$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa File: bbcecaf5-f921-32a0-8972-424398752fdb.roa (raw, json) Hash identifier: RxODjLOUZOiJOBf06zoVc+AyOgYBZtuzkjvE3hoSFz0= Subject key identifier: 36:E0:55:B5:14:21:9F:5D:0E:FC:12:8E:96:8C:55:C8:31:55:34:8E Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64234EB9A4CD0548C9D680 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 23.252.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:23:4e:b9:a4:cd:05:48:c9:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=8600fe3e-5f86-4c31-b785-fba581cc4af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a2:3e:b5:f7:99:09:22:3a:78:7b:e4:12:e9: 21:88:5d:74:f2:d6:7d:d3:8d:6e:77:1a:32:91:31: cf:ed:68:a3:54:25:31:14:6d:b5:af:07:b1:b2:67: 14:6d:d9:52:e0:6e:11:c8:2e:01:58:3d:1b:54:ec: f4:1f:ee:52:5e:e8:ad:11:3d:48:fe:96:e2:f8:43: e1:ea:ff:a3:1c:56:a3:db:74:a6:50:af:eb:fc:a4: c0:90:c5:fa:7c:10:06:1f:08:d1:67:2c:8f:18:d8: 1b:66:0a:c2:38:39:b4:57:a4:94:ce:39:06:55:09: 66:75:fd:3d:9d:15:be:6b:2d:90:6a:6b:86:a0:18: 7d:2d:e0:42:d0:4a:7c:38:72:39:fd:e7:9a:2d:2c: 58:01:33:15:0f:73:22:c3:00:c3:7a:84:3e:6e:ac: 93:0f:03:c9:7e:a3:9b:bd:5f:9f:10:1e:f1:8e:76: 83:c8:c2:73:f7:65:95:02:6a:1d:d2:b7:81:28:26: ce:de:bc:8a:bf:c5:b7:b6:5a:6b:01:81:22:b1:76: 73:77:6b:84:68:eb:66:c5:9e:25:f7:ff:9b:af:07: 82:d9:e7:eb:33:08:2f:ee:c9:73:be:b3:72:a7:50: c9:05:a8:90:89:fa:9c:bc:a8:ef:7f:4e:7a:99:f6: 48:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E0:55:B5:14:21:9F:5D:0E:FC:12:8E:96:8C:55:C8:31:55:34:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 23.252.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:cf:6a:c5:77:f3:9b:78:4c:ea:5c:22:23:cb:4a:eb:8a:ed: 2b:07:dd:cd:cd:01:09:ea:e7:a0:f7:fe:0f:4d:22:4b:60:b5: a3:ea:50:83:ff:14:7a:f6:e2:84:27:26:05:97:48:1b:52:ea: df:37:aa:77:63:97:15:36:37:68:81:08:fb:7e:aa:3b:42:ab: 4f:f3:45:50:d1:19:0e:55:66:b8:78:1a:54:92:08:6a:46:48: 42:2c:11:de:16:b9:5c:36:26:8f:9b:a6:c0:10:0d:3c:a1:e8: 94:c8:35:d3:9c:b5:5a:34:f9:03:75:9e:8e:dc:fb:e8:a5:8f: 2c:3e:98:92:04:5e:72:b1:0a:23:9d:33:c2:e0:44:48:3c:0d: 3d:ca:5c:6a:3f:91:02:aa:6f:d5:e6:ec:ba:24:d6:13:89:a5: 82:89:23:f0:61:af:09:fa:88:bb:7b:69:be:66:ff:6d:10:f5: 96:12:4d:60:4d:e2:4f:f6:7a:dc:9b:9e:10:a7:ae:cf:2e:7a: e9:6a:9c:fc:49:81:17:66:f5:9e:19:e8:98:fe:af:7b:cf:70: f9:db:fe:eb:75:78:14:46:4e:b1:ab:27:fd:14:39:93:f2:71: fa:f5:e2:16:f7:7c:2b:c2:d6:00:f2:1c:80:b0:ce:b5:87:50: 9b:77:18:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCNOuaTNBUjJ1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ODYwMGZlM2UtNWY4Ni00YzMxLWI3ODUtZmJhNTgxY2M0YWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6I+tfeZCSI6eHvkEukhiF108tZ9041udxoy kTHP7WijVCUxFG21rwexsmcUbdlS4G4RyC4BWD0bVOz0H+5SXuitET1I/pbi+EPh 6v+jHFaj23SmUK/r/KTAkMX6fBAGHwjRZyyPGNgbZgrCODm0V6SUzjkGVQlmdf09 nRW+ay2QamuGoBh9LeBC0Ep8OHI5/eeaLSxYATMVD3MiwwDDeoQ+bqyTDwPJfqOb vV+fEB7xjnaDyMJz92WVAmod0reBKCbO3ryKv8W3tlprAYEisXZzd2uEaOtmxZ4l 9/+brweC2efrMwgv7slzvrNyp1DJBaiQifqcvKjvf056mfZInQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbgVbUUIZ9dDvwSjpaMVcgxVTSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYmJjZWNhZjUtZjkyMS0z MmEwLTg5NzItNDI0Mzk4NzUyZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbPasV385t4TOpcIiPLSuuK7SsH3c3NAQnq56D3/g9NIktgtaPqUIP/ FHr24oQnJgWXSBtS6t83qndjlxU2N2iBCPt+qjtCq0/zRVDRGQ5VZrh4GlSSCGpG SEIsEd4WuVw2Jo+bpsAQDTyh6JTINdOctVo0+QN1no7c++iljyw+mJIEXnKxCiOd M8LgREg8DT3KXGo/kQKqb9Xm7Lok1hOJpYKJI/Bhrwn6iLt7ab5m/20Q9ZYSTWBN 4k/2etybnhCnrs8ueulqnPxJgRdm9Z4Z6Jj+r3vPcPnb/ut1eBRGTrGrJ/0UOZPy cfr14hb3fCvC1gDyHICwzrWHUJt3GMA= -----END CERTIFICATE-----Generated at Sat Apr 12 13:17:27 2025 by rpki-client