$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/262e6852-a72f-3e0b-a5e5-3cf27f370213.roa File: 262e6852-a72f-3e0b-a5e5-3cf27f370213.roa (raw, json) Hash identifier: FP0oWNUcEYkFWybpT8RSOC7NIpjwxy+uhPLjNoxBRD4= Subject key identifier: 0D:C7:CA:C5:F2:0E:86:23:D1:A2:82:74:F0:9B:66:A7:17:D8:A5:D3 Certificate issuer: /CN=84052649-3401-4ba6-ad82-6f310741b104 Certificate serial: 010D0C9F432858480BDA674D669864DB29828180 Authority key identifier: C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/262e6852-a72f-3e0b-a5e5-3cf27f370213.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 19969 IP address blocks: 66.85.72.0/21 maxlen: 32 69.195.128.0/19 maxlen: 32 96.43.128.0/20 maxlen: 32 104.192.168.0/22 maxlen: 32 104.218.16.0/21 maxlen: 32 108.59.192.0/20 maxlen: 32 172.86.176.0/21 maxlen: 32 204.27.56.0/21 maxlen: 32 208.94.240.0/21 maxlen: 32 2604:5800::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:67:4d:66:98:64:db:29:82:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84052649-3401-4ba6-ad82-6f310741b104 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=89940d5a-36d2-45d7-b650-e34b8ad0c8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:8e:76:ef:1a:9b:ae:08:4e:fa:5e:3e:66: 1a:36:85:c2:00:d5:3d:f7:c4:1b:d3:63:19:70:56: c7:2c:88:5b:f3:8e:be:86:ad:5c:b9:0a:9d:ec:61: 3c:56:f9:25:04:eb:dd:66:37:f8:31:a1:9e:b4:b5: eb:63:5e:50:07:8c:15:c2:ab:9b:83:f7:10:a3:e7: 1c:90:f2:2e:26:37:21:18:5b:56:80:53:07:f2:78: b0:c2:37:3b:75:0f:97:c2:c0:5d:be:b3:72:7f:f3: b2:14:aa:5b:91:a6:ea:ed:44:57:6d:89:82:47:66: 92:19:8f:a5:9b:9f:f1:91:74:4e:e3:22:25:29:1a: dd:d1:1c:61:ab:36:b3:8b:ab:b0:9c:8f:64:91:6b: f2:d4:3a:15:cd:41:0d:f8:40:c1:ba:a4:cc:49:82: 96:1f:6d:21:e9:18:0c:76:61:c8:6d:02:df:fd:d7: f3:1f:28:9e:a5:3f:ff:d3:e0:58:cc:01:5b:92:f6: 8b:e9:a3:fd:fb:27:0e:29:42:db:bd:3c:04:2c:39: c9:6d:83:7b:a9:a4:77:9c:20:7f:d9:6e:ae:51:29: 42:f0:65:6e:87:c0:3b:fe:57:d1:ca:7f:4a:47:54: fd:ae:7c:80:8d:c2:85:c8:08:21:ed:bb:19:2a:50: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C7:CA:C5:F2:0E:86:23:D1:A2:82:74:F0:9B:66:A7:17:D8:A5:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/262e6852-a72f-3e0b-a5e5-3cf27f370213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl X509v3 Authority Key Identifier: keyid:C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer sbgp-ipAddrBlock: critical IPv4: 66.85.72.0/21 69.195.128.0/19 96.43.128.0/20 104.192.168.0/22 104.218.16.0/21 108.59.192.0/20 172.86.176.0/21 204.27.56.0/21 208.94.240.0/21 IPv6: 2604:5800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b5:50:a8:fd:17:c1:fd:f9:62:24:0a:e9:00:1e:41:7d:ed: