$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a7d423dd-5605-3d14-9b50-79ed7feff77f.roa File: a7d423dd-5605-3d14-9b50-79ed7feff77f.roa (raw, json) Hash identifier: EMym0IH/h8Rjg2PDhUI4Lr9sbT8f1dbeB0qnrZvfNrU= Subject key identifier: 0C:F4:35:19:D1:D0:83:83:47:EF:34:8F:40:0C:68:19:22:48:1E:BC Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F43285849EA8516F13042FF0F3B98AE30 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a7d423dd-5605-3d14-9b50-79ed7feff77f.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 399629 IP address blocks: 193.149.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:16:f1:30:42:ff:0f:3b:98:ae:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=650cc5e4-af21-439e-85c1-5e9caee639fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:38:d1:4b:b5:9e:32:ec:1f:bc:00:5f:83: 69:e2:2f:30:95:99:50:92:44:4c:ee:48:a5:b6:78: a3:ab:73:ec:79:a8:01:bb:94:ba:e1:7c:33:1e:f2: 5e:ef:97:91:38:33:a3:96:55:64:79:52:e5:7e:c8: 72:cf:17:15:c1:e6:1e:d9:29:e6:4b:01:12:85:b2: b7:6e:92:ce:c8:9c:e6:04:cd:1e:ac:4c:26:2a:7f: 58:b4:dd:d0:2f:42:93:aa:3c:ae:28:72:58:7b:49: 7e:23:cd:52:ca:9c:d3:16:1e:76:2b:13:0a:94:b4: 18:9c:8e:6f:e5:ad:cf:09:14:5b:3b:0e:76:db:5e: 5a:31:d1:d9:35:46:5d:0d:7a:fb:52:60:80:7c:e5: 5e:a7:e5:c0:39:85:db:f2:4e:d6:54:f3:78:fe:78: f1:cb:e2:81:00:89:8d:b0:67:0f:ee:67:f0:8d:92: 24:e6:90:2c:ff:09:3b:c7:26:5f:fc:47:a9:f7:08: 88:87:d6:cb:0f:f8:44:f9:3a:50:7d:b7:c0:f9:43: 75:c3:f1:99:52:5c:4a:b7:24:18:a9:d4:6a:db:dc: 02:5a:48:a3:54:b0:e6:23:ad:0d:9e:b2:15:f1:9a: 2b:14:1d:05:d1:09:e1:17:e3:1b:d5:b8:89:23:d9: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F4:35:19:D1:D0:83:83:47:EF:34:8F:40:0C:68:19:22:48:1E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a7d423dd-5605-3d14-9b50-79ed7feff77f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 193.149.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d3:3d:8a:f0:62:65:fa:50:34:0e:c7:d2:8d:6e:11:c5:7e: e8:d0:c3:f6:43:c4:7f:7a:ca:ea:4a:70:d3:54:bd:02:06:96: 0c:a3:e7:de:18:1b:dd:18:d6:d1:af:8d:f1:e3:e9:d9:63:c1: b2:0d:8f:74:4e:63:d4:18:2c:81:43:6c:d1:0c:42:47:8a:3b: 5c:0b:62:4f:c9:ef:6e:9d:55:c2:77:e4:8a:ac:cb:81:9a:3f: 7f:ab:e1:18:e6:07:00:9a:6d:1b:3f:69:3c:ff:1a:f8:ac:16: b3:be:22:2d:c4:19:ea:57:ca:d6:80:8f:14:e5:48:58:12:47: dc:93:0f:e1:7b:8b:a0:92:1d:80:aa:d0:5b:ec:52:4a:7f:f3: 5d:f8:ed:e4:93:39:40:ed:ff:db:19:7d:04:87:05:a2:b5:ec: 2b:63:72:96:6f:46:e1:ef:9b:04:61:80:cf:1d:56:2a:e7:c5: d7:b1:2b:81:75:3b:ed:c4:c9:fd:06:ba:be:cc:19:bf:1f:28: 25:5c:aa:11:ff:6e:b8:5a:40:5f:90:83:8a:bd:e8:36:9c:a3: 83:96:93:eb:a2:a7:45:1d:1f:35:13:e9:b3:f4:ce:05:07:0f: f8:02:24:de:da:65:c1:fc:88:ed:da:30:06:c1:b1:8d:17:9b: 4b:32:cb:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhRbxMEL/DzuYrjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NjUwY2M1ZTQtYWYyMS00MzllLTg1YzEtNWU5Y2FlZTYzOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFM40Uu1njLsH7wAX4Np4i8wlZlQkkRM7kil tnijq3PseagBu5S64XwzHvJe75eRODOjllVkeVLlfshyzxcVweYe2SnmSwEShbK3 bpLOyJzmBM0erEwmKn9YtN3QL0KTqjyuKHJYe0l+I81SypzTFh52KxMKlLQYnI5v 5a3PCRRbOw52215aMdHZNUZdDXr7UmCAfOVep+XAOYXb8k7WVPN4/njxy+KBAImN sGcP7mfwjZIk5pAs/wk7xyZf/Eep9wiIh9bLD/hE+TpQfbfA+UN1w/GZUlxKtyQY qdRq29wCWkijVLDmI60NnrIV8ZorFB0F0QnhF+Mb1biJI9k+zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAz0NRnR0IODR+80j0AMaBkiSB68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYTdkNDIzZGQtNTYwNS0z ZDE0LTliNTAtNzllZDdmZWZmNzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZW9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErTPYrwYmX6UDQOx9KNbhHFfujQw/ZDxH96yupKcNNUvQIGlgyj594Y G90Y1tGvjfHj6dljwbINj3ROY9QYLIFDbNEMQkeKO1wLYk/J726dVcJ35Iqsy4Ga P3+r4RjmBwCabRs/aTz/GvisFrO+Ii3EGepXytaAjxTlSFgSR9yTD+F7i6CSHYCq 0FvsUkp/81347eSTOUDt/9sZfQSHBaK17CtjcpZvRuHvmwRhgM8dVirnxdexK4F1 O+3Eyf0Gur7MGb8fKCVcqhH/brhaQF+Qg4q96Daco4OWk+uip0UdHzUT6bP0zgUH D/gCJN7aZcH8iO3aMAbBsY0Xm0syy/g= -----END CERTIFICATE-----Generated at Mon Jun 16 05:13:12 2025 by rpki-client