$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/40861cc2-6ab5-33be-9885-72bc1d0d77f5.roa File: 40861cc2-6ab5-33be-9885-72bc1d0d77f5.roa (raw, json) Hash identifier: 40b4LwMLYBLlLrIK5jFm1IgRPBOGpHMQ8h4vTuLIOGo= Subject key identifier: 55:03:7C:99:D9:75:63:92:E2:D7:2C:C9:85:3E:2C:F7:64:4F:0C:A6 Certificate issuer: /CN=566ffb02-1248-4101-8962-6e8672a404b9 Certificate serial: 010D0C9F4328584B44B1C34C341F56562DB25440 Authority key identifier: 62:D9:F3:A3:55:BC:69:72:DF:8A:C4:89:BB:06:EC:49:3E:F2:8C:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/40861cc2-6ab5-33be-9885-72bc1d0d77f5.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 399861 IP address blocks: 23.131.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/566ffb02-1248-4101-8962-6e8672a404b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/566ffb02-1248-4101-8962-6e8672a404b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c3:4c:34:1f:56:56:2d:b2:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566ffb02-1248-4101-8962-6e8672a404b9 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=49bf33ee-40b2-4ffb-bd1b-1cd3c3ef1b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:bc:71:8f:69:99:db:5d:52:f3:a9:74:75: 7d:d0:c1:38:d4:a6:8c:4e:df:b3:c7:98:75:4f:a9: cd:32:27:cf:32:a5:59:43:c4:84:9e:91:fe:9a:f9: 91:b7:a0:d5:42:f3:aa:92:83:e3:1e:1a:91:6d:20: 2f:3d:fd:13:80:f6:60:c0:05:53:0d:e6:6f:c6:5d: c3:a8:80:41:58:9d:98:a4:7c:69:de:06:12:19:f1: db:69:de:59:d6:46:72:d3:7e:2d:a4:78:53:61:57: 27:49:45:29:3a:a9:cb:8d:e2:c7:6b:36:c5:57:a1: 66:79:b1:24:5f:b9:89:59:96:95:6a:37:ed:0e:a3: d2:cb:f4:ab:56:61:66:f1:b0:41:17:65:c1:21:9b: a7:82:32:22:66:8d:f2:12:ab:c5:7a:90:37:e5:1b: 73:aa:d6:b2:d7:76:40:23:93:e1:af:fa:b9:e5:fc: de:06:ff:40:19:b8:16:da:c0:a1:c0:31:ef:97:22: 30:06:39:5c:a6:70:08:64:fd:0f:41:6d:d4:48:41: 21:21:46:11:4a:4a:95:7f:c7:be:09:47:23:b4:6e: 68:33:b4:47:e8:68:08:3d:ca:6d:e0:14:c9:b5:c0: fc:d0:e7:9d:1e:8b:25:cc:76:21:d7:3e:d8:db:8f: 20:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:03:7C:99:D9:75:63:92:E2:D7:2C:C9:85:3E:2C:F7:64:4F:0C:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/40861cc2-6ab5-33be-9885-72bc1d0d77f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/566ffb02-1248-4101-8962-6e8672a404b9.crl X509v3 Authority Key Identifier: keyid:62:D9:F3:A3:55:BC:69:72:DF:8A:C4:89:BB:06:EC:49:3E:F2:8C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9.cer sbgp-ipAddrBlock: critical IPv4: 23.131.