$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baed3382-ce86-3142-965c-efdbb144e405.roa File: baed3382-ce86-3142-965c-efdbb144e405.roa (raw, json) Hash identifier: 9afUk6kV0CSySknimOuVubDKVP44GQhPE6F3EWCu8f4= Subject key identifier: 95:DF:1C:D9:1D:6E:AE:D8:BD:C5:04:B3:A1:18:EA:2E:D2:39:97:3D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858476C9BD64DAD92F8E7DF5FE400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baed3382-ce86-3142-965c-efdbb144e405.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 33491 IP address blocks: 68.44.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9b:d6:4d:ad:92:f8:e7:df:5f:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=dda8bd83-1379-4597-b9db-2dddba49a4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ba:ae:32:64:e4:d4:23:62:9b:9e:32:61:f2: 9e:8b:ff:42:00:6b:ab:7c:82:70:9b:97:54:24:25: 39:ae:a3:2d:7e:b8:f3:e7:65:b3:35:11:c5:2c:bb: 70:4a:19:4b:8b:35:26:d1:13:c7:40:47:e0:44:4b: 7b:db:1d:bf:fe:13:3e:e8:1b:89:ea:f8:6f:ba:31: 7f:6f:92:0c:81:7f:fe:3b:58:89:9c:5c:fc:74:6b: 5b:94:6d:62:ff:4f:b2:72:c5:2a:8d:b5:78:21:fa: 7f:2a:d8:32:c6:0b:27:f1:2d:22:fe:74:6a:a1:81: 93:2f:1a:77:7c:95:f0:1d:f2:65:af:95:24:c1:2e: fa:b5:23:e4:c3:83:27:9d:c1:5a:d3:b8:b8:66:e2: 61:47:72:d1:8d:da:0c:8a:06:b2:8a:d2:06:43:21: 07:47:09:86:f7:4f:8e:c5:10:4b:fa:b6:96:b5:86: 0b:fb:83:8b:6d:52:73:7d:17:c8:24:d7:97:01:6b: 08:16:d8:01:9d:68:e8:da:c6:e6:8d:c7:b3:ce:82: 51:2a:ca:c1:e0:48:77:c5:5e:8f:4e:a9:4c:4b:e3: ad:6e:8f:23:0d:d0:3f:b3:36:dd:b4:b6:ae:2d:4d: 5f:26:f2:9f:c8:eb:46:bd:15:86:4f:c5:eb:e1:1f: 0b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DF:1C:D9:1D:6E:AE:D8:BD:C5:04:B3:A1:18:EA:2E:D2:39:97:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baed3382-ce86-3142-965c-efdbb144e405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.44.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d5:87:ea:7d:d0:b2:3a:68:f8:d3:45:01:61:72:c0:e4:23: b8:c2:3a:c7:da:22:65:37:15:c0:1c:40:ed:9b:08:e0:61:01: 16:71:50:f9:ce:8e:c1:52:63:5f:3c:25:bf:e9:8c:10:d7:5f: 0c:cc:81:9f:78:32:42:16:7c:e5:2a:06:8a:91:cb:e9:a3:48: 5d:80:bb:e3:5b:e9:68:08:62:0c:d2:d0:1d:ae:d6:45:d1:ce: 65:d2:84:00:56:5f:69:b8:96:f1:8e:d7:40:23:1b:15:f2:18: 56:e5:c4:95:a2:46:12:2c:0d:fa:36:08:d1:b6:96:1d:84:d3: 23:7e:d9:a6:9a:b0:29:94:8c:c4:32:f7:2c:87:0a:1f:93:95: 3b:b1:78:4e:48:d7:55:20:d1:fa:7f:24:1c:12:d8:07:23:a3: b4:61:70:34:a2:82:71:f7:04:4c:12:4c:e5:21:ab:63:c3:cb: 1e:79:95:23:f4:c0:e6:a2:3d:ea:c4:32:4a:80:56:38:df:4d: 2a:1e:48:23:54:3d:da:7f:a4:73:0a:be:a6:3a:f2:2a:10:22: 43:4c:1e:01:96:aa:5f:30:90:23:47:6b:de:90:c0:8c:f1:5e: 4e:96:a0:89:2f:55:5c:4f:d4:b2:84:db:ad:55:42:ca:60:31: d2:98:cb:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsm9ZNrZL4599f5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZGRhOGJkODMtMTM3OS00NTk3LWI5ZGItMmRkZGJhNDlhNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbquMmTk1CNim54yYfKei/9CAGurfIJwm5dU JCU5rqMtfrjz52WzNRHFLLtwShlLizUm0RPHQEfgREt72x2//hM+6BuJ6vhvujF/ b5IMgX/+O1iJnFz8dGtblG1i/0+ycsUqjbV4Ifp/Ktgyxgsn8S0i/nRqoYGTLxp3 fJXwHfJlr5UkwS76tSPkw4MnncFa07i4ZuJhR3LRjdoMigayitIGQyEHRwmG90+O xRBL+raWtYYL+4OLbVJzfRfIJNeXAWsIFtgBnWjo2sbmjcezzoJRKsrB4Eh3xV6P TqlMS+Otbo8jDdA/szbdtLauLU1fJvKfyOtGvRWGT8Xr4R8L7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXfHNkdbq7YvcUEs6EY6i7SOZc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFlZDMzODItY2U4Ni0z MTQyLTk2NWMtZWZkYmIxNDRlNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfVh+p90LI6aPjTRQFhcsDkI7jCOsfaImU3FcAcQO2bCOBhARZxUPnO jsFSY188Jb/pjBDXXwzMgZ94MkIWfOUqBoqRy+mjSF2Au+Nb6WgIYgzS0B2u1kXR zmXShABWX2m4lvGO10AjGxXyGFblxJWiRhIsDfo2CNG2lh2E0yN+2aaasCmUjMQy 9yyHCh+TlTuxeE5I11Ug0fp/JBwS2Acjo7RhcDSignH3BEwSTOUhq2PDyx55lSP0 wOaiPerEMkqAVjjfTSoeSCNUPdp/pHMKvqY68ioQIkNMHgGWql8wkCNHa96QwIzx Xk6WoIkvVVxP1LKE261VQspgMdKYy0I= -----END CERTIFICATE-----Generated at Sun Dec 22 15:29:15 2024 by rpki-client on console-fra.rpki-client.org