$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22ba2ea9-200f-355d-92ef-5271c4fc6ab4.roa File: 22ba2ea9-200f-355d-92ef-5271c4fc6ab4.roa (raw, json) Hash identifier: W9dwYjt/xLHT7tmzjhCyH9rwI57FiHTssQjftfmBvEc= Subject key identifier: 02:9E:D8:8D:5E:24:3B:C9:89:9B:54:94:E1:69:CA:69:83:EB:B8:E5 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F43285848A9961BB973B1D001DF800BD0 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22ba2ea9-200f-355d-92ef-5271c4fc6ab4.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 400529 IP address blocks: 45.62.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1b:b9:73:b1:d0:01:df:80:0b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=8ef335bc-b701-4b2c-842f-c8c995f77f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:97:70:60:03:26:d2:06:cc:e7:21:6e:44:03: eb:2f:b3:58:8e:e3:8f:4e:d2:10:af:70:14:81:44: 27:95:ae:9b:b1:2e:06:00:aa:c0:5e:9a:5f:cc:e8: a0:cc:9d:72:15:95:f0:c6:b9:cf:7b:74:e8:cb:97: 50:cc:a0:42:0c:e0:ec:a7:3e:e1:e0:35:92:07:73: 9f:08:b8:ca:5e:92:c3:e4:ef:2d:1a:c6:69:fa:c0: ca:f9:42:90:cc:a1:80:00:4e:eb:55:1a:be:90:24: 93:a1:c5:19:7d:2d:8e:f1:69:c8:26:80:36:cb:4f: 6e:d4:ba:36:d3:76:bd:40:e8:ad:d1:a6:9f:fa:cd: 35:6c:98:7c:c3:bd:13:2c:e2:00:b1:41:aa:f4:85: 12:ac:c2:b1:ca:61:f5:0e:1e:e6:0d:4f:fc:a4:41: 31:3b:0a:a9:e5:6f:bc:04:64:44:52:08:99:32:99: f5:19:70:6a:a6:d8:a7:86:06:20:56:4c:fa:2a:f9: 65:39:38:13:1e:a2:f2:96:f2:2d:3b:d3:f5:46:50: 16:a2:5f:ac:89:9a:a8:5e:ff:11:e9:3c:37:0d:61: 71:3f:13:c6:46:51:ee:15:7b:b0:21:f3:49:43:3f: ef:f0:1b:1f:8d:97:0e:68:af:4e:c1:df:3d:16:62: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9E:D8:8D:5E:24:3B:C9:89:9B:54:94:E1:69:CA:69:83:EB:B8:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22ba2ea9-200f-355d-92ef-5271c4fc6ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.62.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2d:88:42:e2:11:ce:ee:1b:96:71:a3:e9:44:4c:85:64:4b: c1:02:19:b7:3a:32:3f:0a:b7:c2:b1:a4:ad:89:5c:a1:1c:95: e6:8b:57:e4:e7:97:79:e0:dd:f3:68:4e:83:c3:f4:17:f5:f1: b2:8e:51:4a:a0:9c:d4:8d:28:34:db:5d:ed:5e:af:32:8e:43: 8a:8c:bb:b5:d1:85:91:a1:df:13:91:34:0e:97:ea:ab:5e:a5: 0b:ce:f8:70:18:df:6b:79:7b:bd:a4:18:08:6f:83:02:d1:38: 07:ed:db:b6:b8:3c:8f:17:9f:73:37:05:52:53:11:64:24:e7: e9:4e:16:ca:9a:99:54:26:1c:d7:ce:47:6f:3d:6f:97:2b:73: 9b:bd:bb:7d:3a:81:a9:63:df:0c:18:b0:e2:ac:63:3a:b4:61: 20:78:4b:43:25:cd:cb:e0:4c:5f:85:a8:2e:17:35:31:17:23: 2c:d1:ee:c3:d9:70:c0:6f:10:68:4c:ae:b3:d5:a3:cf:a9:45: e5:c9:92:93:00:18:71:46:91:c2:51:0c:4f:c2:48:0c:96:88: 41:a5:1d:19:a5:cd:b5:73:a7:d5:c7:65:1d:94:c2:80:89:79: dd:16:3f:7a:3e:e0:32:61:80:41:1d:d0:e2:d9:9a:91:a3:e0: 9f:25:57:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplhu5c7HQAd+AC9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk OGVmMzM1YmMtYjcwMS00YjJjLTg0MmYtYzhjOTk1Zjc3Zjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJdwYAMm0gbM5yFuRAPrL7NYjuOPTtIQr3AU gUQnla6bsS4GAKrAXppfzOigzJ1yFZXwxrnPe3Toy5dQzKBCDODspz7h4DWSB3Of CLjKXpLD5O8tGsZp+sDK+UKQzKGAAE7rVRq+kCSTocUZfS2O8WnIJoA2y09u1Lo2 03a9QOit0aaf+s01bJh8w70TLOIAsUGq9IUSrMKxymH1Dh7mDU/8pEExOwqp5W+8 BGREUgiZMpn1GXBqptinhgYgVkz6KvllOTgTHqLylvItO9P1RlAWol+siZqoXv8R 6Tw3DWFxPxPGRlHuFXuwIfNJQz/v8BsfjZcOaK9Owd89FmJmPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKe2I1eJDvJiZtUlOFpymmD67jlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMjJiYTJlYTktMjAwZi0z NTVkLTkyZWYtNTI3MWM0ZmM2YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEotiELiEc7uG5Zxo+lETIVkS8ECGbc6Mj8Kt8KxpK2JXKEcleaLV+Tn l3ng3fNoToPD9Bf18bKOUUqgnNSNKDTbXe1erzKOQ4qMu7XRhZGh3xORNA6X6qte pQvO+HAY32t5e72kGAhvgwLROAft27a4PI8Xn3M3BVJTEWQk5+lOFsqamVQmHNfO R289b5crc5u9u306galj3wwYsOKsYzq0YSB4S0MlzcvgTF+FqC4XNTEXIyzR7sPZ cMBvEGhMrrPVo8+pReXJkpMAGHFGkcJRDE/CSAyWiEGlHRmlzbVzp9XHZR2UwoCJ ed0WP3o+4DJhgEEd0OLZmpGj4J8lV6s= -----END CERTIFICATE-----Generated at Sun Apr 6 17:13:25 2025 by rpki-client