$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f34ffcc2-c389-3111-92c8-f0e01b81110f.roa File: f34ffcc2-c389-3111-92c8-f0e01b81110f.roa (raw, json) Hash identifier: 57qCKoRpfkkEQLdm6wo3kYW/fnSalNHoa93qy7hfKEA= Subject key identifier: 1F:1E:54:71:5E:6D:9B:8B:88:10:42:9E:30:E9:32:F9:7B:E6:85:02 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584832F027F45FB9D463FAB78DC0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f34ffcc2-c389-3111-92c8-f0e01b81110f.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 399629 IP address blocks: 193.149.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:27:f4:5f:b9:d4:63:fa:b7:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=092dd3f6-81be-4919-b72f-ffdc8b1937b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:a8:25:af:a3:4d:cc:9a:d3:f3:9b:25:b7: 54:b9:2c:81:e7:9d:1c:bf:35:0d:4b:c3:f8:51:e4: 2b:a9:77:dc:13:99:e6:bc:4f:e1:9c:f0:f0:bd:5a: a5:33:81:8d:57:ba:5d:36:ce:86:fc:49:17:fe:71: 66:b1:b5:23:e4:13:6b:ab:b3:13:48:6b:12:73:6c: 31:9f:8a:a9:bf:5a:2d:5c:63:d6:ba:e3:c6:d3:f9: ea:b1:02:18:3a:09:17:78:69:67:ef:32:cd:4e:9f: d1:f1:ee:11:3e:0c:78:90:34:e0:29:d6:55:35:a1: 20:1a:f2:1a:cf:85:95:f8:f7:c2:50:b7:06:b2:d5: 1b:db:07:32:95:b9:37:6e:b6:39:c5:59:dd:45:41: 10:3e:18:b1:96:27:ad:8d:5b:82:8b:ae:11:59:85: 0d:e8:76:bb:ed:84:a4:40:14:43:e7:69:99:c8:57: 36:8e:7d:d8:75:18:05:41:ec:56:2e:3a:2f:03:48: 90:2a:22:6d:1d:bd:32:c7:cb:be:cd:c9:6c:81:94: 34:57:16:cc:07:ee:c9:13:92:b3:65:0e:eb:ab:9e: 41:1d:97:aa:55:b3:4a:73:0b:9a:e8:1f:b3:92:7e: 93:11:b6:e5:1f:eb:9d:39:32:8a:f2:f8:1d:6e:77: ab:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1E:54:71:5E:6D:9B:8B:88:10:42:9E:30:E9:32:F9:7B:E6:85:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f34ffcc2-c389-3111-92c8-f0e01b81110f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 193.149.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3c:ad:f9:49:1c:66:15:dd:52:ed:7e:71:9a:65:eb:30:c4: 45:d0:1e:dd:0d:c9:03:d2:8e:8f:87:4e:97:47:db:b5:7a:22: 49:b3:d0:f1:63:37:cd:f9:78:b5:0c:38:6e:09:c3:da:c5:6d: a5:8b:1a:09:4e:13:1c:7c:d1:cf:63:d2:8f:2b:7d:2f:16:ca: 8f:41:cb:f0:b9:1f:6f:98:25:ec:c7:a9:c8:fb:d6:6b:9c:ba: 50:41:ec:15:81:4d:7b:2f:d4:c4:e5:cf:c8:d0:35:bf:f1:3d: 3b:e9:e6:e1:fe:c5:a8:c7:a1:a5:09:60:2a:ad:3c:54:69:29: 4b:ae:c0:f8:2f:4e:c5:a9:aa:01:cb:55:f4:6f:09:95:19:1c: 1e:e0:e0:40:83:22:aa:82:23:3b:1e:66:6f:0e:9a:8e:21:ca: b7:7f:3a:f9:93:0e:2f:f2:b3:b3:70:88:12:86:b8:d9:49:35: cb:f8:6e:62:ab:2a:5f:00:19:56:ae:1d:1f:bb:d7:d4:2a:0b: 18:b1:4b:7f:4c:57:ff:87:5a:a2:e8:cd:49:af:aa:4d:ec:8e: a5:11:69:f8:92:05:24:ea:ec:b8:e1:ab:7c:1b:f6:4c:86:87: 88:f8:b1:da:99:86:52:9f:40:dd:1c:bd:c4:cc:b6:40:2a:09: e5:84:cf:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8Cf0X7nUY/q3jcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk MDkyZGQzZjYtODFiZS00OTE5LWI3MmYtZmZkYzhiMTkzN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+aoJa+jTcya0/ObJbdUuSyB550cvzUNS8P4 UeQrqXfcE5nmvE/hnPDwvVqlM4GNV7pdNs6G/EkX/nFmsbUj5BNrq7MTSGsSc2wx n4qpv1otXGPWuuPG0/nqsQIYOgkXeGln7zLNTp/R8e4RPgx4kDTgKdZVNaEgGvIa z4WV+PfCULcGstUb2wcylbk3brY5xVndRUEQPhixlietjVuCi64RWYUN6Ha77YSk QBRD52mZyFc2jn3YdRgFQexWLjovA0iQKiJtHb0yx8u+zclsgZQ0VxbMB+7JE5Kz ZQ7rq55BHZeqVbNKcwua6B+zkn6TEbblH+udOTKK8vgdbnerwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8eVHFebZuLiBBCnjDpMvl75oUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZjM0ZmZjYzItYzM4OS0z MTExLTkyYzgtZjBlMDFiODExMTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZWBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY8rflJHGYV3VLtfnGaZeswxEXQHt0NyQPSjo+HTpdH27V6Ikmz0PFj N835eLUMOG4Jw9rFbaWLGglOExx80c9j0o8rfS8Wyo9By/C5H2+YJezHqcj71muc ulBB7BWBTXsv1MTlz8jQNb/xPTvp5uH+xajHoaUJYCqtPFRpKUuuwPgvTsWpqgHL VfRvCZUZHB7g4ECDIqqCIzseZm8Omo4hyrd/OvmTDi/ys7NwiBKGuNlJNcv4bmKr Kl8AGVauHR+719QqCxixS39MV/+HWqLozUmvqk3sjqURafiSBSTq7Ljhq3wb9kyG h4j4sdqZhlKfQN0cvcTMtkAqCeWEz9M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:16 2025 by rpki-client