$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa File: 7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa (raw, json) Hash identifier: l8DjfYrcmeoOWGVg5P13QYmutGgTjdF34PiF2kwR1Ik= Subject key identifier: A1:B1:C6:92:3B:77:F0:52:C4:14:A4:8B:7A:06:05:F5:C0:01:22:29 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584A1E2AAB2CC0436C29A98F14E0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 399629 IP address blocks: 149.248.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:ab:2c:c0:43:6c:29:a9:8f:14:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=abf8ea96-1af6-4f12-aeea-48860323d19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:f5:af:b8:b9:97:e4:0a:cd:4d:dd:cb:91: 38:ab:8f:10:59:2b:2c:91:9c:96:db:9f:ed:87:75: 80:b9:2a:1b:13:0c:47:29:70:71:a1:9a:00:e1:67: e4:7c:0b:aa:0d:3a:1b:0e:67:4e:b5:43:9c:46:28: 17:2d:be:eb:1a:21:a4:2d:c3:f2:32:c2:eb:da:8b: 01:d3:34:76:eb:b8:f5:83:03:3b:67:47:b1:4e:f2: 96:a5:95:ea:6a:14:47:cd:0e:0f:f2:2a:3f:49:01: db:e7:ac:97:20:cc:ea:56:37:3c:8d:33:4b:ee:86: ad:4d:3e:cc:a5:e3:b6:92:0e:d9:54:17:c7:e6:a4: 7a:c3:36:61:8b:e7:3b:c1:a2:b6:78:c7:be:b7:04: ff:24:e5:56:f7:01:a8:20:c6:f2:ef:5b:c9:d1:18: 9f:02:db:b5:0c:b2:28:bc:6d:d6:b2:44:d7:a7:72: 33:29:5a:41:d8:19:59:96:11:1d:66:41:d6:95:05: 00:5d:62:25:7a:c6:ff:14:b0:14:da:ae:17:ed:5f: 16:36:fe:d1:a6:ad:e4:6e:31:62:dd:26:d8:33:e0: a0:6f:d0:d3:63:24:fb:3a:00:58:eb:0e:09:71:6c: 10:ce:34:35:ae:21:2b:48:16:11:c8:4b:42:56:de: ae:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B1:C6:92:3B:77:F0:52:C4:14:A4:8B:7A:06:05:F5:C0:01:22:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 149.248.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d8:16:1f:4e:bb:33:fc:a5:e6:61:13:66:e3:eb:90:36:4b: a6:0e:64:76:36:9a:1b:7c:3b:9e:4c:6d:7b:6a:a5:ab:bf:07: 08:7e:ed:67:af:0a:65:e4:1b:ce:c6:41:5a:a1:b2:08:a6:ce: 1d:ca:38:94:48:df:87:75:15:f6:4f:70:60:d2:51:cb:71:4d: cf:e7:df:e8:5d:6a:ea:81:5e:8c:13:e9:7d:1e:82:f6:f2:b2: a6:58:23:67:75:e0:80:33:7b:11:e8:9d:6a:f2:60:0b:d5:b5: b3:bb:36:06:bf:b3:3a:f7:66:86:6e:2e:07:a9:ac:95:c8:a8: f6:77:cb:f8:d5:85:c9:20:c5:71:6b:e4:ad:2c:52:e4:a6:7d: f9:f6:71:da:dc:8b:44:4c:4a:ed:fd:17:1e:15:99:08:8a:89: 12:ae:06:50:e8:74:7f:be:99:2c:e0:be:59:dc:4e:86:3f:e6: 42:c2:1f:48:2d:20:f2:46:ff:23:5b:7b:98:fc:dd:21:44:ac: f7:72:16:ba:fb:38:67:e0:14:57:30:d1:b7:1b:b4:18:b1:84: 77:d3:21:bd:aa:d5:e6:63:24:e9:55:6a:f4:32:69:d2:f4:ef: 6b:c7:2e:26:c2:b1:b6:66:7f:74:eb:d4:8e:e5:3d:12:c5:af: 87:b4:bc:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqsswENsKamPFOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk YWJmOGVhOTYtMWFmNi00ZjEyLWFlZWEtNDg4NjAzMjNkMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU31r7i5l+QKzU3dy5E4q48QWSsskZyW25/t h3WAuSobEwxHKXBxoZoA4WfkfAuqDTobDmdOtUOcRigXLb7rGiGkLcPyMsLr2osB 0zR267j1gwM7Z0exTvKWpZXqahRHzQ4P8io/SQHb56yXIMzqVjc8jTNL7oatTT7M peO2kg7ZVBfH5qR6wzZhi+c7waK2eMe+twT/JOVW9wGoIMby71vJ0RifAtu1DLIo vG3WskTXp3IzKVpB2BlZlhEdZkHWlQUAXWIlesb/FLAU2q4X7V8WNv7Rpq3kbjFi 3SbYM+Cgb9DTYyT7OgBY6w4JcWwQzjQ1riErSBYRyEtCVt6uRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGxxpI7d/BSxBSki3oGBfXAASIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvN2RmYjU5ZjgtYWI0NS0z MDk0LTg5MzgtYTU0MzNiY2RjNGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfhPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPYFh9OuzP8peZhE2bj65A2S6YOZHY2mht8O55MbXtqpau/Bwh+7Wev CmXkG87GQVqhsgimzh3KOJRI34d1FfZPcGDSUctxTc/n3+hdauqBXowT6X0egvby sqZYI2d14IAzexHonWryYAvVtbO7Nga/szr3ZoZuLgeprJXIqPZ3y/jVhckgxXFr 5K0sUuSmffn2cdrci0RMSu39Fx4VmQiKiRKuBlDodH++mSzgvlncToY/5kLCH0gt IPJG/yNbe5j83SFErPdyFrr7OGfgFFcw0bcbtBixhHfTIb2q1eZjJOlVavQyadL0 72vHLibCsbZmf3Tr1I7lPRLFr4e0vBc= -----END CERTIFICATE-----Generated at Mon Jun 30 13:23:17 2025 by rpki-client