$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/efacee15-a69b-3468-987c-40a5d6594481.roa File: efacee15-a69b-3468-987c-40a5d6594481.roa (raw, json) Hash identifier: t0enUCdTeHTN0Hvd501jmECp3c42P6n8gmu6BREJk6E= Subject key identifier: 00:2A:0A:5B:87:B3:EC:27:61:FF:72:14:AD:46:70:E1:62:BF:7D:A6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B6631ED442CFC66BB2C3C9400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/efacee15-a69b-3468-987c-40a5d6594481.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 17062 IP address blocks: 192.46.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:ed:44:2c:fc:66:bb:2c:3c:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=bddf2aa1-1a7e-4720-a905-2c170b249981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ef:29:95:c8:78:d1:db:26:4c:ad:9f:d9:1f: e0:9a:89:9d:9c:46:81:da:e4:5a:6f:86:93:8a:e1: 04:a5:14:91:ae:f2:ed:53:b4:c8:c7:bc:9d:89:5e: bc:d8:3f:cc:19:b6:db:3d:0b:4f:3f:0d:81:cf:fe: 7e:df:0a:00:61:42:58:0e:c8:03:c0:75:9a:5f:10: 57:30:99:c1:a3:73:f4:f6:f9:77:29:e2:69:64:ce: 1b:36:51:22:e7:2c:e9:f1:ea:15:db:a7:67:3e:e6: 28:be:53:ae:ec:6c:60:47:35:be:2a:67:db:f6:4c: 4f:03:19:f2:f7:f7:5b:75:c9:98:67:a4:1e:7c:64: 35:4d:de:e0:cc:e0:44:2f:68:5c:12:a3:53:0b:b2: c5:29:ba:37:d3:84:7b:86:29:7b:6a:04:81:4a:a6: b3:40:f0:ea:86:bc:64:d9:cf:45:f5:a5:b2:81:62: 03:0e:7b:c9:ec:f6:5c:4e:77:08:92:f6:08:12:58: df:e0:3e:b5:b7:08:54:a2:03:c7:47:d1:3d:b2:dc: 8a:81:17:25:f8:36:d8:6f:90:a6:6c:fa:65:67:57: c7:03:05:de:e5:bc:08:f1:82:20:0d:92:c4:57:33: 59:7c:38:0d:87:61:df:5c:18:ed:e4:c6:32:a3:ef: 48:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2A:0A:5B:87:B3:EC:27:61:FF:72:14:AD:46:70:E1:62:BF:7D:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/efacee15-a69b-3468-987c-40a5d6594481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.46.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:cf:23:5a:ab:42:26:9f:5e:ec:04:95:42:80:46:20:44:86: c2:f2:47:bb:49:57:69:72:27:15:5c:58:72:ac:24:06:95:fb: 76:7a:fc:84:e1:f0:7a:e5:14:7d:93:d6:c1:34:f6:f0:e7:91: 2f:88:12:03:82:bb:85:86:e6:32:fd:70:39:cf:07:23:c4:3b: 7c:b1:31:41:16:32:fe:f8:b8:e8:f3:9d:8e:a6:13:75:e6:b8: 39:33:4b:8a:d4:13:b7:da:07:ec:a0:d3:bd:60:be:a4:5c:e9: 04:95:a2:6f:16:33:41:f6:94:8a:24:8f:ad:9a:b1:ba:64:31: 07:0c:dc:3b:20:62:be:c7:a1:3f:41:a3:9f:29:39:ab:a9:7b: 20:fc:bb:85:6e:6b:58:13:bf:da:d7:8b:f7:6d:0b:32:a7:8d: 1c:02:54:b7:d5:46:e9:d1:a8:49:c8:7d:c8:e3:12:1f:5b:45: 5d:6c:5e:93:ab:d5:d6:2d:c3:66:d6:c6:d9:1d:6c:8a:d2:27: 48:a0:d4:26:01:ec:9a:44:7f:cd:52:6b:24:81:bd:6b:94:79: b7:eb:4d:ff:d0:03:77:0e:30:24:ef:27:52:ee:f5:8c:58:3c: 7b:66:e6:e1:77:5f:80:47:2c:dd:32:16:ee:68:7e:32:46:66: 7e:4e:9a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMe1ELPxmuyw8lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YmRkZjJhYTEtMWE3ZS00NzIwLWE5MDUtMmMxNzBiMjQ5OTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+8plch40dsmTK2f2R/gmomdnEaB2uRab4aT iuEEpRSRrvLtU7TIx7ydiV682D/MGbbbPQtPPw2Bz/5+3woAYUJYDsgDwHWaXxBX MJnBo3P09vl3KeJpZM4bNlEi5yzp8eoV26dnPuYovlOu7GxgRzW+Kmfb9kxPAxny 9/dbdcmYZ6QefGQ1Td7gzOBEL2hcEqNTC7LFKbo304R7hil7agSBSqazQPDqhrxk 2c9F9aWygWIDDnvJ7PZcTncIkvYIEljf4D61twhUogPHR9E9styKgRcl+DbYb5Cm bPplZ1fHAwXe5bwI8YIgDZLEVzNZfDgNh2HfXBjt5MYyo+9IgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAqCluHs+wnYf9yFK1GcOFiv32mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZWZhY2VlMTUtYTY5Yi0z NDY4LTk4N2MtNDBhNWQ2NTk0NDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC4rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjPI1qrQiafXuwElUKARiBEhsLyR7tJV2lyJxVcWHKsJAaV+3Z6/ITh 8HrlFH2T1sE09vDnkS+IEgOCu4WG5jL9cDnPByPEO3yxMUEWMv74uOjznY6mE3Xm uDkzS4rUE7faB+yg071gvqRc6QSVom8WM0H2lIokj62asbpkMQcM3DsgYr7HoT9B o58pOaupeyD8u4Vua1gTv9rXi/dtCzKnjRwCVLfVRunRqEnIfcjjEh9bRV1sXpOr 1dYtw2bWxtkdbIrSJ0ig1CYB7JpEf81SaySBvWuUebfrTf/QA3cOMCTvJ1Lu9YxY PHtm5uF3X4BHLN0yFu5ofjJGZn5OmqQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:35 2025 by rpki-client