$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/ecbd3945-3869-3ef8-93b1-b9800f888493.roa File: ecbd3945-3869-3ef8-93b1-b9800f888493.roa (raw, json) Hash identifier: lc/hOkAPLGBh01vUI+NCBsAhDldx6NKrEk2xmPeEt9M= Subject key identifier: EA:FA:D1:BE:DC:CA:A4:49:E2:3D:84:B5:FE:71:22:EE:1B:CA:CA:49 Certificate issuer: /CN=4eb5326f-ee03-4174-b355-9916b3e826aa Certificate serial: 010D0C9F4328584A7D15F356FD87B2641B5B1180 Authority key identifier: 4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/ecbd3945-3869-3ef8-93b1-b9800f888493.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 400380 IP address blocks: 81.199.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f3:56:fd:87:b2:64:1b:5b:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eb5326f-ee03-4174-b355-9916b3e826aa Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=d3cb683d-0d9c-4333-ba83-684ad459579b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:64:50:ac:7e:65:d2:67:e1:70:34:1a:bf:f1: 1b:70:0b:a4:c7:9a:c7:60:47:74:08:f3:1d:16:7d: 33:5c:b9:bf:10:79:7e:c7:f7:97:b4:97:39:fb:14: 34:4e:d7:64:a7:d1:1b:d1:ae:09:65:7e:8c:fc:78: a1:31:22:d5:55:11:d6:b0:38:e5:10:a7:56:16:ed: 3b:91:93:2e:98:3b:58:58:04:db:35:d1:9c:3f:f5: 03:9c:25:13:36:9c:56:d2:0c:01:f5:c1:71:54:23: 71:9f:78:82:78:4d:4e:5f:f1:7a:e4:5c:76:ce:16: 89:2e:c4:e8:eb:0d:59:99:ab:4a:c6:ac:e7:5a:74: 2a:12:50:0f:d0:0f:c9:fe:11:45:8e:0b:9a:2a:90: 1a:64:56:c4:b8:96:db:77:5f:56:bf:ad:8d:0d:1c: 82:e3:2f:e9:35:01:3d:7a:90:1d:9f:31:f7:d0:29: 5b:ad:ee:9d:0d:af:f9:70:48:30:e7:13:15:c5:45: b4:58:98:52:ef:d1:58:83:2a:df:8d:ab:25:2b:58: 83:56:46:25:a7:40:79:a5:21:38:c3:c3:22:95:5d: c8:0c:a6:84:a0:21:b6:36:79:a5:c0:6c:b5:2e:37: 6b:77:3c:3e:a1:f3:81:33:0e:e6:3e:06:74:3c:5d: 7a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FA:D1:BE:DC:CA:A4:49:E2:3D:84:B5:FE:71:22:EE:1B:CA:CA:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/ecbd3945-3869-3ef8-93b1-b9800f888493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl X509v3 Authority Key Identifier: keyid:4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer sbgp-ipAddrBlock: critical IPv4: 81.199.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:75:c1:f2:eb:77:93:66:eb:bb:91:69:8c:93:0b:04:d1:ee: d7:cf:83:83:30:2d:44:81:f7:cf:9d:ee:a7:88:ff:31:be:a0: c5:a3:0e:e9:39:2a:36:56:36:6f:ea:00:39:b6:9d:80:7c:cd: 0f:0c:77:15:ef:bf:fd:4c:22:c3:76:80:67:7f:60:8b:ff:95: 0c:24:19:ef:54:25:f3:94:66:fe:c7:4f:5a:4b:3f:03:a1:d2: 32:ab:bf:5c:2e:cf:51:71:31:d5:51:5c:79:64:53:5a:2e:b4: 67:42:d8:22:96:73:2e:64:e3:48:d6:4e:fe:8e:2f:12:6d:84: b7:42:14:41:3b:da:f9:50:c7:fd:10:9e:a0:4b:eb:e5:19:36: ef:07:08:7f:a5:02:b6:8e:94:f7:37:43:5b:a1:20:43:d7:37: 4a:c1:6e:7a:82:e7:b7:28:c3:ab:e1:1f:e2:d7:d9:aa:5b:60: a9:91:37:37:1b:d8:80:63:84:94:bf:24:bc:d3:f3:12:b1:f1: 06:df:93:34:66:8b:9a:5a:a8:bf:6d:d3:6f:73:46:55:be:08: 2e:65:c0:08:46:b4:c2:d1:af:67:16:9c:d0:13:f4:94:2e:dd: e7:df:ae:09:d5:07:d5:31:1a:45:c7:35:80:dd:e9:0d:e0:83: ec:5f:c1:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FfNW/YeyZBtbEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGViNTMyNmYtZWUwMy00MTc0LWIzNTUtOTkxNmIzZTgy NmFhMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk ZDNjYjY4M2QtMGQ5Yy00MzMzLWJhODMtNjg0YWQ0NTk1NzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2RQrH5l0mfhcDQav/EbcAukx5rHYEd0CPMd Fn0zXLm/EHl+x/eXtJc5+xQ0Ttdkp9Eb0a4JZX6M/HihMSLVVRHWsDjlEKdWFu07 kZMumDtYWATbNdGcP/UDnCUTNpxW0gwB9cFxVCNxn3iCeE1OX/F65Fx2zhaJLsTo 6w1ZmatKxqznWnQqElAP0A/J/hFFjguaKpAaZFbEuJbbd19Wv62NDRyC4y/pNQE9 epAdnzH30Clbre6dDa/5cEgw5xMVxUW0WJhS79FYgyrfjaslK1iDVkYlp0B5pSE4 w8MilV3IDKaEoCG2NnmlwGy1Ljdrdzw+ofOBMw7mPgZ0PF16FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOr60b7cyqRJ4j2Etf5xIu4byspJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1 MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2YjNlODI2YWEvZWNiZDM5NDUtMzg2OS0z ZWY4LTkzYjEtYjk4MDBmODg4NDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGViNTMyNmYtZWUwMy00MTc0LWIz NTUtOTkxNmIzZTgyNmFhLzRlYjUzMjZmLWVlMDMtNDE3NC1iMzU1LTk5MTZiM2U4 MjZhYS5jcmwwHwYDVR0jBBgwFoAUTU4uJJShwss4I21uaEckHdJB3B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2 YjNlODI2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUccmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD11wfLrd5Nm67uRaYyTCwTR7tfPg4MwLUSB98+d7qeI/zG+oMWjDuk5 KjZWNm/qADm2nYB8zQ8MdxXvv/1MIsN2gGd/YIv/lQwkGe9UJfOUZv7HT1pLPwOh 0jKrv1wuz1FxMdVRXHlkU1outGdC2CKWcy5k40jWTv6OLxJthLdCFEE72vlQx/0Q nqBL6+UZNu8HCH+lAraOlPc3Q1uhIEPXN0rBbnqC57cow6vhH+LX2apbYKmRNzcb 2IBjhJS/JLzT8xKx8QbfkzRmi5paqL9t029zRlW+CC5lwAhGtMLRr2cWnNAT9JQu 3effrgnVB9UxGkXHNYDd6Q3gg+xfwX8= -----END CERTIFICATE-----Generated at Sat Aug 9 22:35:36 2025 by rpki-client