$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/0a8029f0-bcdb-3d4b-996d-d8cb94c8711d.roa File: 0a8029f0-bcdb-3d4b-996d-d8cb94c8711d.roa (raw, json) Hash identifier: Cs9y9vsJxEJSwE/MdJt9by7y9dvQ7Aw8bl2g53rzITM= Subject key identifier: D3:46:05:21:B1:4D:E7:2C:B9:13:5D:28:DD:F2:E2:06:88:B9:E7:97 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584A1E2AAAFAE96FC548819F3280 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/0a8029f0-bcdb-3d4b-996d-d8cb94c8711d.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 399629 IP address blocks: 149.248.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:aa:fa:e9:6f:c5:48:81:9f:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=3b2d4689-ad03-4664-84e4-f35ea0158c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9f:66:e0:be:96:ae:32:ae:bc:73:03:87:4c: 00:91:b3:a2:e1:04:d9:e3:76:aa:af:37:1b:1a:7e: 95:9d:4d:fd:2a:e9:87:51:68:62:6e:09:05:50:a5: 4b:0c:7c:f9:05:d3:35:eb:58:ff:ce:28:26:4f:ed: 27:3c:b3:66:e0:65:c8:f4:43:ee:0c:fe:de:bf:76: eb:9e:30:0f:79:1a:b2:ee:9a:f1:f9:84:52:9d:a9: 75:72:bf:a5:0b:a6:f8:43:f3:a0:0e:84:18:b3:21: 8e:38:8a:f3:b6:31:a7:c2:bf:8e:c1:c4:7e:7f:d5: 97:39:7d:de:9a:2b:46:9a:12:c0:a5:7d:9f:09:61: 84:f9:09:62:ef:e9:45:cc:fd:52:0e:8b:ba:f5:63: 9a:5f:3e:ec:08:33:b4:cc:43:7c:7a:a8:51:75:89: 2f:85:7c:e5:c3:b8:7f:78:6c:bf:13:80:2a:d7:eb: e5:33:2f:cc:6a:63:bd:ca:3b:19:32:ba:49:d4:b5: 45:ff:8a:09:7f:12:fa:ac:fe:4e:0a:18:c6:02:17: af:a3:19:27:69:63:35:96:a4:05:f5:76:8d:d9:c9: a3:0e:84:60:6f:f5:5c:d7:d5:09:cb:2a:39:ea:d5: f5:a8:d7:60:98:dd:ab:95:e0:f0:f3:be:03:cf:43: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:46:05:21:B1:4D:E7:2C:B9:13:5D:28:DD:F2:E2:06:88:B9:E7:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/0a8029f0-bcdb-3d4b-996d-d8cb94c8711d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 149.248.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1d:12:60:e8:e6:44:32:83:e1:d1:98:3b:e9:5d:0c:d1:c4: d5:2e:e2:9c:c2:97:27:4d:f3:31:65:e5:85:51:43:4f:09:c0: e1:7b:a4:10:7b:fc:26:b8:b3:c7:d5:ea:b7:43:cb:eb:7d:3d: 91:7f:18:8a:04:72:0c:34:57:96:ca:23:85:5d:e5:73:a4:b7: 29:ec:f8:dd:9d:b6:37:bb:84:90:44:31:8a:e5:dd:e4:9e:65: c6:a9:00:60:ae:c7:a6:4c:a7:b1:ae:15:c0:bf:7c:6f:01:f5: 19:1c:9a:fc:dd:e1:c0:ae:bd:df:95:44:ac:c8:44:f5:81:d8: a3:46:0e:cd:e7:64:c5:eb:2b:af:d8:65:76:2f:91:52:88:5d: 29:ca:23:bd:33:ca:b8:9a:c7:cc:de:1f:37:cf:4f:09:8a:c6: 5c:d6:d0:da:42:e5:cf:5c:46:26:51:33:82:71:5d:ab:13:bd: b8:6d:ba:d8:d7:bc:c9:f1:dd:03:4c:d0:62:1b:9b:3a:a4:93: fa:a2:7e:f3:b9:7c:22:d7:83:a4:77:d6:df:05:54:0c:41:90: 8c:b4:fb:77:ec:85:d2:1c:64:a9:6c:cf:55:5c:75:ff:f2:b7: 40:aa:ce:79:2c:33:86:a1:31:0b:b6:ee:20:f7:1f:76:a8:86: f7:7b:eb:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqr66W/FSIGfMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk M2IyZDQ2ODktYWQwMy00NjY0LTg0ZTQtZjM1ZWEwMTU4Yzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp9m4L6WrjKuvHMDh0wAkbOi4QTZ43aqrzcb Gn6VnU39KumHUWhibgkFUKVLDHz5BdM161j/zigmT+0nPLNm4GXI9EPuDP7ev3br njAPeRqy7prx+YRSnal1cr+lC6b4Q/OgDoQYsyGOOIrztjGnwr+OwcR+f9WXOX3e mitGmhLApX2fCWGE+Qli7+lFzP1SDou69WOaXz7sCDO0zEN8eqhRdYkvhXzlw7h/ eGy/E4Aq1+vlMy/MamO9yjsZMrpJ1LVF/4oJfxL6rP5OChjGAhevoxknaWM1lqQF 9XaN2cmjDoRgb/Vc19UJyyo56tX1qNdgmN2rleDw874Dz0MSZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNGBSGxTecsuRNdKN3y4gaIueeXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMGE4MDI5ZjAtYmNkYi0z ZDRiLTk5NmQtZDhjYjk0Yzg3MTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfhMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAdEmDo5kQyg+HRmDvpXQzRxNUu4pzClydN8zFl5YVRQ08JwOF7pBB7 /Ca4s8fV6rdDy+t9PZF/GIoEcgw0V5bKI4Vd5XOktyns+N2dtje7hJBEMYrl3eSe ZcapAGCux6ZMp7GuFcC/fG8B9Rkcmvzd4cCuvd+VRKzIRPWB2KNGDs3nZMXrK6/Y ZXYvkVKIXSnKI70zyriax8zeHzfPTwmKxlzW0NpC5c9cRiZRM4JxXasTvbhtutjX vMnx3QNM0GIbmzqkk/qifvO5fCLXg6R31t8FVAxBkIy0+3fshdIcZKlsz1Vcdf/y t0CqznksM4ahMQu27iD3H3aohvd763w= -----END CERTIFICATE-----Generated at Sun Jun 15 13:33:34 2025 by rpki-client