
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cb404fc6-a959-37a7-ba03-66739b40bd83.roa
File: cb404fc6-a959-37a7-ba03-66739b40bd83.roa (raw, json)
Hash identifier: AUBIJuuF04/L2FwM9O3mtVXTzZSb420zpce36stIhZ0=
Subject key identifier: FC:4F:35:6D:81:E9:F4:D2:F0:63:AC:07:2E:F9:29:FE:86:A5:59:1C
Certificate issuer: /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
Certificate serial: 010D0C9F4328584B1D9C2B1871878CBDDA258380
Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cb404fc6-a959-37a7-ba03-66739b40bd83.roa
Signing time: Sun 07 Sep 2025 13:00:41 +0000
ROA not before: Sun 07 Sep 2025 13:00:41 +0000
ROA not after: Sat 06 Dec 2025 14:00:41 +0000
asID: 46320
IP address blocks: 23.227.208.0/21 maxlen: 21
23.227.208.0/22 maxlen: 24
23.227.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:1d:9c:2b:18:71:87:8c:bd:da:25:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
Validity
Not Before: Sep 7 13:00:41 2025 GMT
Not After : Dec 6 14:00:41 2025 GMT
Subject: CN=14578bf6-7162-4569-95d7-ffce433c0cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:89:3f:5f:2f:37:b1:ca:d6:10:2f:41:7c:
28:e5:06:df:68:3f:d2:38:dc:d7:c5:5e:fb:aa:a4:
85:df:59:c6:72:50:95:64:1b:5d:00:40:b1:22:ec:
37:0f:02:4e:49:1b:79:d3:39:87:59:b6:9d:45:1c:
f3:8f:9b:04:5e:bd:fc:96:7c:7c:70:53:07:eb:69:
67:28:fc:f0:b5:bb:6b:b5:fd:23:8f:94:bd:14:4e:
14:6b:48:16:2d:73:25:ce:54:04:92:71:1d:1b:72:
6d:c3:e6:e8:0c:60:f4:e0:f7:a1:bd:be:5c:cc:b1:
c6:26:da:e4:aa:75:5c:99:01:2f:f5:37:43:48:97:
f7:85:c6:ba:8b:e7:7e:4c:6c:ce:ce:fb:75:b7:59:
fa:70:f0:92:c2:e4:73:7e:6e:0e:db:c6:96:a3:be:
a6:94:51:73:66:7b:f7:d8:66:9b:59:4a:a4:44:72:
82:db:bf:7e:3f:38:3f:54:a7:6a:bf:dd:e1:12:6d:
9f:2f:ab:d3:3f:1c:dc:4e:a3:d0:f8:de:41:b9:56:
c0:18:e1:fa:ee:be:e1:cc:f5:ef:83:7c:56:65:7b:
26:d0:32:9b:33:9e:88:b2:90:11:5e:59:e9:bf:bb:
a7:0e:2a:32:05:e6:f1:53:5e:71:f6:95:5a:37:3d:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4F:35:6D:81:E9:F4:D2:F0:63:AC:07:2E:F9:29:FE:86:A5:59:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cb404fc6-a959-37a7-ba03-66739b40bd83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl
X509v3 Authority Key Identifier:
keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:a5:88:ef:ea:a1:5b:7f:4d:c5:59:20:c1:e8:e1:cf:96:41:
ca:e2:da:f4:85:5b:4e:c5:3c:2d:fd:8c:5f:ae:27:cc:7c:94:
fb:28:04:3c:1e:97:be:38:4d:7b:86:65:36:20:c2:d3:37:61:
30:08:90:bc:4d:d3:62:e7:4c:3e:d4:ce:32:82:cf:e5:91:0f:
8c:6f:eb:24:15:53:99:3a:db:a0:ba:2a:c2:d4:03:13:8f:78:
bb:1c:64:b3:fa:42:2a:93:4e:1f:cf:3f:10:4d:25:e4:cb:fa:
7e:c6:6c:35:3a:21:f7:cf:ed:9d:be:f5:cb:70:0e:7b:fe:91:
db:40:a2:d8:73:7e:33:56:4a:8b:56:45:99:54:80:6b:a0:f0:
02:a7:ac:ab:85:5f:56:8e:4b:61:cb:97:c7:67:2b:5b:62:51:
de:93:dc:26:f8:f4:14:5e:0f:07:44:62:10:3e:e8:c9:1b:db:
eb:b9:a0:26:32:9e:70:6c:04:ff:23:a5:bd:44:48:b5:d7:81:
c9:0e:1c:aa:e1:f7:65:ad:39:9a:ad:e8:6d:de:ff:85:0d:a0:
26:b1:9b:35:9c:01:32:81:ad:85:df:70:67:70:d0:41:f9:b5:
d4:52:76:64:e9:70:09:59:a3:0e:72:a4:4a:26:c4:8f:13:56:
5a:77:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:51:26 2025 by rpki-client