$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/ca9f455e-da4e-32b7-a8af-e94258969a46.roa File: ca9f455e-da4e-32b7-a8af-e94258969a46.roa (raw, json) Hash identifier: tOYKyvGQicP/03hptho1E4Dq+1PBbeBfLEu/WkUNTmM= Subject key identifier: 4C:97:1F:0D:48:2A:DD:D2:42:AE:51:1F:3D:AC:9A:5D:C8:3F:1B:39 Certificate issuer: /CN=3ebba851-73dc-4c81-9c85-edb63b33b305 Certificate serial: 010D0C9F4328584B1AD1726D2A7A7A903CC4D000 Authority key identifier: A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/ca9f455e-da4e-32b7-a8af-e94258969a46.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 54048 IP address blocks: 192.41.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:72:6d:2a:7a:7a:90:3c:c4:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebba851-73dc-4c81-9c85-edb63b33b305 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=b3caa1bb-0f2c-4452-8b6f-171dff9c7eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:bf:12:cd:34:83:26:c1:1b:60:45:61:09: 56:a9:a0:3f:c9:19:11:11:d0:92:4e:ad:f2:84:f2: 0d:be:3f:cf:b4:f4:b6:e7:ba:7b:bd:08:34:34:a8: fe:20:4d:6e:42:37:be:95:c1:6a:20:6a:6f:88:4e: 00:bc:5a:16:a6:5e:21:f5:fb:03:a5:93:99:6e:00: 27:23:b9:e4:d6:7f:56:be:4a:e6:e0:f6:af:60:24: 78:22:f6:29:89:be:1b:35:4f:92:8f:e9:74:21:ca: 2a:33:6a:18:6e:c2:73:6c:38:ea:fb:39:85:55:ed: 3d:23:b1:7b:9e:72:c6:8f:aa:b9:36:da:83:b8:bc: d4:01:47:f5:d8:79:9d:b4:db:df:c3:86:cf:be:d2: e5:12:83:c1:c3:d3:88:f4:80:14:f9:d5:6e:32:ec: 0b:54:f0:b9:dd:ed:00:fc:eb:6c:60:a5:6c:db:11: f6:84:ad:e3:0b:49:ab:1b:cd:26:97:f1:4d:50:d0: e7:50:a6:f8:ca:a1:21:b6:ad:8c:c1:80:db:08:e5: 78:75:84:c3:cc:cf:e9:36:7b:1d:78:3f:5c:80:c1: 91:7d:b8:a5:05:94:36:0b:5a:b5:ea:84:cb:8e:9b: 5f:b0:69:63:23:51:f1:8d:5e:79:27:f1:20:01:2d: 26:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:97:1F:0D:48:2A:DD:D2:42:AE:51:1F:3D:AC:9A:5D:C8:3F:1B:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/ca9f455e-da4e-32b7-a8af-e94258969a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl X509v3 Authority Key Identifier: keyid:A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer sbgp-ipAddrBlock: critical IPv4: 192.41.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:28:5d:95:c0:17:9a:a4:5d:36:a3:e4:c3:67:d2:3c:81:c6: 63:2c:f8:d9:46:19:bf:13:a2:4e:99:77:f2:2c:10:3f:c8:b3: e0:38:12:2d:7c:bb:0e:35:5e:7f:30:f1:7e:01:49:16:43:60: 2c:34:68:30:b4:f9:05:e1:e7:f7:2f:87:29:5c:6d:1d:6d:7f: 04:74:5a:92:8f:42:d5:b9:6e:80:2e:8e:98:7a:c3:ab:cd:e6: 1f:ef:45:69:24:17:04:ac:3a:bd:94:e1:84:59:14:3f:b1:54: 4b:0c:72:a7:4f:9c:f8:58:a7:0e:f2:82:24:ce:e4:f3:0a:49: f4:b4:5c:ae:2a:1d:74:3f:96:ab:8d:75:c3:cb:d9:42:9d:4b: 88:9f:2e:be:d5:f7:50:a4:b4:6c:da:af:ae:35:79:4b:b5:ae: df:f6:ee:43:de:f4:f3:75:e9:16:0d:5d:bc:13:04:b7:b8:b6: 3e:76:52:fd:36:eb:fb:f0:e9:a4:92:33:4f:d2:c7:10:e5:68: c9:18:74:02:88:5b:79:73:4a:d5:30:b0:5a:e5:5e:5c:ea:d5: 11:c8:7f:14:85:06:bc:a4:80:9d:c2:f9:ff:70:1d:cb:ea:ef: 2a:69:fe:b4:35:f6:aa:f7:a6:21:68:2a:a1:07:db:06:f9:45: b4:ca:fa:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XJtKnp6kDzE0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViYmE4NTEtNzNkYy00YzgxLTljODUtZWRiNjNiMzNi MzA1MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YjNjYWExYmItMGYyYy00NDUyLThiNmYtMTcxZGZmOWM3ZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNG/Es00gybBG2BFYQlWqaA/yRkREdCSTq3y hPINvj/PtPS257p7vQg0NKj+IE1uQje+lcFqIGpviE4AvFoWpl4h9fsDpZOZbgAn I7nk1n9Wvkrm4PavYCR4IvYpib4bNU+Sj+l0IcoqM2oYbsJzbDjq+zmFVe09I7F7 nnLGj6q5NtqDuLzUAUf12HmdtNvfw4bPvtLlEoPBw9OI9IAU+dVuMuwLVPC53e0A /OtsYKVs2xH2hK3jC0mrG80ml/FNUNDnUKb4yqEhtq2MwYDbCOV4dYTDzM/pNnsd eD9cgMGRfbilBZQ2C1q16oTLjptfsGljI1HxjV55J/EgAS0m/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyXHw1IKt3SQq5RHz2sml3IPxs5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJi YTg1MS03M2RjLTRjODEtOWM4NS1lZGI2M2IzM2IzMDUvY2E5ZjQ1NWUtZGE0ZS0z MmI3LWE4YWYtZTk0MjU4OTY5YTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ViYmE4NTEtNzNkYy00YzgxLTlj ODUtZWRiNjNiMzNiMzA1LzNlYmJhODUxLTczZGMtNGM4MS05Yzg1LWVkYjYzYjMz YjMwNS5jcmwwHwYDVR0jBBgwFoAUo0JzHRfgcwo5wkye+fXqjrzFcQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJiYTg1MS03M2RjLTRjODEtOWM4NS1lZGI2 M2IzM2IzMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCmxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4oXZXAF5qkXTaj5MNn0jyBxmMs+NlGGb8Tok6Zd/IsED/Is+A4Ei18 uw41Xn8w8X4BSRZDYCw0aDC0+QXh5/cvhylcbR1tfwR0WpKPQtW5boAujph6w6vN 5h/vRWkkFwSsOr2U4YRZFD+xVEsMcqdPnPhYpw7ygiTO5PMKSfS0XK4qHXQ/lquN dcPL2UKdS4ifLr7V91CktGzar641eUu1rt/27kPe9PN16RYNXbwTBLe4tj52Uv02 6/vw6aSSM0/SxxDlaMkYdAKIW3lzStUwsFrlXlzq1RHIfxSFBrykgJ3C+f9wHcvq 7ypp/rQ19qr3piFoKqEH2wb5RbTK+is= -----END CERTIFICATE-----Generated at Wed Nov 5 16:11:05 2025 by rpki-client