$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa File: 39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa (raw, json) Hash identifier: Ve5YLK7cj0Fp5KGqvO6J/6xdrlMpxO0GreHaFSSi/NA= Subject key identifier: 7E:FF:1B:B9:69:86:A8:8A:32:37:F8:0C:4E:84:B6:50:36:7E:ED:66 Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Certificate serial: 010D0C9F4328584BA39D229373FD025967903E40 Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 395425 IP address blocks: 72.42.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:22:93:73:fd:02:59:67:90:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=9e0a8c22-f70a-4d58-badf-bbfe75979434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a9:41:46:1a:88:21:32:12:41:7a:61:0f:90: 28:99:e1:b6:52:cc:3a:41:b5:ce:fa:a7:91:65:b5: f2:51:b9:62:42:dc:93:6a:e2:61:de:ac:79:77:cd: 5a:bf:4a:12:b8:37:ba:65:7a:42:8e:33:88:c9:ec: ef:57:17:11:0f:e8:ef:8c:19:91:c2:6c:ff:c6:ee: 2d:4f:21:24:c4:e1:5f:0e:35:ff:8f:2d:c8:e2:cc: c9:8b:33:ab:1b:44:57:a3:0a:e6:2e:a0:cd:33:40: 57:6a:13:2e:ea:59:a2:1b:d3:b2:56:a6:de:a2:93: fd:e3:a4:a3:c4:77:2e:7b:4f:42:ac:2b:32:2a:0f: 9f:81:f3:0e:48:5a:cf:ee:d7:72:e1:63:1e:86:b5: 15:d6:01:b7:b8:50:01:d7:7d:4b:92:68:d3:ea:50: 59:fc:aa:3c:e6:66:e7:50:ef:19:2f:08:e1:4d:a5: 27:39:10:38:b0:fb:95:60:0c:38:7f:22:4d:85:46: 60:82:cd:38:94:41:e4:2f:73:bf:e6:d7:36:20:0f: 5c:60:74:73:2f:ce:96:6e:60:98:7f:5f:f8:59:14: eb:83:22:cb:cb:81:28:da:58:13:1d:94:e9:e7:0b: b6:bc:4b:f2:1d:2e:e0:35:52:91:f3:bc:15:87:6f: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FF:1B:B9:69:86:A8:8A:32:37:F8:0C:4E:84:B6:50:36:7E:ED:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl X509v3 Authority Key Identifier: keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer sbgp-ipAddrBlock: critical IPv4: 72.42.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:67:17:d6:29:ca:bd:ee:db:e3:76:04:ce:d2:f1:93:c2:8a: fd:1e:e1:01:6f:02:5f:93:6e:d0:c8:18:b9:40:5e:dd:07:b2: 85:25:e4:5b:f3:92:75:45:26:fc:b5:11:c7:a6:9e:0c:f8:df: 26:db:7e:5f:a7:fe:00:36:eb:19:77:51:ff:b4:76:d5:4d:6c: a2:da:af:35:29:b4:70:f9:cd:ec:da:0a:ca:55:8b:de:7e:4f: 88:bd:6e:b3:32:01:03:03:40:06:3d:cd:a1:0c:dc:a5:42:54: f8:70:fb:83:c1:37:6c:0a:44:2c:ef:2b:21:a3:03:42:93:fd: b4:e3:e1:36:c8:78:44:fb:1e:d5:d7:81:6d:e9:46:46:b8:18: 5b:15:f0:2a:b7:06:60:15:3a:31:0d:6c:9b:a1:d7:4a:21:2b: 46:30:36:a4:0b:cb:2c:01:3c:20:8b:aa:46:92:1a:18:bf:9e: 7b:70:37:0b:f1:9e:a2:5c:ef:59:96:a6:a8:58:36:e7:17:9a: 2e:71:bb:15:3e:16:3c:65:a4:08:72:16:bf:0d:ba:e5:6d:8d: 14:a7:93:7b:4c:3c:fa:e5:27:f1:9c:4d:02:11:fb:73:da:01: 80:ed:1e:cc:e1:43:95:17:98:50:a8:cb:a9:1a:ac:47:27:45: f4:89:63:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSKTc/0CWWeQPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM2OTdjOWQtMzI1YS00NjBmLWFiMmYtOGNmNzFiMWJl OTg0MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OWUwYThjMjItZjcwYS00ZDU4LWJhZGYtYmJmZTc1OTc5NDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6lBRhqIITISQXphD5AomeG2Usw6QbXO+qeR ZbXyUbliQtyTauJh3qx5d81av0oSuDe6ZXpCjjOIyezvVxcRD+jvjBmRwmz/xu4t TyEkxOFfDjX/jy3I4szJizOrG0RXowrmLqDNM0BXahMu6lmiG9OyVqbeopP946Sj xHcue09CrCsyKg+fgfMOSFrP7tdy4WMehrUV1gG3uFAB131LkmjT6lBZ/Ko85mbn UO8ZLwjhTaUnORA4sPuVYAw4fyJNhUZggs04lEHkL3O/5tc2IA9cYHRzL86WbmCY f1/4WRTrgyLLy4Eo2lgTHZTp5wu2vEvyHS7gNVKR87wVh2/TlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7/G7lphqiKMjf4DE6EtlA2fu1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5 N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIxYmU5ODQvMzljYjg1NWYtZjc1NC0z N2QwLWFiM2QtNDE1YjdkMTJhNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWM2OTdjOWQtMzI1YS00NjBmLWFi MmYtOGNmNzFiMWJlOTg0L2VjNjk3YzlkLTMyNWEtNDYwZi1hYjJmLThjZjcxYjFi ZTk4NC5jcmwwHwYDVR0jBBgwFoAUEjvZdTKrj92cHFYpzjLx33slhhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3 MWIxYmU5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCrnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMtnF9Ypyr3u2+N2BM7S8ZPCiv0e4QFvAl+TbtDIGLlAXt0HsoUl5Fvz knVFJvy1Ecemngz43ybbfl+n/gA26xl3Uf+0dtVNbKLarzUptHD5zezaCspVi95+ T4i9brMyAQMDQAY9zaEM3KVCVPhw+4PBN2wKRCzvKyGjA0KT/bTj4TbIeET7HtXX gW3pRka4GFsV8Cq3BmAVOjENbJuh10ohK0YwNqQLyywBPCCLqkaSGhi/nntwNwvx nqJc71mWpqhYNucXmi5xuxU+FjxlpAhyFr8NuuVtjRSnk3tMPPrlJ/GcTQIR+3Pa AYDtHszhQ5UXmFCoy6karEcnRfSJYy4= -----END CERTIFICATE-----Generated at Wed Nov 5 21:31:00 2025 by rpki-client