$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/7ea1614b-8a2d-35f0-a9a6-1d71ffd396b8.roa File: 7ea1614b-8a2d-35f0-a9a6-1d71ffd396b8.roa (raw, json) Hash identifier: ahIeTci5zD0tkNIX9S0WlEyzx4HnZTNgIAiBuJ6eoGg= Subject key identifier: 3E:FC:FA:D4:CD:4A:03:45:8A:0C:C4:21:D8:9E:8F:3F:A4:14:5E:6C Certificate issuer: /CN=4eb5326f-ee03-4174-b355-9916b3e826aa Certificate serial: 010D0C9F43285847DF2F49486EC4B7F815616180 Authority key identifier: 4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/7ea1614b-8a2d-35f0-a9a6-1d71ffd396b8.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 400380 IP address blocks: 81.199.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:49:48:6e:c4:b7:f8:15:61:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eb5326f-ee03-4174-b355-9916b3e826aa Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=49ee025b-d26d-4245-8372-3e562b0dfc15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:34:ad:f2:c3:b2:27:2a:86:fd:7f:a9:db: 4f:e0:99:85:ea:3a:80:8f:b2:3c:26:36:a8:61:9b: b4:99:29:2f:2a:d7:d4:7a:43:11:17:6e:65:d9:57: 73:eb:7f:b7:f6:10:2e:bb:03:84:cd:62:1b:bc:59: ed:24:13:48:1f:6e:0f:b9:39:a3:46:c3:7c:2e:a4: f0:8a:82:d6:47:73:8b:72:57:c0:72:9c:0f:2c:26: 40:66:a0:df:06:f5:b3:e8:69:f1:0d:6e:2b:8a:31: d0:9d:aa:b7:fd:28:df:be:57:12:05:9f:9b:0d:a9: 91:90:f2:38:2b:3d:d3:b6:4d:3b:53:dc:ec:ad:7d: a5:7a:55:67:73:32:66:73:f0:69:c1:8e:3b:8e:57: 61:ef:90:70:de:b1:64:1f:84:d4:d1:52:5b:d2:e7: 7e:3d:6b:97:fc:05:00:c2:52:bd:a7:cb:20:0d:3e: 30:78:86:37:65:26:f6:32:dd:40:df:c3:80:6f:65: 26:94:32:3f:d3:db:dd:05:ad:b7:b3:f2:28:be:d5: f0:49:3c:a5:40:07:2f:19:e1:25:05:3b:43:9f:04: 35:81:3d:99:96:ba:77:2d:1c:02:cd:a9:f2:2a:2e: 2e:7e:6e:d6:f1:15:28:17:32:b9:60:cf:7c:3c:86: 94:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FC:FA:D4:CD:4A:03:45:8A:0C:C4:21:D8:9E:8F:3F:A4:14:5E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/7ea1614b-8a2d-35f0-a9a6-1d71ffd396b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl X509v3 Authority Key Identifier: keyid:4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer sbgp-ipAddrBlock: critical IPv4: 81.199.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:5d:44:c3:7e:96:f9:cd:48:16:50:9f:41:7a:a0:5d:68:20: 4a:89:62:d4:d0:f0:11:ec:d9:0b:40:e7:ac:f0:17:ef:61:d2: 45:36:0d:4a:cd:a4:15:9e:22:72:f1:85:52:b1:63:8c:17:a3: 03:78:38:e9:f8:10:11:96:a8:a7:ac:39:5b:ad:cf:a1:21:f1: 5c:4e:b6:2f:0e:c3:3d:5b:1c:31:10:3d:ce:33:f6:07:a5:7e: 7c:da:d9:68:4d:32:6c:0a:d5:92:79:cc:8e:fb:9b:da:5b:44: 2f:f1:f2:b6:c3:c5:3e:f4:d3:e9:6a:4d:00:a2:45:2d:68:c7: 2c:e5:88:28:30:40:40:d4:b1:63:12:34:aa:6a:ba:7c:f6:76: 7a:d6:0c:89:39:01:39:2d:e6:f9:97:b7:1c:5f:03:08:2f:80: c8:9c:59:40:c5:88:8e:27:db:4b:e9:a1:70:c7:90:33:84:17: 87:58:be:68:92:90:6e:13:3b:f1:9f:f8:6d:94:2a:e5:4a:7b: 52:2f:a5:9e:a4:a9:c7:df:d8:b9:75:6d:aa:93:04:74:cb:80: 13:92:96:f6:00:41:fb:ee:64:40:db:7a:47:3b:f8:33:23:c4: ac:08:2b:76:2e:b9:84:27:2a:42:84:40:13:db:11:06:05:3f: 50:df:9a:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL0lIbsS3+BVhYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGViNTMyNmYtZWUwMy00MTc0LWIzNTUtOTkxNmIzZTgy NmFhMB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk NDllZTAyNWItZDI2ZC00MjQ1LTgzNzItM2U1NjJiMGRmYzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEw0rfLDsicqhv1/qdtP4JmF6jqAj7I8Jjao YZu0mSkvKtfUekMRF25l2Vdz63+39hAuuwOEzWIbvFntJBNIH24PuTmjRsN8LqTw ioLWR3OLclfAcpwPLCZAZqDfBvWz6GnxDW4rijHQnaq3/SjfvlcSBZ+bDamRkPI4 Kz3Ttk07U9zsrX2lelVnczJmc/BpwY47jldh75Bw3rFkH4TU0VJb0ud+PWuX/AUA wlK9p8sgDT4weIY3ZSb2Mt1A38OAb2UmlDI/09vdBa23s/IovtXwSTylQAcvGeEl BTtDnwQ1gT2Zlrp3LRwCzanyKi4ufm7W8RUoFzK5YM98PIaUXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD78+tTNSgNFigzEIdiejz+kFF5sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1 MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2YjNlODI2YWEvN2VhMTYxNGItOGEyZC0z NWYwLWE5YTYtMWQ3MWZmZDM5NmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGViNTMyNmYtZWUwMy00MTc0LWIz NTUtOTkxNmIzZTgyNmFhLzRlYjUzMjZmLWVlMDMtNDE3NC1iMzU1LTk5MTZiM2U4 MjZhYS5jcmwwHwYDVR0jBBgwFoAUTU4uJJShwss4I21uaEckHdJB3B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2 YjNlODI2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUccnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1dRMN+lvnNSBZQn0F6oF1oIEqJYtTQ8BHs2QtA56zwF+9h0kU2DUrN pBWeInLxhVKxY4wXowN4OOn4EBGWqKesOVutz6Eh8VxOti8Owz1bHDEQPc4z9gel fnza2WhNMmwK1ZJ5zI77m9pbRC/x8rbDxT700+lqTQCiRS1oxyzliCgwQEDUsWMS NKpqunz2dnrWDIk5ATkt5vmXtxxfAwgvgMicWUDFiI4n20vpoXDHkDOEF4dYvmiS kG4TO/Gf+G2UKuVKe1IvpZ6kqcff2Ll1baqTBHTLgBOSlvYAQfvuZEDbekc7+DMj xKwIK3YuuYQnKkKEQBPbEQYFP1DfmhM= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:15 2024 by rpki-client on console-ams.rpki-client.org