$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa File: b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa (raw, json) Hash identifier: GyhWhirSkTuwM5dKXGGXoamin3HdNBNm0p6XshdD+Y8= Subject key identifier: C8:86:57:15:EA:9D:03:8A:D9:55:96:B5:51:6E:D1:1A:D9:D0:0A:66 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584ACB40E635A0315EF967258700 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 399629 IP address blocks: 193.149.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:e6:35:a0:31:5e:f9:67:25:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=399f0433-9b9e-46f3-87e4-9b12998cf3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:ff:ee:bb:a5:74:aa:71:a9:8a:32:ec:ff: 17:ee:1f:ae:1e:46:c4:24:82:dc:12:87:14:68:15: d0:8a:77:03:68:27:ef:eb:1c:2d:46:39:66:0e:2f: 53:fc:b4:e8:c2:92:f9:8e:bd:a7:da:26:9a:a1:29: 88:c6:bf:9e:63:78:d7:04:26:51:00:33:45:1d:9b: 84:a3:1c:93:35:44:de:1e:f4:88:30:8b:09:f4:f7: 42:8d:94:24:36:2b:b1:68:dd:f6:01:c0:d1:37:22: 0b:27:b0:fa:31:51:51:e1:43:70:1a:84:61:71:5f: 4a:d0:3e:9c:23:14:35:71:1c:2d:1b:f2:c6:e4:3f: 93:5c:ed:f3:e4:03:48:ce:1a:5e:12:ca:5e:c2:f5: bd:5d:ad:dd:d3:68:e3:ee:04:17:3d:87:8f:66:ed: 93:2b:a3:b7:e7:37:fb:da:d9:07:63:cc:b4:c1:c6: d8:b3:fc:1a:a2:82:81:d6:57:7b:1f:8c:af:42:f9: 8d:3f:b6:e8:47:b3:1e:3e:67:f5:f2:43:1a:a7:04: 8b:ed:c7:b8:60:93:56:99:a9:2b:18:99:58:fe:4f: 34:48:a4:a0:ed:0a:77:1e:9c:61:df:21:1e:6b:a4: a1:57:67:14:8f:6c:2c:b3:74:dc:56:14:2f:8d:ea: 2f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:86:57:15:EA:9D:03:8A:D9:55:96:B5:51:6E:D1:1A:D9:D0:0A:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 193.149.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:71:30:19:1c:23:0c:c7:96:dc:78:23:d0:0b:c7:32:65:90: 78:65:6c:42:5e:03:43:ad:2e:8d:3c:98:1d:3e:5b:64:a8:7d: 03:df:6d:cb:e2:6d:9e:51:e6:e3:93:7b:16:7e:67:a5:28:cf: eb:4e:37:0f:ed:30:86:95:55:86:73:be:6b:ab:11:92:51:c4: 73:be:80:06:51:95:3b:7d:36:24:56:7f:b2:8a:19:7c:e6:93: fa:00:fa:20:d7:65:f5:dd:ad:84:22:12:33:22:62:d5:e5:a0: 5d:d2:2f:7c:8b:45:db:00:15:cc:c7:ca:7f:64:4d:7d:35:c0: d9:ae:d6:8e:c2:a5:ae:7a:38:87:70:d1:6b:85:3c:41:9b:03: 9c:e7:d6:5f:d9:31:18:18:a4:5b:76:c1:ca:07:df:c7:61:b6: 15:cb:9e:1e:0a:50:8a:4e:49:83:8e:a6:ab:d0:9f:2e:d2:fd: 1e:79:92:57:3c:97:20:e9:ec:e3:49:da:cf:e9:f5:ca:4e:ca: 61:24:c7:08:4e:89:be:15:2e:51:1f:6e:24:9c:97:b4:fd:99: 2d:97:a0:dd:54:7d:30:7e:26:96:09:d5:32:3a:02:e2:d7:29: ac:8e:dc:9f:98:04:7a:ab:79:04:4c:87:91:26:ee:1c:c9:85: 54:c5:3d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQOY1oDFe+WclhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk Mzk5ZjA0MzMtOWI5ZS00NmYzLTg3ZTQtOWIxMjk5OGNmM2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouD/7ruldKpxqYoy7P8X7h+uHkbEJILcEocU aBXQincDaCfv6xwtRjlmDi9T/LTowpL5jr2n2iaaoSmIxr+eY3jXBCZRADNFHZuE oxyTNUTeHvSIMIsJ9PdCjZQkNiuxaN32AcDRNyILJ7D6MVFR4UNwGoRhcV9K0D6c IxQ1cRwtG/LG5D+TXO3z5ANIzhpeEspewvW9Xa3d02jj7gQXPYePZu2TK6O35zf7 2tkHY8y0wcbYs/waooKB1ld7H4yvQvmNP7boR7MePmf18kMapwSL7ce4YJNWmakr GJlY/k80SKSg7Qp3Hpxh3yEea6ShV2cUj2wss3TcVhQvjeovCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiGVxXqnQOK2VWWtVFu0RrZ0ApmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYjZmYWFlNGYtNTM3Ny0z ODQwLTg4ZDEtZTk0NzVjYjRiMmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZW5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFxMBkcIwzHltx4I9ALxzJlkHhlbEJeA0OtLo08mB0+W2SofQPfbcvi bZ5R5uOTexZ+Z6Uoz+tONw/tMIaVVYZzvmurEZJRxHO+gAZRlTt9NiRWf7KKGXzm k/oA+iDXZfXdrYQiEjMiYtXloF3SL3yLRdsAFczHyn9kTX01wNmu1o7Cpa56OIdw 0WuFPEGbA5zn1l/ZMRgYpFt2wcoH38dhthXLnh4KUIpOSYOOpqvQny7S/R55klc8 lyDp7ONJ2s/p9cpOymEkxwhOib4VLlEfbiScl7T9mS2XoN1UfTB+JpYJ1TI6AuLX KayO3J+YBHqreQRMh5Em7hzJhVTFPeI= -----END CERTIFICATE-----Generated at Thu Aug 21 10:26:05 2025 by rpki-client