$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/a8d8523f-9122-37fe-9c88-76ef8274c2b3.roa File: a8d8523f-9122-37fe-9c88-76ef8274c2b3.roa (raw, json) Hash identifier: 9JM4onUBcFPPS+QXXeXMmJ4NEojk2vSv4wNliSEPQYk= Subject key identifier: A4:9D:C5:25:DA:6F:E4:4A:D3:8C:22:7C:03:05:FD:9E:D3:34:19:0B Certificate issuer: /CN=566ffb02-1248-4101-8962-6e8672a404b9 Certificate serial: 010D0C9F4328584AF5215800B1B3ECE0CAE6A4A0 Authority key identifier: 62:D9:F3:A3:55:BC:69:72:DF:8A:C4:89:BB:06:EC:49:3E:F2:8C:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/a8d8523f-9122-37fe-9c88-76ef8274c2b3.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 400834 IP address blocks: 23.131.44.0/24 maxlen: 24 2602:f760::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/566ffb02-1248-4101-8962-6e8672a404b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/566ffb02-1248-4101-8962-6e8672a404b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:58:00:b1:b3:ec:e0:ca:e6:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566ffb02-1248-4101-8962-6e8672a404b9 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=d0ff4def-19e1-4bf8-b86c-e35a1895c48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:96:9e:25:1a:5b:75:02:47:6e:5f:22:93: a6:73:b5:08:62:9b:6c:31:69:74:fb:59:7a:a9:52: 67:9f:e9:fd:42:9e:1b:ca:d6:59:1d:8c:ea:d7:cb: 65:72:6b:80:2c:1d:fb:de:eb:20:b8:b7:c4:33:c1: b4:02:08:94:41:3c:7d:cc:b1:35:18:96:53:20:23: 8f:41:db:3b:52:42:92:9a:63:6a:90:a3:ad:6c:30: 47:08:8f:26:ea:6f:df:77:2d:9f:71:86:18:d2:4b: 4d:c2:9e:5d:e1:5e:4e:3d:5b:f5:f5:da:12:ed:50: 8d:bd:55:eb:4f:41:17:02:e0:5c:10:fd:8f:6e:fc: 33:91:3a:b1:56:2c:95:09:d0:dd:ad:d7:ed:41:a8: 56:69:84:ad:6f:42:18:d6:e8:7a:ac:24:e4:ba:74: ac:61:5b:e7:3b:bf:2b:9e:78:f0:0d:0a:b9:78:7e: fb:cc:1f:0f:9b:4b:99:64:9d:17:3b:c7:35:2a:24: 88:e3:6f:c2:6b:6a:72:b9:7b:d3:14:b2:67:1b:fe: e4:ce:78:ef:4a:94:5d:ae:12:06:a3:c7:43:b5:46: d4:76:28:cd:ce:57:29:cd:7e:61:df:ba:9e:87:9d: 69:8e:48:cb:18:c6:b5:aa:f4:96:17:7f:70:2d:d9: 95:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9D:C5:25:DA:6F:E4:4A:D3:8C:22:7C:03:05:FD:9E:D3:34:19:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/a8d8523f-9122-37fe-9c88-76ef8274c2b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/566ffb02-1248-4101-8962-6e8672a404b9.crl X509v3 Authority Key Identifier: keyid:62:D9:F3:A3:55:BC:69:72:DF:8A:C4:89:BB:06:EC:49:3E:F2:8C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9.cer sbgp-ipAddrBlock: critical IPv4: 23.131.44.0/24 IPv6: 2602:f760::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:dc:91:c5:47:f1:a9:8c:df:76:5f:a4:30:9a:5a:27:89:d5: 