$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa File: d1a4c516-eb99-30e0-b49a-13082dc83820.roa (raw, json) Hash identifier: Vn4LmBoLXZsfwTfCxlAKhzVdt7ueTOPUv+4Jfgqf9qA= Subject key identifier: 0B:6A:1A:D1:87:9C:F4:A1:67:E5:4B:59:C7:89:C3:B6:97:95:6B:5F Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F432858490B4C209012C2C67A77A77000 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 399629 IP address blocks: 195.85.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:20:90:12:c2:c6:7a:77:a7:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=b3db8db1-3d2a-43eb-b85e-713d1f473670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:18:c9:26:cc:fc:c2:0b:bb:76:50:aa:14: 7f:91:f8:f2:82:bf:69:ac:1a:02:b3:d7:6d:f6:bd: e7:bf:84:62:fb:d2:77:31:fa:31:45:5c:86:ae:0d: 86:20:09:bd:f6:bc:b3:19:68:d2:ba:44:2f:45:a9: 19:25:77:22:07:9e:55:b2:45:b3:24:8a:b9:a1:9b: 5c:41:aa:b0:f6:8f:7f:08:fc:71:83:74:7c:58:46: 65:50:7f:e3:2f:b3:5a:8f:a5:a0:64:3b:9b:fc:0a: 59:4d:d3:e6:25:1e:da:f7:54:bf:25:a0:af:91:c6: 8a:b8:3c:34:11:b0:16:f8:af:68:62:2f:62:24:51: 79:03:83:27:a7:6a:02:b6:60:60:58:ac:da:a6:41: a3:92:ca:07:41:06:6d:ed:b5:40:b6:2f:6c:66:33: 16:6d:79:96:01:69:15:7a:84:76:84:aa:54:ec:fd: 1d:20:db:02:36:12:1c:c4:6a:cf:f4:f2:48:2b:17: 9e:03:5f:19:fb:47:68:f5:94:bf:a7:1c:35:1a:b7: ef:46:5a:8b:09:23:e9:06:79:9f:aa:14:e9:67:1e: 84:76:83:45:49:31:b7:d8:50:c3:f4:e2:5b:0c:7e: 79:5f:14:37:1c:cc:51:5f:36:36:44:b4:83:79:7e: 0f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6A:1A:D1:87:9C:F4:A1:67:E5:4B:59:C7:89:C3:B6:97:95:6B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 195.85.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:41:1f:f6:15:05:2a:aa:4a:3b:01:bb:40:92:39:87:2c:44: af:53:da:a0:83:84:37:4b:0f:bc:f8:58:47:e0:dc:0f:f8:6d: 36:bd:e4:0a:86:46:fa:70:a2:a1:d7:be:47:17:6e:e6:17:47: 46:72:23:77:97:a3:13:b4:9a:55:54:46:b1:18:04:c3:fd:02: 82:4b:04:98:20:92:88:7c:09:11:e3:46:58:0d:b2:0f:7d:65: 7f:8b:f8:44:0f:c4:c0:24:3b:5b:cf:a1:7c:37:e7:68:32:3c: 9a:80:f7:61:50:28:d0:ea:c5:f6:13:95:7c:32:fd:6a:c4:4d: 03:4d:03:2b:a3:6b:a9:23:77:f5:f4:e2:a4:1d:a7:8e:26:78: 77:25:64:d4:92:15:64:7d:e2:0f:f5:5b:c8:bc:47:dc:ec:e6: ce:2a:ed:60:75:6f:8f:99:a9:06:ad:fb:6f:e1:9e:0c:48:ad: c1:86:5a:1d:9b:3f:6b:f5:7e:ab:4e:50:17:93:27:51:40:03: 04:8d:c6:23:7d:ec:ca:37:5f:59:35:84:4b:7f:55:36:4d:35: c5:23:c1:76:b6:df:ac:18:89:0a:4c:7c:2e:c8:e1:61:1c:c3: a8:0d:13:a3:6a:57:9e:4b:b3:b8:3c:60:34:e2:a7:1a:2e:c3: 66:e8:2d:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCCQEsLGenencAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YjNkYjhkYjEtM2QyYS00M2ViLWI4NWUtNzEzZDFmNDczNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPYYySbM/MILu3ZQqhR/kfjygr9prBoCs9dt 9r3nv4Ri+9J3MfoxRVyGrg2GIAm99ryzGWjSukQvRakZJXciB55VskWzJIq5oZtc Qaqw9o9/CPxxg3R8WEZlUH/jL7Naj6WgZDub/ApZTdPmJR7a91S/JaCvkcaKuDw0 EbAW+K9oYi9iJFF5A4Mnp2oCtmBgWKzapkGjksoHQQZt7bVAti9sZjMWbXmWAWkV eoR2hKpU7P0dINsCNhIcxGrP9PJIKxeeA18Z+0do9ZS/pxw1GrfvRlqLCSPpBnmf qhTpZx6EdoNFSTG32FDD9OJbDH55XxQ3HMxRXzY2RLSDeX4P2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtqGtGHnPShZ+VLWceJw7aXlWtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZDFhNGM1MTYtZWI5OS0z MGUwLWI0OWEtMTMwODJkYzgzODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1VyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJBH/YVBSqqSjsBu0CSOYcsRK9T2qCDhDdLD7z4WEfg3A/4bTa95AqG RvpwoqHXvkcXbuYXR0ZyI3eXoxO0mlVURrEYBMP9AoJLBJggkoh8CRHjRlgNsg99 ZX+L+EQPxMAkO1vPoXw352gyPJqA92FQKNDqxfYTlXwy/WrETQNNAyuja6kjd/X0 4qQdp44meHclZNSSFWR94g/1W8i8R9zs5s4q7WB1b4+ZqQat+2/hngxIrcGGWh2b P2v1fqtOUBeTJ1FAAwSNxiN97Mo3X1k1hEt/VTZNNcUjwXa236wYiQpMfC7I4WEc w6gNE6NqV55Ls7g8YDTipxouw2boLbk= -----END CERTIFICATE-----Generated at Fri Mar 14 09:09:40 2025 by rpki-client