$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa File: 2f73330e-1532-3517-a51f-dc46cb11c22c.roa (raw, json) Hash identifier: AiCEg8Si+xdHjpASSS+IlAS7b6lwIR7NuoLUOhLCJ1w= Subject key identifier: 95:72:B3:B7:4A:BA:EA:6D:9D:A5:A8:8A:78:F9:F6:F4:42:33:83:20 Certificate issuer: /CN=028c0596-c3dd-44df-9761-677e68794c69 Certificate serial: 010D0C9F4328584AAB26514AABA65696BA5CD400 Authority key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 14371 IP address blocks: 65.18.204.0/22 maxlen: 24 66.171.40.0/21 maxlen: 24 68.235.64.0/18 maxlen: 24 104.219.196.0/22 maxlen: 24 162.254.64.0/22 maxlen: 24 205.149.144.0/20 maxlen: 24 206.223.125.0/24 maxlen: 24 208.77.24.0/22 maxlen: 24 209.191.192.0/19 maxlen: 24 2001:504:29::/48 maxlen: 48 2600:6400::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:51:4a:ab:a6:56:96:ba:5c:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028c0596-c3dd-44df-9761-677e68794c69 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=c92d50b5-8f52-476b-b4b8-70b03611d0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:59:ca:4a:35:5d:05:b1:16:75:4b:29:c8:9c: 63:b2:2e:d6:37:b5:48:95:0c:53:1b:41:5b:b0:c0: 57:19:02:9c:1b:8a:ae:ee:07:91:33:7a:cc:81:44: 09:27:a3:00:d4:4b:2b:b6:89:ca:e6:21:73:aa:33: 70:a1:c1:18:3e:c6:97:6d:79:05:f0:0a:0e:1c:c4: 9c:cc:c7:e6:3c:0d:99:c3:3f:ee:0c:95:09:6d:7d: 72:b8:51:2e:5a:85:ab:4b:a7:93:ae:d3:79:40:cd: 97:9c:56:92:90:0f:4f:93:d9:a1:25:a6:0e:57:20: f7:7b:44:44:e2:f6:a3:94:e4:68:a2:a0:85:35:19: f6:8b:29:9f:01:06:9f:29:d7:43:1e:87:6d:8a:5e: 9e:94:00:6f:00:8f:0f:0a:59:f2:7e:3f:26:e7:e1: c1:1c:c9:4f:e6:1f:78:4b:fc:a3:d6:b6:59:a0:81: 8f:a6:6d:45:b8:51:11:d7:62:79:34:8f:cc:58:1c: ff:01:89:65:be:b9:d7:e9:43:fa:b4:b5:b3:1c:d0: 4a:f8:68:a9:69:6a:a7:ef:3a:87:6c:bf:ee:1f:13: 6e:a8:33:ff:77:1e:81:8d:44:99:8f:c1:c3:1f:d1: e4:c1:da:32:6e:96:24:ea:c9:67:e7:67:3d:3e:6f: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:72:B3:B7:4A:BA:EA:6D:9D:A5:A8:8A:78:F9:F6:F4:42:33:83:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl X509v3 Authority Key Identifier: keyid:D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer sbgp-ipAddrBlock: critical IPv4: 65.18.204.0/22 66.171.40.0/21 68.235.64.0/18 104.219.196.0/22 162.254.64.0/22 205.149.144.0/20 206.223.125.0/24 208.77.24.0/22 209.191.192.0/19 IPv6: 2001:504:29::/48 2600:6400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a1:c0:0f:89:83:fb:7a:94:98:fc:a3:43:e7:4b:52:2b:f8: d6:5f:db:7f:54:73:37:e2:09:6f:cb:38:39:97:64:cf:e8:08: