$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa File: 0649525a-4f78-38b5-9509-f91bdf00cd84.roa (raw, json) Hash identifier: YX3RHqHrnWTkn2ycQH7iUA5VOjRjtxn76a2tVDkY+YI= Subject key identifier: 88:10:FA:F2:4E:6F:62:FD:D3:34:E2:F4:D5:D8:A0:4F:90:6C:F4:7F Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584917DC33FAD91458CA98F29380 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 53356 IP address blocks: 45.62.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:33:fa:d9:14:58:ca:98:f2:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=5fc3191a-ef21-489d-97de-7bb78142286b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2f:60:aa:51:40:da:33:bf:72:18:6e:19:0c: 11:a5:6a:ac:b8:d1:4d:e3:78:d6:f7:92:06:e4:6e: aa:90:0d:c1:84:83:f5:3f:8f:f8:b5:a2:eb:e6:71: 87:a2:25:46:d4:96:25:ac:ae:f3:85:ff:b3:a8:6c: fa:cb:57:1e:66:24:16:fd:3f:7a:87:4a:5f:fb:48: 41:af:33:8f:7e:ae:6d:97:28:40:5c:58:5c:2f:1e: 71:ab:e1:ac:53:ea:75:13:9c:87:84:02:5b:00:6a: 2f:00:53:18:e3:7d:d7:48:9e:2b:d3:c1:d8:1f:ed: 7e:5f:e0:07:b2:18:95:9c:7d:81:a4:86:5e:24:fc: 3a:26:10:d4:b8:7c:96:69:af:a7:4c:32:3f:68:ef: fb:1a:8e:30:97:1c:b5:7a:f3:da:5d:fd:2d:1f:6c: 3e:20:ab:e3:a8:6e:ba:b8:2d:f8:85:45:37:a6:c7: 48:a6:81:39:d0:0f:09:3f:ca:72:ab:f3:34:0e:f9: b1:da:f6:1b:e0:f9:98:ba:e4:50:7f:32:ae:4e:a9: a1:33:85:c2:a0:c6:2b:b7:7e:8c:a0:0f:f8:50:3f: ac:00:5a:55:64:8d:20:16:85:56:9f:22:50:99:ca: e1:bb:7d:dd:d4:12:52:8a:34:f9:df:7f:08:80:d8: 93:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:10:FA:F2:4E:6F:62:FD:D3:34:E2:F4:D5:D8:A0:4F:90:6C:F4:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.62.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e9:32:b7:85:d8:81:33:77:a7:6b:d1:10:22:73:b1:dc:6d: 0a:9c:4b:dc:50:2f:07:b6:c9:43:a7:59:54:10:b8:1d:58:b5: e3:16:8b:b5:ae:7b:6e:c2:64:88:40:52:02:da:a3:b1:75:71: d1:5a:c1:f9:7b:65:43:da:37:93:10:89:8a:c3:db:03:7a:65: c7:3d:c8:16:c1:7c:10:e7:45:19:8a:ef:32:0b:da:2f:18:9d: 2c:38:42:09:5f:bd:9f:fc:49:27:cc:62:ee:1b:b1:ee:ba:52: 85:e1:5b:e6:5b:13:9c:df:91:dc:ff:ae:e1:cd:b5:fc:41:85: 30:00:dc:3b:3e:7b:57:81:9c:9e:51:b9:4f:74:18:15:87:ab: 14:53:ed:7f:56:b9:81:76:e5:45:2b:f2:d8:21:3f:74:fe:86: ae:b0:8a:4b:0b:43:85:32:6f:df:8b:82:04:eb:21:53:db:18: 07:bb:8a:12:64:11:75:07:d4:1d:b9:32:c8:fe:33:53:40:1b: 3f:12:fd:54:15:7b:db:b8:7a:41:ec:59:24:7f:c1:bd:68:94: 6a:1b:ef:72:b7:c1:f0:23:9a:42:6a:00:65:b1:f7:58:6c:f7: ec:7c:54:32:fd:98:e5:62:96:ed:8b:86:40:5e:15:59:5b:28: dc:a0:84:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DP62RRYypjyk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NWZjMzE5MWEtZWYyMS00ODlkLTk3ZGUtN2JiNzgxNDIyODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC9gqlFA2jO/chhuGQwRpWqsuNFN43jW95IG 5G6qkA3BhIP1P4/4taLr5nGHoiVG1JYlrK7zhf+zqGz6y1ceZiQW/T96h0pf+0hB rzOPfq5tlyhAXFhcLx5xq+GsU+p1E5yHhAJbAGovAFMY433XSJ4r08HYH+1+X+AH shiVnH2BpIZeJPw6JhDUuHyWaa+nTDI/aO/7Go4wlxy1evPaXf0tH2w+IKvjqG66 uC34hUU3psdIpoE50A8JP8pyq/M0Dvmx2vYb4PmYuuRQfzKuTqmhM4XCoMYrt36M oA/4UD+sAFpVZI0gFoVWnyJQmcrhu33d1BJSijT5338IgNiT6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgQ+vJOb2L90zTi9NXYoE+QbPR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMDY0OTUyNWEtNGY3OC0z OGI1LTk1MDktZjkxYmRmMDBjZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPpMreF2IEzd6dr0RAic7HcbQqcS9xQLwe2yUOnWVQQuB1YteMWi7Wu e27CZIhAUgLao7F1cdFawfl7ZUPaN5MQiYrD2wN6Zcc9yBbBfBDnRRmK7zIL2i8Y nSw4QglfvZ/8SSfMYu4bse66UoXhW+ZbE5zfkdz/ruHNtfxBhTAA3Ds+e1eBnJ5R uU90GBWHqxRT7X9WuYF25UUr8tghP3T+hq6wiksLQ4Uyb9+LggTrIVPbGAe7ihJk EXUH1B25Msj+M1NAGz8S/VQVe9u4ekHsWSR/wb1olGob73K3wfAjmkJqAGWx91hs 9+x8VDL9mOVilu2LhkBeFVlbKNyghDw= -----END CERTIFICATE-----Generated at Sat Apr 26 20:01:00 2025 by rpki-client