$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/82a310ab-4fc3-33b8-b133-f7cf904aa294.roa File: 82a310ab-4fc3-33b8-b133-f7cf904aa294.roa (raw, json) Hash identifier: cGicm28v6aTscpbv5DJo1Prcmfah+G6652WNRx/Wl58= Subject key identifier: EA:07:35:1E:DB:05:9F:F1:EB:94:63:85:7B:7A:B5:E8:7A:AD:99:41 Certificate issuer: /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Certificate serial: 010D0C9F4328584B52A777FB50BA1AC9663FD79E Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/82a310ab-4fc3-33b8-b133-f7cf904aa294.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 400688 IP address blocks: 23.172.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:77:fb:50:ba:1a:c9:66:3f:d7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=4a57768e-b63c-4e02-bc5f-f24ec6922c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ae:57:43:cc:6d:6f:b0:42:e0:60:40:b5:5a: 41:c3:26:83:b5:b5:f9:56:83:d7:2a:8b:40:07:e5: 8e:d1:11:d7:e7:55:ba:57:64:48:63:36:d5:2f:e8: d7:94:79:17:3a:46:3c:a4:b7:f6:9d:d6:6f:9b:8d: a4:80:6b:f1:0a:61:82:67:46:9d:8c:28:72:3a:e5: d1:e1:ef:18:d5:82:4c:6c:53:bc:3b:23:63:82:e9: 71:12:ea:43:c4:e8:d3:9f:8d:98:33:36:d8:4d:60: 21:7e:c6:0d:98:9b:48:93:44:8a:4c:3e:25:d5:55: 6a:78:31:34:6e:7c:e6:12:96:23:a8:1e:5f:05:cd: cc:74:ad:fd:44:a8:b5:19:f8:a1:ed:cd:91:e9:0e: ef:2f:01:ab:3f:8f:af:de:aa:f9:24:e8:c6:f7:76: f5:8f:9f:23:19:52:4e:cb:5f:15:ba:73:4e:bd:67: 2f:12:04:d8:96:ac:dd:6d:1d:3f:df:f7:fe:d5:c9: 1f:e1:c1:66:7a:71:6c:f2:86:9b:15:ac:dc:e4:90: 38:15:88:08:5b:f2:91:8a:07:1a:cf:02:17:dd:05: 2b:64:34:ad:63:0a:bb:3e:d5:df:9a:76:f4:fc:08: 0a:19:09:aa:e3:80:48:98:53:d9:c5:fe:3c:8a:c2: fb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:07:35:1E:DB:05:9F:F1:EB:94:63:85:7B:7A:B5:E8:7A:AD:99:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/82a310ab-4fc3-33b8-b133-f7cf904aa294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl X509v3 Authority Key Identifier: keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer sbgp-ipAddrBlock: critical IPv4: 23.172.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:4c:43:04:f7:57:0b:a0:97:76:14:3b:42:40:c9:11:10:a8: 18:e0:d3:4b:3b:b3:15:82:92:57:88:ae:6d:da:0f:15:96:98: 8a:c2:a5:5a:fd:40:9f:ab:3f:22:8e:95:1a:c7:68:88:45:45: 7d:80:e7:03:e6:b1:8d:9d:d5:e4:0c:2b:5c:f8:6a:8a:7e:fe: 20:96:91:46:76:4c:04:63:a6:c8:7c:cc:3c:c1:bc:65:25:50: be:46:e0:d9:33:f3:a7:e5:bb:a3:71:eb:0d:a1:a8:62:3d:ca: bc:cc:15:f0:ae:76:29:bf:62:e5:53:74:d7:09:ad:b5:b6:f7: 62:ac:06:9d:66:c8:fd:7b:d4:cf:76:79:b2:b8:fe:6a:71:30: 0c:aa:3b:ab:bc:49:7b:30:3a:88:84:86:9d:38:96:e8:03:83: d6:72:03:88:dc:8e:9e:12:ef:f0:02:a5:bd:46:51:98:7c:9a: dc:22:9a:99:8f:84:e5:9f:5f:49:66:d1:0c:c8:a9:32:05:fc: 38:42:ce:b0:93:52:d6:d3:e9:ce:7a:b1:c8:6f:01:74:18:e9: a5:ca:83:95:46:5a:0a:fa:b2:6f:9b:0f:b9:5c:46:60:e6:18: 0b:37:cb:6c:0b:b2:3b:08:12:2b:e3:e2:4f:6c:a4:06:68:2d: c3:33:98:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp3f7ULoayWY/154wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM0NzY4N2MtZDgwZC00NmUyLWIzMGUtMTBhZTY4ZDhl MWVlMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NGE1Nzc2OGUtYjYzYy00ZTAyLWJjNWYtZjI0ZWM2OTIyYzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha5XQ8xtb7BC4GBAtVpBwyaDtbX5VoPXKotA B+WO0RHX51W6V2RIYzbVL+jXlHkXOkY8pLf2ndZvm42kgGvxCmGCZ0adjChyOuXR 4e8Y1YJMbFO8OyNjgulxEupDxOjTn42YMzbYTWAhfsYNmJtIk0SKTD4l1VVqeDE0 bnzmEpYjqB5fBc3MdK39RKi1Gfih7c2R6Q7vLwGrP4+v3qr5JOjG93b1j58jGVJO y18VunNOvWcvEgTYlqzdbR0/3/f+1ckf4cFmenFs8oabFazc5JA4FYgIW/KRigca zwIX3QUrZDStYwq7PtXfmnb0/AgKGQmq44BImFPZxf48isL7EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoHNR7bBZ/x65RjhXt6teh6rZlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3 Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhkOGUxZWUvODJhMzEwYWItNGZjMy0z M2I4LWIxMzMtZjdjZjkwNGFhMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTM0NzY4N2MtZDgwZC00NmUyLWIz MGUtMTBhZTY4ZDhlMWVlL2UzNDc2ODdjLWQ4MGQtNDZlMi1iMzBlLTEwYWU2OGQ4 ZTFlZS5jcmwwHwYDVR0jBBgwFoAUcaIz1Ch+MfU34SL6UnnC6wYl1ZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFl NjhkOGUxZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6xIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhMQwT3Vwugl3YUO0JAyREQqBjg00s7sxWCkleIrm3aDxWWmIrCpVr9 QJ+rPyKOlRrHaIhFRX2A5wPmsY2d1eQMK1z4aop+/iCWkUZ2TARjpsh8zDzBvGUl UL5G4Nkz86flu6Nx6w2hqGI9yrzMFfCudim/YuVTdNcJrbW292KsBp1myP171M92 ebK4/mpxMAyqO6u8SXswOoiEhp04lugDg9ZyA4jcjp4S7/ACpb1GUZh8mtwimpmP hOWfX0lm0QzIqTIF/DhCzrCTUtbT6c56schvAXQY6aXKg5VGWgr6sm+bD7lcRmDm GAs3y2wLsjsIEivj4k9spAZoLcMzmAk= -----END CERTIFICATE-----Generated at Wed Nov 5 09:32:49 2025 by rpki-client