a8:0d:f3:bc:b4:42:76:28:e9:70:39:81:57:24:18:a7:cd:82: f4:79:19:be:b2:d9:26:41:d1:f7:ee:3a:f5:44:02:57:0a:21: 02:fc:dc:a3:45:3c:f6:12:76:b5:1a:fb:2c:75:ca:9f:ef:f0: e4:7a:8e:f5:8f:38:f9:9a:aa:28:e6:cf:4d:96:a5:d6:ee:5a: 75:3b:44:32:aa:c4:2c:4a:39:a3:05:67:42:77:70:a3:d0:b4: 22:2a:a8:0f:33:58:37:44:c1:13:3d:63:52:44:40:83:2f:e6: d5:05:68:ba:09:77:25:6f:42:8c:0a:ca:0f:97:98:f6:48:b2: d4:fd:47:b0:18:f1:2b:e7:be:44:9d:9e:57:85:33:48:8c:e7: 88:46:34:31:d5:b8:9d:26:5a:ad:27:53:37:f9:7c:82:1d:93: c0:96:7f:0d:04:28:4f:49:d1:4e:85:aa:5b:18:5d:9e:96:e7: 1b:ae:67:38:9f:18:a5:41:be:e6:32:fe:8b:e6:79:ce:76:54: 67:a0:a4:ab:37:b1:df:e1:4a:65:10:57:f3:6d:0e:a4:ad:70: 04:8a:7a:d6 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEqrJlFKq6ZWlrpc1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4YzA1OTYtYzNkZC00NGRmLTk3NjEtNjc3ZTY4Nzk0 YzY5MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk YzkyZDUwYjUtOGY1Mi00NzZiLWI0YjgtNzBiMDM2MTFkMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFnKSjVdBbEWdUspyJxjsi7WN7VIlQxTG0Fb sMBXGQKcG4qu7geRM3rMgUQJJ6MA1EsrtonK5iFzqjNwocEYPsaXbXkF8AoOHMSc zMfmPA2Zwz/uDJUJbX1yuFEuWoWrS6eTrtN5QM2XnFaSkA9Pk9mhJaYOVyD3e0RE 4vajlORooqCFNRn2iymfAQafKddDHodtil6elABvAI8PClnyfj8m5+HBHMlP5h94 S/yj1rZZoIGPpm1FuFER12J5NI/MWBz/AYllvrnX6UP6tLWzHNBK+GipaWqn7zqH bL/uHxNuqDP/dx6BjUSZj8HDH9HkwdoybpYk6sln52c9Pm8fgwIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFJVys7dKuuptnaWoinj59vRCM4MgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhj MDU5Ni1jM2RkLTQ0ZGYtOTc2MS02NzdlNjg3OTRjNjkvMmY3MzMzMGUtMTUzMi0z NTE3LWE1MWYtZGM0NmNiMTFjMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDI4YzA1OTYtYzNkZC00NGRmLTk3 NjEtNjc3ZTY4Nzk0YzY5LzAyOGMwNTk2LWMzZGQtNDRkZi05NzYxLTY3N2U2ODc5 NGM2OS5jcmwwHwYDVR0jBBgwFoAU13vNAHAryYoSeo0O6DqODdIIi7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhjMDU5Ni1jM2RkLTQ0ZGYtOTc2MS02Nzdl Njg3OTRjNjkuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjA8BAIAATA2AwQCQRLMAwQD QqsoAwQGROtAAwQCaNvEAwQCov5AAwQEzZWQAwQAzt99AwQC0E0YAwQF0b/AMBYE AgACMBADBwAgAQUEACkDBQQmAGQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABShwA+Jg/t6lJj8o0PnS1Ir +NZf239UczfiCW/LODmXZM/oCKgN87y0QnYo6XA5gVckGKfNgvR5Gb6y2SZB0ffu OvVEAlcKIQL83KNFPPYSdrUa+yx1yp/v8OR6jvWPOPmaqijmz02WpdbuWnU7RDKq xCxKOaMFZ0J3cKPQtCIqqA8zWDdEwRM9Y1JEQIMv5tUFaLoJdyVvQowKyg+XmPZI stT9R7AY8SvnvkSdnleFM0iM54hGNDHVuJ0mWq0nUzf5fIIdk8CWfw0EKE9J0U6F qlsYXZ6W5xuuZzifGKVBvuYy/ovmec52VGegpKs3sd/hSmUQV/NtDqStcASKetY= -----END CERTIFICATE-----Generated at Tue Aug 5 17:31:18 2025 by rpki-client