
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cb404fc6-a959-37a7-ba03-66739b40bd83.roa
File: cb404fc6-a959-37a7-ba03-66739b40bd83.roa (raw, json)
Hash identifier: 0amy1zJ30sDwoduB6vmznqGG5QLPUuOPdgCNF6H/wNc=
Subject key identifier: B1:2E:5F:C1:75:40:0A:AC:AF:A9:FC:67:4B:53:29:22:BF:1A:20:C8
Certificate issuer: /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
Certificate serial: 010D0C9F4328584F4112B76AE065F8BF13950ED3
Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cb404fc6-a959-37a7-ba03-66739b40bd83.roa
Signing time: Tue 22 Sep 2026 01:00:12 +0000
ROA not before: Tue 22 Sep 2026 01:00:12 +0000
ROA not after: Mon 21 Dec 2026 02:00:12 +0000
asID: 46320
IP address blocks: 23.227.208.0/21 maxlen: 21
23.227.208.0/22 maxlen: 24
23.227.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:41:12:b7:6a:e0:65:f8:bf:13:95:0e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
Validity
Not Before: Sep 22 01:00:12 2026 GMT
Not After : Dec 21 02:00:12 2026 GMT
Subject: CN=f392a47e-abe6-4336-8e99-5f150abf8d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1d:9c:35:fa:e0:b7:d6:71:1b:04:c2:48:4f:
57:72:14:7f:1d:36:2b:45:03:ce:45:90:2d:85:6b:
79:28:98:06:d5:8f:fb:2f:b5:c2:79:51:1e:be:55:
51:55:9c:ac:1d:49:c8:62:5e:93:6d:0d:96:1b:6f:
21:58:79:2f:bd:2e:72:d1:8b:27:96:ef:e5:00:30:
c9:86:4c:a6:8c:7c:3a:3a:e6:1d:f4:6e:e9:45:be:
22:cf:fb:20:b6:1e:5d:99:fa:c3:e6:33:db:17:d0:
a7:cb:e2:f6:12:86:11:3d:a5:6c:fc:f8:e0:27:13:
92:69:78:45:80:71:ca:47:1f:4a:a0:7f:38:cd:be:
a6:40:a3:61:ef:30:9e:db:98:ce:5a:06:2e:b7:7b:
f6:15:82:49:a4:ad:a4:c5:20:e6:44:00:2a:8a:65:
5f:f2:59:c3:e5:fd:59:b9:e6:2f:f9:14:fd:0c:8a:
3c:f1:10:37:99:a8:ba:4f:53:8b:2f:5b:ce:ff:44:
76:fe:61:15:d8:20:c5:59:75:44:ae:bd:01:1a:ae:
2d:92:34:52:ee:67:ad:02:45:3d:cc:52:f1:2c:fe:
c6:5d:9c:6c:43:8d:60:58:c7:7e:90:4d:15:60:01:
5f:fe:e7:4f:9a:a6:dc:ad:1d:c9:1c:f1:4b:83:dd:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2E:5F:C1:75:40:0A:AC:AF:A9:FC:67:4B:53:29:22:BF:1A:20:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cb404fc6-a959-37a7-ba03-66739b40bd83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl
X509v3 Authority Key Identifier:
keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:b0:42:ae:6c:d4:bc:4a:8b:80:01:ed:83:c3:56:51:fd:e9:
66:ac:03:c5:fb:07:9c:58:f5:f3:19:f6:28:09:70:7e:6f:38:
57:ef:0c:3f:ee:ea:db:32:22:72:55:bb:9d:4b:1e:90:72:46:
2b:9b:a0:39:3c:01:43:a3:60:29:98:bb:2f:f9:b2:b2:ec:e2:
4e:2f:c5:7e:52:f3:37:84:b0:b6:62:8f:37:56:dc:a9:de:35:
ab:e2:aa:4f:92:ad:26:b4:e8:57:63:cf:ee:a5:13:98:5a:aa:
49:1f:4c:53:75:23:d9:97:c2:64:3e:d1:90:22:0d:c2:89:d0:
05:04:f1:2f:1a:e8:5e:c6:db:81:4b:3d:68:71:a4:ad:60:85:
66:30:86:e3:60:84:03:fe:3b:f8:12:83:23:9a:33:e6:a4:60:
37:32:26:0a:80:78:56:8b:5a:84:17:25:ba:ad:59:9c:bd:d0:
0f:ae:5a:cd:a4:03:d2:a4:38:ed:aa:6c:63:1d:ce:66:25:fd:
b8:93:1f:bd:cc:79:0e:89:5c:ca:bb:01:d0:c4:dc:d0:b8:cb:
5d:0b:aa:35:05:10:83:c2:69:00:19:74:3f:70:b7:06:00:b4:
a2:b9:cd:23:e7:b9:74:3f:9b:fa:87:4d:54:7b:e7:fe:06:0f:
46:13:c3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:51:48 2026 by rpki-client