$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa File: 2f73330e-1532-3517-a51f-dc46cb11c22c.roa (raw, json) Hash identifier: bQm84V6lh9FIhlKVBd7P2Z6yVUYVlooLdw0yapGAfGw= Subject key identifier: 77:9A:1B:7A:42:22:9E:5E:12:69:40:68:84:17:C3:F2:DB:16:DB:42 Certificate issuer: /CN=028c0596-c3dd-44df-9761-677e68794c69 Certificate serial: 010D0C9F432858480BDA67D82C6E7AC6DDF34C80 Authority key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 14371 IP address blocks: 65.18.204.0/22 maxlen: 24 66.171.40.0/21 maxlen: 24 68.235.64.0/18 maxlen: 24 104.219.196.0/22 maxlen: 24 162.254.64.0/22 maxlen: 24 205.149.144.0/20 maxlen: 24 206.223.125.0/24 maxlen: 24 208.77.24.0/22 maxlen: 24 209.191.192.0/19 maxlen: 24 2001:504:29::/48 maxlen: 48 2600:6400::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:67:d8:2c:6e:7a:c6:dd:f3:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028c0596-c3dd-44df-9761-677e68794c69 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=a62f133a-55a0-4417-98c6-7a2eb3466d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:20:e2:45:d8:d2:51:e7:70:11:43:d7:7c:69: fc:55:76:e0:66:72:f7:8d:c7:03:08:6a:cd:77:cc: 6a:ff:72:f6:2d:e3:51:c8:08:fd:3c:56:e3:b6:28: 3e:76:74:dc:0d:c8:7f:b1:7d:88:fc:0d:ca:6d:26: 02:62:ed:8f:52:fd:07:a2:6c:90:36:4b:6b:bc:e5: 10:0b:6a:02:af:f5:f6:25:4d:6c:68:82:68:c1:1b: a6:3f:5c:60:02:69:4c:ce:a4:ea:4f:35:a2:fa:ac: 5a:48:87:de:5d:e7:8c:a9:49:73:be:25:8d:7e:5d: d1:f0:56:23:e5:58:28:be:61:04:95:96:b3:37:61: 0c:20:12:0d:59:1a:57:9a:d0:4a:1d:0a:ae:ed:f1: a1:4f:5e:e5:30:25:fc:14:2c:fe:67:37:b3:a7:e7: ed:14:4f:43:d8:f4:e7:6e:42:7b:48:06:66:b5:a2: c9:52:da:dd:7a:5e:19:84:d9:35:bd:bb:89:7c:ed: 32:84:90:56:c9:18:b8:b1:42:b9:80:f3:b3:48:ba: bd:68:0d:2f:dc:f7:1e:59:64:e9:e5:fe:ff:79:da: 89:10:26:b4:97:c1:63:ce:1b:c3:21:51:64:fc:a0: 45:fc:0c:89:ec:37:0c:f2:6d:65:0e:9c:b4:49:53: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9A:1B:7A:42:22:9E:5E:12:69:40:68:84:17:C3:F2:DB:16:DB:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl X509v3 Authority Key Identifier: keyid:D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer sbgp-ipAddrBlock: critical IPv4: 65.18.204.0/22 66.171.40.0/21 68.235.64.0/18 104.219.196.0/22 162.254.64.0/22 205.149.144.0/20 206.223.125.0/24 208.77.24.0/22 209.191.192.0/19 IPv6: 2001:504:29::/48 2600:6400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:1d:ca:bd:24:91:a1:49:7d:cc:f1:4e:80:1b:39:86:a5:05: 25:0e:d1:d1:e8:74:24:40:8c:34:36:51:87:df:ce:f5:89:d9: 