$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa File: cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa (raw, json) Hash identifier: P2MQT80UeJoCabVUPQ4Vom4nyLXnZXLryCc0U07I0zs= Subject key identifier: 9E:B1:03:50:8A:3A:43:6B:F8:7B:58:A6:F9:7C:03:87:69:D7:C0:12 Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F4328584B047C0418AD7084999A59CA80 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 7922 IP address blocks: 72.22.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:04:18:ad:70:84:99:9a:59:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=a593169c-f03f-4ace-b99d-155b9b9420b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:db:7f:74:7c:a7:df:34:59:ec:9d:2f:f2: 6c:d9:d0:49:8b:48:22:1a:e0:9b:a7:92:ac:20:16: 60:16:15:ac:0e:59:f7:7c:85:d5:7e:46:a8:67:36: af:01:51:02:ad:71:50:d6:23:ea:0a:c5:1f:90:97: 30:80:72:e0:1f:4c:22:c2:20:69:f4:48:ea:36:58: 3a:c5:f9:71:81:d2:b9:c0:2e:20:8b:89:ee:d5:14: 5b:33:10:35:ad:3c:11:fb:b7:e7:26:a1:98:90:fd: 8b:a0:0c:d3:44:5c:bc:d8:99:e9:ec:a9:61:6c:28: ea:35:3b:1d:c0:41:b9:27:4c:0b:4c:94:8a:3f:e6: 4d:eb:9f:5d:1b:63:e5:7e:f4:e7:79:91:d3:2a:d9: a3:9e:69:10:97:2a:6c:96:cc:5d:5c:62:28:16:e5: 7c:48:2c:02:ca:76:33:07:cd:22:98:e6:e5:83:b1: 22:64:d0:e4:a5:03:20:6b:db:93:ed:c6:92:a4:69: 61:ff:a6:c8:b5:2c:d6:56:3c:5c:fc:df:d5:1a:b6: a4:12:51:e4:50:77:82:eb:5b:a1:e4:3e:fd:cf:dc: 9e:4c:f1:42:26:04:86:89:b2:c4:59:ec:ab:84:74: 3f:c6:43:09:b9:1f:38:8b:4a:47:4b:17:58:13:2e: f6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B1:03:50:8A:3A:43:6B:F8:7B:58:A6:F9:7C:03:87:69:D7:C0:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 72.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:06:7b:cf:8a:0b:8d:37:b3:54:81:d7:43:7f:c9:aa:ba:5a: 44:05:32:d5:d2:a1:83:2d:54:77:fc:bc:ae:a2:e8:6e:fd:85: 4e:0b:6b:04:51:06:6a:f7:4d:96:bd:1e:74:e5:7e:92:9b:09: a4:c8:1a:9c:aa:02:1e:fd:2c:09:f5:52:0e:be:bd:4d:ab:a1: 04:b1:23:0a:19:16:8b:0e:78:be:95:4e:b8:bf:38:bd:7e:60: b2:0f:9b:26:6b:94:f4:9b:fc:01:69:c6:8c:54:54:cb:ab:4c: 0c:7c:f4:ab:27:b9:f8:6e:c7:6e:64:a5:84:39:d8:da:e8:11: 46:a3:2e:7e:92:25:5a:f9:10:ec:e5:8e:96:af:11:7e:af:3d: e4:40:0c:af:f6:37:ba:bb:b0:bc:3b:e9:df:f7:bc:db:0e:ff: d6:1f:a6:81:59:76:a6:41:0e:c7:9b:53:1a:de:6d:a6:1f:58: 6b:f6:dc:51:4c:f7:ae:ee:44:70:14:31:e3:e4:bb:2d:69:c4: 04:1e:c1:73:bd:9c:5c:17:07:de:6b:f7:f6:87:3a:e8:91:e2: 59:2d:93:bb:c6:28:30:3f:0d:1f:27:4b:d2:1c:9a:fa:24:6b: 9d:24:73:d2:48:b5:5f:d5:7b:5a:ff:98:d9:02:eb:3e:e6:10: 4f:b1:32:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAQYrXCEmZpZyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YTU5MzE2OWMtZjAzZi00YWNlLWI5OWQtMTU1YjliOTQyMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW3bf3R8p980WeydL/Js2dBJi0giGuCbp5Ks IBZgFhWsDln3fIXVfkaoZzavAVECrXFQ1iPqCsUfkJcwgHLgH0wiwiBp9EjqNlg6 xflxgdK5wC4gi4nu1RRbMxA1rTwR+7fnJqGYkP2LoAzTRFy82Jnp7KlhbCjqNTsd wEG5J0wLTJSKP+ZN659dG2PlfvTneZHTKtmjnmkQlypslsxdXGIoFuV8SCwCynYz B80imOblg7EiZNDkpQMga9uT7caSpGlh/6bItSzWVjxc/N/VGrakElHkUHeC61uh 5D79z9yeTPFCJgSGibLEWeyrhHQ/xkMJuR84i0pHSxdYEy72OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6xA1CKOkNr+HtYpvl8A4dp18ASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvY2ZiZDE5ODQtYjM0Zi0z MzI4LTgwNzItODVlMmUxZWNmZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUGe8+KC403s1SB10N/yaq6WkQFMtXSoYMtVHf8vK6i6G79hU4LawRR Bmr3TZa9HnTlfpKbCaTIGpyqAh79LAn1Ug6+vU2roQSxIwoZFosOeL6VTri/OL1+ YLIPmyZrlPSb/AFpxoxUVMurTAx89Ksnufhux25kpYQ52NroEUajLn6SJVr5EOzl jpavEX6vPeRADK/2N7q7sLw76d/3vNsO/9YfpoFZdqZBDsebUxrebaYfWGv23FFM 967uRHAUMePkuy1pxAQewXO9nFwXB95r9/aHOuiR4lktk7vGKDA/DR8nS9Icmvok a50kc9JItV/Ve1r/mNkC6z7mEE+xMmc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:21:23 2025 by rpki-client