$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/ef7ef521-3a86-32cd-b3c1-40e756b0267f.roa File: ef7ef521-3a86-32cd-b3c1-40e756b0267f.roa (raw, json) Hash identifier: bN2li4p75zSAiDEeC6CoecUTjXjqXKFpeJUbBUlJWsM= Subject key identifier: 99:77:EC:B9:38:12:21:47:27:CC:52:01:BF:08:AB:AD:89:64:43:58 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F43285848D7A656E7DEE3BAAC25DD5D00 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/ef7ef521-3a86-32cd-b3c1-40e756b0267f.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 198376 IP address blocks: 45.62.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:56:e7:de:e3:ba:ac:25:dd:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=0da550c1-982c-44ae-a160-d3bd25ffb11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:87:23:fb:a8:bb:d0:1d:57:39:a0:7d:ea:7f: 65:96:90:a4:a6:14:e4:69:c2:18:80:69:23:13:4f: 44:9f:19:2e:8d:e5:14:5c:09:6b:52:a2:79:a3:69: bd:10:1e:60:bd:dc:bd:bd:51:26:66:d3:d5:ba:f3: f8:7b:e2:ce:f2:38:07:29:73:a9:d0:7f:a0:f8:87: 11:3e:e1:e7:1c:7b:72:09:dc:62:70:55:2b:0d:47: cb:ed:f8:a8:b9:94:c2:ec:54:1f:d3:c1:f1:d9:2a: 3e:05:1a:2e:6c:a4:ca:cf:58:f4:9b:ac:1d:4e:4f: c7:d5:80:2f:47:d9:db:a7:8f:94:32:22:1e:20:0a: 94:18:e7:d2:6f:a4:50:1d:e1:21:80:80:ba:1f:f5: 36:bb:86:3f:d9:58:f5:54:b7:b2:75:63:ea:fa:aa: 66:50:41:f7:7c:93:91:1e:27:80:54:b9:e9:e3:4c: e5:3d:97:1d:64:77:ee:49:96:93:c5:0d:9d:7a:3f: ef:0f:17:d3:2e:60:51:5b:60:51:68:61:45:ab:92: fe:50:d5:1a:bc:d2:0b:47:b6:ce:dd:94:f7:9f:e2: dc:a3:0f:21:fc:51:56:43:1c:50:2a:60:5e:1d:62: 0e:ee:53:ec:35:55:b7:51:5a:7d:5d:4c:d0:fd:11: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:77:EC:B9:38:12:21:47:27:CC:52:01:BF:08:AB:AD:89:64:43:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/ef7ef521-3a86-32cd-b3c1-40e756b0267f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.62.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8f:5e:e1:d3:e0:f0:eb:f2:01:b6:65:8b:49:e6:a5:ee:c0: 60:77:a7:bc:c1:9a:a4:50:39:fe:14:17:45:c0:1e:8b:d7:f5: 9a:df:3c:18:76:5e:e7:9f:e7:99:bd:f3:f5:cd:21:c1:26:e7: 20:15:a6:04:d5:12:a0:b9:66:11:42:63:5e:73:53:93:69:37: bc:b0:66:b5:a0:81:78:23:98:97:b9:0b:9b:00:16:18:91:8b: a6:21:dc:15:8d:d4:6a:b8:60:b3:a4:d7:f1:6f:2c:15:b8:46: 63:54:0c:4d:71:82:4f:3d:22:b1:e4:62:b7:af:51:7e:67:3a: 2b:5f:5a:86:8c:10:10:fa:81:93:48:a0:59:eb:93:df:9f:68: e8:c1:48:cb:01:b5:cf:21:c4:31:0b:e9:27:f6:14:d8:34:0b: 88:e4:36:bb:06:b1:94:58:5e:e0:f6:86:13:c7:2c:88:c4:2b: 0b:57:c5:57:9e:d0:1c:95:d7:18:08:8d:a2:c6:e8:cc:d1:3d: 71:04:5a:3a:a7:6d:1c:d0:d1:27:98:78:6c:4d:ed:5a:d8:29: 0f:f5:40:85:60:04:10:08:3b:ff:85:27:b7:c4:e3:ac:19:af: 4c:db:08:7e:37:bd:c0:6e:1a:98:0a:16:ea:e7:fa:43:5c:fe: b1:68:fd:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXplbn3uO6rCXdXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk MGRhNTUwYzEtOTgyYy00NGFlLWExNjAtZDNiZDI1ZmZiMTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4cj+6i70B1XOaB96n9llpCkphTkacIYgGkj E09EnxkujeUUXAlrUqJ5o2m9EB5gvdy9vVEmZtPVuvP4e+LO8jgHKXOp0H+g+IcR PuHnHHtyCdxicFUrDUfL7fiouZTC7FQf08Hx2So+BRoubKTKz1j0m6wdTk/H1YAv R9nbp4+UMiIeIAqUGOfSb6RQHeEhgIC6H/U2u4Y/2Vj1VLeydWPq+qpmUEH3fJOR HieAVLnp40zlPZcdZHfuSZaTxQ2dej/vDxfTLmBRW2BRaGFFq5L+UNUavNILR7bO 3ZT3n+Lcow8h/FFWQxxQKmBeHWIO7lPsNVW3UVp9XUzQ/REtAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJl37Lk4EiFHJ8xSAb8Iq62JZENYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvZWY3ZWY1MjEtM2E4Ni0z MmNkLWIzYzEtNDBlNzU2YjAyNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyPXuHT4PDr8gG2ZYtJ5qXuwGB3p7zBmqRQOf4UF0XAHovX9ZrfPBh2 Xuef55m98/XNIcEm5yAVpgTVEqC5ZhFCY15zU5NpN7ywZrWggXgjmJe5C5sAFhiR i6Yh3BWN1Gq4YLOk1/FvLBW4RmNUDE1xgk89IrHkYrevUX5nOitfWoaMEBD6gZNI oFnrk9+faOjBSMsBtc8hxDEL6Sf2FNg0C4jkNrsGsZRYXuD2hhPHLIjEKwtXxVee 0ByV1xgIjaLG6MzRPXEEWjqnbRzQ0SeYeGxN7VrYKQ/1QIVgBBAIO/+FJ7fE46wZ r0zbCH43vcBuGpgKFurn+kNc/rFo/eQ= -----END CERTIFICATE-----Generated at Sat Apr 12 23:15:06 2025 by rpki-client