$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa File: b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa (raw, json) Hash identifier: EHr1462kj+pMwjIxslCpZeeOqwxAaVgkhtXegR2dE5s= Subject key identifier: 4E:4F:54:7B:A2:86:0D:70:84:C1:F5:C1:23:E4:84:CF:53:3A:38:DB Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F432858482BF553B87C178E7B9F502F40 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa Signing time: Wed 11 Dec 2024 14:00:52 +0000 ROA not before: Wed 11 Dec 2024 14:00:52 +0000 ROA not after: Tue 11 Mar 2025 13:00:52 +0000 asID: 399629 IP address blocks: 193.149.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2b:f5:53:b8:7c:17:8e:7b:9f:50:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Dec 11 14:00:52 2024 GMT Not After : Mar 11 13:00:52 2025 GMT Subject: CN=36373ec6-4600-4131-8420-c448de9e3f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:16:af:e2:0c:0f:5b:60:c7:93:c3:b2:a4:37: a2:0f:76:3c:4b:4b:d7:d3:f0:b4:70:f7:ef:7c:fc: 7f:88:f6:07:26:7d:31:e8:02:d1:f4:9f:89:92:60: 59:bc:3c:23:ec:df:65:23:4b:08:92:6f:24:a9:cd: a2:28:ef:97:9f:e4:56:be:56:65:10:78:3b:7f:44: a3:98:f1:d7:18:6d:ae:be:04:df:44:95:e5:7f:da: be:78:f4:04:81:58:be:f9:21:56:5a:b3:aa:c9:52: cc:c7:c2:51:01:8c:db:5d:7f:71:75:e6:bd:af:a8: 9c:59:b6:5b:f9:53:56:de:10:94:f7:03:e6:b5:c9: c7:2a:19:e0:2b:3d:34:74:77:a2:c9:00:44:bf:45: 0a:c5:cb:09:4d:84:c0:14:05:8c:c4:d3:d3:4a:21: 9b:bf:e9:86:a0:2c:c8:68:4a:03:36:69:e9:3e:ad: f1:1e:37:1f:65:a0:09:fd:76:a0:37:a1:96:61:b0: 4c:2c:d7:ad:73:81:24:cb:62:00:ea:40:14:da:e7: ac:ca:89:4a:be:95:09:04:96:a1:83:a9:6f:9c:4e: e7:c5:d1:9a:96:9b:3a:93:e7:cc:ee:a7:c9:80:b7: 18:46:2c:1f:db:1d:17:ff:5e:59:53:58:54:8d:a0: 24:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4F:54:7B:A2:86:0D:70:84:C1:F5:C1:23:E4:84:CF:53:3A:38:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 193.149.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:78:eb:cc:19:4b:08:7f:35:3e:cf:22:cc:7c:bf:d5:24:5f: 5b:e5:bb:7b:68:df:8a:39:25:b2:ff:40:db:07:3b:92:15:81: cb:d7:7b:6a:32:46:66:d9:d1:a1:8a:5c:56:9c:13:98:7f:b4: 50:2e:dd:e4:c0:c7:33:22:09:5f:36:2c:ed:54:85:57:47:91: 17:08:ed:07:04:ae:cc:48:e2:9c:2f:4d:2c:60:25:58:84:49: aa:df:75:c2:d1:0a:83:14:2f:f2:47:bb:75:8e:77:4d:8b:4f: b4:a1:a8:0e:fa:7c:44:26:78:45:f7:35:5d:ba:3c:e0:f9:c2: 12:30:dd:0a:7f:17:a1:3d:a0:97:a2:9e:61:84:7d:fb:e1:fb: 8a:be:9f:11:c7:44:8f:2e:1a:b0:78:72:f1:3d:ec:e6:cb:88: 34:d6:85:38:76:1a:36:a2:0f:da:4a:8b:1a:1d:69:64:07:70: 72:1e:ef:f5:c2:e2:98:0c:87:75:ef:14:b8:b4:c9:09:df:13: 88:71:38:9c:d7:e8:63:68:a6:4e:0d:24:d6:d5:3e:b1:3c:64: 0e:b2:c6:92:f3:6e:32:63:85:3f:2b:cc:be:87:a9:07:8e:77: c7:20:8d:5d:18:56:40:f3:83:fd:65:31:9d:e4:e7:ae:50:d7: 9e:dc:d4:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9VO4fBeOe59QL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk MzYzNzNlYzYtNDYwMC00MTMxLTg0MjAtYzQ0OGRlOWUzZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBav4gwPW2DHk8OypDeiD3Y8S0vX0/C0cPfv fPx/iPYHJn0x6ALR9J+JkmBZvDwj7N9lI0sIkm8kqc2iKO+Xn+RWvlZlEHg7f0Sj mPHXGG2uvgTfRJXlf9q+ePQEgVi++SFWWrOqyVLMx8JRAYzbXX9xdea9r6icWbZb +VNW3hCU9wPmtcnHKhngKz00dHeiyQBEv0UKxcsJTYTAFAWMxNPTSiGbv+mGoCzI aEoDNmnpPq3xHjcfZaAJ/XagN6GWYbBMLNetc4Eky2IA6kAU2uesyolKvpUJBJah g6lvnE7nxdGalps6k+fM7qfJgLcYRiwf2x0X/15ZU1hUjaAkvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5PVHuihg1whMH1wSPkhM9TOjjbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYjZmYWFlNGYtNTM3Ny0z ODQwLTg4ZDEtZTk0NzVjYjRiMmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZW5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp468wZSwh/NT7PIsx8v9UkX1vlu3to34o5JbL/QNsHO5IVgcvXe2oy RmbZ0aGKXFacE5h/tFAu3eTAxzMiCV82LO1UhVdHkRcI7QcErsxI4pwvTSxgJViE SarfdcLRCoMUL/JHu3WOd02LT7ShqA76fEQmeEX3NV26POD5whIw3Qp/F6E9oJei nmGEffvh+4q+nxHHRI8uGrB4cvE97ObLiDTWhTh2GjaiD9pKixodaWQHcHIe7/XC 4pgMh3XvFLi0yQnfE4hxOJzX6GNopk4NJNbVPrE8ZA6yxpLzbjJjhT8rzL6HqQeO d8cgjV0YVkDzg/1lMZ3k565Q157c1IM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:31 2025 by rpki-client