$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa File: a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa (raw, json) Hash identifier: 2RjFYiZCa0e1X0tr5NAo5JbWGViiknbpIffbg1DQrMU= Subject key identifier: 57:83:62:9C:E8:62:C6:08:F5:D5:CA:64:CE:DA:F4:53:DF:59:1E:4C Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584A9900C6C765C855422581AA80 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 5645 IP address blocks: 23.233.0.0/17 maxlen: 17 23.233.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c6:c7:65:c8:55:42:25:81:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=4906a7c3-febf-4238-894e-3cb24d1add57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6b:97:4c:44:f5:23:5d:17:c2:e3:78:a8:8e: da:b9:f1:5e:7a:d2:31:d5:2b:aa:1f:37:6c:91:32: 49:e6:7d:9b:d8:4d:ec:4d:d0:3c:7c:f8:32:08:b0: 65:ac:1f:f5:84:47:f0:6d:eb:a0:13:97:97:f3:ba: d0:66:09:dd:b5:0b:e6:18:8a:0b:e4:74:bc:70:06: 30:0e:b1:35:e4:e5:b7:c6:75:ca:ff:5d:f5:64:07: b4:29:93:8a:1b:4b:6b:51:74:af:bb:ae:9d:a6:aa: c0:3b:0b:8e:48:4b:f4:1d:06:41:79:d7:b1:e9:35: fc:a8:31:63:53:c0:14:3b:b2:ef:9a:b1:e7:09:e0: 58:0e:b7:dd:82:75:3e:f2:c6:38:2f:36:4a:93:1d: a8:29:8f:79:e9:bd:76:85:48:88:b7:a5:fe:8f:01: 09:8e:ef:e3:75:bf:8b:8b:f2:f9:7d:bf:12:33:f9: 50:60:e1:37:8e:7b:80:94:42:8f:a8:94:d0:23:0a: 6d:1c:c9:f6:ee:02:89:ee:b7:d8:db:fd:b3:4e:ea: 57:18:60:10:34:09:fa:58:ed:94:3c:d8:5c:98:d4: 73:4e:49:4b:fc:b6:14:3e:f1:bd:dc:86:85:de:a9: 8d:93:a1:01:75:de:4b:94:05:8e:1a:15:9d:2b:0b: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:83:62:9C:E8:62:C6:08:F5:D5:CA:64:CE:DA:F4:53:DF:59:1E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 23.233.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:44:a0:ce:f0:4f:96:33:1b:ab:27:b1:41:56:3b:aa:d3:1f: bf:b4:3d:60:90:26:f9:a9:75:2b:ce:26:5b:88:eb:00:87:a7: 42:ce:9a:7b:a2:8f:07:3f:2c:f3:3f:8c:d6:6e:ec:69:83:fa: 76:85:f9:69:2f:94:90:53:ab:1b:9c:e4:d4:05:08:44:29:ae: 9b:dc:88:88:2c:ff:6d:e7:b8:53:06:25:98:2f:19:bf:77:f4: 8e:03:94:03:f5:8d:ac:99:55:00:87:5c:fc:ef:78:3e:f8:81: 1b:cc:76:ec:08:68:30:3f:95:4b:6f:44:c8:b0:22:1a:d1:46: fe:47:43:ec:00:b8:f7:a5:93:d2:ed:0e:31:a0:ae:8e:a1:f4: 73:f7:da:48:0b:99:85:21:05:0f:c2:95:a2:fe:f8:2c:28:c0: cf:b9:99:2f:de:ab:ab:59:60:34:41:8d:4a:5c:01:7b:6b:11: 44:ce:89:4b:24:a0:e2:04:a1:35:12:d4:43:d1:1e:fa:61:b2: 26:9f:5d:96:9d:b1:5a:aa:7b:8a:30:c3:17:34:51:8a:1c:6a: 55:7a:e0:49:f9:1d:8d:15:2d:af:73:e6:1b:8f:ef:fa:d4:70: 9a:27:69:2f:bd:3d:bc:e8:80:ef:a1:c6:34:20:e9:82:68:0d: e3:ee:31:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMbHZchVQiWBqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NDkwNmE3YzMtZmViZi00MjM4LTg5NGUtM2NiMjRkMWFkZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGuXTET1I10XwuN4qI7aufFeetIx1SuqHzds kTJJ5n2b2E3sTdA8fPgyCLBlrB/1hEfwbeugE5eX87rQZgndtQvmGIoL5HS8cAYw DrE15OW3xnXK/131ZAe0KZOKG0trUXSvu66dpqrAOwuOSEv0HQZBedex6TX8qDFj U8AUO7LvmrHnCeBYDrfdgnU+8sY4LzZKkx2oKY956b12hUiIt6X+jwEJju/jdb+L i/L5fb8SM/lQYOE3jnuAlEKPqJTQIwptHMn27gKJ7rfY2/2zTupXGGAQNAn6WO2U PNhcmNRzTklL/LYUPvG93IaF3qmNk6EBdd5LlAWOGhWdKwvaQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeDYpzoYsYI9dXKZM7a9FPfWR5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvYTJjNWViN2QtMzcxNS0z ZWUwLTk4OGMtZTUxY2ZiNTdhOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHF+kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5EoM7wT5YzG6snsUFWO6rTH7+0PWCQJvmpdSvOJluI6wCHp0LOmnui jwc/LPM/jNZu7GmD+naF+WkvlJBTqxuc5NQFCEQprpvciIgs/23nuFMGJZgvGb93 9I4DlAP1jayZVQCHXPzveD74gRvMduwIaDA/lUtvRMiwIhrRRv5HQ+wAuPelk9Lt DjGgro6h9HP32kgLmYUhBQ/ClaL++CwowM+5mS/eq6tZYDRBjUpcAXtrEUTOiUsk oOIEoTUS1EPRHvphsiafXZadsVqqe4owwxc0UYocalV64En5HY0VLa9z5huP7/rU cJonaS+9PbzogO+hxjQg6YJoDePuMU8= -----END CERTIFICATE-----Generated at Mon Jul 28 22:11:32 2025 by rpki-client