$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bf4dc92c-ab55-3935-a05c-7bc36894b11e.roa File: bf4dc92c-ab55-3935-a05c-7bc36894b11e.roa (raw, json) Hash identifier: I+igF+ZjyditaEL/VPiXNGrQu2MWSmtcc1C1I7ze+RM= Subject key identifier: 2B:83:D9:7E:57:EA:93:FF:23:3B:85:67:45:F1:5C:82:70:BA:89:60 Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Certificate serial: 010D0C9F432858491ED6E4F31A2808D0E6412800 Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bf4dc92c-ab55-3935-a05c-7bc36894b11e.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 172.82.211.0/24 maxlen: 24 172.82.213.0/24 maxlen: 24 172.82.225.0/24 maxlen: 24 172.82.237.0/24 maxlen: 24 192.243.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e4:f3:1a:28:08:d0:e6:41:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=d848a1ea-ef73-49f8-bc4a-2c0e971c1749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:98:96:24:89:3b:c7:7f:25:f4:41:20:5a:56: 75:e3:50:6b:4b:4b:80:9c:c2:31:ea:e2:4a:42:04: e1:dd:6f:df:39:6f:c4:e1:3c:3c:12:ae:f4:4e:f6: f6:73:61:fb:49:5a:7d:49:6e:fa:4b:37:2c:bf:ae: c5:fd:23:a1:de:39:3c:dd:2e:7f:08:a4:10:87:ce: 49:9e:c2:59:09:e3:b6:9d:bd:72:2a:c1:aa:96:07: 6f:d0:f8:22:d0:73:95:05:b8:fe:77:d6:b1:d7:07: a8:87:de:55:02:d4:ec:53:ae:b7:86:a4:51:32:21: dc:95:36:aa:bb:b4:95:4f:af:aa:05:6e:6d:ba:ca: 9c:14:98:4c:88:18:95:6e:95:a9:f0:9d:69:b5:c6: 77:cf:6c:e2:b4:0f:6c:08:2e:5f:c9:a2:6a:a5:9b: 74:e2:6e:9b:52:7b:bd:bf:7b:db:15:82:c7:6c:07: aa:c2:d3:48:58:a8:92:9a:2a:aa:5f:80:6f:94:2c: cc:86:b1:3b:95:1f:70:27:fb:ce:af:2c:1f:b2:3f: 02:69:25:2b:54:ff:0b:7f:67:92:76:e1:62:c9:ab: b3:54:ba:77:40:f4:31:bf:6b:0d:ef:6b:5d:e9:f6: 1c:74:7e:2b:20:67:79:18:06:49:37:27:c2:b0:26: 72:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:83:D9:7E:57:EA:93:FF:23:3B:85:67:45:F1:5C:82:70:BA:89:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bf4dc92c-ab55-3935-a05c-7bc36894b11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl X509v3 Authority Key Identifier: keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer sbgp-ipAddrBlock: critical IPv4: 172.82.211.0/24 172.82.213.0/24 172.82.225.0/24 172.82.237.0/24 192.243.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f3:76:5c:51:d7:3c:ea:99:85:78:2e:b7:4c:0e:82:7b:cb: cb:e3:ed:69:b6:79:ac:b4:c6:bf:76:1f:cb:9c:7a:00:1b:7b: c5:d7:10:33:b9:16:0a:cb:57:e8:01:2c:ec:1d:b2:d9:f3:b6: bc:72:f0:18:8a:95:84:c1:1a:d1:1c:84:ee:79:6c:a7:67:be: 46:5c:0e:74:a3:81:23:69:ff:12:a3:d2:61:b4:a4:1a:d4:5c: 75:f5:01:a1:03:03:14:47:b0:3f:e6:ec:1e:3b:40:c9:35:e6: 66:de:6b:31:23:71:7e:1d:a8:a8:44:0b:a4:1c:32:1a:2b:b1: 28:5c:8e:fd:19:2c:bd:66:6a:39:84:40:d6:90:9b:f4:49:f9: 77:11:0e:5a:84:41:35:15:1a:7d:dc:17:14:6d:29:ae:5b:37: c8:85:5f:9a:97:87:09:ac:1f:32:4e:b7:bc:ee:eb:af:84:f4: ec:27:2f:5b:fb:8a:81:4e:69:dc:ce:14:3c:3d:da:23:a2:cf: f7:fe:48:1a:76:d9:a2:15:d7:51:d2:10:53:2f:ce:06:4e:01: 18:7f:cd:0f:20:eb:a5:1e:6a:6f:d2:02:d7:6e:82:d3:1f:c8: 5f:d9:62:ab:29:b1:3f:50:1d:ff:47:ba:c5:18:24:ab:ef:11: 6f:71:57:f4 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEke1uTzGigI0OZBKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5 ZWE5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZDg0OGExZWEtZWY3My00OWY4LWJjNGEtMmMwZTk3MWMxNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZiWJIk7x38l9EEgWlZ141BrS0uAnMIx6uJK QgTh3W/fOW/E4Tw8Eq70Tvb2c2H7SVp9SW76Szcsv67F/SOh3jk83S5/CKQQh85J nsJZCeO2nb1yKsGqlgdv0Pgi0HOVBbj+d9ax1weoh95VAtTsU663hqRRMiHclTaq u7SVT6+qBW5tusqcFJhMiBiVbpWp8J1ptcZ3z2zitA9sCC5fyaJqpZt04m6bUnu9 v3vbFYLHbAeqwtNIWKiSmiqqX4BvlCzMhrE7lR9wJ/vOrywfsj8CaSUrVP8Lf2eS duFiyauzVLp3QPQxv2sN72td6fYcdH4rIGd5GAZJNyfCsCZy2QIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFCuD2X5X6pP/IzuFZ0XxXIJwuolgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvYmY0ZGM5MmMtYWI1NS0z OTM1LWEwNWMtN2JjMzY4OTRiMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz MjkyMTllYTkuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQArFLTAwQA rFLVAwQArFLhAwQArFLtAwQAwPP1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJDzdlxR1zzqmYV4LrdMDoJ7 y8vj7Wm2eay0xr92H8ucegAbe8XXEDO5FgrLV+gBLOwdstnztrxy8BiKlYTBGtEc hO55bKdnvkZcDnSjgSNp/xKj0mG0pBrUXHX1AaEDAxRHsD/m7B47QMk15mbeazEj cX4dqKhEC6QcMhorsShcjv0ZLL1majmEQNaQm/RJ+XcRDlqEQTUVGn3cFxRtKa5b N8iFX5qXhwmsHzJOt7zu66+E9OwnL1v7ioFOadzOFDw92iOiz/f+SBp22aIV11HS EFMvzgZOARh/zQ8g66Ueam/SAtdugtMfyF/ZYqspsT9QHf9HusUYJKvvEW9xV/Q= -----END CERTIFICATE-----Generated at Fri Mar 14 13:33:46 2025 by rpki-client