$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/262e6852-a72f-3e0b-a5e5-3cf27f370213.roa File: 262e6852-a72f-3e0b-a5e5-3cf27f370213.roa (raw, json) Hash identifier: rdTmzX3gr45J5IWfT4ldimaH0OllffMZX8bjJ7qZ4QI= Subject key identifier: 74:53:57:BF:E4:05:D0:7F:70:77:C1:CA:29:1D:64:FB:11:14:A3:B6 Certificate issuer: /CN=84052649-3401-4ba6-ad82-6f310741b104 Certificate serial: 010D0C9F43285848EC968A1F7CFCB52BD3D0D500 Authority key identifier: C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/262e6852-a72f-3e0b-a5e5-3cf27f370213.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 19969 IP address blocks: 66.85.72.0/21 maxlen: 32 69.195.128.0/19 maxlen: 32 96.43.128.0/20 maxlen: 32 104.192.168.0/22 maxlen: 32 104.218.16.0/21 maxlen: 32 108.59.192.0/20 maxlen: 32 172.86.176.0/21 maxlen: 32 204.27.56.0/21 maxlen: 32 208.94.240.0/21 maxlen: 32 2604:5800::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8a:1f:7c:fc:b5:2b:d3:d0:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84052649-3401-4ba6-ad82-6f310741b104 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=0567d202-0684-4645-932f-0fd3f9fef676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:30:67:a7:07:ed:ba:3f:81:54:a8:26:a5:da: 54:37:b0:08:e7:5c:bb:cc:64:56:87:f4:47:97:08: 7a:69:f2:9e:43:85:62:e0:67:bd:f1:0a:57:c7:68: 56:d3:ef:78:4c:96:ec:9f:d8:9d:6e:b0:f6:43:5c: f6:6e:59:f3:02:a0:6c:54:b5:73:0b:38:0c:0e:9d: 7a:66:62:5b:6f:34:dc:28:1d:cb:45:63:cd:4b:20: b0:bc:8b:51:96:9d:ad:35:8b:1f:d8:ad:7a:c5:e7: bc:92:d3:0a:cc:24:d8:e5:28:8f:47:57:8a:d8:03: d4:95:43:1d:00:19:40:9d:79:4e:e2:fd:9f:87:cd: 31:1b:85:70:82:11:f7:9d:49:19:d4:8c:c2:f2:80: f9:76:32:64:95:9e:0e:7e:22:3c:d3:46:ba:c4:6c: 98:af:4b:f3:0a:c2:b1:0a:d1:02:97:84:11:51:c9: c4:1e:53:0e:59:48:81:24:39:bd:cb:de:44:bc:8a: a7:73:0d:ec:80:29:8b:9f:4c:c5:2c:62:a9:cb:d0: 69:0f:f1:d7:45:ce:c6:99:0d:73:1e:82:25:74:e0: 82:70:fa:20:db:bd:42:46:f4:b0:7c:c2:11:60:fd: 38:66:89:f5:4c:6c:a0:9d:e2:86:06:a1:a5:4d:ca: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:53:57:BF:E4:05:D0:7F:70:77:C1:CA:29:1D:64:FB:11:14:A3:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/262e6852-a72f-3e0b-a5e5-3cf27f370213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl X509v3 Authority Key Identifier: keyid:C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer sbgp-ipAddrBlock: critical IPv4: 66.85.72.0/21 69.195.128.0/19 96.43.128.0/20 104.192.168.0/22 104.218.16.0/21 108.59.192.0/20 172.86.176.0/21 204.27.56.0/21 208.94.240.0/21 IPv6: 2604:5800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:9b:2c:2a:23:38:af:c0:2c:b5:f8:28:3a:7e:18:36:6f:d6: 