$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f34ffcc2-c389-3111-92c8-f0e01b81110f.roa File: f34ffcc2-c389-3111-92c8-f0e01b81110f.roa (raw, json) Hash identifier: v8J8LvTDmwAF075FEkRPbmCtEiW7bEnrTgoSsfmTFmM= Subject key identifier: 9C:75:9B:E1:A8:7C:33:8D:4A:57:9A:64:FD:FF:92:B4:72:A3:7A:31 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F432858491246A807B4176FAA2E35E880 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f34ffcc2-c389-3111-92c8-f0e01b81110f.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 399629 IP address blocks: 193.149.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a8:07:b4:17:6f:aa:2e:35:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1bd05448-942d-4635-9a9f-2f383b7819a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:93:07:4b:7a:22:4a:03:ff:8a:4d:bb:2c: 13:d1:c6:72:67:39:c5:b9:05:1c:05:a1:d4:e4:5d: 21:4f:0f:98:79:b2:7b:56:5e:e6:83:18:81:e9:f3: 7a:84:53:a8:27:4f:a0:20:e8:3c:86:91:6e:29:30: 3c:10:8d:cb:db:f0:2e:af:76:19:b7:50:0d:20:86: 02:e6:7b:2d:30:ef:02:ad:bb:ec:c6:9f:a8:7c:4b: a5:24:a2:01:76:fc:63:0d:1f:ea:72:f4:09:dd:5e: ad:40:ce:ef:8f:b3:13:fe:d8:a9:96:81:5a:02:e2: 0c:a0:1f:a2:d1:2a:cb:c7:10:6d:37:48:10:df:e0: 6f:bf:b4:1c:4b:49:cb:a7:64:31:2e:15:19:62:52: c1:a0:82:a5:19:61:38:71:19:03:09:6b:39:d4:9d: d9:1d:23:56:ea:39:99:42:3b:fb:77:7f:0c:a9:5c: 9f:bf:33:ee:21:6d:28:30:da:f0:0f:e0:86:00:7c: e2:26:72:c2:b2:41:ce:dc:e3:26:9d:26:6f:76:3a: 97:71:4d:b8:bb:95:d9:cd:f7:98:b4:94:79:a6:5b: ec:1b:d2:b7:14:b9:91:5b:dd:2a:6a:7c:2b:f3:67: 3c:ea:e3:8f:ee:c3:9b:71:59:67:d7:03:54:ed:db: eb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:75:9B:E1:A8:7C:33:8D:4A:57:9A:64:FD:FF:92:B4:72:A3:7A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f34ffcc2-c389-3111-92c8-f0e01b81110f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 193.149.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5f:df:d5:41:08:74:d1:3a:52:3d:23:fe:97:bf:1a:cb:4f: 29:76:aa:3a:1c:99:40:f6:d8:78:cc:9c:7e:06:91:e1:2e:48: 9e:c7:5c:ea:19:d7:28:86:71:00:f4:ef:29:46:27:26:7f:48: c7:08:20:83:29:31:26:fd:c2:3b:7e:c0:00:a2:46:f4:1b:64: 02:51:d7:40:d5:9a:ad:32:ed:75:97:ef:b9:d2:be:e2:b5:62: 0c:b3:c5:14:7b:b8:cf:9e:34:86:6d:e1:22:d5:e2:fb:c8:44: e9:7c:5f:16:cc:97:0e:ba:5f:aa:a2:14:94:bf:0e:48:d3:6b: 52:f3:82:98:c5:2a:20:b4:c5:2f:85:ac:78:a7:9a:74:7a:e2: aa:0c:4f:2f:35:0d:ed:e7:e1:af:f2:b9:6f:cf:3f:66:6b:72: ca:d6:1c:01:19:5a:89:b0:4b:c1:6b:a2:de:c9:64:e4:6e:c0: ba:53:03:95:9a:28:d3:c1:4f:f5:43:70:5d:2a:16:4e:84:1a: 94:23:b8:c4:6c:3d:c5:0f:7b:f9:5e:28:5e:72:5c:36:5d:ff: 08:39:e4:2d:f7:6b:20:68:b4:76:6f:5e:a4:3a:9a:1c:34:09: 33:d2:2b:51:e8:11:b1:d7:b1:e7:5b:a8:dc:ff:46:06:11:6e: 11:48:1f:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqgHtBdvqi416IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MWJkMDU0NDgtOTQyZC00NjM1LTlhOWYtMmYzODNiNzgxOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh+TB0t6IkoD/4pNuywT0cZyZznFuQUcBaHU 5F0hTw+YebJ7Vl7mgxiB6fN6hFOoJ0+gIOg8hpFuKTA8EI3L2/Aur3YZt1ANIIYC 5nstMO8Crbvsxp+ofEulJKIBdvxjDR/qcvQJ3V6tQM7vj7MT/tiploFaAuIMoB+i 0SrLxxBtN0gQ3+Bvv7QcS0nLp2QxLhUZYlLBoIKlGWE4cRkDCWs51J3ZHSNW6jmZ Qjv7d38MqVyfvzPuIW0oMNrwD+CGAHziJnLCskHO3OMmnSZvdjqXcU24u5XZzfeY tJR5plvsG9K3FLmRW90qanwr82c86uOP7sObcVln1wNU7dvrkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx1m+GofDONSleaZP3/krRyo3oxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZjM0ZmZjYzItYzM4OS0z MTExLTkyYzgtZjBlMDFiODExMTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZWBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtf39VBCHTROlI9I/6XvxrLTyl2qjocmUD22HjMnH4GkeEuSJ7HXOoZ 1yiGcQD07ylGJyZ/SMcIIIMpMSb9wjt+wACiRvQbZAJR10DVmq0y7XWX77nSvuK1 YgyzxRR7uM+eNIZt4SLV4vvIROl8XxbMlw66X6qiFJS/DkjTa1LzgpjFKiC0xS+F rHinmnR64qoMTy81De3n4a/yuW/PP2ZrcsrWHAEZWomwS8Frot7JZORuwLpTA5Wa KNPBT/VDcF0qFk6EGpQjuMRsPcUPe/leKF5yXDZd/wg55C33ayBotHZvXqQ6mhw0 CTPSK1HoEbHXsedbqNz/RgYRbhFIH2U= -----END CERTIFICATE-----Generated at Fri Mar 14 10:00:36 2025 by rpki-client