$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ccdbd733-bb28-3576-b0f6-19c7a2d3d46f.roa File: ccdbd733-bb28-3576-b0f6-19c7a2d3d46f.roa (raw, json) Hash identifier: M7Rs52mX2Iv9J4Ey9Co6eTmfC32LPYA5938XawN8ssU= Subject key identifier: 13:92:01:9A:CA:7A:47:45:3C:BD:ED:6A:AD:09:90:C3:DF:34:A5:5B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72D2A9C8F7923618A52C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ccdbd733-bb28-3576-b0f6-19c7a2d3d46f.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396600 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2d:2a:9c:8f:79:23:61:8a:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=69263246-5800-406f-97e2-efa1d4b79d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bf:d5:56:3c:a7:b3:4c:37:10:f6:71:aa:d3: 56:d9:c8:c1:07:b3:f3:88:f5:28:0b:2f:26:86:14: 22:38:c5:ee:2c:54:7f:d5:1d:84:5d:bd:c5:f3:ac: d1:8d:9f:78:67:eb:41:aa:93:52:ae:27:f9:de:3d: b0:a3:d7:b4:54:21:56:a3:1e:c0:b8:18:b1:f7:f8: e7:cc:86:e1:f2:35:ba:82:79:19:7c:e3:65:d0:8c: f7:91:e5:a5:b8:30:88:26:6e:a1:ff:76:5f:f5:dc: a8:1c:03:a7:17:5d:ca:d9:46:65:5d:e2:6c:6a:f1: 74:68:d6:2c:15:01:ec:20:c0:1b:05:69:98:f1:f4: 7b:37:ae:83:6e:12:92:fa:64:17:aa:89:ce:e9:77: 11:5a:cc:cb:8f:1e:b7:2a:fb:1e:88:3b:13:b8:02: b6:c4:8f:f9:10:6a:7c:d1:53:a3:6f:18:e0:f1:2a: 16:e1:c2:cd:d7:86:f6:7e:fb:27:f8:29:24:9d:70: e3:da:f5:53:d6:fe:2f:fd:fe:ff:cf:9b:c1:a5:d9: e9:1b:2f:3d:f2:bc:ea:3b:5e:9a:67:2c:29:2f:90: 73:13:be:99:72:79:c6:bf:e8:80:08:5b:93:e5:22: 74:cd:04:a5:5e:f4:25:b8:f6:41:86:bc:9f:28:bf: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:92:01:9A:CA:7A:47:45:3C:BD:ED:6A:AD:09:90:C3:DF:34:A5:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ccdbd733-bb28-3576-b0f6-19c7a2d3d46f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:12:9f:cb:ff:85:a2:3e:a5:d9:38:b1:af:6d:fe:c4:7b:a2: df:65:fb:d1:36:93:3d:22:ee:31:0e:87:28:8f:57:d1:6b:0f: 7d:91:29:3c:22:b9:6b:2e:3e:35:9d:08:06:19:e3:33:bd:cc: f0:47:ed:ae:e0:cd:9c:9f:da:f0:aa:57:50:df:2f:43:c5:fc: 00:7f:d3:76:e0:cf:5b:61:39:59:74:b5:1d:e9:50:8e:2d:28: fa:d9:73:a3:a2:28:fc:0c:0e:64:7d:d5:22:fc:01:6c:82:a7: c8:a6:13:88:ea:1a:e3:ba:43:5f:b1:dc:b2:a4:c5:27:95:98: 44:3d:bf:55:2f:c6:76:c5:f3:c9:f1:9b:a6:2d:1b:67:fe:df: eb:5e:b5:e6:34:7d:be:38:41:8c:e7:6a:cd:ba:19:a6:d9:9b: a4:01:8b:ba:a5:38:4a:af:5a:6d:e3:45:b5:7c:8c:af:4e:4f: 13:c0:ba:e4:8a:92:d1:07:b6:54:57:56:0d:1e:0f:e4:d7:f3: 97:57:bf:c8:70:d7:78:74:ec:40:fc:b5:d7:05:c2:dc:3c:84: b1:3f:af:03:a7:7f:dd:51:39:f5:db:d7:00:e6:28:64:8e:84: 10:12:bc:34:24:a7:31:4f:43:4e:fa:68:af:5a:a9:22:46:c3: 77:74:f7:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y0qnI95I2GKUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NjkyNjMyNDYtNTgwMC00MDZmLTk3ZTItZWZhMWQ0Yjc5ZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr/VVjyns0w3EPZxqtNW2cjBB7PziPUoCy8m hhQiOMXuLFR/1R2EXb3F86zRjZ94Z+tBqpNSrif53j2wo9e0VCFWox7AuBix9/jn zIbh8jW6gnkZfONl0Iz3keWluDCIJm6h/3Zf9dyoHAOnF13K2UZlXeJsavF0aNYs FQHsIMAbBWmY8fR7N66DbhKS+mQXqonO6XcRWszLjx63KvseiDsTuAK2xI/5EGp8 0VOjbxjg8SoW4cLN14b2fvsn+CkknXDj2vVT1v4v/f7/z5vBpdnpGy898rzqO16a ZywpL5BzE76ZcnnGv+iACFuT5SJ0zQSlXvQluPZBhryfKL/hEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBOSAZrKekdFPL3taq0JkMPfNKVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2NkYmQ3MzMtYmIyOC0z NTc2LWIwZjYtMTljN2EyZDNkNDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxEp/L/4WiPqXZOLGvbf7Ee6LfZfvRNpM9Iu4xDocoj1fRaw99kSk8 IrlrLj41nQgGGeMzvczwR+2u4M2cn9rwqldQ3y9DxfwAf9N24M9bYTlZdLUd6VCO LSj62XOjoij8DA5kfdUi/AFsgqfIphOI6hrjukNfsdyypMUnlZhEPb9VL8Z2xfPJ 8ZumLRtn/t/rXrXmNH2+OEGM52rNuhmm2ZukAYu6pThKr1pt40W1fIyvTk8TwLrk ipLRB7ZUV1YNHg/k1/OXV7/IcNd4dOxA/LXXBcLcPISxP68Dp3/dUTn129cA5ihk joQQErw0JKcxT0NO+mivWqkiRsN3dPej -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:39 2025 by rpki-client