67:5c:a9:dc:30:db:f5:fe:4a:2c:3b:fc:9a:4d:07:47:f5:17: 92:9b:e8:76:ac:28:a5:0b:d4:0b:7e:1f:6d:e7:99:5a:05:db: 48:90:3a:75:d6:41:fb:e2:5c:ed:36:17:04:b5:f5:55:f1:95: d9:95:54:1c:14:a9:b7:4b:c4:92:52:34:96:8b:0d:a6:a1:48: de:9e:1b:b5:ef:cf:e8:cb:20:a0:cb:dc:ab:b2:93:2f:ed:04: 87:85:e8:d1:e0:9c:b3:f2:55:cb:82:77:90:31:da:84:12:a0: 07:70:72:af:ec:57:5b:97:34:ef:4c:00:83:e3:12:37:86:08: 0e:99:df:3b:51:ab:d1:49:c4:0c:b9:05:55:98:00:f9:bc:2c: eb:bf:b5:76:9b:77:38:02:1f:e6:d6:30:2c:dc:8e:8d:4e:4e: 84:9e:fa:d7:f3:5f:2f:23:b1:80:06:b4:d3:5d:d3:fe:69:ff: 3c:c0:3f:77:10:ea:4e:da:0e:7c:a3:8b:f0:ab:fc:ae:45:30: d3:88:a8:01:8d:1f:08:c1:d2:bc:c6:32:6f:a5:23:18:69:91: 46:d8:2b:02:44:29:b9:b7:59:aa:47:7e:59:e0:e3:3b:2a:73: 62:9c:d0:ee -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEjslooffPy1K9PQ1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQwNTI2NDktMzQwMS00YmE2LWFkODItNmYzMTA3NDFi MTA0MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MDU2N2QyMDItMDY4NC00NjQ1LTkzMmYtMGZkM2Y5ZmVmNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDBnpwftuj+BVKgmpdpUN7AI51y7zGRWh/RH lwh6afKeQ4Vi4Ge98QpXx2hW0+94TJbsn9idbrD2Q1z2blnzAqBsVLVzCzgMDp16 ZmJbbzTcKB3LRWPNSyCwvItRlp2tNYsf2K16xee8ktMKzCTY5SiPR1eK2APUlUMd ABlAnXlO4v2fh80xG4VwghH3nUkZ1IzC8oD5djJklZ4OfiI800a6xGyYr0vzCsKx CtECl4QRUcnEHlMOWUiBJDm9y95EvIqncw3sgCmLn0zFLGKpy9BpD/HXRc7GmQ1z HoIldOCCcPog271CRvSwfMIRYP04Zon1TGygneKGBqGlTcoRTwIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFHRTV7/kBdB/cHfByikdZPsRFKO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1 MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMxMDc0MWIxMDQvMjYyZTY4NTItYTcyZi0z ZTBiLWE1ZTUtM2NmMjdmMzcwMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODQwNTI2NDktMzQwMS00YmE2LWFk ODItNmYzMTA3NDFiMTA0Lzg0MDUyNjQ5LTM0MDEtNGJhNi1hZDgyLTZmMzEwNzQx YjEwNC5jcmwwHwYDVR0jBBgwFoAUxX6Uv/iI2K38KlbO/GLK91AHs6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMx MDc0MWIxMDQuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDQlVIAwQF RcOAAwQEYCuAAwQCaMCoAwQDaNoQAwQEbDvAAwQDrFawAwQDzBs4AwQD0F7wMA0E AgACMAcDBQAmBFgAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFCbLCojOK/ALLX4KDp+GDZv1mdcqdww2/X+ Siw7/JpNB0f1F5Kb6HasKKUL1At+H23nmVoF20iQOnXWQfviXO02FwS19VXxldmV VBwUqbdLxJJSNJaLDaahSN6eG7Xvz+jLIKDL3Kuyky/tBIeF6NHgnLPyVcuCd5Ax 2oQSoAdwcq/sV1uXNO9MAIPjEjeGCA6Z3ztRq9FJxAy5BVWYAPm8LOu/tXabdzgC H+bWMCzcjo1OToSe+tfzXy8jsYAGtNNd0/5p/zzAP3cQ6k7aDnyji/Cr/K5FMNOI qAGNHwjB0rzGMm+lIxhpkUbYKwJEKbm3WapHflng4zsqc2Kc0O4= -----END CERTIFICATE-----Generated at Fri Mar 14 09:40:28 2025 by rpki-client