$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa File: bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa (raw, json) Hash identifier: I/a2vSw3giak9w2k5jkT1jB0JT6b8JHbYi6PhbdfD/w= Subject key identifier: 03:E0:A0:B4:75:16:4A:79:09:C8:B2:90:07:E9:94:71:C2:4F:98:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847A5D14BE8713AC142D2E5D540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa Signing time: Thu 24 Oct 2024 12:50:02 +0000 ROA not before: Thu 24 Oct 2024 12:50:02 +0000 ROA not after: Wed 22 Jan 2025 13:50:02 +0000 asID: 396579 IP address blocks: 192.42.175.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d1:4b:e8:71:3a:c1:42:d2:e5:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 24 12:50:02 2024 GMT Not After : Jan 22 13:50:02 2025 GMT Subject: CN=e4224901-71b3-46c6-96a3-3b6bf3a930a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:bc:c5:cb:7f:c7:b1:c5:e4:ee:ac:a2:d6: 67:e0:40:0e:f4:1f:29:15:1a:29:7f:7a:61:fb:3e: c7:c3:27:31:98:4d:29:a4:62:7a:b7:7a:ee:ae:bd: 0c:4e:00:50:c6:13:9e:49:81:61:1c:17:8a:1c:eb: 44:ab:a3:c1:a8:5b:9b:41:8d:5d:3b:cb:0f:88:f5: 12:b8:30:48:4f:d7:67:3c:6d:be:dd:eb:0e:42:63: dc:33:11:35:7f:4f:13:a9:c8:51:64:08:22:f3:c6: 9d:d9:42:e1:b4:76:16:c5:86:73:08:79:f7:9f:1e: 47:6c:15:ac:61:7c:f9:ac:56:49:ac:89:f5:23:66: 40:ce:77:38:bd:8c:97:8c:fc:46:ac:a8:1f:c4:b8: a7:d5:94:02:89:f3:0e:43:72:a8:ca:ef:ea:09:7b: 31:30:7f:4d:f9:79:56:47:06:67:c5:f2:74:41:61: 01:61:b5:25:cc:a3:81:b3:b5:e9:e0:55:88:92:71: 11:6f:2c:9a:2d:5c:e1:a3:b6:6a:cf:64:ab:86:6b: 8c:6b:2a:26:d6:f2:73:b8:bd:7a:d4:f7:42:80:ac: 1a:12:a3:65:21:28:c8:88:fc:1c:88:95:58:45:6a: 82:df:f3:cc:f5:5e:dd:e8:30:5d:dc:bb:49:1f:c0: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E0:A0:B4:75:16:4A:79:09:C8:B2:90:07:E9:94:71:C2:4F:98:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:03:44:33:9d:c8:d0:10:be:1a:58:2e:09:98:28:ea:05:d3: c9:35:71:e1:d4:2c:de:5e:e6:0d:65:e9:fe:46:79:d9:25:1b: 8b:da:ce:31:6a:e6:f7:88:7a:c5:14:62:9f:7e:d4:f3:08:6e: 48:db:11:28:99:e1:97:af:d6:14:fe:8f:2f:0b:b1:f2:d6:ac: 97:d1:47:1e:4e:5e:2b:5d:e8:83:df:04:d1:e2:f6:8e:94:49: 0d:c2:fe:fb:0d:cd:26:7b:c7:c9:e4:81:f0:d5:18:23:41:7f: 98:cb:a7:b0:49:f6:ec:f8:2f:a4:1b:65:fd:c4:8b:8a:76:74: cf:b4:b7:08:11:97:d3:a5:97:c3:36:3f:1b:34:18:65:aa:f2: 33:75:06:16:0d:e6:98:19:b2:f8:eb:fc:36:d9:79:33:c8:02: 7d:fd:ee:f1:a3:4a:5a:7d:ad:54:a0:0f:c4:5a:28:32:ec:7a: 79:ad:1e:95:d4:60:28:26:91:e6:85:31:d9:36:7d:f9:fa:04: 4e:69:36:85:9c:70:85:e8:4b:3a:a0:79:99:1c:77:be:de:ac: cd:4c:02:d1:ba:af:09:ec:b7:65:4c:84:8b:0b:48:bb:14:d4: a3:4c:a9:8a:59:a4:5f:4b:e6:38:70:e9:8b:be:f6:e9:eb:aa: 59:6d:08:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEel0UvocTrBQtLl1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTAyNDEyNTAwMloXDTI1MDEyMjEzNTAwMlowLzEtMCsGA1UEAxMk ZTQyMjQ5MDEtNzFiMy00NmM2LTk2YTMtM2I2YmYzYTkzMGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb28xct/x7HF5O6sotZn4EAO9B8pFRopf3ph +z7HwycxmE0ppGJ6t3rurr0MTgBQxhOeSYFhHBeKHOtEq6PBqFubQY1dO8sPiPUS uDBIT9dnPG2+3esOQmPcMxE1f08TqchRZAgi88ad2ULhtHYWxYZzCHn3nx5HbBWs YXz5rFZJrIn1I2ZAznc4vYyXjPxGrKgfxLin1ZQCifMOQ3Koyu/qCXsxMH9N+XlW RwZnxfJ0QWEBYbUlzKOBs7Xp4FWIknERbyyaLVzho7Zqz2SrhmuMayom1vJzuL16 1PdCgKwaEqNlISjIiPwciJVYRWqC3/PM9V7d6DBd3LtJH8CG6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAPgoLR1Fkp5CciykAfplHHCT5hoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmFmZDRlMDktMGUzMC0z YjJiLTlhM2ItZjgxNDkzMDEyNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAMA0QzncjQEL4aWC4JmCjqBdPJNXHh1CzeXuYNZen+RnnZJRuL2s4x aub3iHrFFGKfftTzCG5I2xEomeGXr9YU/o8vC7Hy1qyX0UceTl4rXeiD3wTR4vaO lEkNwv77Dc0me8fJ5IHw1RgjQX+Yy6ewSfbs+C+kG2X9xIuKdnTPtLcIEZfTpZfD Nj8bNBhlqvIzdQYWDeaYGbL46/w22XkzyAJ9/e7xo0pafa1UoA/EWigy7Hp5rR6V 1GAoJpHmhTHZNn35+gROaTaFnHCF6Es6oHmZHHe+3qzNTALRuq8J7LdlTISLC0i7 FNSjTKmKWaRfS+Y4cOmLvvbp66pZbQgL -----END CERTIFICATE-----Generated at Fri Nov 22 04:19:43 2024 by rpki-client on console-fra.rpki-client.org