$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caafc889-935e-3bf3-9d1b-6e4cec37ebb0.roa File: caafc889-935e-3bf3-9d1b-6e4cec37ebb0.roa (raw, json) Hash identifier: Y/8qv/Xs5iRSfsTrNbALldNtIbH8cBdtVHa+uLaWKoU= Subject key identifier: 05:D5:66:89:E1:6A:03:31:F4:6B:96:35:70:EA:B6:AC:0B:80:A3:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EC968E4941687B408E8CC540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caafc889-935e-3bf3-9d1b-6e4cec37ebb0.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 32787 IP address blocks: 72.52.28.0/22 maxlen: 22 72.52.28.0/24 maxlen: 24 72.52.29.0/24 maxlen: 24 72.52.30.0/24 maxlen: 24 72.52.31.0/24 maxlen: 24 72.52.36.0/22 maxlen: 22 72.52.36.0/24 maxlen: 24 72.52.37.0/24 maxlen: 24 72.52.38.0/24 maxlen: 24 72.52.39.0/24 maxlen: 24 72.52.40.0/22 maxlen: 22 72.52.40.0/24 maxlen: 24 72.52.41.0/24 maxlen: 24 72.52.42.0/24 maxlen: 24 72.52.43.0/24 maxlen: 24 72.52.44.0/24 maxlen: 24 72.52.45.0/24 maxlen: 24 72.52.46.0/24 maxlen: 24 209.200.184.0/21 maxlen: 21 209.200.184.0/24 maxlen: 24 209.200.185.0/24 maxlen: 24 209.200.186.0/24 maxlen: 24 209.200.187.0/24 maxlen: 24 209.200.188.0/24 maxlen: 24 209.200.189.0/24 maxlen: 24 209.200.190.0/24 maxlen: 24 209.200.191.0/24 maxlen: 24 2606:6c00::/48 maxlen: 48 2606:6c00:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8e:49:41:68:7b:40:8e:8c:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=43027808-017a-4871-9eea-7a1ecf344dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:52:1d:ac:cb:be:01:62:5c:40:e2:ae:a2:77: cb:ac:43:43:af:91:1f:ef:6a:e9:43:7f:6b:4a:d2: 64:f5:bd:a3:ae:67:02:46:70:a6:2d:3e:83:19:28: b2:5e:2e:8f:ef:94:51:d0:19:13:1a:0d:f8:aa:f2: 39:f5:9c:54:bd:44:8f:70:1e:43:23:b4:a0:10:61: f0:bd:d8:17:6e:7e:99:41:d4:06:6b:17:84:e8:22: 05:f1:2e:6b:b0:02:c7:d6:b5:15:96:f9:f7:2a:60: c4:2d:a9:1f:5f:62:ab:a4:92:e9:40:aa:9b:31:90: 66:8f:ee:c7:13:e8:46:bd:0b:6c:c9:a0:c0:0c:23: 33:e5:6e:c9:d6:48:44:8c:80:4d:5f:e4:74:8d:4b: 3b:af:a7:11:cf:84:58:b9:25:cc:4f:46:c2:f2:6b: 06:fa:b9:57:d0:fe:fa:ce:09:9c:df:86:76:19:58: 44:ad:6e:d0:f7:a5:2f:1b:81:2c:5b:ca:62:3e:13: 18:29:5f:2c:37:a5:2c:40:3b:8b:7f:90:0f:75:73: 28:42:10:ef:1c:f7:8d:62:c2:97:e7:e9:55:94:04: b5:03:fd:95:62:0e:12:f0:55:43:7c:4d:41:7c:92: b3:81:fc:f2:bf:ef:60:79:e3:5f:5b:fb:28:2b:71: 75:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D5:66:89:E1:6A:03:31:F4:6B:96:35:70:EA:B6:AC:0B:80:A3:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caafc889-935e-3bf3-9d1b-6e4cec37ebb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.28.0/22 72.52.36.0-72.52.46.255 209.200.184.0/21 IPv6: 2606:6c00::/48 2606:6c00:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e3:8c:1b:d0:ef:ed:68:d0:64:9a:dc:bc:51:93:da:da:66: 61:a6:f5:4b:96:54:3c:7c:11:27:cc:ce:46:e5:5d:ad:ef:66: 69:72:e3:4a:f4:92:3e:a4:aa:d0:af:76:e8:18:cf:df:b7:a2: 2f:c7:a5:e2:24:a4:8a:c7:77:55:9d:35:e9:c2:82:a3:ac:19: a6:95:d9:ec:92:09:18:9e:b4:3b:af:56:df:08:07:6c:ec:c9: f2:22:91:f7:10:08:2e:df:f1:5d:03:4b:4d:31:5c:20:01:0d: 36:3b:e3:56:e4:29:9d:3b:91:ea:79:66:a2:5c:85:0d:64:da: 98:8b:49:01:f6:11:68:fa:42:c1:ff:8d:f9:6a:e1:f4:c6:75: 66:3c:2f:e8:99:30:34:5e:35:47:3e:0d:13:26:eb:ff:24:1a: a9:39:e2:65:af:37:02:73:e7:1f:ae:c2:3e:cc:2f:1f:32:29: 16:c3:f0:68:be:ad:3a:ea:b8:1f:8e:3b:7b:fb:15:dc:b8:b4: bc:ea:ee:d0:94:12:ca:bd:39:59:6a:f2:08:0a:ee:c3:1f:db: cc:b2:46:34:6d:b3:76:49:47:c2:85:97:9c:57:4b:fc:d5:96: 2b:69:2d:ea:d9:cf:53:a9:22:3d:0e:fe:1b:50:e9:1e:a1:25: 3c:b4:d9:dd -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWEjslo5JQWh7QI6MxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NDMwMjc4MDgtMDE3YS00ODcxLTllZWEtN2ExZWNmMzQ0ZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFIdrMu+AWJcQOKuonfLrENDr5Ef72rpQ39r StJk9b2jrmcCRnCmLT6DGSiyXi6P75RR0BkTGg34qvI59ZxUvUSPcB5DI7SgEGHw vdgXbn6ZQdQGaxeE6CIF8S5rsALH1rUVlvn3KmDELakfX2KrpJLpQKqbMZBmj+7H E+hGvQtsyaDADCMz5W7J1khEjIBNX+R0jUs7r6cRz4RYuSXMT0bC8msG+rlX0P76 zgmc34Z2GVhErW7Q96UvG4EsW8piPhMYKV8sN6UsQDuLf5APdXMoQhDvHPeNYsKX 5+lVlAS1A/2VYg4S8FVDfE1BfJKzgfzyv+9geeNfW/soK3F1lwIDAQABo4IDgzCC A38wHQYDVR0OBBYEFAXVZonhagMx9GuWNXDqtqwLgKNCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2FhZmM4ODktOTM1ZS0z YmYzLTlkMWItNmU0Y2VjMzdlYmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDAgBAIAATAaAwQCSDQcMAwD BAJINCQDBABINC4DBAPRyLgwGAQCAAIwEgMHACYGbAAAAAMHACYGbAABADBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBC44wb0O/taNBkmty8UZPa2mZhpvVLllQ8fBEnzM5G5V2t72ZpcuNK9JI+ pKrQr3boGM/ft6Ivx6XiJKSKx3dVnTXpwoKjrBmmldnskgkYnrQ7r1bfCAds7Mny IpH3EAgu3/FdA0tNMVwgAQ02O+NW5CmdO5HqeWaiXIUNZNqYi0kB9hFo+kLB/435 auH0xnVmPC/omTA0XjVHPg0TJuv/JBqpOeJlrzcCc+cfrsI+zC8fMikWw/Bovq06 6rgfjjt7+xXcuLS86u7QlBLKvTlZavIICu7DH9vMskY0bbN2SUfChZecV0v81ZYr aS3q2c9TqSI9Dv4bUOkeoSU8tNnd -----END CERTIFICATE-----Generated at Fri Mar 14 08:39:31 2025 by rpki-client