$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c3413d44-6361-3bcc-85d8-85eba7c9db70.roa File: c3413d44-6361-3bcc-85d8-85eba7c9db70.roa (raw, json) Hash identifier: oZK3JaeuAFG9jBPqR1lRWUwNRst5K0Fp8UX5VKuMSLI= Subject key identifier: 1C:38:C4:2F:2C:C1:F5:C8:2B:2A:B2:4E:26:04:54:3E:89:4C:80:B7 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584902EC0D7514CF57C5226E2440 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c3413d44-6361-3bcc-85d8-85eba7c9db70.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 399629 IP address blocks: 206.166.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:0d:75:14:cf:57:c5:22:6e:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=efbedb4c-477b-4fc4-854e-19f2c1de60c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cf:39:fb:55:84:fa:7f:51:dd:6d:b0:8c:a1: f7:3b:3c:3b:76:38:30:c3:d6:02:f8:fe:dc:3d:66: 82:c2:2b:a8:a2:da:7c:d7:bf:c7:b8:67:ae:1a:51: bc:0b:97:61:f3:06:92:62:d6:b5:34:1a:08:c1:f3: 2a:2b:01:6b:d8:d4:fe:4c:20:89:ae:ff:e3:31:77: 1c:91:0b:19:8e:f5:23:64:ae:9a:af:b3:91:b1:87: 2e:b9:c4:02:01:f4:41:31:38:2a:a8:e7:ce:7b:ee: e4:f9:f4:e1:46:0b:f9:d6:d1:81:87:69:73:b1:d5: 01:f4:c0:60:30:4e:d4:1e:a7:85:a1:e5:2b:a9:82: b4:7c:1f:18:2e:93:10:37:5b:a3:89:6e:9a:b8:8e: 2a:dd:72:e9:2f:2f:33:9b:bb:49:a2:73:6a:56:fb: 1d:d0:12:1a:6b:fb:09:17:d6:30:60:56:2e:57:d5: 6c:27:af:59:81:2e:9a:9c:9b:24:30:a4:81:ee:51: 08:56:55:57:58:8c:de:85:38:10:86:42:fc:50:c5: 38:e6:8f:6d:10:b8:71:5c:a4:8d:4c:3e:55:e8:ea: 3b:3a:a2:ee:56:fa:cd:85:a5:06:aa:a3:5f:a7:6f: 42:4c:38:4c:1e:f8:b9:72:2e:d7:b2:e0:48:a2:51: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:38:C4:2F:2C:C1:F5:C8:2B:2A:B2:4E:26:04:54:3E:89:4C:80:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c3413d44-6361-3bcc-85d8-85eba7c9db70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 206.166.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f2:f4:a9:51:f6:80:c8:43:c2:1b:fc:97:b5:9b:6a:ec:68: c4:3d:16:a9:26:4d:3c:0f:bf:df:a6:a2:65:7b:0e:bc:58:9d: 8c:b6:4a:33:0b:30:6d:bc:4a:7c:2d:16:93:59:2d:c0:4e:1b: 81:52:01:01:90:25:a0:32:e8:8e:f0:ad:7b:09:0a:43:76:65: 72:ee:c7:13:84:79:75:1f:12:6d:f8:e1:24:af:0d:97:39:e3: 70:f1:e8:44:45:47:70:e3:07:3e:e7:fd:71:7a:96:02:0d:76: d0:db:c6:03:c9:29:04:6a:1e:4e:6d:74:d1:c1:42:94:16:85: 20:da:26:07:3a:77:cc:2e:5c:e8:82:fa:a9:30:32:44:6b:57: a7:0b:29:c0:3e:fd:a0:40:86:f0:db:56:32:ef:28:c1:70:31: 49:1f:02:00:18:b9:4a:9a:60:78:07:7a:84:e1:90:e2:b0:62: 97:66:ef:5a:32:76:61:11:34:98:80:09:9c:f6:dd:61:57:90: 1c:11:dc:21:ef:b0:04:f5:b0:86:c0:f3:68:f7:b8:64:4c:87: 37:bc:18:6e:68:ae:9e:35:a5:0c:b9:83:16:c6:e2:8c:18:d9: ab:83:a3:8a:66:87:eb:e4:42:84:8d:ba:7f:25:3a:07:4f:72: a7:56:a3:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7A11FM9XxSJuJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZWZiZWRiNGMtNDc3Yi00ZmM0LTg1NGUtMTlmMmMxZGU2MGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM85+1WE+n9R3W2wjKH3Ozw7djgww9YC+P7c PWaCwiuootp817/HuGeuGlG8C5dh8waSYta1NBoIwfMqKwFr2NT+TCCJrv/jMXcc kQsZjvUjZK6ar7ORsYcuucQCAfRBMTgqqOfOe+7k+fThRgv51tGBh2lzsdUB9MBg ME7UHqeFoeUrqYK0fB8YLpMQN1ujiW6auI4q3XLpLy8zm7tJonNqVvsd0BIaa/sJ F9YwYFYuV9VsJ69ZgS6anJskMKSB7lEIVlVXWIzehTgQhkL8UMU45o9tELhxXKSN TD5V6Oo7OqLuVvrNhaUGqqNfp29CTDhMHvi5ci7XsuBIolFBbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw4xC8swfXIKyqyTiYEVD6JTIC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYzM0MTNkNDQtNjM2MS0z YmNjLTg1ZDgtODVlYmE3YzlkYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqb7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXy9KlR9oDIQ8Ib/Je1m2rsaMQ9FqkmTTwPv9+momV7DrxYnYy2SjML MG28SnwtFpNZLcBOG4FSAQGQJaAy6I7wrXsJCkN2ZXLuxxOEeXUfEm344SSvDZc5 43Dx6ERFR3DjBz7n/XF6lgINdtDbxgPJKQRqHk5tdNHBQpQWhSDaJgc6d8wuXOiC +qkwMkRrV6cLKcA+/aBAhvDbVjLvKMFwMUkfAgAYuUqaYHgHeoThkOKwYpdm71oy dmERNJiACZz23WFXkBwR3CHvsAT1sIbA82j3uGRMhze8GG5orp41pQy5gxbG4owY 2auDo4pmh+vkQoSNun8lOgdPcqdWozg= -----END CERTIFICATE-----Generated at Fri Mar 14 09:28:52 2025 by rpki-client