$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/0a8029f0-bcdb-3d4b-996d-d8cb94c8711d.roa File: 0a8029f0-bcdb-3d4b-996d-d8cb94c8711d.roa (raw, json) Hash identifier: SsjStXBL31G/zaIyQSTIU5T2Rnd8Y8JjjpEOa6GSaoM= Subject key identifier: F2:34:EC:BA:35:47:60:9A:9E:0A:AF:B9:8F:CC:04:C2:F9:5B:72:60 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F432858485E35B6A8E24953E2E7E09E60 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/0a8029f0-bcdb-3d4b-996d-d8cb94c8711d.roa Signing time: Sun 29 Dec 2024 14:00:53 +0000 ROA not before: Sun 29 Dec 2024 14:00:53 +0000 ROA not after: Sat 29 Mar 2025 13:00:53 +0000 asID: 399629 IP address blocks: 149.248.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5e:35:b6:a8:e2:49:53:e2:e7:e0:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Dec 29 14:00:53 2024 GMT Not After : Mar 29 13:00:53 2025 GMT Subject: CN=6e0b8c00-e2ae-44a7-bf41-a5dcba52d6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3c:ae:bc:67:68:28:ad:ae:04:cb:2b:0a:5a: 1b:d1:6f:b3:f0:63:ef:1d:21:5b:4e:77:da:45:bd: 46:34:33:5c:8d:40:c7:07:cd:7b:03:0c:0d:1f:5c: bb:f9:94:f3:62:e6:59:f1:40:8d:e9:9b:ca:2e:16: 72:7c:f0:46:45:a1:70:24:42:d8:98:07:77:37:fb: d3:03:d2:b6:8f:e6:25:7f:49:c3:40:d7:13:b7:d9: ac:0c:c7:b3:74:17:70:8c:ab:78:3a:da:52:fe:28: 7f:1e:bd:cc:a2:e2:da:30:51:86:f6:5d:d1:a4:5b: 99:71:d1:eb:86:b1:a8:53:fb:9d:bf:bd:b2:c2:6b: 9c:f5:a7:1b:10:75:46:82:a7:98:87:1e:13:82:60: 5e:f8:87:62:dc:e9:13:79:97:e5:38:60:0d:86:7f: 5c:4e:f7:bd:2d:32:d5:b0:c1:25:ce:03:34:ce:49: db:4b:54:d3:9b:c0:a4:25:a0:9a:03:8d:3e:70:59: 7e:cb:a7:be:c4:29:25:d2:e9:7c:b2:eb:ed:63:0f: 72:97:92:8d:d8:55:73:77:d6:8b:71:ee:55:8a:54: ae:04:3d:69:e9:51:da:81:f8:81:c5:c4:2c:1b:67: 6e:ea:1e:db:f0:92:cf:8e:f9:c3:90:98:15:fb:b4: 8a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:34:EC:BA:35:47:60:9A:9E:0A:AF:B9:8F:CC:04:C2:F9:5B:72:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/0a8029f0-bcdb-3d4b-996d-d8cb94c8711d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 149.248.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:88:54:06:17:cf:ea:11:12:59:49:4e:7e:11:e0:00:e0:cb: 54:24:ec:e2:2e:fb:38:42:06:ea:99:5b:15:10:1f:29:fd:7a: 82:3c:9b:a2:9f:d1:ad:49:e6:11:9f:e0:25:d5:90:27:8a:b9: 6f:9d:0a:d4:d7:fb:08:7e:ed:3c:3e:f0:7f:0d:11:7d:48:77: 97:12:b4:07:10:5e:af:99:26:74:07:4b:41:d3:e9:ec:c0:69: 51:7d:de:8f:39:46:0d:ef:42:4f:80:05:57:ed:fb:ee:7a:b6: 3c:f1:36:68:4b:7d:e7:4a:a8:3a:a7:fc:81:d4:48:3c:3e:eb: eb:b9:86:99:f0:bb:80:5a:b1:b1:86:2a:a4:83:b9:21:51:61: fb:88:d1:af:d4:72:e7:26:c3:2a:5b:29:0c:0e:eb:54:27:4b: ca:d2:fa:6c:18:fe:e7:ce:fc:95:9b:9a:e0:f2:e6:4f:fb:db: b5:8c:8b:f2:06:a0:79:23:e2:60:0b:86:0e:72:11:83:aa:8d: 2e:3e:f2:31:2b:b5:46:26:63:b3:4a:35:1f:09:f0:22:85:94: b8:86:61:a6:bb:0a:43:94:37:74:27:aa:82:c2:2c:ad:cb:40: 5e:15:46:12:78:0b:d3:41:14:88:5f:74:d7:b8:f2:a8:d0:d1: 09:4b:9d:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNbao4klT4ufgnmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk NmUwYjhjMDAtZTJhZS00NGE3LWJmNDEtYTVkY2JhNTJkNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zyuvGdoKK2uBMsrClob0W+z8GPvHSFbTnfa Rb1GNDNcjUDHB817AwwNH1y7+ZTzYuZZ8UCN6ZvKLhZyfPBGRaFwJELYmAd3N/vT A9K2j+Ylf0nDQNcTt9msDMezdBdwjKt4OtpS/ih/Hr3MouLaMFGG9l3RpFuZcdHr hrGoU/udv72ywmuc9acbEHVGgqeYhx4TgmBe+Idi3OkTeZflOGANhn9cTve9LTLV sMElzgM0zknbS1TTm8CkJaCaA40+cFl+y6e+xCkl0ul8suvtYw9yl5KN2FVzd9aL ce5VilSuBD1p6VHagfiBxcQsG2du6h7b8JLPjvnDkJgV+7SKsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI07Lo1R2CangqvuY/MBML5W3JgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMGE4MDI5ZjAtYmNkYi0z ZDRiLTk5NmQtZDhjYjk0Yzg3MTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfhMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESIVAYXz+oREllJTn4R4ADgy1Qk7OIu+zhCBuqZWxUQHyn9eoI8m6Kf 0a1J5hGf4CXVkCeKuW+dCtTX+wh+7Tw+8H8NEX1Id5cStAcQXq+ZJnQHS0HT6ezA aVF93o85Rg3vQk+ABVft++56tjzxNmhLfedKqDqn/IHUSDw+6+u5hpnwu4BasbGG KqSDuSFRYfuI0a/UcucmwypbKQwO61QnS8rS+mwY/ufO/JWbmuDy5k/727WMi/IG oHkj4mALhg5yEYOqjS4+8jErtUYmY7NKNR8J8CKFlLiGYaa7CkOUN3QnqoLCLK3L QF4VRhJ4C9NBFIhfdNe48qjQ0QlLndU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:00 2025 by rpki-client