$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/2b14bda5-732a-32d4-b0c3-b2c6baf1df86.roa File: 2b14bda5-732a-32d4-b0c3-b2c6baf1df86.roa (raw, json) Hash identifier: HvPlXmowykNpFsKz8U1zWy2d8xXwFezHnWPtZKrdJlw= Subject key identifier: 5F:58:EA:E1:64:B9:A4:1F:17:72:F6:9F:89:19:97:5B:E4:86:9F:DE Certificate issuer: /CN=bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16 Certificate serial: 010D0C9F432858497DA46CABA7D1761FAB0D9400 Authority key identifier: EE:70:3D:40:DA:37:1C:84:70:75:A1:4D:9A:FC:98:73:DD:0B:8F:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/2b14bda5-732a-32d4-b0c3-b2c6baf1df86.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 397270 IP address blocks: 23.148.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:6c:ab:a7:d1:76:1f:ab:0d:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=cd635976-278e-4b3f-a36f-44395f4328cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c1:a4:7d:53:9a:55:d5:94:c9:cf:58:2d:16: 78:7c:1c:ce:3b:b6:75:09:6c:94:38:3a:cb:f6:df: 5c:3f:1f:0c:b0:f0:aa:c8:40:1d:f8:93:0c:1f:eb: 7c:c9:ef:0e:6c:70:4e:b6:ba:4f:10:58:84:a5:eb: 99:49:27:e0:13:4c:0f:12:d4:64:d1:3c:e1:0f:84: c4:cc:2c:16:58:bc:19:17:33:19:ed:c4:7d:cf:a5: fe:9c:51:7e:08:19:74:b8:9e:08:61:41:ff:d6:51: d6:f1:36:ec:a3:91:66:85:b8:fc:36:3b:76:ca:3e: 51:a6:f6:0e:c2:b7:63:6f:03:0b:8e:de:d5:d0:f7: 98:da:f0:3b:97:cf:e2:5b:e2:1a:14:34:c0:df:85: dc:2c:57:e0:7c:05:8f:ef:ab:25:b4:7d:69:40:1c: 2f:c2:8b:95:68:09:36:b4:4b:96:47:69:a4:04:c5: f9:40:5b:e2:5e:30:0a:d6:36:f7:28:f5:d2:75:1c: 01:c4:31:0c:6b:84:e7:72:b4:0a:e9:c3:da:9e:f2: 3e:0f:b8:e1:77:7d:41:a5:15:45:f4:63:3c:66:63: 68:2d:26:ab:dc:88:08:f1:3f:52:11:e7:8b:1e:f3: ad:bb:aa:4a:9b:50:6e:ec:95:60:81:e2:12:3e:25: e1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:58:EA:E1:64:B9:A4:1F:17:72:F6:9F:89:19:97:5B:E4:86:9F:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/2b14bda5-732a-32d4-b0c3-b2c6baf1df86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.crl X509v3 Authority Key Identifier: keyid:EE:70:3D:40:DA:37:1C:84:70:75:A1:4D:9A:FC:98:73:DD:0B:8F:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.cer sbgp-ipAddrBlock: critical IPv4: 23.148.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:83:73:e3:5d:09:1e:ea:e7:bf:e3:34:2e:35:ca:c9:23:59: 4f:51:fd:b7:4f:bb:b6:b1:f4:3f:7f:0b:9d:d7:8a:55:54:c0: ff:5c:04:1a:2d:a2:55:0f:5c:e9:1c:81:71:15:1d:2e:91:cf: 4e:78:f8:c5:75:ad:05:d8:f5:58:a8:37:ef:aa:dc:51:54:bd: 65:6c:31:4f:47:0b:55:0b:93:e6:05:0a:dc:84:73:69:33:5d: a0:29:34:10:47:de:01:4f:59:5a:93:5a:56:63:35:6d:1b:b1: b1:3f:0d:3c:e4:4c:a1:e3:0d:04:fd:fe:5b:9b:30:f6:c3:62: 1c:3b:ef:68:c4:5d:cb:f6:f6:b7:a4:3e:18:9f:28:3f:4b:eb: bb:99:e9:c3:44:b6:93:da:d1:37:b6:c0:73:f1:b5:f4:12:11: aa:c7:62:37:69:db:18:91:d1:91:0e:e0:98:33:55:b6:50:41: 85:01:a2:df:7d:53:d7:20:5d:51:54:e2:00:61:44:38:62:a8: cf:93:66:a0:da:2b:8a:1f:8b:42:b3:96:77:93:0d:79:9c:c2: 12:60:5e:53:78:87:45:fa:7b:e6:7b:28:92:af:01:80:73:39: 58:54:ae:f8:48:ab:93:8a:c9:22:e9:02:78:d4:5d:68:09:4e: c8:c0:6a:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pGyrp9F2H6sNlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmJiMGYwZDYtMmNiOS00ODQ2LWJlOWYtNjZjZTZkYmYz YTE2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2Q2MzU5NzYtMjc4ZS00YjNmLWEzNmYtNDQzOTVmNDMyOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MGkfVOaVdWUyc9YLRZ4fBzOO7Z1CWyUODrL 9t9cPx8MsPCqyEAd+JMMH+t8ye8ObHBOtrpPEFiEpeuZSSfgE0wPEtRk0TzhD4TE zCwWWLwZFzMZ7cR9z6X+nFF+CBl0uJ4IYUH/1lHW8Tbso5Fmhbj8Njt2yj5RpvYO wrdjbwMLjt7V0PeY2vA7l8/iW+IaFDTA34XcLFfgfAWP76sltH1pQBwvwouVaAk2 tEuWR2mkBMX5QFviXjAK1jb3KPXSdRwBxDEMa4TncrQK6cPanvI+D7jhd31BpRVF 9GM8ZmNoLSar3IgI8T9SEeeLHvOtu6pKm1Bu7JVggeISPiXhHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9Y6uFkuaQfF3L2n4kZl1vkhp/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYmIw ZjBkNi0yY2I5LTQ4NDYtYmU5Zi02NmNlNmRiZjNhMTYvMmIxNGJkYTUtNzMyYS0z MmQ0LWIwYzMtYjJjNmJhZjFkZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmJiMGYwZDYtMmNiOS00ODQ2LWJl OWYtNjZjZTZkYmYzYTE2L2JiYjBmMGQ2LTJjYjktNDg0Ni1iZTlmLTY2Y2U2ZGJm M2ExNi5jcmwwHwYDVR0jBBgwFoAU7nA9QNo3HIRwdaFNmvyYc90Lj7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYmIwZjBkNi0yY2I5LTQ4NDYtYmU5Zi02NmNl NmRiZjNhMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5T4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByDc+NdCR7q57/jNC41yskjWU9R/bdPu7ax9D9/C53XilVUwP9cBBot olUPXOkcgXEVHS6Rz054+MV1rQXY9VioN++q3FFUvWVsMU9HC1ULk+YFCtyEc2kz XaApNBBH3gFPWVqTWlZjNW0bsbE/DTzkTKHjDQT9/lubMPbDYhw772jEXcv29rek PhifKD9L67uZ6cNEtpPa0Te2wHPxtfQSEarHYjdp2xiR0ZEO4JgzVbZQQYUBot99 U9cgXVFU4gBhRDhiqM+TZqDaK4ofi0KzlneTDXmcwhJgXlN4h0X6e+Z7KJKvAYBz OVhUrvhIq5OKySLpAnjUXWgJTsjAajw= -----END CERTIFICATE-----Generated at Tue Apr 29 09:23:05 2025 by rpki-client