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a5:99:5b:2b:e4:55:7e:9c:bc:64:b9:4a:fc:09:79:4a:74: 76:88:35:d6:8c:9a:61:4f:f7:a2:39:38:4f:74:6c:b9:3a:da: a7:e4:76:64:10:d3:b0:b3:71:4c:dc:84:fc:e2:f0:50:2e:ec: 2c:cf:d9:e7:54:38:fe:9c:ed:3a:ec:11:d5:a3:2a:47:4a:92: 0d:bd:24:12:30:6f:aa:e4:1d:0e:9a:01:36:fa:59:ac:ef:a7: 5c:a5:60:73:07:f2:db:83:c9:82:30:5c:29:24:3d:f7:aa:00: cd:45:e0:95:20:50:c9:19:b8:75:e0:f0:2c:9b:f8:73:80:3c: 9c:a7:2b:82:3d:e9:a9:d1:17:46:5d:3b:af:ee:cf:8a:29:b4: 5d:9b:69:a4:7e:9c:18:b3:20:7d:40:7d:08:c6:6f:ad:23:78: 6d:a6:fb:37:15:57:d0:fc:0d:fc:96:65:c5:d1:10:51:ba:3a: 13:c4:ef:73:3e:ca:a6:61:75:23:a9:c9:e1:8d:7c:bf:bb:24: d6:70:c1:1e:7f:99:3d:6d:b5:b5:c0:68:8f:c9:82:f4:94:70: 53:dc:2e:19:a1:55:76:bf:e9:f4:9a:83:33:8a:37:ce:5b:85: bb:a1:e4:e6:74:2d:1e:34:8a:a3:ca:64:3e:cc:ce:5d:ec:84: 22:ff:ec:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscNMNB9WVi2yVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTY2ZmZiMDItMTI0OC00MTAxLTg5NjItNmU4NjcyYTQw NGI5MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk NDliZjMzZWUtNDBiMi00ZmZiLWJkMWItMWNkM2MzZWYxYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1W8cY9pmdtdUvOpdHV90ME41KaMTt+zx5h1 T6nNMifPMqVZQ8SEnpH+mvmRt6DVQvOqkoPjHhqRbSAvPf0TgPZgwAVTDeZvxl3D qIBBWJ2YpHxp3gYSGfHbad5Z1kZy034tpHhTYVcnSUUpOqnLjeLHazbFV6FmebEk X7mJWZaVajftDqPSy/SrVmFm8bBBF2XBIZungjIiZo3yEqvFepA35Rtzqtay13ZA I5Phr/q55fzeBv9AGbgW2sChwDHvlyIwBjlcpnAIZP0PQW3USEEhIUYRSkqVf8e+ CUcjtG5oM7RH6GgIPcpt4BTJtcD80OedHoslzHYh1z7Y248gQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUDfJnZdWOS4tcsyYU+LPdkTwymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81NjZm ZmIwMi0xMjQ4LTQxMDEtODk2Mi02ZTg2NzJhNDA0YjkvNDA4NjFjYzItNmFiNS0z M2JlLTk4ODUtNzJiYzFkMGQ3N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTY2ZmZiMDItMTI0OC00MTAxLTg5 NjItNmU4NjcyYTQwNGI5LzU2NmZmYjAyLTEyNDgtNDEwMS04OTYyLTZlODY3MmE0 MDRiOS5jcmwwHwYDVR0jBBgwFoAUYtnzo1W8aXLfisSJuwbsST7yjHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81NjZmZmIwMi0xMjQ4LTQxMDEtODk2Mi02ZTg2 NzJhNDA0YjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4MsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2lmVsr5FV+nLxkuUr8CXlKdHaINdaMmmFP96I5OE90bLk62qfkdmQQ 07CzcUzchPzi8FAu7CzP2edUOP6c7TrsEdWjKkdKkg29JBIwb6rkHQ6aATb6Wazv p1ylYHMH8tuDyYIwXCkkPfeqAM1F4JUgUMkZuHXg8Cyb+HOAPJynK4I96anRF0Zd O6/uz4optF2baaR+nBizIH1AfQjGb60jeG2m+zcVV9D8DfyWZcXREFG6OhPE73M+ yqZhdSOpyeGNfL+7JNZwwR5/mT1ttbXAaI/JgvSUcFPcLhmhVXa/6fSagzOKN85b hbuh5OZ0LR40iqPKZD7Mzl3shCL/7JU= -----END CERTIFICATE-----Generated at Fri Oct 10 17:50:47 2025 by rpki-client