$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa File: 14801496-2113-3ff3-8286-6329eebc5a7f.roa (raw, json) Hash identifier: iIVGWPh65RMBGd7aFFILKFQrWjT7K2DoYGba/4/54VE= Subject key identifier: D5:7D:14:1A:4D:18:EB:45:8B:5C:F5:4D:36:52:C3:D3:9F:6A:00:AC Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Certificate serial: 010D0C9F4328584EE7BCBA7FE3EC88E7B8CA1860 Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 72.42.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:ba:7f:e3:ec:88:e7:b8:ca:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=0c6e8c86-5eb4-4356-aa82-a8b73e5e7aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:ae:d6:7b:a3:47:17:38:47:21:f8:73:37: 95:62:5a:8d:5c:cb:2a:d0:e7:8d:40:84:6a:a1:6e: b0:9e:6b:b6:9d:e3:93:e7:27:a6:e2:3d:9c:78:f0: bc:aa:a4:18:3d:6d:b1:b5:c2:b7:63:ae:09:ac:2f: 50:30:bd:df:a5:8e:e5:f3:3e:4b:65:ba:e7:24:56: df:97:71:77:03:ee:6e:b2:bb:84:a4:32:c0:80:f6: 48:bd:6d:6a:1c:cd:e9:66:8c:cb:a5:6e:af:69:0b: 1d:6f:8c:41:e7:33:56:9a:e3:9d:f4:df:34:55:ee: a8:ec:d6:34:15:fb:f7:ec:65:84:da:50:f9:48:96: 23:ca:05:d2:74:ac:fb:d0:88:ec:5b:73:6a:3f:59: eb:48:69:bb:51:be:9d:58:79:2b:3a:5d:74:58:6b: ea:a5:ab:d2:81:de:e6:25:ff:88:d4:63:da:3d:66: 77:3d:41:0f:8b:b8:36:ae:32:a2:6a:39:8b:bd:5c: 65:aa:2c:b8:f5:bc:74:e7:cf:b9:3e:7f:b3:e1:04: 89:50:10:20:13:a4:40:73:86:2f:4d:5e:65:6c:8d: 8a:5a:c3:d0:64:08:e4:c8:74:1b:48:c6:c2:24:74: 76:49:41:1f:39:b6:ba:d5:ef:49:67:2a:06:cd:5f: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7D:14:1A:4D:18:EB:45:8B:5C:F5:4D:36:52:C3:D3:9F:6A:00:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl X509v3 Authority Key Identifier: keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer sbgp-ipAddrBlock: critical IPv4: 72.42.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7f:ea:96:21:4b:6a:c5:1b:44:19:53:12:9b:0b:f5:b9:26: d0:7e:9a:84:34:9e:03:14:3d:ac:93:d0:04:94:67:dd:4b:76: 30:d1:6f:b7:75:00:87:10:18:84:d0:09:77:26:f3:48:a9:4e: e7:ca:74:4f:36:34:b4:4b:fa:7e:fe:1e:8a:01:16:b1:06:f1: 8d:96:70:0a:f5:2d:4c:da:5e:57:73:2b:b5:f0:1e:d1:90:79: 7b:14:da:4c:1e:1b:6a:49:5b:1e:50:0a:4a:1a:30:65:c5:14: 67:07:f3:a1:dc:0f:68:81:f2:0a:9f:7b:c0:a0:6f:20:f0:93: 50:4f:44:39:c3:8e:c7:4f:61:fb:93:f7:d9:f3:18:13:67:bd: 99:98:32:d3:40:ff:82:db:85:a5:83:1a:33:13:a5:59:ac:e9: b4:9c:86:f4:2a:e7:eb:0d:d9:6e:50:c1:29:2a:1c:d5:cc:a1: 00:79:5b:b7:83:53:e1:15:cd:5e:16:9a:d9:cb:5a:c1:e2:7e: 7b:06:b3:3d:36:db:02:1a:f3:37:73:02:fa:b3:a8:cb:ef:87: 4d:2f:02:10:a2:a3:ae:9b:85:e2:cf:7e:32:ea:c7:40:08:1a: 85:aa:a6:91:76:e2:4c:33:78:0a:2f:fc:71:17:59:77:6c:60: 69:e5:00:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLp/4+yI57jKGGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM2OTdjOWQtMzI1YS00NjBmLWFiMmYtOGNmNzFiMWJl OTg0MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MGM2ZThjODYtNWViNC00MzU2LWFhODItYThiNzNlNWU3YWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMqu1nujRxc4RyH4czeVYlqNXMsq0OeNQIRq oW6wnmu2neOT5yem4j2cePC8qqQYPW2xtcK3Y64JrC9QML3fpY7l8z5LZbrnJFbf l3F3A+5usruEpDLAgPZIvW1qHM3pZozLpW6vaQsdb4xB5zNWmuOd9N80Ve6o7NY0 Ffv37GWE2lD5SJYjygXSdKz70IjsW3NqP1nrSGm7Ub6dWHkrOl10WGvqpavSgd7m Jf+I1GPaPWZ3PUEPi7g2rjKiajmLvVxlqiy49bx058+5Pn+z4QSJUBAgE6RAc4Yv TV5lbI2KWsPQZAjkyHQbSMbCJHR2SUEfOba61e9JZyoGzV9XQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV9FBpNGOtFi1z1TTZSw9OfagCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5 N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIxYmU5ODQvMTQ4MDE0OTYtMjExMy0z ZmYzLTgyODYtNjMyOWVlYmM1YTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWM2OTdjOWQtMzI1YS00NjBmLWFi MmYtOGNmNzFiMWJlOTg0L2VjNjk3YzlkLTMyNWEtNDYwZi1hYjJmLThjZjcxYjFi ZTk4NC5jcmwwHwYDVR0jBBgwFoAUEjvZdTKrj92cHFYpzjLx33slhhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3 MWIxYmU5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCrlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl/6pYhS2rFG0QZUxKbC/W5JtB+moQ0ngMUPayT0ASUZ91LdjDRb7d1 AIcQGITQCXcm80ipTufKdE82NLRL+n7+HooBFrEG8Y2WcAr1LUzaXldzK7XwHtGQ eXsU2kweG2pJWx5QCkoaMGXFFGcH86HcD2iB8gqfe8CgbyDwk1BPRDnDjsdPYfuT 99nzGBNnvZmYMtNA/4LbhaWDGjMTpVms6bSchvQq5+sN2W5QwSkqHNXMoQB5W7eD U+EVzV4WmtnLWsHifnsGsz022wIa8zdzAvqzqMvvh00vAhCio66bheLPfjLqx0AI GoWqppF24kwzeAov/HEXWXdsYGnlAPM= -----END CERTIFICATE-----Generated at Tue Sep 22 06:53:55 2026 by rpki-client