$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa File: 2f73330e-1532-3517-a51f-dc46cb11c22c.roa (raw, json) Hash identifier: 1CNkixhpW7yhcOuhysCzQKiiO/1jzmlk86BtOVMp9W8= Subject key identifier: D3:AE:E1:66:D9:9C:40:EA:58:4D:23:4C:5C:A0:BE:E9:E9:C5:2F:1C Certificate issuer: /CN=028c0596-c3dd-44df-9761-677e68794c69 Certificate serial: 010D0C9F43285848EC968AC92F51727EDA599800 Authority key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 14371 IP address blocks: 65.18.204.0/22 maxlen: 24 66.171.40.0/21 maxlen: 24 68.235.64.0/18 maxlen: 24 104.219.196.0/22 maxlen: 24 162.254.64.0/22 maxlen: 24 205.149.144.0/20 maxlen: 24 206.223.125.0/24 maxlen: 24 208.77.24.0/22 maxlen: 24 209.191.192.0/19 maxlen: 24 2001:504:29::/48 maxlen: 48 2600:6400::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8a:c9:2f:51:72:7e:da:59:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028c0596-c3dd-44df-9761-677e68794c69 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=ec49c894-c878-430a-a587-b8b0197490ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:03:2d:2b:0a:92:dc:6e:45:37:ed:61:17:ca: b7:d1:36:7d:31:28:7c:78:d4:f8:4d:25:c3:6c:af: fe:63:f2:1c:72:a3:a3:ec:61:5a:4c:87:66:01:c1: dc:8c:ce:dc:93:9d:eb:d2:fb:14:69:c2:36:da:2e: 0f:f8:fe:b5:b1:89:41:cc:74:57:b6:76:21:e7:c6: e3:c3:c5:a4:a5:52:94:08:97:cd:31:ee:66:5a:de: 81:8b:3d:aa:e4:6f:cc:65:11:3b:83:0e:8d:1e:56: 67:8e:ae:bf:df:98:c3:ef:33:aa:69:bc:b4:b3:4d: be:28:a7:d1:1d:78:00:5c:7d:0b:10:0d:95:a6:71: 38:7b:70:d2:84:87:bf:f5:96:cc:27:f7:8c:f0:9d: 22:30:4c:a2:73:d4:4b:fc:d7:d2:17:65:72:68:9f: c3:ac:f2:ad:2a:1a:ea:85:8b:ad:84:85:f8:08:aa: e1:b7:71:15:5d:e2:c4:52:4a:d6:66:c7:8d:c6:fe: 68:69:1d:f2:6f:54:ee:97:5b:fe:a3:74:71:4d:f5: bf:55:aa:8a:49:1c:b0:c3:64:07:8a:9d:77:f7:81: d4:89:aa:49:f6:09:c5:33:c5:5a:c2:02:94:28:1f: 72:da:aa:9a:1b:bd:1f:4f:71:51:dc:b4:9f:0f:c4: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AE:E1:66:D9:9C:40:EA:58:4D:23:4C:5C:A0:BE:E9:E9:C5:2F:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl X509v3 Authority Key Identifier: keyid:D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer sbgp-ipAddrBlock: critical IPv4: 65.18.204.0/22 66.171.40.0/21 68.235.64.0/18 104.219.196.0/22 162.254.64.0/22 205.149.144.0/20 206.223.125.0/24 208.77.24.0/22 209.191.192.0/19 IPv6: 2001:504:29::/48 2600:6400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:db:e7:ef:69:27:a0:75:95:d3:eb:ad:79:4e:9d:5d:89:1f: fd:3c:34:2a:88:ab:bd:25:af:67:3b:55:9e:6e:80:8c:d6:97: