$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0028344d-321a-396e-bf5a-c505a0436b37.roa File: 0028344d-321a-396e-bf5a-c505a0436b37.roa (raw, json) Hash identifier: OvWmbAccMrASTG7YxvPMISmOr2a+VUT/GugFpEZr+ns= Subject key identifier: FC:A1:7A:13:EC:E4:0E:8C:77:6B:3D:F1:55:C3:09:89:FF:D7:D1:D5 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584957F403BD4E43467F6F70E280 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0028344d-321a-396e-bf5a-c505a0436b37.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 138997 IP address blocks: 45.62.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:03:bd:4e:43:46:7f:6f:70:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=bf0baaf2-cc57-4a3d-b1b3-72fd0d33a0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:27:8b:64:5e:94:97:b7:8e:f1:f0:30:03:0e: 96:3a:79:e0:88:d9:ab:e2:6e:c8:59:2d:62:d5:83: 76:43:93:e6:8a:54:c0:4c:cc:cd:af:ee:e1:d4:13: be:1b:e4:bd:1b:c2:22:56:e6:32:0b:10:f8:5d:d1: ab:27:2f:16:57:b6:0f:35:ab:64:ca:4c:4a:ae:4f: 98:e6:97:3b:21:4c:90:62:4b:9e:b8:80:36:76:51: 8c:7d:85:43:53:86:61:e0:05:01:fe:e9:c4:f7:0f: 7f:19:f9:49:a0:48:58:1f:4f:ea:61:07:e7:4f:90: 10:f5:1c:58:26:d7:bc:61:4a:c5:ff:3e:a8:65:42: b7:fc:68:91:ce:06:0a:1e:81:aa:f3:16:f2:f8:a5: 02:c3:ed:fb:1a:10:b5:29:cd:9b:dd:37:ed:b3:63: e6:6c:01:99:74:a8:88:3b:eb:ee:28:f7:b3:c1:58: 99:e1:c1:5c:c8:e6:cb:49:33:b4:25:fb:4b:dc:67: 49:d1:5d:1b:33:99:42:5c:d6:e3:4f:8b:e6:c3:cf: 84:9d:37:a0:f0:88:7c:f4:4f:ac:3f:10:f2:a0:3e: fa:6f:d3:23:89:4a:b7:fd:9d:25:8f:f6:07:64:33: 3f:2d:c5:37:87:47:a3:2f:d8:ad:a7:10:20:af:23: d2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A1:7A:13:EC:E4:0E:8C:77:6B:3D:F1:55:C3:09:89:FF:D7:D1:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0028344d-321a-396e-bf5a-c505a0436b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.62.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:9c:e5:41:9d:aa:dd:13:65:1d:87:25:52:a0:3b:72:9e:37: 63:db:f6:78:73:a6:aa:d9:be:07:a3:d1:13:b5:eb:89:45:19: 06:00:2a:30:05:4c:22:2a:ee:5e:a9:f1:ae:8d:23:bb:26:4d: 82:c7:f6:06:3a:2a:31:fb:0b:3f:4c:e0:02:ed:0e:d0:b5:cb: 5a:f4:31:2d:69:52:f5:78:8b:b8:7f:3c:d2:27:ca:ba:59:28: 44:fb:b5:4d:07:0d:25:21:08:fd:92:c3:b7:4e:77:e3:59:1b: 7e:fa:a3:4a:a3:51:34:5c:bd:b3:97:1f:0a:1f:29:f9:57:27: 71:5a:84:1d:a2:85:37:12:81:7e:b4:7f:19:60:fb:e7:13:7a: 6d:2f:c3:60:09:fc:cd:8b:02:86:9c:df:c2:75:88:38:84:ec: f3:ea:8f:0d:05:19:ea:3d:c9:62:39:60:ed:55:f1:46:48:08: bd:fa:a4:cb:f4:33:43:bd:15:b5:57:7b:f2:db:fa:e5:b0:8a: ff:79:c2:39:24:b9:41:00:99:25:83:38:9b:6b:3a:ea:a6:a4: 9a:88:cc:1d:8e:5c:8d:22:86:b1:f6:c9:bc:92:58:b2:0a:40: dd:9f:11:43:5a:6d:78:42:64:4d:b2:14:93:a6:42:43:8a:58: b4:0d:0a:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AO9TkNGf29w4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YmYwYmFhZjItY2M1Ny00YTNkLWIxYjMtNzJmZDBkMzNhMGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyeLZF6Ul7eO8fAwAw6WOnngiNmr4m7IWS1i 1YN2Q5PmilTATMzNr+7h1BO+G+S9G8IiVuYyCxD4XdGrJy8WV7YPNatkykxKrk+Y 5pc7IUyQYkueuIA2dlGMfYVDU4Zh4AUB/unE9w9/GflJoEhYH0/qYQfnT5AQ9RxY Jte8YUrF/z6oZUK3/GiRzgYKHoGq8xby+KUCw+37GhC1Kc2b3Tfts2PmbAGZdKiI O+vuKPezwViZ4cFcyObLSTO0JftL3GdJ0V0bM5lCXNbjT4vmw8+EnTeg8Ih89E+s PxDyoD76b9MjiUq3/Z0lj/YHZDM/LcU3h0ejL9itpxAgryPSAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyhehPs5A6Md2s98VXDCYn/19HVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMDAyODM0NGQtMzIxYS0z OTZlLWJmNWEtYzUwNWEwNDM2YjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLT6mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESc5UGdqt0TZR2HJVKgO3KeN2Pb9nhzpqrZvgej0RO164lFGQYAKjAF TCIq7l6p8a6NI7smTYLH9gY6KjH7Cz9M4ALtDtC1y1r0MS1pUvV4i7h/PNInyrpZ KET7tU0HDSUhCP2Sw7dOd+NZG376o0qjUTRcvbOXHwofKflXJ3FahB2ihTcSgX60 fxlg++cTem0vw2AJ/M2LAoac38J1iDiE7PPqjw0FGeo9yWI5YO1V8UZICL36pMv0 M0O9FbVXe/Lb+uWwiv95wjkkuUEAmSWDOJtrOuqmpJqIzB2OXI0ihrH2ybySWLIK QN2fEUNabXhCZE2yFJOmQkOKWLQNCrY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:27 2025 by rpki-client