$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/fc7437a2-442a-31c1-9f06-b2c943af5caf.roa File: fc7437a2-442a-31c1-9f06-b2c943af5caf.roa (raw, json) Hash identifier: 8jA2cche9/xkZmmJwY4IlYlhRjzagiatKjLyJah+4+U= Subject key identifier: F2:DF:13:51:37:76:67:18:AD:12:55:83:39:C9:1A:18:4E:23:82:0E Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Certificate serial: 010D0C9F4328584BA39D22293483DE5CBA857140 Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/fc7437a2-442a-31c1-9f06-b2c943af5caf.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 395425 IP address blocks: 72.42.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:22:29:34:83:de:5c:ba:85:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=52421d6e-32c5-4c60-a36b-2764e98aa8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0c:fb:8d:a1:5f:83:38:76:ed:e7:88:60:a0: 3b:00:7b:0f:79:d9:95:52:d7:e4:04:69:b0:33:84: f5:7c:67:bc:de:28:61:26:7a:83:ca:20:6c:f5:a4: da:5d:ad:49:b2:b7:e1:1b:5a:4a:d9:44:95:ce:51: ce:30:aa:9c:00:84:a5:af:f0:d5:19:dd:a2:d2:67: d0:fd:df:e6:21:ab:f3:92:aa:e3:35:e0:7d:42:36: 56:a3:2b:12:cd:f4:39:cd:14:dd:c3:91:ab:6b:a8: d1:f9:4b:c2:f0:69:0d:39:62:f6:47:0c:98:49:2d: be:b5:df:3a:3f:4a:16:cc:e2:57:fe:a1:77:43:c0: 15:98:ad:9c:40:ac:30:d1:51:55:a2:3d:13:a8:13: bd:b5:60:e7:33:16:40:01:f2:b7:23:1f:ba:03:5d: 60:5d:86:8b:ce:3a:3c:98:41:dc:4c:f4:16:11:02: 52:87:3a:a3:37:43:d3:4b:3d:69:e1:85:7b:48:a0: 56:d5:7e:5c:fc:6c:ea:9f:9d:78:3c:f9:af:93:3d: 42:7e:57:c8:08:3f:b2:5d:26:a3:4c:c3:cb:c9:6c: 9c:0e:9b:11:87:bb:9c:8f:9c:78:6a:ac:3d:ee:d0: 76:54:0c:12:b8:fd:ca:9d:a0:45:2f:0f:3e:70:02: 8b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DF:13:51:37:76:67:18:AD:12:55:83:39:C9:1A:18:4E:23:82:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/fc7437a2-442a-31c1-9f06-b2c943af5caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl X509v3 Authority Key Identifier: keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer sbgp-ipAddrBlock: critical IPv4: 72.42.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:04:f6:a6:5e:7e:e4:52:be:03:b9:bf:db:73:53:e2:a3:8c: d7:0c:83:6e:7d:f1:53:b5:76:37:4b:d1:1d:a1:87:8c:33:99: a3:34:bc:85:4b:ad:34:a0:b3:17:44:0e:33:64:8a:c2:aa:e6: 63:83:0f:ee:39:04:a8:9a:3b:6d:dc:12:9b:ec:d3:df:71:81: b3:14:c1:fb:d4:f0:ce:f0:32:1c:83:3c:ef:a0:70:ac:27:c3: 98:f2:e8:dc:42:b1:c1:71:ec:8f:3b:c6:12:e6:fa:48:25:ac: 15:d1:76:8e:52:30:46:ad:b3:06:69:c7:d4:e3:e2:d9:e6:f1: 09:be:31:a1:9c:77:2b:c6:f1:7f:b5:b7:93:12:ef:16:ab:39: cb:ce:2f:7a:de:25:a6:6c:f0:da:fd:48:72:c7:67:a1:57:a5: d4:43:93:8e:0b:27:e6:40:67:78:67:15:ef:06:ec:d0:20:a7: 4a:50:94:60:ef:75:2f:8b:26:30:17:f8:33:0d:ad:a9:ac:6d: 47:db:1a:51:26:43:5d:ff:6d:aa:a5:33:07:1f:ba:8f:d2:ce: 39:b3:42:8f:f4:45:04:d1:80:13:52:de:e9:28:e1:5a:13:e4: aa:e9:09:86:b8:01:e9:b8:ef:b4:83:99:7d:b4:4e:44:be:95: f1:c4:a3:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSIpNIPeXLqFcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM2OTdjOWQtMzI1YS00NjBmLWFiMmYtOGNmNzFiMWJl OTg0MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NTI0MjFkNmUtMzJjNS00YzYwLWEzNmItMjc2NGU5OGFhOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgz7jaFfgzh27eeIYKA7AHsPedmVUtfkBGmw M4T1fGe83ihhJnqDyiBs9aTaXa1JsrfhG1pK2USVzlHOMKqcAISlr/DVGd2i0mfQ /d/mIavzkqrjNeB9QjZWoysSzfQ5zRTdw5Gra6jR+UvC8GkNOWL2RwyYSS2+td86 P0oWzOJX/qF3Q8AVmK2cQKww0VFVoj0TqBO9tWDnMxZAAfK3Ix+6A11gXYaLzjo8 mEHcTPQWEQJShzqjN0PTSz1p4YV7SKBW1X5c/Gzqn514PPmvkz1CflfICD+yXSaj TMPLyWycDpsRh7ucj5x4aqw97tB2VAwSuP3KnaBFLw8+cAKLeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLfE1E3dmcYrRJVgznJGhhOI4IOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5 N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIxYmU5ODQvZmM3NDM3YTItNDQyYS0z MWMxLTlmMDYtYjJjOTQzYWY1Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWM2OTdjOWQtMzI1YS00NjBmLWFi MmYtOGNmNzFiMWJlOTg0L2VjNjk3YzlkLTMyNWEtNDYwZi1hYjJmLThjZjcxYjFi ZTk4NC5jcmwwHwYDVR0jBBgwFoAUEjvZdTKrj92cHFYpzjLx33slhhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3 MWIxYmU5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCrhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0E9qZefuRSvgO5v9tzU+KjjNcMg2598VO1djdL0R2hh4wzmaM0vIVL rTSgsxdEDjNkisKq5mODD+45BKiaO23cEpvs099xgbMUwfvU8M7wMhyDPO+gcKwn w5jy6NxCscFx7I87xhLm+kglrBXRdo5SMEatswZpx9Tj4tnm8Qm+MaGcdyvG8X+1 t5MS7xarOcvOL3reJaZs8Nr9SHLHZ6FXpdRDk44LJ+ZAZ3hnFe8G7NAgp0pQlGDv dS+LJjAX+DMNramsbUfbGlEmQ13/baqlMwcfuo/SzjmzQo/0RQTRgBNS3uko4VoT 5KrpCYa4Aem477SDmX20TkS+lfHEoxg= -----END CERTIFICATE-----Generated at Thu Nov 6 00:31:45 2025 by rpki-client