$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/7830e1c4-4f1b-3b13-9ab1-889c491a0ace.roa File: 7830e1c4-4f1b-3b13-9ab1-889c491a0ace.roa (raw, json) Hash identifier: px+J74wEbWda8PXYF8uN+7fDR3cVbk1QTtExxGQwx9c= Subject key identifier: 9A:1A:0B:11:38:0F:45:52:06:8B:E4:3F:64:9B:41:4F:E0:04:E4:D7 Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Certificate serial: 010D0C9F4328584BA39D22563485F94E3B09D4C0 Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/7830e1c4-4f1b-3b13-9ab1-889c491a0ace.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 395425 IP address blocks: 72.42.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:22:56:34:85:f9:4e:3b:09:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=8e7d5b44-1ddc-49c5-ba23-87859090b46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9e:88:07:b2:a2:10:6b:7d:1d:af:8a:05:65: e2:db:6e:a3:a8:7f:34:81:e9:f8:09:9e:c6:7d:00: 17:2f:01:fa:77:d1:ae:75:9a:93:ed:a4:38:2e:a6: bf:fb:24:e6:46:bc:f4:e5:c0:9c:68:55:da:0a:1c: 8a:59:c2:53:8d:fb:cf:ba:d7:02:0d:0f:1b:0d:31: ed:d3:d3:c4:16:2a:18:c7:73:03:66:62:52:00:a5: c5:7a:72:9e:e5:32:3e:fa:24:7c:33:d6:3b:2d:dc: fa:c8:a3:5f:87:c9:13:2a:5d:e9:c5:15:6b:35:8f: 9e:6b:51:0a:d0:4c:2d:de:79:e3:41:b3:2c:e4:85: 64:9d:d0:a2:fe:e7:03:85:9f:73:d1:ac:bd:d5:2f: cc:df:56:44:80:48:c6:ed:6a:da:52:d0:5d:78:f9: 9a:f7:61:31:af:d9:4a:68:2b:8f:c9:71:40:1f:47: 45:ab:b2:07:a3:99:56:56:da:82:02:76:41:67:89: c1:9d:70:cc:7c:72:7c:e1:52:b1:32:d4:0d:fa:ba: cf:1e:5b:b9:ea:84:e0:01:62:a4:d8:db:bb:5e:38: 5e:4a:33:62:75:28:27:b4:f3:95:54:67:dd:b2:fc: f1:3b:86:85:69:68:99:5a:79:d2:f9:15:1a:01:d2: ae:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1A:0B:11:38:0F:45:52:06:8B:E4:3F:64:9B:41:4F:E0:04:E4:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/7830e1c4-4f1b-3b13-9ab1-889c491a0ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl X509v3 Authority Key Identifier: keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer sbgp-ipAddrBlock: critical IPv4: 72.42.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:38:e0:ff:d5:30:c6:c0:5f:8d:ed:b0:10:c8:d0:52:ca:b1: 39:c2:47:15:d4:51:e6:60:c8:f8:8f:4b:b6:cb:79:57:b0:14: 0e:70:a7:15:f0:58:88:62:bb:0d:b9:23:66:2a:52:49:81:f9: dc:fb:bf:d3:9b:29:34:3d:ee:57:4a:93:d5:03:9f:02:c7:e9: 99:1f:14:20:60:0b:ac:40:83:bf:2f:14:e0:e9:d1:f6:f4:7e: ef:8a:29:24:1d:1b:58:bb:cc:cd:a6:eb:ec:a9:02:d0:be:6c: 1a:3a:d3:be:42:47:64:a8:fe:97:08:05:ea:e5:8b:97:7c:4e: 9a:68:32:68:b9:ec:ce:de:3c:79:c0:07:5e:5c:3e:8a:74:24: 30:e2:f9:fe:07:55:78:2b:fd:12:3a:c5:5c:d6:d5:9b:ef:63: c1:3f:00:7c:6f:38:ed:7f:3e:63:01:71:db:9d:da:63:d9:73: ca:c8:b0:d6:a5:a4:ba:04:be:fb:ad:dc:cc:f3:2e:47:18:4f: 82:a3:0b:a5:e9:e7:21:28:fb:f6:73:4d:0e:ca:d3:16:b3:d6: 23:14:78:72:80:84:bc:2e:7e:70:ae:d9:0e:e8:31:2c:6a:6d: 88:5d:71:22:07:26:68:b2:aa:c2:f8:60:78:dd:63:b9:70:82: 5f:a6:8c:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSJWNIX5TjsJ1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM2OTdjOWQtMzI1YS00NjBmLWFiMmYtOGNmNzFiMWJl OTg0MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OGU3ZDViNDQtMWRkYy00OWM1LWJhMjMtODc4NTkwOTBiNDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA056IB7KiEGt9Ha+KBWXi226jqH80gen4CZ7G fQAXLwH6d9GudZqT7aQ4Lqa/+yTmRrz05cCcaFXaChyKWcJTjfvPutcCDQ8bDTHt 09PEFioYx3MDZmJSAKXFenKe5TI++iR8M9Y7Ldz6yKNfh8kTKl3pxRVrNY+ea1EK 0Ewt3nnjQbMs5IVkndCi/ucDhZ9z0ay91S/M31ZEgEjG7WraUtBdePma92Exr9lK aCuPyXFAH0dFq7IHo5lWVtqCAnZBZ4nBnXDMfHJ84VKxMtQN+rrPHlu56oTgAWKk 2Nu7XjheSjNidSgntPOVVGfdsvzxO4aFaWiZWnnS+RUaAdKunwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoaCxE4D0VSBovkP2SbQU/gBOTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5 N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIxYmU5ODQvNzgzMGUxYzQtNGYxYi0z YjEzLTlhYjEtODg5YzQ5MWEwYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWM2OTdjOWQtMzI1YS00NjBmLWFi MmYtOGNmNzFiMWJlOTg0L2VjNjk3YzlkLTMyNWEtNDYwZi1hYjJmLThjZjcxYjFi ZTk4NC5jcmwwHwYDVR0jBBgwFoAUEjvZdTKrj92cHFYpzjLx33slhhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3 MWIxYmU5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESCrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA44P/VMMbAX43tsBDI0FLKsTnCRxXUUeZgyPiPS7bLeVewFA5wpxXw WIhiuw25I2YqUkmB+dz7v9ObKTQ97ldKk9UDnwLH6ZkfFCBgC6xAg78vFODp0fb0 fu+KKSQdG1i7zM2m6+ypAtC+bBo6075CR2So/pcIBerli5d8TppoMmi57M7ePHnA B15cPop0JDDi+f4HVXgr/RI6xVzW1ZvvY8E/AHxvOO1/PmMBcdud2mPZc8rIsNal pLoEvvut3MzzLkcYT4KjC6Xp5yEo+/ZzTQ7K0xaz1iMUeHKAhLwufnCu2Q7oMSxq bYhdcSIHJmiyqsL4YHjdY7lwgl+mjCA= -----END CERTIFICATE-----Generated at Wed Nov 5 21:31:27 2025 by rpki-client