$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa File: a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa (raw, json) Hash identifier: onEII+5rXUEdpXePHkA8ubM+1MWnYQqhe1Lq2F7n2OI= Subject key identifier: 7E:B3:20:F1:C3:13:0E:DB:4F:1B:85:CC:89:36:C5:10:F5:AC:2B:30 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584B79BCBCDE297BFE0ACE09FA80 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 5645 IP address blocks: 23.233.0.0/17 maxlen: 17 23.233.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:bc:de:29:7b:fe:0a:ce:09:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=bcca9b0c-f5ff-4211-a5f9-1a31e8b83efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:45:29:0a:50:e9:13:cf:bd:0b:33:fe:f4: 57:a8:9f:db:6f:61:1d:f6:f8:76:83:e7:f9:b2:15: 9e:12:7f:b3:4b:c1:07:1e:ba:7d:b9:81:cd:86:ec: ac:fe:ec:ee:0a:11:06:66:46:20:09:45:10:af:38: 33:da:5c:fc:2b:36:f0:f6:60:db:16:ad:db:f0:99: c0:53:3d:46:d7:34:49:f4:49:4c:87:d9:80:71:f0: 25:77:44:b4:70:bb:fa:7a:05:7e:5b:d3:d8:2e:4a: 24:73:60:d6:74:02:82:5c:45:55:f2:fa:21:3d:bf: 89:2d:13:5e:8b:5a:75:8a:ae:d7:8e:05:d2:cf:18: 2d:30:35:2f:0f:48:19:ab:0a:24:a4:05:ba:e1:54: 82:18:08:78:e7:b5:84:9c:46:97:58:d5:13:1f:e2: a1:74:f0:24:4c:8f:f1:80:43:07:20:f7:6a:30:96: 22:89:f4:f3:c7:05:5b:50:37:eb:0e:23:0a:db:47: 29:f9:dd:c9:b5:c3:29:5d:e3:44:11:c3:c7:b2:64: 48:81:db:68:ec:fe:12:14:92:de:44:04:cc:24:82: 83:ae:ca:c9:94:b2:18:a3:be:53:74:bf:a1:a7:02: 45:27:05:61:63:f3:ff:dc:cb:10:83:05:4e:71:21: 3d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B3:20:F1:C3:13:0E:DB:4F:1B:85:CC:89:36:C5:10:F5:AC:2B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 23.233.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a2:19:57:f5:fd:2d:56:ea:5f:75:30:c0:a5:f4:2d:f1:2b: 55:40:ed:0a:84:23:63:21:ff:83:e6:74:6e:5d:df:d0:74:b3: 84:c5:70:95:1c:57:53:f9:63:1e:54:d2:9d:b3:d8:f1:12:a2: 52:81:52:56:7b:ac:63:12:59:e9:b0:81:40:72:d5:f6:b0:12: d0:9c:25:2e:85:4f:5b:c2:09:6e:dd:3a:9b:df:38:88:f7:f5: 8a:96:b3:8b:55:ee:3d:28:e3:90:79:8b:16:4f:b0:4c:1b:ba: 2a:b7:88:3b:83:b4:98:03:f7:88:b1:a9:a6:c6:5b:1f:56:00: e0:10:e8:20:45:d5:cd:f6:37:3e:9d:ac:fd:19:d0:0a:8b:f7: aa:9f:7d:ef:d4:2e:65:97:6b:37:1f:03:35:0c:62:43:f8:ed: 1c:c9:db:ee:5c:1f:9c:bc:29:49:da:20:dc:c2:8c:7b:26:58: 53:b1:2d:d3:ae:4c:27:19:61:ea:42:8f:13:89:be:37:d4:07: 7e:4b:24:31:b9:cb:f6:24:82:7b:92:63:5e:dd:b3:c6:8d:98: 12:7e:64:67:61:d2:19:cd:b0:1b:61:4e:57:33:91:05:90:24: 48:e4:c2:c9:10:6b:24:90:9d:7e:51:77:7c:e7:6e:06:bd:c7: ff:17:ef:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLzeKXv+Cs4J+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YmNjYTliMGMtZjVmZi00MjExLWE1ZjktMWEzMWU4YjgzZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLpFKQpQ6RPPvQsz/vRXqJ/bb2Ed9vh2g+f5 shWeEn+zS8EHHrp9uYHNhuys/uzuChEGZkYgCUUQrzgz2lz8Kzbw9mDbFq3b8JnA Uz1G1zRJ9ElMh9mAcfAld0S0cLv6egV+W9PYLkokc2DWdAKCXEVV8vohPb+JLRNe i1p1iq7XjgXSzxgtMDUvD0gZqwokpAW64VSCGAh457WEnEaXWNUTH+KhdPAkTI/x gEMHIPdqMJYiifTzxwVbUDfrDiMK20cp+d3JtcMpXeNEEcPHsmRIgdto7P4SFJLe RATMJIKDrsrJlLIYo75TdL+hpwJFJwVhY/P/3MsQgwVOcSE9eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6zIPHDEw7bTxuFzIk2xRD1rCswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvYTJjNWViN2QtMzcxNS0z ZWUwLTk4OGMtZTUxY2ZiNTdhOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHF+kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOiGVf1/S1W6l91MMCl9C3xK1VA7QqEI2Mh/4PmdG5d39B0s4TFcJUc V1P5Yx5U0p2z2PESolKBUlZ7rGMSWemwgUBy1fawEtCcJS6FT1vCCW7dOpvfOIj3 9YqWs4tV7j0o45B5ixZPsEwbuiq3iDuDtJgD94ixqabGWx9WAOAQ6CBF1c32Nz6d rP0Z0AqL96qffe/ULmWXazcfAzUMYkP47RzJ2+5cH5y8KUnaINzCjHsmWFOxLdOu TCcZYepCjxOJvjfUB35LJDG5y/YkgnuSY17ds8aNmBJ+ZGdh0hnNsBthTlczkQWQ JEjkwskQaySQnX5Rd3znbga9x/8X7z8= -----END CERTIFICATE-----Generated at Thu Oct 30 03:15:38 2025 by rpki-client