55:92:1b:09:79:2e:90:cb:c1:02:ee:df:8f:5b:d2:9f:2d:89: 05:be:00:67:7b:23:a1:dd:1f:b5:6d:1c:6d:97:1d:0c:f9:65: ec:55:72:ac:c2:13:86:03:10:6d:d5:0a:0b:52:78:48:0d:e5: 78:0d:97:21:32:c3:ca:2f:79:82:97:f5:6a:7d:13:b4:d5:69: bc:c3:c9:08:f7:23:0a:7c:db:17:2b:b9:67:22:f4:53:82:3a: 39:1d:e5:36:06:e4:d8:59:ab:37:7b:12:86:84:d8:f1:83:e0: 98:00:6d:29:78:72:59:72:9f:41:b5:61:c1:6a:71:c5:f6:c0: fd:14:c3:fc:99:fd:a0:cc:84:e5:2f:ce:19:3c:6c:24:f3:f0: 43:40:ba:9a:63:4f:4e:f3:63:f9:df:2c:74:95:d7:36:7e:c4: e2:a6:df:62:d1:5d:0d:e3:51:7e:6c:fa:76:b2:32:6f:e4:f3: 1b:21:23:aa:b0:f8:2a:d0:94:fc:2f:de:74:36:af:7a:ae:b5: 1c:51:fd:78:ab:11:3d:b2:ef:4e:19:8b:81:37:14:ec:1d:7c: 02:0f:ac:c2 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEgL2mfYLG56xt3zTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4YzA1OTYtYzNkZC00NGRmLTk3NjEtNjc3ZTY4Nzk0 YzY5MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk YTYyZjEzM2EtNTVhMC00NDE3LTk4YzYtN2EyZWIzNDY2ZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yDiRdjSUedwEUPXfGn8VXbgZnL3jccDCGrN d8xq/3L2LeNRyAj9PFbjtig+dnTcDch/sX2I/A3KbSYCYu2PUv0HomyQNktrvOUQ C2oCr/X2JU1saIJowRumP1xgAmlMzqTqTzWi+qxaSIfeXeeMqUlzviWNfl3R8FYj 5VgovmEElZazN2EMIBINWRpXmtBKHQqu7fGhT17lMCX8FCz+Zzezp+ftFE9D2PTn bkJ7SAZmtaLJUtrdel4ZhNk1vbuJfO0yhJBWyRi4sUK5gPOzSLq9aA0v3PceWWTp 5f7/edqJECa0l8FjzhvDIVFk/KBF/AyJ7DcM8m1lDpy0SVOaEwIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFHeaG3pCIp5eEmlAaIQXw/LbFttCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhj MDU5Ni1jM2RkLTQ0ZGYtOTc2MS02NzdlNjg3OTRjNjkvMmY3MzMzMGUtMTUzMi0z NTE3LWE1MWYtZGM0NmNiMTFjMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDI4YzA1OTYtYzNkZC00NGRmLTk3 NjEtNjc3ZTY4Nzk0YzY5LzAyOGMwNTk2LWMzZGQtNDRkZi05NzYxLTY3N2U2ODc5 NGM2OS5jcmwwHwYDVR0jBBgwFoAU13vNAHAryYoSeo0O6DqODdIIi7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhjMDU5Ni1jM2RkLTQ0ZGYtOTc2MS02Nzdl Njg3OTRjNjkuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjA8BAIAATA2AwQCQRLMAwQD QqsoAwQGROtAAwQCaNvEAwQCov5AAwQEzZWQAwQAzt99AwQC0E0YAwQF0b/AMBYE AgACMBADBwAgAQUEACkDBQQmAGQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD4dyr0kkaFJfczxToAbOYal BSUO0dHodCRAjDQ2UYffzvWJ2VWSGwl5LpDLwQLu349b0p8tiQW+AGd7I6HdH7Vt HG2XHQz5ZexVcqzCE4YDEG3VCgtSeEgN5XgNlyEyw8oveYKX9Wp9E7TVabzDyQj3 Iwp82xcruWci9FOCOjkd5TYG5NhZqzd7EoaE2PGD4JgAbSl4cllyn0G1YcFqccX2 wP0Uw/yZ/aDMhOUvzhk8bCTz8ENAuppjT07zY/nfLHSV1zZ+xOKm32LRXQ3jUX5s +nayMm/k8xshI6qw+CrQlPwv3nQ2r3qutRxR/XirET2y704Zi4E3FOwdfAIPrMI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:40 2025 by rpki-client