$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/ecbd3945-3869-3ef8-93b1-b9800f888493.roa File: ecbd3945-3869-3ef8-93b1-b9800f888493.roa (raw, json) Hash identifier: fUdHzw2dtRXwThhlCBHoW4o4rtn1G9m/9iHesxRpLzE= Subject key identifier: CF:38:A0:97:A7:2D:FB:1B:14:53:96:84:2B:C2:20:74:63:0E:9F:A1 Certificate issuer: /CN=4eb5326f-ee03-4174-b355-9916b3e826aa Certificate serial: 010D0C9F43285847DF2F492FFFACF5B360EC70A4 Authority key identifier: 4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/ecbd3945-3869-3ef8-93b1-b9800f888493.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 400380 IP address blocks: 81.199.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:49:2f:ff:ac:f5:b3:60:ec:70:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eb5326f-ee03-4174-b355-9916b3e826aa Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=466ff437-48a5-4777-8d57-a45b0fa04745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:24:c2:93:b3:10:ae:1b:fe:07:b1:bf:28:ec: 26:89:45:d0:19:63:53:df:46:f1:81:f8:9a:8b:f5: 48:6f:b0:9f:2a:b9:75:4b:31:8c:8f:87:33:ad:ae: 3d:ea:b1:e9:61:2d:5d:24:64:5b:9d:db:c9:ed:f2: c9:a5:f7:79:33:3e:39:3f:e0:7f:eb:88:22:3e:44: 62:a5:e4:e2:92:bb:47:a1:28:01:28:78:e6:1f:9f: c4:96:06:82:a4:9a:67:af:da:56:7f:f6:ce:07:7c: cc:7b:b6:d5:b5:f5:59:3c:0a:d7:30:f1:41:5b:e6: e8:7c:41:7c:15:5e:55:5e:27:f1:35:74:ec:b7:79: 3f:1f:a0:f3:d3:9a:38:4a:8b:e2:0f:01:5a:29:82: cf:34:aa:ab:15:b7:0c:8a:cb:13:5a:f1:54:65:09: 47:81:b9:86:d8:ff:4e:dc:6a:13:c2:86:1e:97:1d: 6a:35:a8:ba:ca:78:63:60:51:78:bb:b1:ca:49:f1: d3:13:17:68:13:cf:e8:52:66:96:f4:6f:ed:0a:12: ea:d2:51:04:91:bf:51:4e:db:a1:ce:1a:a6:26:f9: 75:a9:a0:72:c6:29:32:a9:bb:1d:23:ea:51:e2:f1: 14:9f:1c:27:fd:0b:f7:99:4b:29:9d:48:e4:0b:5c: fc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:38:A0:97:A7:2D:FB:1B:14:53:96:84:2B:C2:20:74:63:0E:9F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/ecbd3945-3869-3ef8-93b1-b9800f888493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl X509v3 Authority Key Identifier: keyid:4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer sbgp-ipAddrBlock: critical IPv4: 81.199.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:68:af:98:d2:1a:e4:24:3d:1a:bd:49:2a:c4:76:6a:70:55: be:e2:e9:af:a7:2a:55:84:c5:ee:8c:80:07:54:08:e0:15:89: 4e:0b:22:49:9f:4c:ef:74:75:3b:34:ce:6d:1c:2b:17:83:fe: 55:02:87:34:df:0a:fc:e9:c5:cc:26:b2:9b:d1:bd:8e:11:42: 2c:22:2d:0c:da:86:91:b8:0d:c3:87:85:8e:ea:9a:e5:69:ef: 31:ba:22:b4:35:b4:11:1a:ef:82:14:57:65:9c:4a:91:6a:d2: 99:e1:4a:5c:39:1f:57:b3:98:52:26:f7:00:9a:13:90:27:b7: 4e:5e:49:7d:aa:d1:a8:e8:a3:fc:66:21:bc:30:8b:8d:53:60: 62:8c:a6:5c:7d:a6:0a:f4:f0:44:ca:40:1a:ab:18:04:96:13: ec:2e:3f:af:9a:c7:fc:b2:81:cb:08:4e:97:8b:59:89:91:3f: 0f:d6:41:ad:f0:a5:9d:c3:ee:29:43:09:18:8d:ea:d6:48:af: fd:8b:10:c1:c3:9c:6e:50:55:8a:13:82:94:e0:22:6c:3a:5f: 66:d8:20:1c:37:ce:22:f2:f5:e0:0c:04:12:09:ca:9c:af:ab: 4d:b2:ed:3c:a7:75:bf:30:92:e9:2f:98:45:a9:b8:eb:da:e7: 17:b5:53:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL0kv/6z1s2DscKQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGViNTMyNmYtZWUwMy00MTc0LWIzNTUtOTkxNmIzZTgy NmFhMB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk NDY2ZmY0MzctNDhhNS00Nzc3LThkNTctYTQ1YjBmYTA0NzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSTCk7MQrhv+B7G/KOwmiUXQGWNT30bxgfia i/VIb7CfKrl1SzGMj4czra496rHpYS1dJGRbndvJ7fLJpfd5Mz45P+B/64giPkRi peTikrtHoSgBKHjmH5/ElgaCpJpnr9pWf/bOB3zMe7bVtfVZPArXMPFBW+bofEF8 FV5VXifxNXTst3k/H6Dz05o4SoviDwFaKYLPNKqrFbcMissTWvFUZQlHgbmG2P9O 3GoTwoYelx1qNai6ynhjYFF4u7HKSfHTExdoE8/oUmaW9G/tChLq0lEEkb9RTtuh zhqmJvl1qaByxikyqbsdI+pR4vEUnxwn/Qv3mUspnUjkC1z8fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM84oJenLfsbFFOWhCvCIHRjDp+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1 MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2YjNlODI2YWEvZWNiZDM5NDUtMzg2OS0z ZWY4LTkzYjEtYjk4MDBmODg4NDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGViNTMyNmYtZWUwMy00MTc0LWIz NTUtOTkxNmIzZTgyNmFhLzRlYjUzMjZmLWVlMDMtNDE3NC1iMzU1LTk5MTZiM2U4 MjZhYS5jcmwwHwYDVR0jBBgwFoAUTU4uJJShwss4I21uaEckHdJB3B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2 YjNlODI2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUccmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBor5jSGuQkPRq9SSrEdmpwVb7i6a+nKlWExe6MgAdUCOAViU4LIkmf TO90dTs0zm0cKxeD/lUChzTfCvzpxcwmspvRvY4RQiwiLQzahpG4DcOHhY7qmuVp 7zG6IrQ1tBEa74IUV2WcSpFq0pnhSlw5H1ezmFIm9wCaE5Ant05eSX2q0ajoo/xm Ibwwi41TYGKMplx9pgr08ETKQBqrGASWE+wuP6+ax/yygcsITpeLWYmRPw/WQa3w pZ3D7ilDCRiN6tZIr/2LEMHDnG5QVYoTgpTgImw6X2bYIBw3ziLy9eAMBBIJypyv q02y7Tyndb8wkukvmEWpuOva5xe1Uyk= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:15 2024 by rpki-client on console-ams.rpki-client.org