
$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS23532.roa
File: AS23532.roa (raw, json)
Hash identifier: fEcmUw5WPBoLuc/+LMVU9SGdzlO2V60FHRFPrBTD2Ac=
Subject key identifier: 7E:35:2B:79:BB:70:F6:8F:E7:F2:BB:6B:31:DF:66:31:5A:83:44:13
Certificate issuer: /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial: 293EB396987769E4567817964A0473E263EE02D5
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS23532.roa
Signing time: Wed 06 May 2026 07:17:19 +0000
ROA not before: Wed 06 May 2026 07:12:19 +0000
ROA not after: Wed 05 May 2027 07:17:19 +0000
asID: 23532
IP address blocks: 207.180.30.0/24 maxlen: 24
207.180.56.0/24 maxlen: 24
207.180.59.0/24 maxlen: 24
207.180.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 08 May 2026 03:40:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:3e:b3:96:98:77:69:e4:56:78:17:96:4a:04:73:e2:63:ee:02:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Validity
Not Before: May 6 07:12:19 2026 GMT
Not After : May 5 07:17:19 2027 GMT
Subject: CN=7E352B79BB70F68FE7F2BB6B31DF66315A834413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:ca:75:24:da:40:bc:ac:21:1d:19:f2:c3:
f6:fa:02:07:b7:3a:4e:a2:b6:f8:28:e4:ec:f1:a1:
c0:51:5f:5a:4d:24:f1:1e:28:a7:ba:69:ed:39:d2:
63:13:fb:b0:f1:62:30:3f:08:00:c4:3c:3f:82:49:
7f:42:37:68:11:35:4a:f1:15:fc:0d:73:6f:aa:4a:
82:26:09:34:1b:e2:c6:cc:cf:ae:17:75:29:f4:f3:
c9:13:31:9d:3e:ed:c1:38:c9:a3:01:25:d7:4a:b5:
2e:49:c4:31:6b:78:55:4d:a0:5f:de:dc:b7:5e:75:
2b:0b:16:ea:dc:e4:c4:2a:e2:7e:c6:99:07:6a:de:
a2:4e:58:11:f5:54:f0:e7:d9:6f:5d:11:7b:48:84:
b2:8d:28:db:ee:c8:e1:b2:51:d8:07:93:ae:2c:0f:
61:19:7b:c4:ff:c4:18:34:58:c1:0c:b8:92:91:1b:
9e:9c:39:cc:eb:70:01:c7:22:45:99:65:68:a2:6c:
46:b1:bc:9e:e9:48:a9:d8:9d:50:8c:db:1b:52:a9:
9d:8f:09:35:ae:30:b9:37:bf:95:e5:28:24:75:93:
6b:e0:53:19:12:e1:3f:47:ea:de:02:10:2a:59:83:
cb:29:16:8b:46:ef:3f:f0:ba:3d:42:74:7d:57:20:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:35:2B:79:BB:70:F6:8F:E7:F2:BB:6B:31:DF:66:31:5A:83:44:13
X509v3 Authority Key Identifier:
keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS23532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.180.30.0/24
207.180.56.0/24
207.180.59.0/24
207.180.63.0/24
Signature Algorithm: sha256WithRSAEncryption
60:81:9e:5b:8a:0a:2e:f2:b7:b8:c9:77:83:d2:40:62:ab:fc:
1b:74:8b:fa:85:68:49:07:63:3b:c7:2a:2f:24:c7:f1:63:de:
28:ae:b4:ec:22:1b:0e:8b:aa:f1:ef:30:5d:ca:23:9c:2d:3a:
98:7a:8f:aa:f7:71:c4:a1:ad:6a:26:ea:64:50:6c:bc:42:a7:
72:f9:79:2e:c6:8c:04:a1:ca:16:a7:41:06:80:2f:6b:76:21:
1e:75:8b:82:97:92:5e:b0:2b:8e:8e:a4:7f:ef:16:10:8f:6d:
4c:a3:77:43:c6:74:05:6e:46:2c:ae:f5:3e:2c:0c:25:3f:cf:
6e:b2:4f:cc:9e:ba:f6:6d:bb:35:b1:fd:2d:ca:78:81:b1:8e:
27:14:1f:d8:6d:2f:b4:a7:8a:f1:2c:2a:e2:e2:b5:61:6d:ea:
87:37:7e:30:a2:be:6c:27:4c:d5:fd:9c:81:1d:04:4d:0d:c6:
2a:3a:90:16:a9:61:8b:04:4d:ca:bd:df:ce:8d:49:6a:17:15:
26:72:7c:1b:b6:dc:03:10:7a:d8:94:df:78:3c:e8:c2:ce:b9:
31:39:5f:ea:39:ce:ad:c6:81:7c:a7:b9:f4:1b:5b:c9:ed:54:
b3:f2:0e:a6:a8:ab:33:53:f7:14:0f:07:11:3f:a0:fa:f0:98:
67:3b:cc:35
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIUKT6zlph3aeRWeBeWSgRz4mPuAtUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTA2MDcxMjE5WhcNMjcwNTA1MDcxNzE5
WjAzMTEwLwYDVQQDEyg3RTM1MkI3OUJCNzBGNjhGRTdGMkJCNkIzMURGNjYzMTVB
ODM0NDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseLKdSTaQLys
IR0Z8sP2+gIHtzpOorb4KOTs8aHAUV9aTSTxHiinumntOdJjE/uw8WIwPwgAxDw/
gkl/QjdoETVK8RX8DXNvqkqCJgk0G+LGzM+uF3Up9PPJEzGdPu3BOMmjASXXSrUu
ScQxa3hVTaBf3ty3XnUrCxbq3OTEKuJ+xpkHat6iTlgR9VTw59lvXRF7SISyjSjb
7sjhslHYB5OuLA9hGXvE/8QYNFjBDLiSkRuenDnM63ABxyJFmWVoomxGsbye6Uip
2J1QjNsbUqmdjwk1rjC5N7+V5SgkdZNr4FMZEuE/R+reAhAqWYPLKRaLRu8/8Lo9
QnR9VyAxqQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFH41K3m7cPaP5/K7azHfZjFa
g0QTMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzIzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAz7QeAwQAz7Q4AwQAz7Q7AwQAz7Q/
MA0GCSqGSIb3DQEBCwUAA4IBAQBggZ5bigou8re4yXeD0kBiq/wbdIv6hWhJB2M7
xyovJMfxY94orrTsIhsOi6rx7zBdyiOcLTqYeo+q93HEoa1qJupkUGy8Qqdy+Xku
xowEocoWp0EGgC9rdiEedYuCl5JesCuOjqR/7xYQj21Mo3dDxnQFbkYsrvU+LAwl
P89usk/Mnrr2bbs1sf0tyniBsY4nFB/YbS+0p4rxLCri4rVhbeqHN34wor5sJ0zV
/ZyBHQRNDcYqOpAWqWGLBE3Kvd/OjUlqFxUmcnwbttwDEHrYlN94POjCzrkxOV/q
Oc6txoF8p7n0G1vJ7VSz8g6mqKszU/cUDwcRP6D68JhnO8w1
-----END CERTIFICATE-----
Generated at Thu May 7 04:12:35 2026 by rpki-client