$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/1e70f973-bd6f-36ca-a334-9c686c921c27.roa File: 1e70f973-bd6f-36ca-a334-9c686c921c27.roa (raw, json) Hash identifier: jDqFZEveidZrv9uK3hrfH0CxnE2/hXh6X/OfpveoBY4= Subject key identifier: 22:F8:6E:37:76:B9:A0:5C:FC:2B:B4:D9:C9:D0:A6:3F:36:CD:0E:F5 Certificate issuer: /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Certificate serial: 010D0C9F4328584F23C24EAA425BCA023C064C00 Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/1e70f973-bd6f-36ca-a334-9c686c921c27.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 207456 IP address blocks: 45.91.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:4e:aa:42:5b:ca:02:3c:06:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=88267bd2-d4ea-4703-853c-7bed6e30f34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9a:44:8d:00:a9:7f:42:20:79:11:42:07:7c: 5b:f8:1c:02:00:3d:b2:e3:d5:d9:53:fe:6b:30:41: 05:87:a7:39:9a:c1:72:95:7c:7a:d8:dd:85:62:d9: 59:7c:41:04:d0:ba:2a:05:40:37:43:40:ad:bf:a5: b7:49:9e:ba:07:07:6f:6a:a2:29:36:a9:7a:69:48: cc:b8:8a:5f:60:eb:65:e4:4f:8a:e7:52:0d:bc:da: e3:b6:e1:c3:6d:31:c4:cd:27:d1:68:8b:5c:dd:63: 41:20:5b:dc:b6:de:0c:6f:7b:93:4c:cc:aa:7b:f1: 78:ff:98:90:33:85:fe:35:fa:b9:c4:b0:ef:96:38: 0e:27:24:02:ce:2f:ea:7e:15:3d:b6:d0:48:04:7e: 9f:6c:dc:ed:58:12:83:e0:97:ed:67:05:03:4f:fe: b4:98:67:df:84:80:83:c6:dd:bc:3d:be:aa:7c:16: 9d:5e:51:33:a1:71:32:bd:58:16:6a:97:e5:43:59: f5:32:7f:f2:08:10:1e:c6:c0:f1:3f:58:3c:c3:a7: 7d:8f:08:19:73:08:e2:84:51:ca:c1:7f:fe:7c:ae: c1:95:d5:34:0a:d2:08:cd:7d:56:b9:ec:5e:44:c4: 98:29:96:74:29:82:d2:0c:77:4e:39:be:d0:29:bf: 61:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F8:6E:37:76:B9:A0:5C:FC:2B:B4:D9:C9:D0:A6:3F:36:CD:0E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/1e70f973-bd6f-36ca-a334-9c686c921c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl X509v3 Authority Key Identifier: keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer sbgp-ipAddrBlock: critical IPv4: 45.91.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:12:a3:d6:01:39:c0:93:0b:f1:64:47:10:83:6a:26:2d:0b: 17:74:ae:83:3c:5a:11:17:a6:af:ec:0b:7e:d6:f0:e6:58:15: 1d:41:11:bd:65:f6:59:ec:bd:3d:58:a9:5d:81:66:78:66:eb: ee:4c:02:3b:d1:a0:2a:0c:ef:a6:00:7a:dc:bf:79:66:1d:01: b9:2c:a7:e6:b9:07:1d:4d:b8:89:36:ff:ef:da:9e:94:d7:48: f3:24:f3:e4:6d:8f:36:d5:54:31:b4:e4:ae:85:5a:17:39:7f: 3e:5f:c8:d8:7b:10:f4:56:b9:6f:74:e7:d0:95:e9:6e:0b:07: 3e:02:7d:bb:fc:03:87:1e:d8:57:04:d3:53:ed:80:ce:8d:ba: 1e:46:b1:8a:d1:b8:11:86:4c:a3:01:31:54:fd:1c:cc:8a:6e: a0:ed:21:32:57:ee:bd:cb:c8:3c:34:67:3a:85:75:00:0c:44: b8:20:18:d8:c4:a6:84:53:39:c5:a6:db:b4:63:cd:af:63:ac: 22:97:a6:7a:95:fd:ed:8d:d6:50:fe:72:83:94:5e:7f:21:8b: 4f:e3:a2:5d:35:b6:8f:f9:c8:da:3f:bf:21:cc:e5:51:0b:a5: 76:fc:6d:66:62:d1:1e:0c:21:2f:a7:bb:d4:5e:91:de:d3:be: e8:27:bb:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwk6qQlvKAjwGTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4 MWIyMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ODgyNjdiZDItZDRlYS00NzAzLTg1M2MtN2JlZDZlMzBmMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJpEjQCpf0IgeRFCB3xb+BwCAD2y49XZU/5r MEEFh6c5msFylXx62N2FYtlZfEEE0LoqBUA3Q0Ctv6W3SZ66BwdvaqIpNql6aUjM uIpfYOtl5E+K51INvNrjtuHDbTHEzSfRaItc3WNBIFvctt4Mb3uTTMyqe/F4/5iQ M4X+Nfq5xLDvljgOJyQCzi/qfhU9ttBIBH6fbNztWBKD4JftZwUDT/60mGffhICD xt28Pb6qfBadXlEzoXEyvVgWapflQ1n1Mn/yCBAexsDxP1g8w6d9jwgZcwjihFHK wX/+fK7BldU0CtIIzX1WuexeRMSYKZZ0KYLSDHdOOb7QKb9h8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCL4bjd2uaBc/Cu02cnQpj82zQ71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFl OGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvMWU3MGY5NzMtYmQ2Zi0z NmNhLWEzMzQtOWM2ODZjOTIxYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDUxZThkOWYtZDllYS00NWNmLThm YjktMjgxMWU4NmI4MWIyLzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04ZmI5LTI4MTFlODZi ODFiMi5jcmwwHwYDVR0jBBgwFoAU8rMonBGkahiZAc+bjSQ+l9AEF8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODEx ZTg2YjgxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVttMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgSo9YBOcCTC/FkRxCDaiYtCxd0roM8WhEXpq/sC37W8OZYFR1BEb1l 9lnsvT1YqV2BZnhm6+5MAjvRoCoM76YAety/eWYdAbksp+a5Bx1NuIk2/+/anpTX SPMk8+RtjzbVVDG05K6FWhc5fz5fyNh7EPRWuW9059CV6W4LBz4Cfbv8A4ce2FcE 01PtgM6Nuh5GsYrRuBGGTKMBMVT9HMyKbqDtITJX7r3LyDw0ZzqFdQAMRLggGNjE poRTOcWm27Rjza9jrCKXpnqV/e2N1lD+coOUXn8hi0/jol01to/5yNo/vyHM5VEL pXb8bWZi0R4MIS+nu9Rekd7Tvugnuyw= -----END CERTIFICATE-----Generated at Thu Sep 24 20:20:50 2026 by rpki-client