d9:c3:6c:6b:88:2a:8d:42:da:93:02:88:c1:c2:da:4a:11:b6: 2e:de:45:07:74:99:90:23:1b:ed:97:23:fc:98:f2:07:97:3e: 5b:8c:8a:14:46:7e:4c:5c:c4:43:a9:69:76:26:c4:c6:96:b2: b0:77:3c:85:77:60:45:a4:9e:07:89:2c:f9:65:02:05:94:29: 8a:3f:3c:28:5f:38:32:15:5b:1a:16:1c:84:01:a5:41:7a:ae: d3:ae:b2:94:0a:79:6a:ea:bc:04:06:a8:a8:a9:58:17:25:38: 02:0e:0e:ec:ba:6f:f9:d2:15:a8:14:51:e5:47:ee:11:b7:ef: 58:62:61:01:c1:41:b7:e5:3a:ef:19:22:84:48:57:40:a8:6a: f3:92:05:d4:2d:09:23:ec:d4:9e:be:12:73:99:14:b1:5a:9e: 17:e0:62:8e:ca:ca:f9:3f:86:93:57:20:9f:8e:ae:6c:ad:44: 4a:20:14:cc:6a:d5:35:9c:76:45:cc:5b:f8:a2:f5:50:52:ab: c5:56:cc:e8:d4:6b:0e:2b:7f:82:ce:24:4a:cf:5e:57:12:e7: 92:68:d9:60 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEjslorJL1FyftpZmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4YzA1OTYtYzNkZC00NGRmLTk3NjEtNjc3ZTY4Nzk0 YzY5MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZWM0OWM4OTQtYzg3OC00MzBhLWE1ODctYjhiMDE5NzQ5MGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgMtKwqS3G5FN+1hF8q30TZ9MSh8eNT4TSXD bK/+Y/IccqOj7GFaTIdmAcHcjM7ck53r0vsUacI22i4P+P61sYlBzHRXtnYh58bj w8WkpVKUCJfNMe5mWt6Biz2q5G/MZRE7gw6NHlZnjq6/35jD7zOqaby0s02+KKfR HXgAXH0LEA2VpnE4e3DShIe/9ZbMJ/eM8J0iMEyic9RL/NfSF2VyaJ/DrPKtKhrq hYuthIX4CKrht3EVXeLEUkrWZseNxv5oaR3yb1Tul1v+o3RxTfW/VaqKSRyww2QH ip1394HUiapJ9gnFM8VawgKUKB9y2qqaG70fT3FR3LSfD8QCjwIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFNOu4WbZnEDqWE0jTFygvunpxS8cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhj MDU5Ni1jM2RkLTQ0ZGYtOTc2MS02NzdlNjg3OTRjNjkvMmY3MzMzMGUtMTUzMi0z NTE3LWE1MWYtZGM0NmNiMTFjMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDI4YzA1OTYtYzNkZC00NGRmLTk3 NjEtNjc3ZTY4Nzk0YzY5LzAyOGMwNTk2LWMzZGQtNDRkZi05NzYxLTY3N2U2ODc5 NGM2OS5jcmwwHwYDVR0jBBgwFoAU13vNAHAryYoSeo0O6DqODdIIi7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhjMDU5Ni1jM2RkLTQ0ZGYtOTc2MS02Nzdl Njg3OTRjNjkuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjA8BAIAATA2AwQCQRLMAwQD QqsoAwQGROtAAwQCaNvEAwQCov5AAwQEzZWQAwQAzt99AwQC0E0YAwQF0b/AMBYE AgACMBADBwAgAQUEACkDBQQmAGQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGvb5+9pJ6B1ldPrrXlOnV2J H/08NCqIq70lr2c7VZ5ugIzWl9nDbGuIKo1C2pMCiMHC2koRti7eRQd0mZAjG+2X I/yY8geXPluMihRGfkxcxEOpaXYmxMaWsrB3PIV3YEWkngeJLPllAgWUKYo/PChf ODIVWxoWHIQBpUF6rtOuspQKeWrqvAQGqKipWBclOAIODuy6b/nSFagUUeVH7hG3 71hiYQHBQbflOu8ZIoRIV0CoavOSBdQtCSPs1J6+EnOZFLFanhfgYo7Kyvk/hpNX IJ+OrmytREogFMxq1TWcdkXMW/ii9VBSq8VWzOjUaw4rf4LOJErPXlcS55Jo2WA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:12:57 2025 by rpki-client