$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cb404fc6-a959-37a7-ba03-66739b40bd83.roa File: cb404fc6-a959-37a7-ba03-66739b40bd83.roa (raw, json) Hash identifier: AUBIJuuF04/L2FwM9O3mtVXTzZSb420zpce36stIhZ0= Subject key identifier: FC:4F:35:6D:81:E9:F4:D2:F0:63:AC:07:2E:F9:29:FE:86:A5:59:1C Certificate issuer: /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0 Certificate serial: 010D0C9F4328584B1D9C2B1871878CBDDA258380 Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cb404fc6-a959-37a7-ba03-66739b40bd83.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 46320 IP address blocks: 23.227.208.0/21 maxlen: 21 23.227.208.0/22 maxlen: 24 23.227.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:2b:18:71:87:8c:bd:da:25:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=14578bf6-7162-4569-95d7-ffce433c0cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:89:3f:5f:2f:37:b1:ca:d6:10:2f:41:7c: 28:e5:06:df:68:3f:d2:38:dc:d7:c5:5e:fb:aa:a4: 85:df:59:c6:72:50:95:64:1b:5d:00:40:b1:22:ec: 37:0f:02:4e:49:1b:79:d3:39:87:59:b6:9d:45:1c: f3:8f:9b:04:5e:bd:fc:96:7c:7c:70:53:07:eb:69: 67:28:fc:f0:b5:bb:6b:b5:fd:23:8f:94:bd:14:4e: 14:6b:48:16:2d:73:25:ce:54:04:92:71:1d:1b:72: 6d:c3:e6:e8:0c:60:f4:e0:f7:a1:bd:be:5c:cc:b1: c6:26:da:e4:aa:75:5c:99:01:2f:f5:37:43:48:97: f7:85:c6:ba:8b:e7:7e:4c:6c:ce:ce:fb:75:b7:59: fa:70:f0:92:c2:e4:73:7e:6e:0e:db:c6:96:a3:be: a6:94:51:73:66:7b:f7:d8:66:9b:59:4a:a4:44:72: 82:db:bf:7e:3f:38:3f:54:a7:6a:bf:dd:e1:12:6d: 9f:2f:ab:d3:3f:1c:dc:4e:a3:d0:f8:de:41:b9:56: c0:18:e1:fa:ee:be:e1:cc:f5:ef:83:7c:56:65:7b: 26:d0:32:9b:33:9e:88:b2:90:11:5e:59:e9:bf:bb: a7:0e:2a:32:05:e6:f1:53:5e:71:f6:95:5a:37:3d: 90:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4F:35:6D:81:E9:F4:D2:F0:63:AC:07:2E:F9:29:FE:86:A5:59:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cb404fc6-a959-37a7-ba03-66739b40bd83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl X509v3 Authority Key Identifier: keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer sbgp-ipAddrBlock: critical IPv4: 23.227.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a5:88:ef:ea:a1:5b:7f:4d:c5:59:20:c1:e8:e1:cf:96:41: ca:e2:da:f4:85:5b:4e:c5:3c:2d:fd:8c:5f:ae:27:cc:7c:94: fb:28:04:3c:1e:97:be:38:4d:7b:86:65:36:20:c2:d3:37:61: 30:08:90:bc:4d:d3:62:e7:4c:3e:d4:ce:32:82:cf:e5:91:0f: 8c:6f:eb:24:15:53:99:3a:db:a0:ba:2a:c2:d4:03:13:8f:78: bb:1c:64:b3:fa:42:2a:93:4e:1f:cf:3f:10:4d:25:e4:cb:fa: 7e:c6:6c:35:3a:21:f7:cf:ed:9d:be:f5:cb:70:0e:7b:fe:91: db:40:a2:d8:73:7e:33:56:4a:8b:56:45:99:54:80:6b:a0:f0: 02:a7:ac:ab:85:5f:56:8e:4b:61:cb:97:c7:67:2b:5b:62:51: de:93:dc:26:f8:f4:14:5e:0f:07:44:62:10:3e:e8:c9:1b:db: eb:b9:a0:26:32:9e:70:6c:04:ff:23:a5:bd:44:48:b5:d7:81: c9:0e:1c:aa:e1:f7:65:ad:39:9a:ad:e8:6d:de:ff:85:0d:a0: 26:b1:9b:35:9c:01:32:81:ad:85:df:70:67:70:d0:41:f9:b5: d4:52:76:64:e9:70:09:59:a3:0e:72:a4:4a:26:c4:8f:13:56: 5a:77:f4:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCsYcYeMvdolg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJiMTczNDMtZDJmMS00OWNlLWJhOTItMjJmMTNjZmJj MGQwMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MTQ1NzhiZjYtNzE2Mi00NTY5LTk1ZDctZmZjZTQzM2MwY2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsiJP18vN7HK1hAvQXwo5QbfaD/SONzXxV77 qqSF31nGclCVZBtdAECxIuw3DwJOSRt50zmHWbadRRzzj5sEXr38lnx8cFMH62ln KPzwtbtrtf0jj5S9FE4Ua0gWLXMlzlQEknEdG3Jtw+boDGD04Pehvb5czLHGJtrk qnVcmQEv9TdDSJf3hca6i+d+TGzOzvt1t1n6cPCSwuRzfm4O28aWo76mlFFzZnv3 2GabWUqkRHKC279+Pzg/VKdqv93hEm2fL6vTPxzcTqPQ+N5BuVbAGOH67r7hzPXv g3xWZXsm0DKbM56IspARXlnpv7unDioyBebxU15x9pVaNz2QSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxPNW2B6fTS8GOsBy75Kf6GpVkcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MmIx NzM0My1kMmYxLTQ5Y2UtYmE5Mi0yMmYxM2NmYmMwZDAvY2I0MDRmYzYtYTk1OS0z N2E3LWJhMDMtNjY3MzliNDBiZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzJiMTczNDMtZDJmMS00OWNlLWJh OTItMjJmMTNjZmJjMGQwLzcyYjE3MzQzLWQyZjEtNDljZS1iYTkyLTIyZjEzY2Zi YzBkMC5jcmwwHwYDVR0jBBgwFoAUoybRn8spmYSXTnzi26U8HqczzBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83MmIxNzM0My1kMmYxLTQ5Y2UtYmE5Mi0yMmYx M2NmYmMwZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF+PQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWliO/qoVt/TcVZIMHo4c+WQcri2vSFW07FPC39jF+uJ8x8lPsoBDwe l744TXuGZTYgwtM3YTAIkLxN02LnTD7UzjKCz+WRD4xv6yQVU5k626C6KsLUAxOP eLscZLP6QiqTTh/PPxBNJeTL+n7GbDU6IffP7Z2+9ctwDnv+kdtAothzfjNWSotW RZlUgGug8AKnrKuFX1aOS2HLl8dnK1tiUd6T3Cb49BReDwdEYhA+6Mkb2+u5oCYy nnBsBP8jpb1ESLXXgckOHKrh92WtOZqt6G3e/4UNoCaxmzWcATKBrYXfcGdw0EH5 tdRSdmTpcAlZow5ypEomxI8TVlp39DE= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:51 2025 by rpki-client