5a:2d:91:e0:ae:d8:b7:5f:cb:0f:dc:52:d1:43:a2:89:bf:7a: 4b:3d:7f:9c:3f:fc:3e:00:25:91:9b:8a:71:31:d7:c5:39:ae: ad:79:12:39:35:fa:b3:07:ff:5c:f0:01:35:95:33:f4:42:5e: c1:78:7a:17:d7:8f:13:20:cd:3a:4c:25:d7:48:d3:63:5e:bd: c9:35:58:88:f2:2d:bd:e7:86:4e:60:5a:af:e2:91:04:0b:1e: 0a:f5:7b:04:27:4b:85:ff:4c:b7:7a:8e:79:fc:b4:74:3f:4e: b4:07:b0:a3:dc:82:0a:78:4e:d0:2d:9d:cf:cb:f2:fc:31:25: 84:14:7d:42:60:61:a8:d2:f7:1e:0d:15:de:6d:30:ca:8c:7f: 72:7d:e0:75:9b:6f:32:f0:f3:a3:83:f4:bb:41:f8:48:ad:80: 79:bc:25:2c:e9:d4:c7:73:2b:19:ef:19:e7:3a:b9:4a:2d:1b: be:7d:49:cb:df:04:8f:11:48:eb:8f:2e:53:df:a4:35:cf:c9: 04:12:51:c0:c7:ea:1b:96:57:93:98:b3:a6:9b:c8:d8:3c:20: 59:49:ca:b8:e8:fe:92:2a:af:16:13:89:a1:d3:16:09:90:e9: c5:40:a2:27 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEr1IVgAsbPs4MrmpKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTY2ZmZiMDItMTI0OC00MTAxLTg5NjItNmU4NjcyYTQw NGI5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDBmZjRkZWYtMTllMS00YmY4LWI4NmMtZTM1YTE4OTVjNDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwiWniUaW3UCR25fIpOmc7UIYptsMWl0+1l6 qVJnn+n9Qp4bytZZHYzq18tlcmuALB373usguLfEM8G0AgiUQTx9zLE1GJZTICOP Qds7UkKSmmNqkKOtbDBHCI8m6m/fdy2fcYYY0ktNwp5d4V5OPVv19doS7VCNvVXr T0EXAuBcEP2PbvwzkTqxViyVCdDdrdftQahWaYStb0IY1uh6rCTkunSsYVvnO78r nnjwDQq5eH77zB8Pm0uZZJ0XO8c1KiSI42/Ca2pyuXvTFLJnG/7kznjvSpRdrhIG o8dDtUbUdijNzlcpzX5h37qeh51pjkjLGMa1qvSWF39wLdmVbwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKSdxSXab+RK04wifAMF/Z7TNBkLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81NjZm ZmIwMi0xMjQ4LTQxMDEtODk2Mi02ZTg2NzJhNDA0YjkvYThkODUyM2YtOTEyMi0z N2ZlLTljODgtNzZlZjgyNzRjMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTY2ZmZiMDItMTI0OC00MTAxLTg5 NjItNmU4NjcyYTQwNGI5LzU2NmZmYjAyLTEyNDgtNDEwMS04OTYyLTZlODY3MmE0 MDRiOS5jcmwwHwYDVR0jBBgwFoAUYtnzo1W8aXLfisSJuwbsST7yjHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81NjZmZmIwMi0xMjQ4LTQxMDEtODk2Mi02ZTg2 NzJhNDA0YjkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4MsMA4E AgACMAgDBgQmAvdgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAp3JHFR/GpjN92X6QwmlonidVaLZHgrti3 X8sP3FLRQ6KJv3pLPX+cP/w+ACWRm4pxMdfFOa6teRI5NfqzB/9c8AE1lTP0Ql7B eHoX148TIM06TCXXSNNjXr3JNViI8i2954ZOYFqv4pEECx4K9XsEJ0uF/0y3eo55 /LR0P060B7Cj3IIKeE7QLZ3Py/L8MSWEFH1CYGGo0vceDRXebTDKjH9yfeB1m28y 8POjg/S7QfhIrYB5vCUs6dTHcysZ7xnnOrlKLRu+fUnL3wSPEUjrjy5T36Q1z8kE ElHAx+oblleTmLOmm8jYPCBZScq46P6SKq8WE4mh0xYJkOnFQKIn -----END CERTIFICATE-----Generated at Tue Aug 26 10:01:20 2025 by rpki-client