$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/bcc02f4b-8494-3205-a39a-df56acb1455b.roa File: bcc02f4b-8494-3205-a39a-df56acb1455b.roa (raw, json) Hash identifier: e53ZSlltxTkOSu5deqMLcPdVBG1eamzGzvkIzj4gfXY= Subject key identifier: 15:59:41:CB:BA:1E:B2:21:EE:01:9F:33:9A:41:30:20:D8:2F:90:72 Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F43285848F65BED5052CE56D4866B5380 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/bcc02f4b-8494-3205-a39a-df56acb1455b.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 210110 IP address blocks: 23.247.132.0/22 maxlen: 24 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ed:50:52:ce:56:d4:86:6b:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=d3b70e9d-25c1-47ed-94fc-f871767f1343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:58:3d:8e:9e:9d:26:7b:03:01:af:ea:8d:03: ad:59:91:c0:d6:21:7a:5c:a9:70:ba:e2:58:94:e2: 4c:55:c6:36:32:29:ca:a0:1d:0a:34:4d:bf:a8:ca: fe:13:4c:14:69:c6:c5:4d:69:0c:a9:48:58:07:d1: 00:6f:49:2c:64:19:98:5d:13:74:75:b9:e1:32:9b: e4:f2:a0:a4:93:80:25:98:1e:a2:7f:7d:39:bc:3d: b5:1b:f8:32:2d:b2:82:64:4e:82:df:db:e5:31:0c: 71:27:a5:67:8a:ee:ab:4d:33:30:4e:a5:bf:f1:e9: 13:7a:e9:f4:8a:9b:45:fd:48:34:c3:19:bb:60:db: b2:93:59:ee:ae:f9:3a:ca:ff:8b:51:4a:c0:a1:aa: 56:e2:ee:6c:94:28:4a:7d:5a:40:1f:ea:0f:4f:f7: e8:20:11:5a:c0:1a:21:51:7a:36:26:a2:7d:8f:51: fc:63:d0:1b:3b:07:99:bd:8f:5f:7b:80:13:9c:6f: 28:e8:5e:57:9c:c4:8f:3f:c9:06:ca:6c:e0:a9:e6: e3:8f:b3:63:6b:f8:3c:95:05:f1:56:5d:e1:e0:b1: 31:46:40:e0:8d:5a:9c:03:7a:93:e3:72:81:a8:a4: b0:be:82:0d:6b:ff:ad:5a:88:45:f5:13:d9:2e:e9: 2a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:59:41:CB:BA:1E:B2:21:EE:01:9F:33:9A:41:30:20:D8:2F:90:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/bcc02f4b-8494-3205-a39a-df56acb1455b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 23.247.132.0/22 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3f:b6:2c:a2:07:36:8a:c2:09:d7:7d:e2:64:28:45:39:30: 4c:ac:56:7a:43:5b:d2:27:65:a7:05:22:9c:ea:0c:43:3a:52: 1f:b3:f2:c1:03:60:30:bf:d8:e1:73:88:77:46:25:d0:fd:29: 17:6a:ac:e4:44:fa:a5:83:42:f9:c1:f7:dc:4f:39:56:df:8d: 43:61:b2:3d:05:48:a4:85:48:31:4f:bf:96:30:1a:aa:b5:cf: 2f:31:b1:18:5c:98:89:22:d5:0b:55:92:d7:96:ca:26:46:e1: c5:23:8c:49:3f:73:40:59:89:f3:f1:d2:1a:12:67:27:35:49: 49:ed:10:c8:f7:be:3e:c4:16:ef:16:34:90:dc:df:a5:2c:25: 37:16:54:df:8d:da:56:a8:41:5a:dd:45:fc:2c:55:9e:45:1a: b0:35:26:60:7a:8f:49:1a:6b:59:96:3b:64:1b:9a:25:4a:6e: 68:83:d4:1f:a3:a1:12:c8:fc:ee:f1:4b:84:9b:a3:7e:0b:d3: 22:d7:4b:d5:fa:51:d8:61:f9:c6:41:16:71:8d:ac:28:0f:29: d0:3b:fc:97:f6:ba:2f:41:b1:a4:23:2a:b4:e2:89:d8:8b:9c: a0:f7:59:d0:63:3e:9c:68:d3:67:e2:3e:af:bc:5b:ba:b2:c1: 11:95:ac:32 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj2W+1QUs5W1IZrU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZDNiNzBlOWQtMjVjMS00N2VkLTk0ZmMtZjg3MTc2N2YxMzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVg9jp6dJnsDAa/qjQOtWZHA1iF6XKlwuuJY lOJMVcY2MinKoB0KNE2/qMr+E0wUacbFTWkMqUhYB9EAb0ksZBmYXRN0dbnhMpvk 8qCkk4AlmB6if305vD21G/gyLbKCZE6C39vlMQxxJ6Vniu6rTTMwTqW/8ekTeun0 iptF/Ug0wxm7YNuyk1nurvk6yv+LUUrAoapW4u5slChKfVpAH+oPT/foIBFawBoh UXo2JqJ9j1H8Y9AbOweZvY9fe4ATnG8o6F5XnMSPP8kGymzgqebjj7Nja/g8lQXx Vl3h4LExRkDgjVqcA3qT43KBqKSwvoINa/+tWohF9RPZLukqKQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBVZQcu6HrIh7gGfM5pBMCDYL5ByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvYmNjMDJmNGItODQ5NC0z MjA1LWEzOWEtZGY1NmFjYjE0NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCF/eEAwQC aPmsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGM/tiyiBzaKwgnXfeJkKEU5MEysVnpDW9InZacFIpzqDEM6 Uh+z8sEDYDC/2OFziHdGJdD9KRdqrORE+qWDQvnB99xPOVbfjUNhsj0FSKSFSDFP v5YwGqq1zy8xsRhcmIki1QtVkteWyiZG4cUjjEk/c0BZifPx0hoSZyc1SUntEMj3 vj7EFu8WNJDc36UsJTcWVN+N2laoQVrdRfwsVZ5FGrA1JmB6j0kaa1mWO2QbmiVK bmiD1B+joRLI/O7xS4Sbo34L0yLXS9X6Udhh+cZBFnGNrCgPKdA7/Jf2ui9BsaQj KrTiidiLnKD3WdBjPpxo02fiPq+8W7qywRGVrDI= -----END CERTIFICATE-----Generated at Fri Mar 14 11:12:21 2025 by rpki-client