E:3A:B7:09:F8:2F:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce77bbe3-2bd7-3030-bccc-4b00551bae3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:35:ab:67:bc:21:99:93:a8:cb:09:a4:f4:02:bb:8a:53:24: e9:a6:a2:ce:be:41:7e:bd:bd:ee:ef:1b:67:b4:b8:19:e1:6a: a0:30:4d:a9:35:14:bc:fe:e2:37:da:23:7f:b2:60:a2:46:9f: 8b:60:a9:b7:1c:5f:c4:db:3d:1b:90:9f:62:e8:7f:a7:56:7b: 00:93:f9:04:82:4c:c1:a4:97:63:c2:42:06:90:61:f6:e6:69: cd:48:e5:a1:d6:56:6d:12:70:87:0e:ce:b4:8d:fc:17:38:11: c0:31:20:66:85:91:0a:1b:8a:87:1c:f0:77:fa:1f:fb:fc:24: 9d:80:ae:6d:3f:1e:27:fa:e3:d4:0b:ae:ce:a7:60:45:a2:4e: 87:43:cf:b9:46:5d:a5:0f:7c:b5:6f:1f:02:72:39:f5:3b:dc: cd:d1:03:6b:3f:f7:f8:08:27:c6:90:9d:ce:85:fc:5c:17:99: 83:35:6b:07:e1:b0:65:8e:e0:57:c7:b3:ce:e0:dd:20:45:e5: 6d:0e:8e:a9:ce:44:02:22:e0:18:79:4f:3a:80:fa:9a:54:8f: 12:56:53:c3:a1:5d:32:1c:bd:5c:26:cd:9a:60:23:7b:8f:cb: c8:2f:c0:10:5b:12:ce:9a:69:b1:66:38:60:3b:68:fa:7b:bd: e4:e6:54:f0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itdhQ7cFYqAJ+ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk MmFiNjgwMDMtY2JjMC00ZTJkLWFhYjQtMjllZjlmMTJlYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqil/jRwRWJ3Jv49YbYAnVS7x5WOkfS8KlOZU jhIXMFHeY0hhtuFQYRDCfDUmR8d5MV+PjcCWmCZKVKU87EX8tW5GbMU7/CDJLCwy J38KUXulFinIPD2RpJ43iFqMyOVunnS0d71ZS4IFlpcDMx9b2WPyQievfPouFj1C +wFXg5WwRChAu9ABpfCx7wAr15kZEUYXVIwyYWrk+vutge0QIqaHreSMa1cX992l CnVr1Wpd3j4vR6G3BktOsUyNyf+fVj2G1SAca8UIy4SRSKq1brLRDc3teErS8gPf X1eypzRIECXge220t0C4ve1WcZa069tRHOZP1+JWlNBz0mMx9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNrB6MYbwYmwJ5T8DFVOOrcJ+C+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2U3N2JiZTMtMmJkNy0z MDMwLWJjY2MtNGIwMDU1MWJhZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJNatnvCGZk6jLCaT0AruKUyTppqLOvkF+vb3u7xtntLgZ4WqgME2p NRS8/uI32iN/smCiRp+LYKm3HF/E2z0bkJ9i6H+nVnsAk/kEgkzBpJdjwkIGkGH2 5mnNSOWh1lZtEnCHDs60jfwXOBHAMSBmhZEKG4qHHPB3+h/7/CSdgK5tPx4n+uPU C67Op2BFok6HQ8+5Rl2lD3y1bx8Ccjn1O9zN0QNrP/f4CCfGkJ3OhfxcF5mDNWsH 4bBljuBXx7PO4N0gReVtDo6pzkQCIuAYeU86gPqaVI8SVlPDoV0yHL1cJs2aYCN7 j8vIL8AQWxLOmmmxZjhgO2j6e73k5lTw -----END CERTIFICATE-----Generated at Sat Jun 13 18:34:39 2026 by rpki-client