$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa File: bbcecaf5-f921-32a0-8972-424398752fdb.roa (raw, json) Hash identifier: EHV07aSwtdO9PCwWpfVWwQC4iKUlCIYtIu7S4hIRWtQ= Subject key identifier: 56:85:DB:6F:E2:F7:8E:B8:D9:04:61:BF:D8:BE:87:66:D7:48:C1:17 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76C0BFB170E00479AABCC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 23.252.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c0:bf:b1:70:e0:04:79:aa:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=51c9da29-0ea3-4537-b24e-c4326de5b72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:a4:ea:7d:b5:0b:45:f0:ff:8e:96:47:a9: a7:4b:fd:1d:21:fc:e6:a8:ca:28:86:2d:80:79:44: 7f:58:d3:87:b8:00:e9:18:48:09:a4:40:49:8f:8f: 66:cd:fa:96:a3:0d:16:16:5c:24:2b:59:26:86:32: ca:4f:96:b5:67:67:2a:34:34:78:8b:1b:a9:0c:12: 6b:7d:9e:8f:ce:33:b1:56:f4:0b:64:d2:09:87:72: 96:08:aa:98:a1:22:56:26:76:2b:f2:01:6f:cb:b6: 83:62:84:6b:b2:e1:5a:95:43:79:fb:ef:43:58:d9: 5c:c0:7b:64:ca:38:eb:06:2c:5d:82:57:bf:ef:1b: 3a:bd:ce:e4:07:b8:dc:bf:ee:00:1a:38:a1:95:d0: 13:54:5e:c6:48:1b:7b:6e:cd:c9:cb:87:e8:ce:42: 1e:0f:30:df:b0:ae:4c:5c:50:c5:e7:ba:24:66:f4: 48:ea:61:0b:94:86:4b:81:58:82:fc:42:e1:c0:e0: e4:93:fa:c5:29:e5:b6:33:c8:ce:a0:39:ca:98:7a: 23:7f:73:0e:67:2f:d8:85:96:78:24:d3:55:3e:36: 68:7c:24:9d:2e:a7:2b:fc:86:1e:23:b4:22:16:c9: 1c:ed:5f:cd:78:47:17:73:23:2d:52:87:f2:5a:3c: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:85:DB:6F:E2:F7:8E:B8:D9:04:61:BF:D8:BE:87:66:D7:48:C1:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 23.252.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:55:08:1a:83:73:08:03:22:7a:24:a7:0f:19:f5:66:88:a4: f5:f4:59:2f:fc:b3:dc:2d:10:4b:eb:52:ff:76:6e:79:db:39: 2c:72:8f:8b:74:d0:7b:35:4d:c3:67:6e:f0:9c:4e:cd:f7:6c: c1:4b:ba:1e:14:bc:a7:54:d8:17:eb:7e:fb:b4:d7:ab:67:b6: 1e:ef:4a:47:c6:e5:6a:ac:cd:f9:96:2d:fb:93:15:ab:e9:a7: af:47:5a:11:cb:c5:b9:49:1c:1c:ae:30:3a:e8:ca:14:c7:f8: e4:75:78:d8:20:c5:f9:e7:56:58:07:2b:26:ff:4c:64:81:84: a8:4e:f5:b0:1a:76:13:2f:c6:a3:70:6a:11:77:53:a6:d5:60: 73:f7:3a:93:b6:78:77:ac:5c:57:45:7b:d9:90:62:66:26:f3: f0:6f:5c:c3:b0:e9:16:b2:bf:8c:e5:6e:fb:01:30:ae:c8:7e: bd:93:2a:2e:da:e1:29:f6:e6:38:00:ca:5b:cf:66:0e:d6:f4: 55:81:70:f5:d8:6e:21:74:07:b5:e7:7e:94:dd:15:82:31:a4: 75:74:09:4e:91:db:fa:fd:06:eb:85:3d:f5:16:9f:62:65:55: 6a:44:47:4b:41:20:39:83:8d:7b:ec:24:c5:7c:6b:1d:99:bc: ee:8a:21:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsC/sXDgBHmqvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NTFjOWRhMjktMGVhMy00NTM3LWIyNGUtYzQzMjZkZTViNzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D2k6n21C0Xw/46WR6mnS/0dIfzmqMoohi2A eUR/WNOHuADpGEgJpEBJj49mzfqWow0WFlwkK1kmhjLKT5a1Z2cqNDR4ixupDBJr fZ6PzjOxVvQLZNIJh3KWCKqYoSJWJnYr8gFvy7aDYoRrsuFalUN5++9DWNlcwHtk yjjrBixdgle/7xs6vc7kB7jcv+4AGjihldATVF7GSBt7bs3Jy4fozkIeDzDfsK5M XFDF57okZvRI6mELlIZLgViC/ELhwODkk/rFKeW2M8jOoDnKmHojf3MOZy/YhZZ4 JNNVPjZofCSdLqcr/IYeI7QiFskc7V/NeEcXcyMtUofyWjxl7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaF22/i94642QRhv9i+h2bXSMEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYmJjZWNhZjUtZjkyMS0z MmEwLTg5NzItNDI0Mzk4NzUyZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9VCBqDcwgDInokpw8Z9WaIpPX0WS/8s9wtEEvrUv92bnnbOSxyj4t0 0Hs1TcNnbvCcTs33bMFLuh4UvKdU2Bfrfvu016tnth7vSkfG5WqszfmWLfuTFavp p69HWhHLxblJHByuMDroyhTH+OR1eNggxfnnVlgHKyb/TGSBhKhO9bAadhMvxqNw ahF3U6bVYHP3OpO2eHesXFdFe9mQYmYm8/BvXMOw6Rayv4zlbvsBMK7Ifr2TKi7a 4Sn25jgAylvPZg7W9FWBcPXYbiF0B7XnfpTdFYIxpHV0CU6R2/r9BuuFPfUWn2Jl VWpER0tBIDmDjXvsJMV8ax2ZvO6KIaI= -----END CERTIFICATE-----Generated at Fri Oct 10 21:36:50 2025 by rpki-client