$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/ef7ef521-3a86-32cd-b3c1-40e756b0267f.roa File: ef7ef521-3a86-32cd-b3c1-40e756b0267f.roa (raw, json) Hash identifier: /h5C3RpOIsy/+pcfsIFzwFPPmUeS4U6PW0i9FTmFVxs= Subject key identifier: BA:59:63:D8:D2:DB:77:BB:85:29:97:B6:D5:21:30:81:F6:C6:2C:25 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584A963697D4BEAA289C7A176880 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/ef7ef521-3a86-32cd-b3c1-40e756b0267f.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 198376 IP address blocks: 45.62.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:97:d4:be:aa:28:9c:7a:17:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=a067e1ab-9fd0-4620-a2b9-0e43759f3cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:43:ec:94:44:31:b6:e7:72:0b:ea:dc:58:c3: 37:c5:fa:8a:37:2f:d4:fe:2d:9a:62:90:44:0a:3e: d5:84:50:80:2d:da:c1:ce:95:39:10:fc:ed:70:60: 08:15:bd:dc:dd:fe:36:33:73:6f:5b:84:0a:99:d3: 63:66:ba:d9:f9:19:a9:f6:f4:57:99:70:45:ce:94: 42:dd:a4:24:62:9a:1c:37:65:96:65:03:87:38:8d: ab:b2:4b:62:49:ec:0e:41:93:61:0f:d8:65:4c:4c: 19:ed:e0:7f:34:07:6c:4b:a3:0d:c0:60:3f:65:98: a0:43:05:ba:5a:45:40:6b:e5:94:dd:97:9c:53:76: ae:53:0a:57:ce:02:38:9e:78:19:a7:8d:bc:a2:1e: 1b:32:69:a2:9b:98:63:e6:73:d7:fd:9f:f8:08:6f: 9a:bc:fa:84:8a:88:ec:c6:83:9c:17:77:84:41:60: b2:14:b0:96:6b:56:6f:d7:8b:cd:ba:df:5a:c8:c3: eb:68:f1:03:d9:82:f2:95:a3:d6:b0:32:92:ed:90: 05:a2:20:6a:6f:90:ae:a8:f8:22:a7:dc:69:35:f1: 9f:70:47:a0:19:b3:b8:54:e7:dd:71:4a:0b:bd:f4: ba:b7:cf:9b:f7:92:12:54:7a:66:1d:01:4d:2c:22: 9b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:59:63:D8:D2:DB:77:BB:85:29:97:B6:D5:21:30:81:F6:C6:2C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/ef7ef521-3a86-32cd-b3c1-40e756b0267f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.62.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e4:d7:f5:62:3d:a1:9b:2d:be:26:34:1b:7c:f2:0f:96:43: 2c:5e:f2:65:d7:ff:d1:d6:57:6f:26:98:ec:20:02:4e:76:09: 36:83:26:28:1f:4b:74:95:e1:00:00:5b:6b:34:a8:a1:20:ca: c1:ee:ea:5c:e4:92:f3:0d:61:38:1e:0d:6c:81:91:56:b3:be: ef:cf:0c:c8:b0:d5:25:18:79:89:8c:b1:04:01:fa:38:ce:70: 63:3c:ba:51:f0:c8:5d:bb:fa:0c:dd:b8:38:a8:e0:a0:75:ac: 39:d4:e6:f6:4e:af:80:9c:81:c1:88:cd:bf:de:30:13:15:bc: 77:a4:80:ef:ea:1d:13:7a:86:65:a1:43:43:59:68:21:46:33: c6:04:13:00:23:77:47:b4:e8:68:15:ba:ac:8d:06:79:45:c4: 34:74:09:15:bf:bf:dc:28:d6:6e:13:9f:0e:d4:96:3d:c1:88: e0:16:0d:64:a7:a3:93:51:75:f0:2d:db:4c:2e:51:d1:44:8c: b2:fc:63:62:50:5d:72:33:3e:d4:26:b1:77:a8:23:1d:00:aa: 1d:12:a4:2e:02:c8:71:4b:5d:01:4b:ca:3d:60:07:06:66:a7: 3a:1b:48:bf:9b:a3:5a:ca:f1:0b:36:f3:7b:83:b9:17:6f:9f: e1:df:9d:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpfUvqoonHoXaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YTA2N2UxYWItOWZkMC00NjIwLWEyYjktMGU0Mzc1OWYzY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEPslEQxtudyC+rcWMM3xfqKNy/U/i2aYpBE Cj7VhFCALdrBzpU5EPztcGAIFb3c3f42M3NvW4QKmdNjZrrZ+Rmp9vRXmXBFzpRC 3aQkYpocN2WWZQOHOI2rsktiSewOQZNhD9hlTEwZ7eB/NAdsS6MNwGA/ZZigQwW6 WkVAa+WU3ZecU3auUwpXzgI4nngZp428oh4bMmmim5hj5nPX/Z/4CG+avPqEiojs xoOcF3eEQWCyFLCWa1Zv14vNut9ayMPraPED2YLylaPWsDKS7ZAFoiBqb5CuqPgi p9xpNfGfcEegGbO4VOfdcUoLvfS6t8+b95ISVHpmHQFNLCKbXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpZY9jS23e7hSmXttUhMIH2xiwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvZWY3ZWY1MjEtM2E4Ni0z MmNkLWIzYzEtNDBlNzU2YjAyNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXk1/ViPaGbLb4mNBt88g+WQyxe8mXX/9HWV28mmOwgAk52CTaDJigf S3SV4QAAW2s0qKEgysHu6lzkkvMNYTgeDWyBkVazvu/PDMiw1SUYeYmMsQQB+jjO cGM8ulHwyF27+gzduDio4KB1rDnU5vZOr4CcgcGIzb/eMBMVvHekgO/qHRN6hmWh Q0NZaCFGM8YEEwAjd0e06GgVuqyNBnlFxDR0CRW/v9wo1m4Tnw7Ulj3BiOAWDWSn o5NRdfAt20wuUdFEjLL8Y2JQXXIzPtQmsXeoIx0Aqh0SpC4CyHFLXQFLyj1gBwZm pzobSL+bo1rK8Qs283uDuRdvn+HfnTc= -----END CERTIFICATE-----Generated at Wed Jul 23 12:26:58 2025 by rpki-client