$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/9432e293-6f8b-3df1-9f75-80a6dbd7b23c.roa File: 9432e293-6f8b-3df1-9f75-80a6dbd7b23c.roa (raw, json) Hash identifier: 39CdlyP96wi2D7wkrqFkQjhoRw9w1xTeYx5XpFN9Log= Subject key identifier: 4D:E6:25:1D:D5:62:10:F4:E5:C2:B6:CA:94:7D:7A:A8:74:05:55:44 Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Certificate serial: 010D0C9F4328584BA39D2271D6EDCD4C83E188A0 Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/9432e293-6f8b-3df1-9f75-80a6dbd7b23c.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 72.42.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:22:71:d6:ed:cd:4c:83:e1:88:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=26ded9b4-416a-4c8f-b173-24f1c6ef23bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:74:af:f5:be:74:64:be:8a:33:13:16:b6: 1c:99:a8:86:3a:b8:92:6b:65:37:36:a3:7d:ea:07: 4c:f7:b0:b5:64:cd:4b:28:8d:99:96:92:94:db:1c: 1c:c2:0f:7d:51:09:19:7c:10:a9:26:a6:b1:90:f1: 9c:f4:c9:04:da:5f:69:21:43:23:41:ef:55:d0:01: de:e9:86:8d:d5:5e:9b:8d:87:6d:85:05:4b:f3:63: c9:29:ea:7e:20:02:f6:ca:ce:39:6f:be:23:d9:04: 3a:79:ba:d9:c4:de:e7:63:d1:0e:53:cb:8f:df:92: 61:52:04:42:92:6c:38:db:c4:2e:a9:c6:3d:03:f2: 21:60:79:e9:04:d1:0e:df:eb:c9:1c:de:ca:49:16: 7d:6c:5a:75:9a:cc:59:57:ab:22:00:8c:db:6d:71: eb:2d:12:b8:fc:f9:5d:a9:ca:57:ab:40:f1:95:4b: 1f:ef:5c:c9:0e:f8:28:12:4f:5d:5e:37:1e:7a:00: f6:26:81:6a:b5:9a:0c:9e:47:fa:a8:fe:8a:b2:82: b3:08:4f:58:09:93:fa:22:5c:38:bc:c1:d2:37:c3: 71:b0:4a:f5:a2:32:a9:b7:21:e5:d3:5c:c2:e1:97: 64:fc:1f:1a:00:67:1a:98:c1:fb:2b:5f:6b:38:c1: ab:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E6:25:1D:D5:62:10:F4:E5:C2:B6:CA:94:7D:7A:A8:74:05:55:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/9432e293-6f8b-3df1-9f75-80a6dbd7b23c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl X509v3 Authority Key Identifier: keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer sbgp-ipAddrBlock: critical IPv4: 72.42.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:f5:22:a4:e3:96:ee:97:2d:8f:5d:73:c9:61:ea:dd:28:fe: 7f:0d:d2:8b:56:6e:a7:ac:36:3f:f0:78:39:76:ec:dc:9c:bc: a0:e9:14:be:2f:22:5e:81:f3:a0:35:b5:2f:ac:1f:e1:fe:bd: 39:7f:b6:b0:25:b2:14:c2:2d:63:26:12:a9:3f:06:11:35:84: ee:54:8b:9b:57:4b:e0:ae:30:89:fc:c5:6e:2b:4d:e1:05:77: ee:a5:a9:e8:63:02:0b:a4:6c:56:67:37:db:96:6c:b7:50:a3: 68:c7:a0:b0:f0:9a:a2:e0:b1:47:c1:ef:42:7e:45:89:7e:91: d1:67:e8:d7:e8:78:e3:24:a4:9f:95:27:0f:70:e5:ea:d1:08: 4f:95:25:0f:4a:e3:33:0e:d9:99:ed:b2:bb:af:90:21:b2:06: 68:58:f3:55:72:79:2d:f3:30:35:65:63:ea:04:87:93:e8:3f: d3:7e:d1:40:5f:23:ae:53:40:91:80:88:35:2b:c8:3c:31:ef: 7a:57:e9:f7:4a:4d:ec:a8:03:79:12:57:f7:67:ba:77:4c:1a: 90:04:72:71:27:ed:b0:07:3f:b4:c8:15:44:53:41:55:22:c7: 0a:99:1b:5d:15:75:33:bc:e7:9c:00:56:5d:fd:ec:c8:b2:f2: 39:4a:4b:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSJx1u3NTIPhiKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM2OTdjOWQtMzI1YS00NjBmLWFiMmYtOGNmNzFiMWJl OTg0MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MjZkZWQ5YjQtNDE2YS00YzhmLWIxNzMtMjRmMWM2ZWYyM2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz10r/W+dGS+ijMTFrYcmaiGOriSa2U3NqN9 6gdM97C1ZM1LKI2ZlpKU2xwcwg99UQkZfBCpJqaxkPGc9MkE2l9pIUMjQe9V0AHe 6YaN1V6bjYdthQVL82PJKep+IAL2ys45b74j2QQ6ebrZxN7nY9EOU8uP35JhUgRC kmw428QuqcY9A/IhYHnpBNEO3+vJHN7KSRZ9bFp1msxZV6siAIzbbXHrLRK4/Pld qcpXq0DxlUsf71zJDvgoEk9dXjceegD2JoFqtZoMnkf6qP6KsoKzCE9YCZP6Ilw4 vMHSN8NxsEr1ojKptyHl01zC4Zdk/B8aAGcamMH7K19rOMGrZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3mJR3VYhD05cK2ypR9eqh0BVVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5 N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIxYmU5ODQvOTQzMmUyOTMtNmY4Yi0z ZGYxLTlmNzUtODBhNmRiZDdiMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWM2OTdjOWQtMzI1YS00NjBmLWFi MmYtOGNmNzFiMWJlOTg0L2VjNjk3YzlkLTMyNWEtNDYwZi1hYjJmLThjZjcxYjFi ZTk4NC5jcmwwHwYDVR0jBBgwFoAUEjvZdTKrj92cHFYpzjLx33slhhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3 MWIxYmU5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCrlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALP1IqTjlu6XLY9dc8lh6t0o/n8N0otWbqesNj/weDl27NycvKDpFL4v Il6B86A1tS+sH+H+vTl/trAlshTCLWMmEqk/BhE1hO5Ui5tXS+CuMIn8xW4rTeEF d+6lqehjAgukbFZnN9uWbLdQo2jHoLDwmqLgsUfB70J+RYl+kdFn6NfoeOMkpJ+V Jw9w5erRCE+VJQ9K4zMO2ZntsruvkCGyBmhY81VyeS3zMDVlY+oEh5PoP9N+0UBf I65TQJGAiDUryDwx73pX6fdKTeyoA3kSV/dnundMGpAEcnEn7bAHP7TIFURTQVUi xwqZG10VdTO855wAVl397Miy8jlKS5k= -----END CERTIFICATE-----Generated at Wed Nov 5 14:05:46 2025 by rpki-client