$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa File: bbcecaf5-f921-32a0-8972-424398752fdb.roa (raw, json) Hash identifier: 5/8S4GHef5jLAh/Ts7vzP787Qg4Js3ppVr6ii8Zinrk= Subject key identifier: A9:37:76:F4:40:02:6B:BA:8A:16:65:E0:A0:44:D6:6D:D9:F3:7F:23 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAF0F1126EE1B17F7B3600 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 54858 IP address blocks: 23.252.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:f0:f1:12:6e:e1:b1:7f:7b:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=60824c0d-e17c-4542-98a7-e5d3cb5b50d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:ae:73:c9:cb:80:3c:c3:d1:2d:87:33:20: 9a:6f:ca:0a:96:92:c2:fd:ac:16:7f:b5:f1:50:c3: 2c:0a:9a:56:54:a4:ac:b4:f4:4b:9a:2a:9a:e1:be: eb:4c:1d:31:d8:34:f4:de:20:17:41:51:42:81:7c: 76:94:06:c4:61:1a:08:31:06:19:44:c3:5a:87:58: 2d:40:2c:02:c9:7a:da:be:eb:55:75:8c:8f:c8:f4: a7:52:1f:31:1b:c1:f8:c2:1d:90:59:4d:c3:b1:28: d0:2d:56:15:fe:e3:e9:61:77:24:b1:48:7a:b9:df: 60:2b:68:a3:78:f8:eb:7b:98:9c:e6:d0:a9:a7:e3: e4:40:7e:fd:8e:a6:54:1d:3e:26:42:d8:ef:34:5b: ad:42:f7:6e:c4:20:81:be:3b:4a:34:81:62:12:ff: 4c:26:f9:bb:ec:3a:92:90:5f:e2:6c:36:bb:77:49: 96:f7:70:f1:f8:01:de:3a:63:17:6b:e1:5f:87:0e: d0:e5:67:8f:71:1c:c9:de:6c:5b:8a:f7:42:a3:eb: 71:0d:e6:8f:ac:d5:8c:b9:6e:86:4f:95:49:0d:31: f0:99:45:6e:78:3a:b2:09:21:e7:54:eb:8c:01:0c: 01:fa:07:5e:e8:40:44:d4:ce:ac:c6:8b:c1:ef:56: 4a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:37:76:F4:40:02:6B:BA:8A:16:65:E0:A0:44:D6:6D:D9:F3:7F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 23.252.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:a3:8a:b6:62:b8:75:70:96:a8:80:d1:db:d1:ee:80:3b:f8: bb:91:69:1f:d8:24:c1:d6:bf:7c:65:47:f8:1b:1f:ce:e6:df: 3f:8d:8e:57:0b:9c:4a:28:a5:95:c2:7f:30:f1:b7:fb:70:97: 50:5b:c5:f3:1f:b9:49:42:24:e1:64:6e:7f:bc:d7:4d:1f:cc: b6:ea:5b:91:ec:27:0f:bb:22:62:bd:33:02:ce:33:67:46:cd: 71:0d:d3:ae:cf:99:fa:0a:9b:66:78:d2:33:8b:07:af:40:73: 2d:ea:40:d6:a2:71:14:9c:f5:30:30:0c:60:29:9e:62:fa:8f: 33:5c:4e:1e:1e:c3:cf:02:97:d0:50:01:25:62:90:9c:fc:9b: fc:cb:ee:96:e7:63:8d:6f:de:78:35:1a:86:57:85:67:39:b6: d3:fe:26:3e:8c:e2:3e:8a:bc:7d:fc:c2:89:35:d0:b5:c2:4d: ca:4e:5b:0e:34:5a:53:a5:92:10:47:8f:ea:07:d4:14:c0:15: 49:96:6b:9e:8f:26:db:5d:e3:3c:5d:b5:bd:34:75:3a:c8:4a: dd:b1:52:2d:35:16:9d:e4:2e:f0:33:97:5e:82:1e:0e:55:e5: ae:4b:19:5c:f4:1c:8d:df:1f:04:dc:b3:11:bc:7a:6f:2a:c8: f3:8e:81:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvDxEm7hsX97NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NjA4MjRjMGQtZTE3Yy00NTQyLTk4YTctZTVkM2NiNWI1MGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJiuc8nLgDzD0S2HMyCab8oKlpLC/awWf7Xx UMMsCppWVKSstPRLmiqa4b7rTB0x2DT03iAXQVFCgXx2lAbEYRoIMQYZRMNah1gt QCwCyXravutVdYyPyPSnUh8xG8H4wh2QWU3DsSjQLVYV/uPpYXcksUh6ud9gK2ij ePjre5ic5tCpp+PkQH79jqZUHT4mQtjvNFutQvduxCCBvjtKNIFiEv9MJvm77DqS kF/ibDa7d0mW93Dx+AHeOmMXa+Ffhw7Q5WePcRzJ3mxbivdCo+txDeaPrNWMuW6G T5VJDTHwmUVueDqyCSHnVOuMAQwB+gde6EBE1M6sxovB71ZKRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk3dvRAAmu6ihZl4KBE1m3Z838jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYmJjZWNhZjUtZjkyMS0z MmEwLTg5NzItNDI0Mzk4NzUyZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWjirZiuHVwlqiA0dvR7oA7+LuRaR/YJMHWv3xlR/gbH87m3z+NjlcL nEoopZXCfzDxt/twl1BbxfMfuUlCJOFkbn+8100fzLbqW5HsJw+7ImK9MwLOM2dG zXEN067PmfoKm2Z40jOLB69Acy3qQNaicRSc9TAwDGApnmL6jzNcTh4ew88Cl9BQ ASVikJz8m/zL7pbnY41v3ng1GoZXhWc5ttP+Jj6M4j6KvH38wok10LXCTcpOWw40 WlOlkhBHj+oH1BTAFUmWa56PJttd4zxdtb00dTrISt2xUi01Fp3kLvAzl16CHg5V 5a5LGVz0HI3fHwTcsxG8em8qyPOOgb4= -----END CERTIFICATE-----Generated at Sun Jun 15 23:51:21 2025 by rpki-client