$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa File: bbcecaf5-f921-32a0-8972-424398752fdb.roa (raw, json) Hash identifier: /Umpxxuy7PD6fgrWeslC/fPJJZDxfx7RC8b7MwUM8Hk= Subject key identifier: 0E:46:8F:31:83:02:16:A9:F7:B8:11:DB:B5:CF:11:70:72:1E:3D:74 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584CCBA76CBC12F3C3AAAEB9E45C Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 54858 IP address blocks: 23.252.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:6c:bc:12:f3:c3:aa:ae:b9:e4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=6859fcb5-9d34-4232-ad56-1961ee7bf94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3d:2e:59:92:e1:a0:0a:47:14:3f:88:7e:6f: 63:9e:35:3d:36:94:93:eb:1c:e5:0c:4c:d8:14:d4: de:af:fd:16:e9:d6:84:ae:fa:84:2e:3b:6e:04:47: 70:cd:8c:ab:97:87:14:da:7e:89:8a:0f:b4:f1:7b: 2b:82:b5:66:c0:45:0e:28:e3:f7:93:13:f8:27:39: b8:da:45:5e:6c:8a:96:a2:ec:45:ff:30:75:ae:78: 1f:34:c2:3c:76:b0:2b:3c:37:b6:3f:35:94:9c:3d: 1f:a6:2d:a4:3b:53:0f:e0:ab:da:f0:3c:df:3c:d6: 52:98:31:7b:56:d7:a1:74:bb:2e:62:d7:48:a3:97: ec:7e:0a:03:85:ee:97:27:12:ea:f8:64:76:c1:e1: cd:46:ea:f1:3f:9a:9a:f1:07:1f:2a:5b:92:8a:03: 51:0a:1b:37:8e:2a:8e:af:b8:7b:0a:8e:6c:01:92: 0e:62:2d:70:74:9f:f7:13:53:e5:5b:e8:31:34:0d: a5:91:6c:df:63:a0:7f:17:4b:cb:97:cb:f9:2a:67: dd:41:35:a9:79:55:f7:7a:c6:a2:71:c8:db:7f:ca: f8:c1:59:c2:0f:6b:e4:69:eb:6d:93:d1:3c:cb:6d: ec:6f:f5:9a:91:3c:73:85:8f:60:8a:d5:8d:01:90: b7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:46:8F:31:83:02:16:A9:F7:B8:11:DB:B5:CF:11:70:72:1E:3D:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bbcecaf5-f921-32a0-8972-424398752fdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 23.252.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1e:bd:15:55:46:c9:ae:95:95:b9:48:26:4b:d6:38:a3:27: 82:d0:8f:23:f5:cb:90:42:08:77:21:fe:d5:a1:74:9d:e9:78: 46:d2:8d:2d:c3:6f:59:ae:60:5b:b7:ad:1e:f9:ad:82:98:b5: f9:ef:26:36:52:9c:d3:d0:41:8e:5b:4f:5f:0d:f3:2d:82:08: b7:a6:bb:6b:87:23:1e:86:74:aa:4c:70:dc:3b:22:19:60:54: 3e:4e:35:6b:46:7a:29:96:c1:77:a1:37:00:93:0e:31:01:cb: d2:40:10:0c:4c:3a:37:2b:ab:f4:f2:a5:15:bf:df:e3:aa:6f: cc:85:78:b4:bd:26:c1:7a:19:f2:6a:b4:0d:c4:86:4d:d7:1e: 3a:7a:6b:0e:aa:7b:33:3d:0a:d0:3e:07:4f:ce:28:0b:68:c1: c4:f2:40:0b:ef:ab:e5:63:44:b2:c5:cd:b3:bb:e6:25:0a:69: ef:09:86:a3:a3:2c:c7:7d:63:8c:65:b5:f8:89:21:95:56:01: b2:a9:94:9f:a8:0a:3a:5d:e5:2f:c0:2d:2c:05:fe:24:d9:f4: d8:18:95:8e:0e:5a:e8:63:38:e3:da:2e:91:58:09:81:ba:13: d3:1e:34:20:72:f5:cb:21:25:f9:e3:bf:a8:db:3a:69:7d:ce: 29:30:74:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp2y8EvPDqq655FwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk Njg1OWZjYjUtOWQzNC00MjMyLWFkNTYtMTk2MWVlN2JmOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD0uWZLhoApHFD+Ifm9jnjU9NpST6xzlDEzY FNTer/0W6daErvqELjtuBEdwzYyrl4cU2n6Jig+08XsrgrVmwEUOKOP3kxP4Jzm4 2kVebIqWouxF/zB1rngfNMI8drArPDe2PzWUnD0fpi2kO1MP4Kva8DzfPNZSmDF7 VtehdLsuYtdIo5fsfgoDhe6XJxLq+GR2weHNRurxP5qa8QcfKluSigNRChs3jiqO r7h7Co5sAZIOYi1wdJ/3E1PlW+gxNA2lkWzfY6B/F0vLl8v5KmfdQTWpeVX3esai ccjbf8r4wVnCD2vkaettk9E8y23sb/WakTxzhY9gitWNAZC3nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5GjzGDAhap97gR27XPEXByHj10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYmJjZWNhZjUtZjkyMS0z MmEwLTg5NzItNDI0Mzk4NzUyZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoevRVVRsmulZW5SCZL1jijJ4LQjyP1y5BCCHch/tWhdJ3peEbSjS3D b1muYFu3rR75rYKYtfnvJjZSnNPQQY5bT18N8y2CCLemu2uHIx6GdKpMcNw7Ihlg VD5ONWtGeimWwXehNwCTDjEBy9JAEAxMOjcrq/TypRW/3+Oqb8yFeLS9JsF6GfJq tA3Ehk3XHjp6aw6qezM9CtA+B0/OKAtowcTyQAvvq+VjRLLFzbO75iUKae8JhqOj LMd9Y4xltfiJIZVWAbKplJ+oCjpd5S/ALSwF/iTZ9NgYlY4OWuhjOOPaLpFYCYG6 E9MeNCBy9cshJfnjv6jbOml9zikwdP0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:45:47 2026 by rpki-client