e0:3c:c6:16:de:39:72:6e:ce:35:64:30:8c:31:7c:88:61:eb: a2:fb:0f:43:b5:91:69:32:0c:36:48:7b:93:73:0d:7e:b1:48: 32:35:0b:59:ac:dd:66:d8:d2:17:04:33:a7:63:34:46:8a:fc: ee:0f:70:76:45:67:fd:b3:48:8f:33:20:ce:f8:83:b5:ed:41: 62:71:40:57:14:ec:71:32:c9:0f:ae:4b:b7:35:ba:f1:b9:9e: e0:b2:39:46:7a:7a:ec:5a:6b:59:d7:35:bc:d3:08:b4:12:52: 5e:48:b2:a6:28:1f:31:60:f4:18:29:02:67:c9:e5:b8:11:13: 90:e9:77:e6:a2:3b:c6:b1:26:d5:0e:2b:5a:95:07:42:ff:a6: 8f:af:65:0a:06:0e:c4:f8:f0:60:4d:88:1d:14:03:bd:a2:fe: 28:a5:a4:72:e3:cd:ac:8c:9d:90:a9:c8:9f:9b:12:58:f5:95: 64:28:1d:65:71:8f:ae:cb:ec:08:fe:d5:7a:ba:56:69:c4:d7: 67:c9:4e:e5:23:c0:3f:c1:0b:3f:88:56:de:91:91:36:be:ed: bc:e3:6a:af:d7:9a:0c:a9:b0:80:a2:8f:aa:d5:17:2d:0b:7e: 35:dd:f1:23 -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEgL2mdNZphk2ymCgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQwNTI2NDktMzQwMS00YmE2LWFkODItNmYzMTA3NDFi MTA0MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk ODk5NDBkNWEtMzZkMi00NWQ3LWI2NTAtZTM0YjhhZDBjOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz6Odu8am64ITvpePmYaNoXCANU998Qb02MZ cFbHLIhb846+hq1cuQqd7GE8VvklBOvdZjf4MaGetLXrY15QB4wVwqubg/cQo+cc kPIuJjchGFtWgFMH8niwwjc7dQ+XwsBdvrNyf/OyFKpbkabq7URXbYmCR2aSGY+l m5/xkXRO4yIlKRrd0Rxhqzazi6uwnI9kkWvy1DoVzUEN+EDBuqTMSYKWH20h6RgM dmHIbQLf/dfzHyiepT//0+BYzAFbkvaL6aP9+ycOKULbvTwELDnJbYN7qaR3nCB/ 2W6uUSlC8GVuh8A7/lfRyn9KR1T9rnyAjcKFyAgh7bsZKlACJwIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFA3HysXyDoYj0aKCdPCbZqcX2KXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1 MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMxMDc0MWIxMDQvMjYyZTY4NTItYTcyZi0z ZTBiLWE1ZTUtM2NmMjdmMzcwMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODQwNTI2NDktMzQwMS00YmE2LWFk ODItNmYzMTA3NDFiMTA0Lzg0MDUyNjQ5LTM0MDEtNGJhNi1hZDgyLTZmMzEwNzQx YjEwNC5jcmwwHwYDVR0jBBgwFoAUxX6Uv/iI2K38KlbO/GLK91AHs6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMx MDc0MWIxMDQuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDQlVIAwQF RcOAAwQEYCuAAwQCaMCoAwQDaNoQAwQEbDvAAwQDrFawAwQDzBs4AwQD0F7wMA0E AgACMAcDBQAmBFgAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADS1UKj9F8H9+WIkCukAHkF97eA8xhbeOXJu zjVkMIwxfIhh66L7D0O1kWkyDDZIe5NzDX6xSDI1C1ms3WbY0hcEM6djNEaK/O4P cHZFZ/2zSI8zIM74g7XtQWJxQFcU7HEyyQ+uS7c1uvG5nuCyOUZ6euxaa1nXNbzT CLQSUl5IsqYoHzFg9BgpAmfJ5bgRE5Dpd+aiO8axJtUOK1qVB0L/po+vZQoGDsT4 8GBNiB0UA72i/iilpHLjzayMnZCpyJ+bElj1lWQoHWVxj67L7Aj+1Xq6VmnE12fJ TuUjwD/BCz+IVt6RkTa+7bzjaq/XmgypsICij6rVFy0LfjXd8SM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:43 2025 by rpki-client