$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa File: a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa (raw, json) Hash identifier: ZkTm32v9y3O+JSEC8iEAZZnfTQaNFyN9qJCChprAoNo= Subject key identifier: 32:C3:42:45:30:BA:48:05:73:F9:D6:62:4C:95:1B:F0:9E:74:F2:02 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584F5E62C5899B5FEE006747EA40 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 5645 IP address blocks: 23.233.0.0/17 maxlen: 17 23.233.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c5:89:9b:5f:ee:00:67:47:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=5de52f90-e2f2-4994-8c45-da669179e5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7e:43:75:d0:7e:db:85:2b:72:00:ab:0f:33: b9:ac:c7:5e:24:37:b4:24:0b:5e:cd:64:13:fd:ec: b9:fb:0e:f4:df:71:a7:bb:7a:ca:61:65:28:88:01: bf:d9:e3:50:57:e6:1b:e0:7e:1b:19:e6:ae:20:b8: 42:88:19:66:62:0d:d6:b6:13:e8:19:cc:43:92:c3: c8:bf:c5:39:1a:48:94:a2:f3:9b:0a:74:35:05:1c: 6f:a3:56:e2:7b:22:bd:28:53:62:47:4f:d7:6f:e7: c8:42:58:27:19:91:f8:dc:b9:ea:60:c7:19:8d:93: aa:ec:91:d9:61:5a:2d:e0:e3:f8:1c:88:f3:19:b7: 32:1c:ae:5a:c6:db:92:32:b5:14:0b:62:f8:01:53: 06:1e:49:47:c9:35:09:0e:7c:66:4d:bb:6f:83:18: fa:83:70:13:91:cc:c6:30:ba:05:78:85:52:5b:65: 6a:fd:bd:03:ca:e6:82:97:c7:34:ac:d2:f8:72:0a: da:37:81:c0:f6:bd:ec:92:d7:9f:50:da:a5:01:2b: 13:d0:37:2c:28:f5:ed:ba:22:89:16:fa:6c:a1:c4: 3b:6e:33:00:4b:95:75:37:2f:b8:7e:13:9c:13:15: be:b3:d0:d2:96:b1:0e:98:59:9d:26:49:d1:71:5f: 21:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C3:42:45:30:BA:48:05:73:F9:D6:62:4C:95:1B:F0:9E:74:F2:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 23.233.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:58:47:f6:c9:69:16:b5:fa:0a:21:86:c9:d8:87:b7:fe:2c: f8:f4:7f:b1:62:e2:12:ca:24:82:01:d1:14:d9:d5:85:2b:16: af:4d:9d:64:4b:aa:a1:85:ce:1d:09:18:77:82:70:24:ec:c3: f9:95:03:26:aa:1f:27:f3:6b:19:f0:7b:84:73:11:ca:d6:4b: 21:1f:f8:1f:b5:74:3a:e8:35:f4:22:f6:7c:49:0d:9b:52:2c: 55:38:a6:42:39:bf:95:ab:7a:a4:32:f7:1b:4b:b3:98:79:a5: 12:a1:a3:00:8c:50:7e:85:f8:10:d2:9a:38:77:54:17:05:8e: cb:62:05:7c:fc:e5:e1:7f:d9:b9:d8:b2:0a:ab:5f:b0:fb:15: a4:be:db:15:e0:a0:d9:f4:cd:20:ae:ae:cd:46:96:a4:bd:1f: 1f:45:14:9c:86:d6:3a:9f:5e:f2:08:a2:58:0e:db:65:25:1e: c6:eb:83:69:ab:c5:71:e5:15:d5:b4:29:05:d0:68:2a:80:a5: e7:c4:f4:e0:18:49:58:4c:e7:df:5f:56:a3:f3:3b:0e:fd:f2: 9d:38:7f:22:68:df:a2:0c:9c:41:9c:18:42:4f:89:e4:ac:15: e8:b6:8f:bd:31:0f:9e:3d:f3:11:d1:3f:c1:18:32:c3:b3:e6: 13:f5:ff:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsWJm1/uAGdH6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NWRlNTJmOTAtZTJmMi00OTk0LThjNDUtZGE2NjkxNzllNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo35DddB+24UrcgCrDzO5rMdeJDe0JAtezWQT /ey5+w7033Gnu3rKYWUoiAG/2eNQV+Yb4H4bGeauILhCiBlmYg3WthPoGcxDksPI v8U5GkiUovObCnQ1BRxvo1bieyK9KFNiR0/Xb+fIQlgnGZH43LnqYMcZjZOq7JHZ YVot4OP4HIjzGbcyHK5axtuSMrUUC2L4AVMGHklHyTUJDnxmTbtvgxj6g3ATkczG MLoFeIVSW2Vq/b0DyuaCl8c0rNL4cgraN4HA9r3sktefUNqlASsT0DcsKPXtuiKJ FvpsocQ7bjMAS5V1Ny+4fhOcExW+s9DSlrEOmFmdJknRcV8hRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLDQkUwukgFc/nWYkyVG/CedPICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvYTJjNWViN2QtMzcxNS0z ZWUwLTk4OGMtZTUxY2ZiNTdhOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHF+kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhYR/bJaRa1+gohhsnYh7f+LPj0f7Fi4hLKJIIB0RTZ1YUrFq9NnWRL qqGFzh0JGHeCcCTsw/mVAyaqHyfzaxnwe4RzEcrWSyEf+B+1dDroNfQi9nxJDZtS LFU4pkI5v5WreqQy9xtLs5h5pRKhowCMUH6F+BDSmjh3VBcFjstiBXz85eF/2bnY sgqrX7D7FaS+2xXgoNn0zSCurs1GlqS9Hx9FFJyG1jqfXvIIolgO22UlHsbrg2mr xXHlFdW0KQXQaCqApefE9OAYSVhM599fVqPzOw798p04fyJo36IMnEGcGEJPieSs Fei2j70xD5498xHRP8EYMsOz5hP1/2s= -----END CERTIFICATE-----Generated at Sun Oct 4 05:21:21 2026 by rpki-client