$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc86d8d3-3864-3d3b-9050-2d8ab7f98aca.roa File: cc86d8d3-3864-3d3b-9050-2d8ab7f98aca.roa (raw, json) Hash identifier: 3ng3V0COxS6RoLxIx0EqzmwsKxAV2ZRuRWiT7cCDDI8= Subject key identifier: D3:81:F3:37:4E:84:C0:07:F8:94:A4:44:A6:8D:8E:59:CB:29:F1:ED Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E73286B0C47D1191649A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc86d8d3-3864-3d3b-9050-2d8ab7f98aca.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396614 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:32:86:b0:c4:7d:11:91:64:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=0b3c7130-32a1-4ad3-9e9f-77ee9f7d23d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:67:c7:37:7f:ef:a4:41:11:3a:5b:1b:61: d9:8f:f8:73:8f:1b:c6:76:cb:3e:5d:21:39:b6:c9: 23:bb:e9:b2:f8:d6:76:8c:3d:13:5c:ae:7c:60:1e: d3:3b:d7:4a:26:63:88:d5:bd:49:fa:aa:70:cb:ee: 6d:f8:59:d8:53:00:e1:26:d0:6e:fa:12:40:a5:44: bd:a2:e7:3b:5e:8b:93:72:cd:f4:07:a1:d5:cc:ef: 17:be:8b:2c:b7:e9:3a:96:f2:ac:3e:a0:87:7d:08: da:e3:41:41:f2:5a:f6:9d:e9:0a:f9:2e:27:eb:de: 20:17:99:0c:8a:0d:e0:43:ff:d3:78:36:eb:8b:67: 1e:e3:63:28:d8:a4:02:66:34:0f:86:74:3e:82:69: 05:6c:9a:2e:18:2c:36:fc:b6:65:ff:f6:04:40:9b: 0e:10:30:50:f3:9a:cc:99:5c:9f:ff:44:47:01:cb: 74:d2:a8:7a:91:8b:e8:3b:4d:0b:4e:3d:a8:d5:38: 2b:8d:f2:a7:71:2b:d0:cb:ea:0e:d9:29:3c:3e:18: 5d:b9:3c:3c:03:ff:8a:6e:6b:2c:90:73:e4:7e:27: 3a:4f:54:35:59:db:c7:b9:b9:ca:8b:ba:f7:14:bf: 44:c5:bf:4d:66:dd:f4:90:9d:b2:93:9f:68:49:a4: 2b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:81:F3:37:4E:84:C0:07:F8:94:A4:44:A6:8D:8E:59:CB:29:F1:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc86d8d3-3864-3d3b-9050-2d8ab7f98aca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:19:91:64:2e:67:64:74:57:a4:46:8e:e2:0e:60:19:fd:e1: fe:00:9c:64:22:62:a9:45:91:fb:85:06:f9:90:e2:4a:28:45: 7c:8c:e3:71:7c:6e:46:98:0f:bc:ba:bc:ce:b6:91:e0:dc:cf: fd:c2:d2:04:90:cb:f9:5a:66:8d:a7:87:07:f2:2d:95:78:17: 5b:3e:7d:31:c5:c0:92:38:66:82:20:20:fc:79:c8:56:e8:ab: 53:a8:fd:15:c9:26:89:28:47:8a:80:d5:54:04:0f:17:bf:7a: ce:e6:5c:57:8e:7b:c5:88:81:5c:5f:45:eb:12:6f:3f:1c:4b: 6f:57:85:36:ac:5e:21:fd:3f:ca:2c:5c:56:11:26:f8:31:c6: a7:c9:d3:48:73:6d:1a:ef:a7:95:b4:12:b4:b2:62:e0:2f:90: 72:42:3b:f5:41:c1:07:c9:5d:b9:62:72:b3:b9:66:f0:1a:ef: b9:74:da:c2:4b:0c:bf:b7:44:3f:72:e9:71:50:4d:3e:5d:3e: e2:fa:6e:ac:76:7b:7d:f7:1f:c7:7d:ee:59:cd:4d:a4:a6:fe: 34:5a:57:28:21:04:fb:07:1c:7b:d9:e3:0f:19:13:49:f4:60: fa:4f:48:07:6e:87:74:17:57:7d:5f:b7:ec:74:ae:b5:08:63: f0:a3:97:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zKGsMR9EZFkmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MGIzYzcxMzAtMzJhMS00YWQzLTllOWYtNzdlZTlmN2QyM2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8dnxzd/76RBETpbG2HZj/hzjxvGdss+XSE5 tskju+my+NZ2jD0TXK58YB7TO9dKJmOI1b1J+qpwy+5t+FnYUwDhJtBu+hJApUS9 ouc7XouTcs30B6HVzO8Xvosst+k6lvKsPqCHfQja40FB8lr2nekK+S4n694gF5kM ig3gQ//TeDbri2ce42Mo2KQCZjQPhnQ+gmkFbJouGCw2/LZl//YEQJsOEDBQ85rM mVyf/0RHAct00qh6kYvoO00LTj2o1TgrjfKncSvQy+oO2Sk8PhhduTw8A/+Kbmss kHPkfic6T1Q1WdvHubnKi7r3FL9Exb9NZt30kJ2yk59oSaQrVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNOB8zdOhMAH+JSkRKaNjlnLKfHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2M4NmQ4ZDMtMzg2NC0z ZDNiLTkwNTAtMmQ4YWI3Zjk4YWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJGZFkLmdkdFekRo7iDmAZ/eH+AJxkImKpRZH7hQb5kOJKKEV8jONx fG5GmA+8urzOtpHg3M/9wtIEkMv5WmaNp4cH8i2VeBdbPn0xxcCSOGaCICD8echW 6KtTqP0VySaJKEeKgNVUBA8Xv3rO5lxXjnvFiIFcX0XrEm8/HEtvV4U2rF4h/T/K LFxWESb4McanydNIc20a76eVtBK0smLgL5ByQjv1QcEHyV25YnKzuWbwGu+5dNrC Swy/t0Q/culxUE0+XT7i+m6sdnt99x/Hfe5ZzU2kpv40WlcoIQT7Bxx72eMPGRNJ 9GD6T0gHbod0F1d9X7fsdK61CGPwo5fQ -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:01 2025 by rpki-client