$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/ef7ef521-3a86-32cd-b3c1-40e756b0267f.roa File: ef7ef521-3a86-32cd-b3c1-40e756b0267f.roa (raw, json) Hash identifier: sPljrlMnFbx6ab0iz5x5mLQWpD3QDueA2ThvgrIGUII= Subject key identifier: 3A:C1:95:04:75:29:14:9A:DB:E9:8B:FA:B8:85:97:04:E9:15:5D:6C Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F43285849B6DF5AC3FE2E5C2A15B6FF40 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/ef7ef521-3a86-32cd-b3c1-40e756b0267f.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 198376 IP address blocks: 45.62.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:5a:c3:fe:2e:5c:2a:15:b6:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=c7c1f3c9-95de-4b6d-8ae5-beb44bcf64f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:9e:78:a7:e0:33:ae:1d:99:8b:f6:a1:5e: c8:65:1c:58:47:fc:ee:34:2a:f5:57:0b:65:88:cc: f1:a9:ce:0f:52:cf:e3:3d:e4:d7:57:07:1d:c8:e8: db:62:58:0c:94:20:88:e6:ef:b0:1d:58:df:88:e7: b7:b9:dc:ec:fb:61:c6:55:4e:e7:85:97:70:ba:48: 20:bc:4c:59:16:32:d1:25:22:a6:ef:5e:9f:20:26: 3a:8d:58:12:38:22:e5:e3:d1:da:eb:97:b3:8b:8c: 81:9a:3c:be:0d:24:16:db:7a:d0:33:ed:35:54:9c: 8e:93:ff:60:a7:db:8b:56:70:ef:8f:5d:e4:a8:d6: 00:e9:20:4d:9f:ff:ad:75:18:3a:cd:e3:96:03:de: 31:70:8b:27:c8:79:72:39:fd:89:2f:22:b9:4f:38: 8c:bb:ff:3d:24:ba:b2:75:df:96:2c:96:33:2b:28: 4a:c1:73:0b:ef:75:03:56:a2:37:29:9c:cf:5b:66: 35:19:92:a7:3d:0f:6e:6a:2b:30:da:3e:16:ac:2b: 9f:52:fb:7d:58:10:ac:66:63:b6:52:88:78:66:c5: 8d:16:3c:4e:1f:08:45:53:03:ac:08:44:02:8e:64: 3d:94:ed:a2:ec:02:f3:d8:15:d4:71:40:3c:83:9f: 1d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C1:95:04:75:29:14:9A:DB:E9:8B:FA:B8:85:97:04:E9:15:5D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/ef7ef521-3a86-32cd-b3c1-40e756b0267f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.62.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:16:cc:4c:b6:79:0d:c7:94:db:c8:78:55:c0:ee:a2:4f:2d: f3:72:49:f3:37:b8:aa:4e:2e:54:b2:81:4f:8c:b0:ac:bc:2c: 29:55:e9:1b:ff:ee:96:32:5d:11:21:be:24:38:2d:42:4f:e9: 9f:0a:97:0f:5e:74:a3:5c:f5:18:70:ee:14:7d:25:2a:4d:c1: d9:96:58:25:61:5d:2d:9a:5f:92:71:20:31:1e:55:b8:b7:0f: e0:b1:0e:10:92:4b:79:c1:ba:ce:36:c8:e9:f9:60:96:3d:f6: e1:f2:42:ae:52:07:1e:91:1e:53:f8:a9:fc:b8:6b:9f:e2:be: 26:d2:92:00:86:cf:78:3f:28:9f:bd:30:4a:26:28:5d:f2:c3: 83:56:55:7a:7e:61:2c:b0:f7:4c:41:da:ff:94:3b:94:bf:16: e3:56:6b:4b:98:4c:cf:99:99:50:e6:69:0c:1d:f8:ee:81:3c: 61:98:3e:6d:cb:87:23:ba:1d:78:b3:11:ef:60:f0:b6:69:0b: e0:24:02:0e:4b:9f:92:b0:2a:44:e7:9c:6e:76:4f:54:e9:21: 9b:69:ae:82:7a:c5:e5:9c:4a:c2:92:40:39:6d:02:62:67:55: 87:a3:dc:fc:d4:5a:d8:a4:42:f7:10:c7:59:89:89:bc:bd:79: b4:29:39:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm231rD/i5cKhW2/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk YzdjMWYzYzktOTVkZS00YjZkLThhZTUtYmViNDRiY2Y2NGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjCeeKfgM64dmYv2oV7IZRxYR/zuNCr1Vwtl iMzxqc4PUs/jPeTXVwcdyOjbYlgMlCCI5u+wHVjfiOe3udzs+2HGVU7nhZdwukgg vExZFjLRJSKm716fICY6jVgSOCLl49Ha65ezi4yBmjy+DSQW23rQM+01VJyOk/9g p9uLVnDvj13kqNYA6SBNn/+tdRg6zeOWA94xcIsnyHlyOf2JLyK5TziMu/89JLqy dd+WLJYzKyhKwXML73UDVqI3KZzPW2Y1GZKnPQ9uaisw2j4WrCufUvt9WBCsZmO2 Uoh4ZsWNFjxOHwhFUwOsCEQCjmQ9lO2i7ALz2BXUcUA8g58duQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrBlQR1KRSa2+mL+riFlwTpFV1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvZWY3ZWY1MjEtM2E4Ni0z MmNkLWIzYzEtNDBlNzU2YjAyNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUWzEy2eQ3HlNvIeFXA7qJPLfNySfM3uKpOLlSygU+MsKy8LClV6Rv/ 7pYyXREhviQ4LUJP6Z8Klw9edKNc9Rhw7hR9JSpNwdmWWCVhXS2aX5JxIDEeVbi3 D+CxDhCSS3nBus42yOn5YJY99uHyQq5SBx6RHlP4qfy4a5/ivibSkgCGz3g/KJ+9 MEomKF3yw4NWVXp+YSyw90xB2v+UO5S/FuNWa0uYTM+ZmVDmaQwd+O6BPGGYPm3L hyO6HXizEe9g8LZpC+AkAg5Ln5KwKkTnnG52T1TpIZtproJ6xeWcSsKSQDltAmJn VYej3PzUWtikQvcQx1mJiby9ebQpOS0= -----END CERTIFICATE-----Generated at Sun May 11 06:53:32 2025 by rpki-client