$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/e4d7f4d6-9c79-3afc-8a8a-d0c8ecad7a48.roa File: e4d7f4d6-9c79-3afc-8a8a-d0c8ecad7a48.roa (raw, json) Hash identifier: Sf/SC92UUHTspNP2qji6Q5h2am/UFzcE5vc8PDpA8ZI= Subject key identifier: 2A:39:DD:20:56:CC:86:5A:F0:22:5A:80:27:E7:22:AA:40:F2:A7:5F Certificate issuer: /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Certificate serial: 010D0C9F43285848090FBC2317B6492DF9A74480 Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/e4d7f4d6-9c79-3afc-8a8a-d0c8ecad7a48.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 6206 IP address blocks: 45.91.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:bc:23:17:b6:49:2d:f9:a7:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=d647882e-de52-4bd8-9a74-cae6db354d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:83:ae:5a:f2:74:80:37:7e:1b:14:d1:37:3f: 6b:8c:1b:e6:46:16:fe:0c:2f:be:90:8d:da:90:eb: 71:28:4f:02:16:a3:93:72:8f:77:77:1a:0c:a6:94: 45:80:7e:08:a0:c7:ad:9d:45:38:8d:0f:76:9e:90: e0:d8:24:93:82:8e:8d:75:02:65:33:e1:cf:5f:ff: a1:e4:49:95:12:1e:b8:4c:57:19:42:08:2f:55:d6: 8e:7e:bd:d3:24:77:55:0c:2d:8d:9a:0e:1c:6a:0b: 53:db:f5:56:82:ce:c5:af:cb:28:1d:44:dd:58:f3: b6:2e:3a:d0:7f:84:f3:26:8d:f5:43:8d:aa:f4:3e: 27:1f:a3:04:3c:db:f8:a4:62:48:a3:c2:5f:1e:b5: 4a:59:e1:a8:b4:88:71:29:b9:c6:8a:56:c9:5d:c1: 84:65:38:3a:32:51:b6:29:db:50:b0:f6:f1:3e:55: 29:d4:7b:1c:0a:af:46:d1:0a:24:1b:92:c7:47:a0: 3d:01:8f:1d:c2:c7:96:1b:b7:ef:a3:63:02:c2:f9: 16:f1:81:42:e2:d1:5f:0a:96:d9:d5:5a:ef:88:a3: 6b:43:8b:95:12:c6:22:f1:ff:f8:06:80:73:50:37: 3e:ef:51:93:c1:fd:02:69:4b:4d:e2:45:c3:eb:7b: 12:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:39:DD:20:56:CC:86:5A:F0:22:5A:80:27:E7:22:AA:40:F2:A7:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/e4d7f4d6-9c79-3afc-8a8a-d0c8ecad7a48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl X509v3 Authority Key Identifier: keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer sbgp-ipAddrBlock: critical IPv4: 45.91.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4d:24:bd:37:db:c0:61:95:c3:41:9c:28:54:e1:d6:25:db: 63:ef:26:3d:01:4a:a7:19:7c:44:fa:10:57:78:4d:91:c7:78: 95:37:44:6b:b5:11:df:fc:78:fd:bf:c8:ac:44:76:df:76:d5: d8:26:5c:96:38:13:4f:48:f9:c8:ef:e2:76:de:0c:f5:a1:74: 5f:39:b6:6d:26:6b:ed:ca:7d:26:36:53:be:05:c6:b0:c3:b6: 4f:4b:a2:71:bb:ed:89:c0:94:8f:fa:2f:fc:db:ea:84:ab:65: 85:c2:03:14:9a:75:6a:7e:88:15:36:d7:1f:02:4b:68:b4:a9: f2:74:27:fb:6f:d5:df:19:83:2a:39:4e:45:6e:78:70:73:29: 75:bb:30:82:db:7c:e3:84:52:a8:06:56:d7:d1:74:ed:0d:1b: 6b:b6:e2:48:6d:15:01:af:f7:3e:b7:2b:00:cd:22:25:6d:51: 91:aa:f0:d1:33:5f:d2:11:f4:e4:95:22:2a:4e:93:cc:e4:f9: 99:c6:b9:d0:e5:ea:7a:b6:be:ed:3e:6c:da:01:e8:d4:76:0c: 45:e0:51:4b:77:d0:64:c4:f1:a0:7c:8b:d8:d1:a6:f1:01:64: b4:eb:55:cb:f3:fb:92:17:62:49:59:fa:d6:39:8c:6f:9a:7c: ad:f4:d9:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD7wjF7ZJLfmnRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4 MWIyMB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk ZDY0Nzg4MmUtZGU1Mi00YmQ4LTlhNzQtY2FlNmRiMzU0ZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oOuWvJ0gDd+GxTRNz9rjBvmRhb+DC++kI3a kOtxKE8CFqOTco93dxoMppRFgH4IoMetnUU4jQ92npDg2CSTgo6NdQJlM+HPX/+h 5EmVEh64TFcZQggvVdaOfr3TJHdVDC2Nmg4cagtT2/VWgs7Fr8soHUTdWPO2LjrQ f4TzJo31Q42q9D4nH6MEPNv4pGJIo8JfHrVKWeGotIhxKbnGilbJXcGEZTg6MlG2 KdtQsPbxPlUp1HscCq9G0QokG5LHR6A9AY8dwseWG7fvo2MCwvkW8YFC4tFfCpbZ 1VrviKNrQ4uVEsYi8f/4BoBzUDc+71GTwf0CaUtN4kXD63sSZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo53SBWzIZa8CJagCfnIqpA8qdfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFl OGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvZTRkN2Y0ZDYtOWM3OS0z YWZjLThhOGEtZDBjOGVjYWQ3YTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDUxZThkOWYtZDllYS00NWNmLThm YjktMjgxMWU4NmI4MWIyLzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04ZmI5LTI4MTFlODZi ODFiMi5jcmwwHwYDVR0jBBgwFoAU8rMonBGkahiZAc+bjSQ+l9AEF8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODEx ZTg2YjgxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZNJL0328BhlcNBnChU4dYl22PvJj0BSqcZfET6EFd4TZHHeJU3RGu1 Ed/8eP2/yKxEdt921dgmXJY4E09I+cjv4nbeDPWhdF85tm0ma+3KfSY2U74FxrDD tk9LonG77YnAlI/6L/zb6oSrZYXCAxSadWp+iBU21x8CS2i0qfJ0J/tv1d8Zgyo5 TkVueHBzKXW7MILbfOOEUqgGVtfRdO0NG2u24khtFQGv9z63KwDNIiVtUZGq8NEz X9IR9OSVIipOk8zk+ZnGudDl6nq2vu0+bNoB6NR2DEXgUUt30GTE8aB8i9jRpvEB ZLTrVcvz+5IXYklZ+tY5jG+afK302dM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:47 2025 by rpki-client