$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/38392e3138372e36392e302f32342d3332203d3e20323035383438.roa File: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (raw, json) Hash identifier: LokGaeSGprYg5f1xTI9QnPZRdHo7ruObwBislwYoqB4= Subject key identifier: 1E:75:69:14:03:E1:EC:DB:FD:37:47:70:FF:43:E0:53:3A:AE:95:EA Certificate issuer: /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7 Certificate serial: 210E2F4C65E3B419BC3A9F34B29DDBFD7853C997 Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer Subject info access: rsync://rpki.sn-p.io/repo/sn-p-io/0/38392e3138372e36392e302f32342d3332203d3e20323035383438.roa Signing time: Mon 14 Apr 2025 21:50:00 +0000 ROA not before: Mon 14 Apr 2025 21:45:00 +0000 ROA not after: Mon 13 Apr 2026 21:50:00 +0000 asID: 205848 IP address blocks: 89.187.69.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0e:2f:4c:65:e3:b4:19:bc:3a:9f:34:b2:9d:db:fd:78:53:c9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7 Validity Not Before: Apr 14 21:45:00 2025 GMT Not After : Apr 13 21:50:00 2026 GMT Subject: CN=1E75691403E1ECDBFD374770FF43E0533AAE95EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:be:4b:e2:28:02:50:50:ae:e1:73:c2:51: 5f:88:9a:c5:59:8d:2c:85:27:e0:54:8f:e3:53:ac: c3:da:95:1c:ce:9f:65:5e:0f:3e:26:90:65:46:d2: 6c:16:cd:41:d7:d5:d5:c5:a3:14:62:fc:e2:08:86: f0:04:37:70:11:59:2a:5f:16:e8:47:9e:98:41:04: 55:5b:24:94:93:2d:99:8f:4a:6b:94:6a:8e:3e:51: 9a:cf:33:b7:75:cd:a4:7b:96:39:06:ed:78:54:cc: 99:cf:2c:5b:83:5d:ea:19:24:52:2d:dd:56:f7:30: e3:03:25:e4:bc:4d:78:6b:a7:2f:f2:8e:aa:91:19: aa:4c:86:20:ea:2b:ec:18:a7:92:8b:0a:6a:7e:67: b9:b8:26:9a:31:6a:1e:26:c9:3a:59:9a:3e:47:c8: fe:d4:df:ab:85:ee:1c:3e:65:0c:4a:90:3a:77:cc: f5:aa:69:ab:c8:e2:51:d8:03:37:ca:01:eb:0d:67: 72:7f:dc:c3:e7:97:c2:9d:71:ab:b9:4d:a3:d1:23: 42:a9:f2:62:08:43:ad:cb:3c:93:07:89:29:ec:1d: 95:62:19:7f:a2:08:e3:bc:c0:f3:df:d9:dd:46:29: 37:c3:ac:fa:85:c2:7b:6b:8c:40:21:d3:83:1c:05: 2a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:75:69:14:03:E1:EC:DB:FD:37:47:70:FF:43:E0:53:3A:AE:95:EA X509v3 Authority Key Identifier: keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/38392e3138372e36392e302f32342d3332203d3e20323035383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.69.