$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/20b01dc2-482d-37a6-94dc-539807497318.roa File: 20b01dc2-482d-37a6-94dc-539807497318.roa (raw, json) Hash identifier: Qi1rXOdLAh0dy6auHfjK5O/P19ffb6ebxpVIfz4Th8Q= Subject key identifier: 56:8D:21:42:27:23:43:5E:7D:75:C1:71:75:1A:42:ED:A6:82:8B:90 Certificate issuer: /CN=3ebba851-73dc-4c81-9c85-edb63b33b305 Certificate serial: 010D0C9F4328584B1AD1792D5DAEBECD662F1548 Authority key identifier: A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/20b01dc2-482d-37a6-94dc-539807497318.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20115 IP address blocks: 192.41.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:79:2d:5d:ae:be:cd:66:2f:15:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebba851-73dc-4c81-9c85-edb63b33b305 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=e3256be3-0f53-4e77-a249-dfca32091acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3d:33:31:85:38:7f:85:44:ea:55:99:9a:e6: 3b:60:23:59:9a:0c:94:e2:d9:ec:3d:ca:63:33:54: 07:fb:1a:b8:be:86:ba:10:78:9d:31:9b:b7:81:84: 70:10:3d:5b:6a:0c:ae:b8:1a:bc:69:2d:ef:5d:4b: d0:cb:ec:12:0d:12:3e:26:e1:a5:7d:b2:f8:4e:e3: 2f:60:cf:dc:50:db:87:8b:7d:7b:c6:f1:89:e1:d7: e3:3f:8e:68:17:3d:52:10:ec:21:d7:5f:30:63:10: c3:f1:fa:36:af:2e:c3:17:61:61:c5:16:62:ac:2f: 26:ea:a8:cc:f4:4e:9b:7b:a0:07:76:08:67:4e:7a: 2e:52:e6:0e:0c:ea:51:ff:d4:8d:0e:a3:06:2c:d5: 8a:9a:3e:86:4d:b8:df:95:06:2b:b5:72:86:2f:fb: 18:db:ff:59:92:36:1c:99:be:16:45:30:69:ba:a1: 0d:fc:d0:89:39:32:4d:7f:6d:32:3c:f2:26:69:6c: e8:ea:a9:dc:db:3f:28:8f:ac:62:07:26:1e:98:50: 5e:e5:ea:3d:54:d1:85:f7:b5:dc:36:3d:19:9b:c6: b7:ec:ec:e8:96:39:c1:21:c3:6c:7c:55:d3:c3:07: 01:6f:88:9d:a7:99:c2:39:73:8f:8a:64:75:63:4a: f4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8D:21:42:27:23:43:5E:7D:75:C1:71:75:1A:42:ED:A6:82:8B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/20b01dc2-482d-37a6-94dc-539807497318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl X509v3 Authority Key Identifier: keyid:A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer sbgp-ipAddrBlock: critical IPv4: 192.41.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:72:ca:5d:54:62:ca:6b:36:2e:ca:bb:f3:39:67:af:1e:46: 6f:8a:a0:a5:27:17:be:f5:83:f7:22:32:5a:c5:c7:ac:be:43: e4:f8:02:8d:4b:f0:41:43:8b:5a:c7:e5:b5:40:98:51:88:11: a4:4e:8b:aa:24:b1:11:84:28:8b:df:47:7c:40:45:73:9d:8e: 2b:8c:7c:5d:ea:a7:67:93:f7:df:5a:65:a7:3a:f4:ae:8b:3d: 4b:99:ad:b1:bd:4a:e6:75:1a:c3:30:57:e6:bf:49:3f:5b:2c: 7e:22:60:fb:43:c5:d7:ff:ae:b6:f2:6a:91:f2:34:16:01:f2: b1:6c:49:4c:54:61:3b:51:bd:1a:81:78:2c:09:77:dc:48:69: a5:8d:d7:74:78:2c:08:9d:84:13:03:e4:fd:eb:39:54:e6:2a: 0b:fd:f1:27:ad:bc:1c:1d:92:18:0b:9b:2f:25:c5:50:46:02: 40:d5:cb:12:48:d7:f6:8c:87:23:90:8b:0e:0f:b2:bc:77:22: 0a:82:31:f7:8c:20:33:73:70:7f:9a:18:30:fe:37:a6:e4:46: 8e:75:67:e8:71:d4:ec:4c:c4:df:c4:4d:58:40:aa:da:0a:4b: 80:72:80:d0:48:ac:3a:40:2a:3b:34:0f:40:50:12:00:4f:e5: 7c:f2:f1:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XktXa6+zWYvFUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViYmE4NTEtNzNkYy00YzgxLTljODUtZWRiNjNiMzNi MzA1MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZTMyNTZiZTMtMGY1My00ZTc3LWEyNDktZGZjYTMyMDkxYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz0zMYU4f4VE6lWZmuY7YCNZmgyU4tnsPcpj M1QH+xq4voa6EHidMZu3gYRwED1bagyuuBq8aS3vXUvQy+wSDRI+JuGlfbL4TuMv YM/cUNuHi317xvGJ4dfjP45oFz1SEOwh118wYxDD8fo2ry7DF2FhxRZirC8m6qjM 9E6be6AHdghnTnouUuYODOpR/9SNDqMGLNWKmj6GTbjflQYrtXKGL/sY2/9ZkjYc mb4WRTBpuqEN/NCJOTJNf20yPPImaWzo6qnc2z8oj6xiByYemFBe5eo9VNGF97Xc Nj0Zm8a37OzoljnBIcNsfFXTwwcBb4idp5nCOXOPimR1Y0r0nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaNIUInI0NefXXBcXUaQu2mgouQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJi YTg1MS03M2RjLTRjODEtOWM4NS1lZGI2M2IzM2IzMDUvMjBiMDFkYzItNDgyZC0z N2E2LTk0ZGMtNTM5ODA3NDk3MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ViYmE4NTEtNzNkYy00YzgxLTlj ODUtZWRiNjNiMzNiMzA1LzNlYmJhODUxLTczZGMtNGM4MS05Yzg1LWVkYjYzYjMz YjMwNS5jcmwwHwYDVR0jBBgwFoAUo0JzHRfgcwo5wkye+fXqjrzFcQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJiYTg1MS03M2RjLTRjODEtOWM4NS1lZGI2 M2IzM2IzMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCmxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9yyl1UYsprNi7Ku/M5Z68eRm+KoKUnF771g/ciMlrFx6y+Q+T4Ao1L 8EFDi1rH5bVAmFGIEaROi6oksRGEKIvfR3xARXOdjiuMfF3qp2eT999aZac69K6L PUuZrbG9SuZ1GsMwV+a/ST9bLH4iYPtDxdf/rrbyapHyNBYB8rFsSUxUYTtRvRqB eCwJd9xIaaWN13R4LAidhBMD5P3rOVTmKgv98SetvBwdkhgLmy8lxVBGAkDVyxJI 1/aMhyOQiw4Psrx3IgqCMfeMIDNzcH+aGDD+N6bkRo51Z+hx1OxMxN/ETVhAqtoK S4BygNBIrDpAKjs0D0BQEgBP5Xzy8eQ= -----END CERTIFICATE-----Generated at Sat Oct 11 12:16:54 2025 by rpki-client