$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa File: 4f57b72f-fafb-32a5-8dd0-753f1f879774.roa (raw, json) Hash identifier: Bgd1IU0jm0kZMurDUi/yNS1r+CLy0Ii/A5wmNCcmDDk= Subject key identifier: D8:7F:01:67:CC:3A:BD:73:BC:72:E4:BB:52:FF:DD:A4:67:A0:A5:AA Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Certificate serial: 010D0C9F4328584BA39D223973990C0A012F4A7C Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 395425 IP address blocks: 72.42.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:22:39:73:99:0c:0a:01:2f:4a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=681b2e2e-6f5c-4c3d-b8d3-956d24e7146e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:84:b9:53:0a:1a:2a:94:96:71:9e:0c:4a:55: 19:77:6c:69:80:4e:79:06:1f:b3:02:0f:c6:3f:19: f7:95:ad:1d:45:10:d2:93:b7:1a:b7:b2:2f:56:df: d4:51:d7:9a:81:3b:14:0b:ce:1d:a2:9d:68:9c:bc: ca:0b:17:36:96:d2:25:58:36:ae:3e:ae:31:30:b8: 3a:e0:5c:36:d5:85:13:51:6a:94:c2:01:85:8d:a5: 17:61:94:52:8c:b3:48:8f:b9:c3:45:5d:8c:e6:55: d9:96:05:ea:38:18:9f:86:08:95:17:d3:67:b0:aa: 70:b4:00:43:c4:34:0f:c2:76:6e:f0:33:7a:97:fa: d5:b4:43:2b:26:d3:66:ca:83:77:de:6d:56:73:45: 06:b9:a7:87:7c:16:93:07:f4:13:a1:4f:f3:24:1b: cd:25:09:97:e0:18:ff:88:58:91:5a:34:42:76:1f: ac:2c:8b:3d:21:2c:8e:16:1a:73:53:76:ab:f8:01: 1d:cf:05:83:f3:91:7e:6d:a0:f8:f1:3d:15:52:87: c2:32:f3:dd:49:f9:4d:94:a7:18:5c:c3:f8:a6:05: 62:b1:b1:bf:df:30:87:6d:4b:dd:d3:07:76:e0:3c: ef:be:aa:c2:1a:b2:18:c3:fd:e0:a6:93:61:ea:45: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7F:01:67:CC:3A:BD:73:BC:72:E4:BB:52:FF:DD:A4:67:A0:A5:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl X509v3 Authority Key Identifier: keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer sbgp-ipAddrBlock: critical IPv4: 72.42.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:91:69:72:ef:c4:3b:54:f1:08:73:4b:94:a6:fc:d0:fa:fe: da:fa:fa:4c:62:ba:77:40:6d:20:1c:fe:b9:53:4c:ca:e8:dd: 3a:f8:4c:77:ed:52:3d:ca:19:b2:f6:8f:cc:7d:76:74:03:cb: eb:d9:52:9a:a1:ba:1f:11:1c:b9:b1:c4:7e:f7:31:37:ca:da: 64:c8:85:cb:3e:17:c6:d3:ea:97:8a:79:fc:27:b6:64:fd:16: 1c:92:29:38:7a:b2:d4:35:da:98:ff:6e:7e:7f:5a:4e:be:37: 01:39:7d:17:4f:d1:91:55:7f:ef:be:46:1f:37:20:85:8e:30: 69:22:b1:22:70:92:47:53:13:bd:6d:3e:95:71:96:70:e6:81: 65:97:15:3f:54:84:17:0d:46:c6:7b:aa:a5:c7:77:0a:f6:df: 56:36:21:95:71:14:20:d6:37:a6:2c:09:40:31:07:70:c4:a6: ee:28:0e:e3:34:81:44:ed:68:da:fa:e8:1f:fa:b3:d0:2e:4f: 60:4d:52:09:a4:48:6c:d7:85:3d:ab:d4:b8:3e:0c:78:a9:f2: 14:58:3d:b1:2f:8d:43:8e:e9:c7:1d:04:d4:13:12:c3:16:83: b7:1e:de:aa:d0:2b:77:e9:6d:59:7f:23:be:95:13:f6:a5:24: 10:75:6f:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSI5c5kMCgEvSnwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM2OTdjOWQtMzI1YS00NjBmLWFiMmYtOGNmNzFiMWJl OTg0MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NjgxYjJlMmUtNmY1Yy00YzNkLWI4ZDMtOTU2ZDI0ZTcxNDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYS5UwoaKpSWcZ4MSlUZd2xpgE55Bh+zAg/G Pxn3la0dRRDSk7cat7IvVt/UUdeagTsUC84dop1onLzKCxc2ltIlWDauPq4xMLg6 4Fw21YUTUWqUwgGFjaUXYZRSjLNIj7nDRV2M5lXZlgXqOBifhgiVF9NnsKpwtABD xDQPwnZu8DN6l/rVtEMrJtNmyoN33m1Wc0UGuaeHfBaTB/QToU/zJBvNJQmX4Bj/ iFiRWjRCdh+sLIs9ISyOFhpzU3ar+AEdzwWD85F+baD48T0VUofCMvPdSflNlKcY XMP4pgVisbG/3zCHbUvd0wd24DzvvqrCGrIYw/3gppNh6kUJBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNh/AWfMOr1zvHLku1L/3aRnoKWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5 N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIxYmU5ODQvNGY1N2I3MmYtZmFmYi0z MmE1LThkZDAtNzUzZjFmODc5Nzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWM2OTdjOWQtMzI1YS00NjBmLWFi MmYtOGNmNzFiMWJlOTg0L2VjNjk3YzlkLTMyNWEtNDYwZi1hYjJmLThjZjcxYjFi ZTk4NC5jcmwwHwYDVR0jBBgwFoAUEjvZdTKrj92cHFYpzjLx33slhhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3 MWIxYmU5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCriMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqRaXLvxDtU8QhzS5Sm/ND6/tr6+kxiundAbSAc/rlTTMro3Tr4THft Uj3KGbL2j8x9dnQDy+vZUpqhuh8RHLmxxH73MTfK2mTIhcs+F8bT6peKefwntmT9 FhySKTh6stQ12pj/bn5/Wk6+NwE5fRdP0ZFVf+++Rh83IIWOMGkisSJwkkdTE71t PpVxlnDmgWWXFT9UhBcNRsZ7qqXHdwr231Y2IZVxFCDWN6YsCUAxB3DEpu4oDuM0 gUTtaNr66B/6s9AuT2BNUgmkSGzXhT2r1Lg+DHip8hRYPbEvjUOO6ccdBNQTEsMW g7ce3qrQK3fpbVl/I76VE/alJBB1b1M= -----END CERTIFICATE-----Generated at Wed Nov 5 21:30:36 2025 by rpki-client