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:bb:9c:cb:ba:68:66:09:b0:e8:68:e2:9a:e2:9e:d6:3a:e4: b5:20:93:bb:9a:d2:cc:27:c1:0a:1b:f6:0b:b8:0c:c2:d8:33: 92:7b:e2:c6:d1:ca:95:9b:f2:e6:1e:03:02:da:f3:56:bb:f5: c2:38:21:6d:74:90:1f:54:c3:cd:97:20:0d:51:30:22:91:a6: 30:6d:a0:74:5a:6d:6f:2c:d4:a7:05:e8:0e:ea:53:2d:82:8a: 03:71:cf:0d:7b:8d:f5:2e:0c:58:df:41:7d:bb:78:b9:dd:19: e6:08:ae:93:9b:fb:88:46:d7:12:91:d4:e4:03:fa:f1:11:14: e8:3a:e2:d2:a5:2f:45:66:1b:b7:3f:fa:cb:ee:5c:9f:bb:36: 75:d6:8b:73:14:40:27:73:12:f2:c1:cf:e7:ac:a3:7f:d5:9f: d1:b2:3e:63:86:e8:ab:56:bf:53:64:fe:fd:01:e9:1b:a8:03: a0:97:86:c6:fb:1b:32:fc:01:51:fa:7a:98:74:da:a2:72:29: 94:ea:aa:11:bf:ac:34:93:5e:fc:0f:89:d9:82:b7:01:f3:6a: a8:49:83:52:ac:5e:44:97:38:a1:de:0c:95:b9:5c:2a:1a:99: b6:95:17:22:47:a2:c3:ad:26:c6:9a:3f:27:58:de:39:04:34: 5f:ce:04:b2 -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgIUIQ4vTGXjtBm8Op80sp3b/XhTyZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IzRTFCRENFRDhDQjg5NTk3RkU5MkVBRjc1QkUyREY5 OEFGODRBNzAeFw0yNTA0MTQyMTQ1MDBaFw0yNjA0MTMyMTUwMDBaMDMxMTAvBgNV BAMTKDFFNzU2OTE0MDNFMUVDREJGRDM3NDc3MEZGNDNFMDUzM0FBRTk1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh1b5L4igCUFCu4XPCUV+ImsVZ jSyFJ+BUj+NTrMPalRzOn2VeDz4mkGVG0mwWzUHX1dXFoxRi/OIIhvAEN3ARWSpf FuhHnphBBFVbJJSTLZmPSmuUao4+UZrPM7d1zaR7ljkG7XhUzJnPLFuDXeoZJFIt 3Vb3MOMDJeS8TXhrpy/yjqqRGapMhiDqK+wYp5KLCmp+Z7m4Jpoxah4myTpZmj5H yP7U36uF7hw+ZQxKkDp3zPWqaavI4lHYAzfKAesNZ3J/3MPnl8Kdcau5TaPRI0Kp 8mIIQ63LPJMHiSnsHZViGX+iCOO8wPPf2d1GKTfDrPqFwntrjEAh04McBSrLAgMB AAGjggIEMIICADAdBgNVHQ4EFgQUHnVpFAPh7Nv9N0dw/0PgUzquleowHwYDVR0j BBgwFoAUOz4b3O2MuJWX/pLq91vi35ivhKcwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraS5zbi1wLmlvL3JlcG8vc24tcC1pby8w LzNCM0UxQkRDRUQ4Q0I4OTU5N0ZFOTJFQUY3NUJFMkRGOThBRjg0QTcuY3JsMIGT BggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl M2Y5ZC8yLzNCM0UxQkRDRUQ4Q0I4OTU5N0ZFOTJFQUY3NUJFMkRGOThBRjg0QTcu Y2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9ycGtpLnNu LXAuaW8vcmVwby9zbi1wLWlvLzAvMzgzOTJlMzEzODM3MmUzNjM5MmUzMDJmMzIz NDJkMzMzMjIwM2QzZTIwMzIzMDM1MzgzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbtFMA0GCSqG SIb3DQEBCwUAA4IBAQBvu5zLumhmCbDoaOKa4p7WOuS1IJO7mtLMJ8EKG/YLuAzC 2DOSe+LG0cqVm/LmHgMC2vNWu/XCOCFtdJAfVMPNlyANUTAikaYwbaB0Wm1vLNSn BegO6lMtgooDcc8Ne431LgxY30F9u3i53RnmCK6Tm/uIRtcSkdTkA/rxERToOuLS pS9FZhu3P/rL7lyfuzZ11otzFEAncxLywc/nrKN/1Z/Rsj5jhuirVr9TZP79Aekb qAOgl4bG+xsy/AFR+nqYdNqicimU6qoRv6w0k178D4nZgrcB82qoSYNSrF5Elzih 3gyVuVwqGpm2lRciR6LDrSbGmj8nWN45BDRfzgSy -----END CERTIFICATE-----Generated at Mon Apr 28 00:20:31 2025 by rpki-client