$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/32f1e2da-70bb-36bb-811e-18bf24fd1fe7.roa File: 32f1e2da-70bb-36bb-811e-18bf24fd1fe7.roa (raw, json) Hash identifier: UAtTqHlWBqGPaObeBKjma1wDIqA4fokP4DIQt3pkiBg= Subject key identifier: E5:53:B1:04:E3:E6:92:F6:DF:F4:F5:04:9F:06:B7:3D:2F:7B:38:7A Certificate issuer: /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Certificate serial: 010D0C9F4328584950F95D584CF42B32DD926900 Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/32f1e2da-70bb-36bb-811e-18bf24fd1fe7.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 44016 IP address blocks: 45.91.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:5d:58:4c:f4:2b:32:dd:92:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=a3045918-19ed-41f7-aa36-66443ad8416e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b1:c0:6f:82:8e:5d:c6:ff:22:d8:d7:7a:de: e1:f1:61:1f:12:57:1d:0f:a2:88:db:6f:df:6c:c3: ae:a5:d6:52:45:4d:d0:d6:d4:df:f5:0c:89:af:3a: 16:01:85:4c:54:08:79:60:18:78:32:8a:bd:bb:9f: 1b:a3:10:0a:cd:a8:90:de:97:8b:10:40:de:eb:87: 74:a9:5e:e6:c4:ae:f7:ef:eb:2d:5a:38:69:86:7e: 97:aa:05:26:cb:e2:8e:1b:f0:b3:3c:4d:b7:40:e3: 0d:16:c9:ea:7c:7d:ce:53:7d:3d:e9:67:44:da:0f: f6:c5:9e:0d:2d:0d:44:3b:c5:54:e4:67:61:35:72: 4b:4d:7e:77:db:af:f1:42:dd:7a:9c:13:0f:94:a7: 8c:db:dd:eb:ac:c3:c0:6c:33:82:69:48:d9:68:a3: 4c:70:54:6c:bf:91:9c:79:95:80:f1:5d:af:58:3c: 17:ce:0f:4a:32:8c:0f:bc:6b:b3:21:b0:06:00:51: 00:8a:b9:14:7d:cd:56:0d:2b:14:24:7f:86:7d:e1: 1a:27:d2:59:fe:5a:c1:ce:a7:55:6f:1f:bc:29:1a: ab:60:48:91:e9:c6:88:c2:96:d6:c6:4a:0c:fd:8c: 94:84:87:36:d3:18:d2:7d:d9:92:51:a9:f1:9c:b0: 8e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:53:B1:04:E3:E6:92:F6:DF:F4:F5:04:9F:06:B7:3D:2F:7B:38:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/32f1e2da-70bb-36bb-811e-18bf24fd1fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl X509v3 Authority Key Identifier: keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer sbgp-ipAddrBlock: critical IPv4: 45.91.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c1:cb:5a:de:97:e4:71:9b:81:a8:0e:0c:a6:06:1d:cd:ca: c1:e6:d1:ea:23:1e:09:e4:bb:e9:72:49:d6:d6:52:24:68:6e: eb:d2:38:30:7b:19:31:2b:b5:03:18:97:89:ac:4e:8d:95:4e: b8:2c:3c:78:3c:19:a2:1e:88:8d:95:88:c2:75:6d:f3:fd:1f: 4a:37:1a:2b:d2:c7:08:b5:ea:ad:f4:c8:95:d5:29:68:8c:19: 2e:83:0b:0c:5f:5d:ee:fe:ac:bf:49:31:70:39:5c:16:91:50: f5:ea:4c:81:17:3c:56:df:7f:8f:bd:23:17:a8:7d:d5:ff:7d: 97:18:10:68:02:aa:d8:fb:70:42:cd:e4:41:57:7b:d1:d3:5b: 51:a7:c9:32:a3:90:b0:18:ef:e3:ed:e8:80:50:d8:40:c4:28: 5a:b1:a9:cf:1c:22:3a:0c:99:5d:41:68:88:56:1a:00:36:42: d7:5e:a8:93:67:10:87:ab:04:35:91:d0:46:d4:ee:df:78:42: a9:0a:01:89:b5:17:9b:9e:36:77:bc:a9:be:93:d0:f8:ad:b5: 72:cf:4f:f2:ce:da:e3:a0:ac:b4:8b:45:12:73:c3:1d:ea:78: 57:78:ed:ea:53:1c:fa:b2:b1:a1:06:7a:0c:9c:6e:ce:5e:93: 8d:41:43:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+V1YTPQrMt2SaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4 MWIyMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk YTMwNDU5MTgtMTllZC00MWY3LWFhMzYtNjY0NDNhZDg0MTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7HAb4KOXcb/ItjXet7h8WEfElcdD6KI22/f bMOupdZSRU3Q1tTf9QyJrzoWAYVMVAh5YBh4Moq9u58boxAKzaiQ3peLEEDe64d0 qV7mxK737+stWjhphn6XqgUmy+KOG/CzPE23QOMNFsnqfH3OU3096WdE2g/2xZ4N LQ1EO8VU5GdhNXJLTX5326/xQt16nBMPlKeM293rrMPAbDOCaUjZaKNMcFRsv5Gc eZWA8V2vWDwXzg9KMowPvGuzIbAGAFEAirkUfc1WDSsUJH+GfeEaJ9JZ/lrBzqdV bx+8KRqrYEiR6caIwpbWxkoM/YyUhIc20xjSfdmSUanxnLCOPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVTsQTj5pL23/T1BJ8Gtz0vezh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFl OGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvMzJmMWUyZGEtNzBiYi0z NmJiLTgxMWUtMThiZjI0ZmQxZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDUxZThkOWYtZDllYS00NWNmLThm YjktMjgxMWU4NmI4MWIyLzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04ZmI5LTI4MTFlODZi ODFiMi5jcmwwHwYDVR0jBBgwFoAU8rMonBGkahiZAc+bjSQ+l9AEF8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODEx ZTg2YjgxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALBy1rel+Rxm4GoDgymBh3NysHm0eojHgnku+lySdbWUiRobuvSODB7 GTErtQMYl4msTo2VTrgsPHg8GaIeiI2ViMJ1bfP9H0o3GivSxwi16q30yJXVKWiM GS6DCwxfXe7+rL9JMXA5XBaRUPXqTIEXPFbff4+9IxeofdX/fZcYEGgCqtj7cELN 5EFXe9HTW1GnyTKjkLAY7+Pt6IBQ2EDEKFqxqc8cIjoMmV1BaIhWGgA2QtdeqJNn EIerBDWR0EbU7t94QqkKAYm1F5ueNne8qb6T0PittXLPT/LO2uOgrLSLRRJzwx3q eFd47epTHPqysaEGegycbs5ek41BQyc= -----END CERTIFICATE-----Generated at Sat Apr 12 15:07:04 2025 by rpki-client