$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c3413d44-6361-3bcc-85d8-85eba7c9db70.roa File: c3413d44-6361-3bcc-85d8-85eba7c9db70.roa (raw, json) Hash identifier: UNt3p2qC5RlGkBG6sSsVHcuVJMq38VA/kyRfXFaxk5s= Subject key identifier: FE:54:E3:D1:C5:0D:28:CD:92:92:C5:1D:B4:36:1D:6F:9C:2C:D7:E8 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F43285848222FE1F09DA5574FFECAC580 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c3413d44-6361-3bcc-85d8-85eba7c9db70.roa Signing time: Sun 08 Dec 2024 02:00:39 +0000 ROA not before: Sun 08 Dec 2024 02:00:39 +0000 ROA not after: Sat 08 Mar 2025 02:00:39 +0000 asID: 399629 IP address blocks: 206.166.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:22:2f:e1:f0:9d:a5:57:4f:fe:ca:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Dec 8 02:00:39 2024 GMT Not After : Mar 8 02:00:39 2025 GMT Subject: CN=a2bdd773-6353-4330-b7c6-31117d853c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:68:78:aa:99:6c:a4:29:c3:16:fd:d4:20:7a: 01:ef:38:7f:fa:7c:13:04:04:1b:7b:ec:ef:83:c6: 6b:c9:91:0b:0e:ca:a1:a0:f1:40:2a:9e:5d:2b:91: 93:8b:a9:3c:15:1a:ee:35:74:18:61:de:9c:66:4a: 51:c8:b4:0c:2d:6d:25:60:65:16:6a:31:a6:a8:be: ba:ed:f7:fb:c4:f3:36:1a:22:92:d1:40:56:84:0f: 3d:de:51:d3:cb:bd:5b:27:05:5c:b5:6a:51:57:e8: 01:6b:31:8f:2b:23:99:33:5c:83:d0:63:2a:cc:32: 78:41:50:da:11:5d:b3:d6:bb:80:0a:e4:f7:82:0e: 6f:6e:1f:2c:7a:2e:b4:43:2d:b8:20:99:57:df:01: a9:25:99:c7:4d:85:1e:60:d3:27:eb:14:98:40:0f: 08:ca:47:72:f7:20:c0:4f:eb:ff:17:0f:b1:46:af: 85:dc:b4:59:f9:1d:c1:b8:c6:3e:7b:8d:4c:5a:f8: 3a:13:aa:de:02:d9:79:46:a8:df:3a:35:21:0d:35: 8a:91:6e:87:64:b1:f7:a3:13:01:d9:6c:b7:26:f7: 13:3d:82:5b:52:15:d6:09:3b:8f:4a:07:fd:a5:a3: e0:59:ea:c3:c8:3d:20:53:2f:dc:15:ac:84:43:f3: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:54:E3:D1:C5:0D:28:CD:92:92:C5:1D:B4:36:1D:6F:9C:2C:D7:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c3413d44-6361-3bcc-85d8-85eba7c9db70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 206.166.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d3:7b:bc:a1:2a:2b:2e:e3:f4:25:0f:cb:a9:bf:6e:72:5f: b8:1c:3a:a7:16:fa:3e:f3:b2:65:6a:de:d4:6c:84:4d:84:99: c1:27:8a:d1:78:35:e1:05:20:41:92:ec:80:a5:ae:6e:1a:f7: 4a:76:32:53:66:83:0b:ac:1e:37:c4:6e:b1:28:1f:ee:34:8d: e3:a4:9d:29:ce:29:e2:a9:c7:a0:3f:72:02:0a:db:24:18:ba: da:a9:12:7c:f8:8c:61:75:70:2f:e0:d5:5f:99:b9:b0:3a:80: e9:7c:1e:56:f7:b2:64:91:cd:68:35:5a:19:64:05:cd:12:38: 41:d6:94:21:55:d5:c3:25:9c:1d:77:e2:94:35:4b:bf:a2:02: 20:00:70:04:d7:c0:19:de:06:81:c9:75:43:9b:b6:a7:35:62: 6c:e1:7f:65:a0:16:5b:8c:61:88:6a:e5:89:89:da:89:90:f2: d5:8c:48:58:55:7a:1c:4b:55:7d:3e:13:54:bd:9b:3f:4f:4b: 07:93:f4:0e:62:ec:bc:dd:0a:da:5e:60:af:57:5e:e1:76:33: e3:a4:5a:ef:ab:08:f4:e7:8e:46:a8:d7:64:86:dc:81:ca:0d: c2:1e:51:7e:ab:05:1c:63:b0:7d:9e:3f:f7:76:24:8c:f6:21: bf:04:3c:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+HwnaVXT/7KxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk YTJiZGQ3NzMtNjM1My00MzMwLWI3YzYtMzExMTdkODUzYzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWh4qplspCnDFv3UIHoB7zh/+nwTBAQbe+zv g8ZryZELDsqhoPFAKp5dK5GTi6k8FRruNXQYYd6cZkpRyLQMLW0lYGUWajGmqL66 7ff7xPM2GiKS0UBWhA893lHTy71bJwVctWpRV+gBazGPKyOZM1yD0GMqzDJ4QVDa EV2z1ruACuT3gg5vbh8sei60Qy24IJlX3wGpJZnHTYUeYNMn6xSYQA8Iykdy9yDA T+v/Fw+xRq+F3LRZ+R3BuMY+e41MWvg6E6reAtl5RqjfOjUhDTWKkW6HZLH3oxMB 2Wy3JvcTPYJbUhXWCTuPSgf9paPgWerDyD0gUy/cFayEQ/PuZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5U49HFDSjNkpLFHbQ2HW+cLNfoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYzM0MTNkNDQtNjM2MS0z YmNjLTg1ZDgtODVlYmE3YzlkYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqb7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILTe7yhKisu4/QlD8upv25yX7gcOqcW+j7zsmVq3tRshE2EmcEnitF4 NeEFIEGS7IClrm4a90p2MlNmgwusHjfEbrEoH+40jeOknSnOKeKpx6A/cgIK2yQY utqpEnz4jGF1cC/g1V+ZubA6gOl8Hlb3smSRzWg1WhlkBc0SOEHWlCFV1cMlnB13 4pQ1S7+iAiAAcATXwBneBoHJdUObtqc1Ymzhf2WgFluMYYhq5YmJ2omQ8tWMSFhV ehxLVX0+E1S9mz9PSweT9A5i7LzdCtpeYK9XXuF2M+OkWu+rCPTnjkao12SG3IHK DcIeUX6rBRxjsH2eP/d2JIz2Ib8EPIk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:59 2025 by rpki-client