$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/ecbd3945-3869-3ef8-93b1-b9800f888493.roa File: ecbd3945-3869-3ef8-93b1-b9800f888493.roa (raw, json) Hash identifier: 2/M3FZpQ7AqCQTlWxG6kp9a2wxfWEsprcFFjy0Daza4= Subject key identifier: 10:AB:BD:84:FB:0C:BF:2F:5F:70:9C:8E:E9:CA:05:EE:9F:65:6C:3E Certificate issuer: /CN=4eb5326f-ee03-4174-b355-9916b3e826aa Certificate serial: 010D0C9F432858499DBF2736A19272C5093B3220 Authority key identifier: 4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/ecbd3945-3869-3ef8-93b1-b9800f888493.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 400380 IP address blocks: 81.199.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:27:36:a1:92:72:c5:09:3b:32:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eb5326f-ee03-4174-b355-9916b3e826aa Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=0a1ee486-933d-4780-982a-97bfaac802c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:51:d7:e4:b6:95:dc:3f:4c:24:62:55:da:cb: 1a:9e:de:2e:45:06:22:a8:e6:ef:53:bd:ab:15:ea: 05:a3:b2:59:18:d2:df:63:f8:1c:e3:10:83:b8:22: 1b:8f:01:21:8b:f4:6a:fe:61:b2:23:5e:44:fb:cc: 49:9b:1d:48:7b:8c:30:31:54:15:9f:64:5a:26:15: 80:1c:d8:db:05:be:d4:66:73:b1:4c:83:dc:d2:23: 14:99:21:3a:a0:50:2e:91:6f:72:3d:19:ba:be:c0: 12:c9:63:f7:c4:44:e6:05:09:26:55:9c:7a:f0:58: 74:4b:61:b0:a2:09:3c:e5:01:e2:6a:83:6c:14:9d: 2c:44:49:aa:84:a8:6a:a2:8f:73:38:d6:ba:98:57: 01:f5:f0:e4:97:f9:20:6a:55:24:38:3d:fa:08:54: 15:13:59:1e:08:0d:79:df:f9:ae:2a:40:f7:a1:0f: 9c:77:c0:2b:39:55:03:bb:3c:b9:b4:13:eb:61:e4: 37:12:44:e1:47:a9:67:2d:5a:41:13:2d:62:d4:75: 2a:d9:1a:11:71:b5:5e:47:82:6b:31:92:af:30:31: 6d:16:9f:26:b4:f4:f8:13:39:3d:b3:e8:96:7f:ef: c1:ab:e6:1b:5e:c7:b8:2c:a8:74:1d:12:f9:a5:db: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AB:BD:84:FB:0C:BF:2F:5F:70:9C:8E:E9:CA:05:EE:9F:65:6C:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/ecbd3945-3869-3ef8-93b1-b9800f888493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl X509v3 Authority Key Identifier: keyid:4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer sbgp-ipAddrBlock: critical IPv4: 81.199.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c8:1b:25:e3:73:98:aa:fc:5c:35:88:87:56:eb:b2:40:4e: ff:61:78:fd:8e:dc:e7:4a:9c:db:41:85:8a:02:b3:96:1d:1f: b9:98:29:82:92:8b:bd:43:38:85:3d:92:58:57:dd:62:e7:34: 6a:57:0a:90:46:05:94:37:ed:63:6a:28:db:19:62:1e:43:6b: 1f:0f:8c:b8:73:1e:21:bb:09:1b:f4:e0:e8:bc:fb:45:97:b5: 8b:6e:07:57:88:21:db:ea:69:f5:cd:ee:89:fa:9b:b0:f1:29: 3d:7b:d6:b3:f8:ef:61:65:ec:b2:b5:55:66:8a:b4:bd:f1:cc: 66:37:fe:0d:34:e4:ca:49:77:16:7d:91:c3:2d:f7:9b:4b:54: 69:56:b8:19:94:86:4d:85:0a:8e:ae:da:bd:c3:c6:42:dc:10: 06:70:6f:28:fe:a2:61:91:a7:5a:61:ac:51:b9:fe:a7:40:02: 6b:bb:ba:a7:60:d4:12:29:74:f6:02:9f:bd:1c:40:8b:b4:07: 47:e7:de:d0:7c:cb:16:89:72:97:87:9b:09:08:db:2e:38:79: c8:35:9c:55:6e:dd:7e:53:c9:90:b9:f8:dd:89:e7:05:92:14: 69:23:be:c9:46:59:36:38:77:6c:6f:c6:08:4b:f1:c8:10:fb: 19:1e:3e:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvyc2oZJyxQk7MiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGViNTMyNmYtZWUwMy00MTc0LWIzNTUtOTkxNmIzZTgy NmFhMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MGExZWU0ODYtOTMzZC00NzgwLTk4MmEtOTdiZmFhYzgwMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVHX5LaV3D9MJGJV2ssant4uRQYiqObvU72r FeoFo7JZGNLfY/gc4xCDuCIbjwEhi/Rq/mGyI15E+8xJmx1Ie4wwMVQVn2RaJhWA HNjbBb7UZnOxTIPc0iMUmSE6oFAukW9yPRm6vsASyWP3xETmBQkmVZx68Fh0S2Gw ogk85QHiaoNsFJ0sREmqhKhqoo9zONa6mFcB9fDkl/kgalUkOD36CFQVE1keCA15 3/muKkD3oQ+cd8ArOVUDuzy5tBPrYeQ3EkThR6lnLVpBEy1i1HUq2RoRcbVeR4Jr MZKvMDFtFp8mtPT4Ezk9s+iWf+/Bq+YbXse4LKh0HRL5pdsRGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCrvYT7DL8vX3CcjunKBe6fZWw+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1 MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2YjNlODI2YWEvZWNiZDM5NDUtMzg2OS0z ZWY4LTkzYjEtYjk4MDBmODg4NDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGViNTMyNmYtZWUwMy00MTc0LWIz NTUtOTkxNmIzZTgyNmFhLzRlYjUzMjZmLWVlMDMtNDE3NC1iMzU1LTk5MTZiM2U4 MjZhYS5jcmwwHwYDVR0jBBgwFoAUTU4uJJShwss4I21uaEckHdJB3B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2 YjNlODI2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUccmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrIGyXjc5iq/Fw1iIdW67JATv9heP2O3OdKnNtBhYoCs5YdH7mYKYKS i71DOIU9klhX3WLnNGpXCpBGBZQ37WNqKNsZYh5Dax8PjLhzHiG7CRv04Oi8+0WX tYtuB1eIIdvqafXN7on6m7DxKT171rP472Fl7LK1VWaKtL3xzGY3/g005MpJdxZ9 kcMt95tLVGlWuBmUhk2FCo6u2r3DxkLcEAZwbyj+omGRp1phrFG5/qdAAmu7uqdg 1BIpdPYCn70cQIu0B0fn3tB8yxaJcpeHmwkI2y44ecg1nFVu3X5TyZC5+N2J5wWS FGkjvslGWTY4d2xvxghL8cgQ+xkePuY= -----END CERTIFICATE-----Generated at Sun May 11 18:03:34 2025 by rpki-client