$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa File: bbcecaf5-f921-32a0-8972-424398752fdb.roa (raw, json) Hash identifier: PSlH4YxvLpJCz+LoL9SrvLWIZH+as4uP0CSJArzNqg0= Subject key identifier: 90:BF:64:3F:05:9A:7B:07:96:70:F4:FD:78:C6:06:F4:BE:AD:C6:F8 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858478CB69AD31B53F9C6EFE3A380 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 54858 IP address blocks: 23.252.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:9a:d3:1b:53:f9:c6:ef:e3:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=9a22f966-cd29-471b-9aac-bef094d9bea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:63:db:59:05:ba:cd:79:3b:db:f3:f6:22:ba: 23:9f:8f:77:a5:7d:14:25:1a:53:f3:4d:8a:3c:7c: 0a:23:50:87:00:24:58:9a:2d:11:57:1a:88:8c:35: 6b:42:4b:59:08:69:01:19:b7:c5:8d:3c:a7:4e:36: 44:73:3d:c1:65:82:72:7c:45:be:6c:1c:d6:3d:9a: 9c:24:58:2f:5b:f9:3d:86:72:9f:38:a8:24:59:38: f5:ed:9b:b0:ff:34:9f:31:8d:52:da:da:e2:9a:18: 5b:ba:3d:9e:e7:3c:c6:f7:fd:07:01:d3:8c:d1:4b: b7:1b:a8:85:4c:fe:e0:e2:22:b8:c7:e3:4b:4f:b2: 00:a9:48:63:81:c8:22:24:55:92:49:78:7e:f5:81: 9b:45:37:f8:bf:ca:57:bd:c9:8c:46:64:2a:99:d1: cc:68:ec:88:ea:d0:08:c5:79:39:40:ab:77:9e:c4: 71:13:ab:84:1f:78:aa:23:ca:83:7d:23:7e:da:84: 1d:11:61:f8:d6:2a:d3:44:86:f4:c7:57:0c:d0:59: 48:65:df:7d:fb:78:b4:56:18:69:83:96:b8:f6:62: 37:4c:9e:d6:1c:cb:b9:95:37:2f:b7:90:93:d1:90: 75:66:60:4b:9c:fa:c3:a9:ff:95:88:82:45:a7:1f: 7b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BF:64:3F:05:9A:7B:07:96:70:F4:FD:78:C6:06:F4:BE:AD:C6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 23.252.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:71:9c:4e:fd:e1:dc:3f:28:41:05:14:bb:93:03:95:69:3b: 8a:52:ae:f0:1b:97:0c:63:2a:95:69:e0:c9:78:77:46:e8:c9: 28:10:98:41:90:57:06:a3:d3:37:0a:7c:1f:af:ec:c8:14:e1: 27:30:66:28:f6:85:37:db:11:ad:7f:70:7b:aa:6f:5d:79:10: 56:7f:13:19:7f:29:47:5a:b7:b3:cd:f2:9b:3b:cf:b9:90:47: d9:e4:7d:37:83:34:ed:a8:e2:02:ef:44:60:53:b1:b7:ff:b7: eb:a1:4c:09:eb:9a:12:51:85:41:2b:05:94:6a:52:1f:bc:48: 3a:65:30:fd:03:49:c4:c0:cb:a2:2e:5a:a5:3f:0a:54:99:e3: 24:f2:b7:03:95:36:ad:df:ef:3e:ba:5c:4f:3d:82:ef:cc:aa: 56:e1:cf:78:bf:78:0b:f5:4e:ab:f0:eb:21:6d:fc:0e:c6:9c: f8:79:d3:49:1a:06:1b:c8:54:f3:f3:64:4b:35:f7:a1:59:12: 89:9d:0e:ec:ad:b0:8d:6b:6c:8e:2f:67:e1:3d:b5:33:5a:19: 6c:93:f6:db:93:3a:00:97:5f:b6:67:83:57:07:b8:81:18:0c: 77:30:29:59:3b:1a:65:64:b5:39:15:1a:9c:a8:03:5f:b5:3b: 71:87:18:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtprTG1P5xu/jo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk OWEyMmY5NjYtY2QyOS00NzFiLTlhYWMtYmVmMDk0ZDliZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWPbWQW6zXk72/P2Irojn493pX0UJRpT802K PHwKI1CHACRYmi0RVxqIjDVrQktZCGkBGbfFjTynTjZEcz3BZYJyfEW+bBzWPZqc JFgvW/k9hnKfOKgkWTj17Zuw/zSfMY1S2trimhhbuj2e5zzG9/0HAdOM0Uu3G6iF TP7g4iK4x+NLT7IAqUhjgcgiJFWSSXh+9YGbRTf4v8pXvcmMRmQqmdHMaOyI6tAI xXk5QKt3nsRxE6uEH3iqI8qDfSN+2oQdEWH41irTRIb0x1cM0FlIZd99+3i0Vhhp g5a49mI3TJ7WHMu5lTcvt5CT0ZB1ZmBLnPrDqf+ViIJFpx971QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC/ZD8FmnsHlnD0/XjGBvS+rcb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYmJjZWNhZjUtZjkyMS0z MmEwLTg5NzItNDI0Mzk4NzUyZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxxnE794dw/KEEFFLuTA5VpO4pSrvAblwxjKpVp4Ml4d0boySgQmEGQ Vwaj0zcKfB+v7MgU4ScwZij2hTfbEa1/cHuqb115EFZ/Exl/KUdat7PN8ps7z7mQ R9nkfTeDNO2o4gLvRGBTsbf/t+uhTAnrmhJRhUErBZRqUh+8SDplMP0DScTAy6Iu WqU/ClSZ4yTytwOVNq3f7z66XE89gu/Mqlbhz3i/eAv1Tqvw6yFt/A7GnPh500ka BhvIVPPzZEs196FZEomdDuytsI1rbI4vZ+E9tTNaGWyT9tuTOgCXX7Zng1cHuIEY DHcwKVk7GmVktTkVGpyoA1+1O3GHGGM= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:06 2024 by rpki-client on console-fra.rpki-client.org