$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa File: a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa (raw, json) Hash identifier: NMrICWwZUyR/L6ockVBWK/guM/WcofL9deTPs2S9UoI= Subject key identifier: 25:26:C8:82:41:56:47:BB:D5:5C:AA:A6:C6:39:6F:EA:EC:87:DA:CB Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584EBB11BE23A0048C7284B5C280 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 5645 IP address blocks: 23.233.0.0/17 maxlen: 17 23.233.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:be:23:a0:04:8c:72:84:b5:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=1d5f8f94-0608-4b5d-a314-3c9b2a00b4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:25:68:25:fb:84:43:08:4c:21:6c:83:47: ef:a0:e3:00:33:eb:07:c1:55:27:b0:d5:aa:f2:6b: 9e:49:0b:b7:6b:c3:87:78:c3:3f:60:57:cd:9c:b5: 3c:fe:aa:82:75:92:95:80:52:16:c7:1b:11:e7:fa: 23:e3:97:81:5b:d9:b6:29:b9:ed:fd:5d:2c:8a:b4: fc:b4:1e:70:ff:54:2c:bb:68:62:3a:f2:64:cd:20: cf:84:4f:95:ab:f2:af:c0:16:e5:35:92:16:6f:66: 22:98:af:8e:4d:98:d5:9e:9e:13:ed:8a:3f:06:c7: ae:fb:27:da:89:65:55:66:7c:7e:d6:a1:1f:78:27: 44:b4:b3:ee:9d:8a:02:23:c1:bf:c6:2d:86:21:5f: 9d:63:4a:41:07:59:c4:f3:57:08:04:fb:a8:69:d8: 07:a4:95:18:7d:8f:d7:62:c5:c1:89:b4:21:3f:3f: ea:58:1a:d4:50:58:c5:bd:df:52:8c:eb:6c:2e:ee: 68:4b:c5:7b:b4:ea:9f:20:b4:6f:3d:9b:6e:f5:8c: db:7c:4f:44:bc:cd:11:6e:05:5a:ad:1f:d4:ca:d4: 4f:0f:c7:01:36:e2:c3:c6:b4:63:41:f3:52:a1:03: 9b:69:28:0b:67:d0:a6:64:6b:e8:2d:57:46:fa:06: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:26:C8:82:41:56:47:BB:D5:5C:AA:A6:C6:39:6F:EA:EC:87:DA:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 23.233.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:cb:e2:c3:e7:0b:e6:00:15:b5:fc:b9:25:a9:3a:1e:3c:95: ff:f1:7b:8c:16:d2:79:65:db:c9:3c:a7:c4:07:93:62:b1:9b: 64:59:6b:d1:25:14:a7:b7:ce:a8:f3:ee:d3:97:c5:e3:4a:c6: 63:a0:f3:51:80:4c:26:00:d7:ac:db:bd:f5:e3:15:87:cf:26: f3:f5:33:44:29:b2:a6:67:37:bb:64:20:06:17:d0:1b:8a:3a: 93:05:9a:5b:bb:d8:57:70:71:e2:4d:ab:ce:6b:4e:aa:85:52: b4:e3:81:b0:46:a2:d6:da:15:2f:0d:3f:6b:95:aa:f2:d6:15: 7d:84:ee:5b:ef:86:da:a8:0b:60:c9:6f:79:a4:dd:2f:41:e1: 35:6f:c4:cd:b6:5e:b3:02:78:56:b5:d0:09:97:69:4e:65:3c: f7:d4:08:d3:44:32:48:20:a3:86:f7:d1:1a:1a:40:c9:a7:a9: 2d:60:da:a8:d3:6e:f8:8c:4a:b4:2e:15:6f:42:c4:a5:a2:40: ae:42:8d:1f:39:c5:18:7b:65:25:15:03:9d:bc:1b:76:42:d9: cd:5e:bc:52:30:32:9b:e3:51:a9:d5:9c:41:2d:65:2e:b1:76: 7f:d8:1f:f5:93:25:34:87:b0:5e:1f:4c:08:20:d4:29:e2:80: b3:25:03:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67Eb4joASMcoS1woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk MWQ1ZjhmOTQtMDYwOC00YjVkLWEzMTQtM2M5YjJhMDBiNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvAlaCX7hEMITCFsg0fvoOMAM+sHwVUnsNWq 8mueSQu3a8OHeMM/YFfNnLU8/qqCdZKVgFIWxxsR5/oj45eBW9m2Kbnt/V0sirT8 tB5w/1Qsu2hiOvJkzSDPhE+Vq/KvwBblNZIWb2YimK+OTZjVnp4T7Yo/Bseu+yfa iWVVZnx+1qEfeCdEtLPunYoCI8G/xi2GIV+dY0pBB1nE81cIBPuoadgHpJUYfY/X YsXBibQhPz/qWBrUUFjFvd9SjOtsLu5oS8V7tOqfILRvPZtu9YzbfE9EvM0RbgVa rR/UytRPD8cBNuLDxrRjQfNSoQObaSgLZ9CmZGvoLVdG+gbZGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUmyIJBVke71VyqpsY5b+rsh9rLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvYTJjNWViN2QtMzcxNS0z ZWUwLTk4OGMtZTUxY2ZiNTdhOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHF+kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbL4sPnC+YAFbX8uSWpOh48lf/xe4wW0nll28k8p8QHk2Kxm2RZa9El FKe3zqjz7tOXxeNKxmOg81GATCYA16zbvfXjFYfPJvP1M0QpsqZnN7tkIAYX0BuK OpMFmlu72FdwceJNq85rTqqFUrTjgbBGotbaFS8NP2uVqvLWFX2E7lvvhtqoC2DJ b3mk3S9B4TVvxM22XrMCeFa10AmXaU5lPPfUCNNEMkggo4b30RoaQMmnqS1g2qjT bviMSrQuFW9CxKWiQK5CjR85xRh7ZSUVA528G3ZC2c1evFIwMpvjUanVnEEtZS6x dn/YH/WTJTSHsF4fTAgg1CnigLMlA9Y= -----END CERTIFICATE-----Generated at Wed Sep 2 18:04:46 2026 by rpki-client