$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa File: 2f73330e-1532-3517-a51f-dc46cb11c22c.roa (raw, json) Hash identifier: Ep3Abddk7yvUpaqxATBZhTrbQc/I48DtCW+pNnp2Fz4= Subject key identifier: 77:12:65:60:68:AD:62:3C:9C:87:26:C6:43:BC:8D:2C:D5:45:45:C3 Certificate issuer: /CN=028c0596-c3dd-44df-9761-677e68794c69 Certificate serial: 010D0C9F43285849CBCF8F1EB80E36A598B650E0 Authority key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 14371 IP address blocks: 65.18.204.0/22 maxlen: 24 66.171.40.0/21 maxlen: 24 68.235.64.0/18 maxlen: 24 104.219.196.0/22 maxlen: 24 162.254.64.0/22 maxlen: 24 205.149.144.0/20 maxlen: 24 206.223.125.0/24 maxlen: 24 208.77.24.0/22 maxlen: 24 209.191.192.0/19 maxlen: 24 2001:504:29::/48 maxlen: 48 2600:6400::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:8f:1e:b8:0e:36:a5:98:b6:50:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028c0596-c3dd-44df-9761-677e68794c69 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=a21a3ea1-a717-415e-9af7-0a97cff6e898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e8:3d:5d:af:77:a8:77:ff:d9:cd:36:8b:2d: 91:db:43:29:57:84:03:6b:09:a6:56:5d:7e:c2:66: be:97:63:0c:ad:67:d2:99:ff:54:f5:14:81:66:ec: 4f:06:ef:f8:f4:ab:fb:7d:8a:e4:41:40:08:c7:76: 17:9f:f9:28:c3:b7:2d:d2:41:43:4f:58:dc:d0:ee: ac:5e:f9:08:94:77:23:bc:19:f1:87:ad:46:e2:e2: 57:f3:12:84:80:76:52:75:74:2c:f5:f7:8b:62:f4: 81:32:71:95:fb:88:ec:1f:92:5d:76:03:60:79:9d: 29:ae:d9:b2:a0:a1:98:93:89:11:8d:a1:9c:0d:1d: 1d:3b:d9:37:22:b1:b9:93:25:39:2b:27:b4:0e:f2: 6d:f2:6f:6e:96:d4:f6:dc:4f:f5:e8:50:82:7f:1d: 51:95:ac:5b:40:85:9c:7e:72:48:45:0c:91:13:89: a2:2f:62:82:49:5b:a6:5a:cf:4e:e2:c4:bf:31:4c: c8:d0:52:84:40:b7:76:9d:20:17:10:20:3b:e7:90: 14:0d:33:d9:94:2c:9a:94:cb:44:ad:7a:68:61:34: 55:56:0c:e0:a7:c5:7a:1c:f5:1b:88:61:eb:a0:ec: 2c:02:96:4d:cf:17:f9:53:60:e3:92:83:f0:8b:95: 27:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:12:65:60:68:AD:62:3C:9C:87:26:C6:43:BC:8D:2C:D5:45:45:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl X509v3 Authority Key Identifier: keyid:D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer sbgp-ipAddrBlock: critical IPv4: 65.18.204.0/22 66.171.40.0/21 68.235.64.0/18 104.219.196.0/22 162.254.64.0/22 205.149.144.0/20 206.223.125.0/24 208.77.24.0/22 209.191.192.0/19 IPv6: 2001:504:29::/48 2600:6400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e4:0c:08:f9:c8:d4:63:e3:b5:6d:da:3b:95:3c:b9:07:6b: 9a:a1:b0:56:7c:b2:8f:3d:8f:43:61:e0:9a:a2:c7:1a:92:a0: 93:d9:e5:c2:38:3d:b4:2c:47:1c:ae:a6:46:12:57:19:ea:ea: e8:01:f6:4b:5e:fb:ff:b9:84:65:74:5e:91:54:f9:1c:fe:6e: dc:08:f4:78:e9:8f:fd:f2:de:22:7e:73:c9:a2:07:04:dc:f7: 55:80:17:28:79:8b:68:c7:cc:f3:f2:ab:51:f9:92:9a:e4:6e: 10:aa:63:c1:ea:46:ec:92:5b:d9:3d:fa:3d:b5:2b:99:16:63: c5:49:6a:0d:44:11:d1:0c:69:38:e2:a1:81:95:0b:6e:3f:32: 50:20:26:7e:f7:5b:9c:89:23:2a:5a:40:b0:e4:90:e1:a5:20: a5:0c:af:16:48:3d:31:c8:08:8e:85:dc:85:33:57:29:ca:ab: 0f:f7:75:24:57:90:21:8e:27:0f:00:fd:da:42:93:60:da:7c: 57:46:87:f6:bf:ef:e8:f3:9b:b3:34:a5:0a:cb:1a:08:43:c2: 2f:16:ea:6d:5f:d3:42:e8:46:bb:d8:d5:fe:4b:bb:de:97:6e: 58:0b:5c:f3:01:9b:1d:22:ec:b6:82:66:f4:db:9e:e1:93:78: b5:de:78:ab -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEnLz48euA42pZi2UOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4YzA1OTYtYzNkZC00NGRmLTk3NjEtNjc3ZTY4Nzk0 YzY5MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YTIxYTNlYTEtYTcxNy00MTVlLTlhZjctMGE5N2NmZjZlODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ug9Xa93qHf/2c02iy2R20MpV4QDawmmVl1+ wma+l2MMrWfSmf9U9RSBZuxPBu/49Kv7fYrkQUAIx3YXn/kow7ct0kFDT1jc0O6s XvkIlHcjvBnxh61G4uJX8xKEgHZSdXQs9feLYvSBMnGV+4jsH5JddgNgeZ0prtmy oKGYk4kRjaGcDR0dO9k3IrG5kyU5Kye0DvJt8m9ultT23E/16FCCfx1RlaxbQIWc fnJIRQyRE4miL2KCSVumWs9O4sS/MUzI0FKEQLd2nSAXECA755AUDTPZlCyalMtE rXpoYTRVVgzgp8V6HPUbiGHroOwsApZNzxf5U2DjkoPwi5UnIwIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFHcSZWBorWI8nIcmxkO8jSzVRUXDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhj MDU5Ni1jM2RkLTQ0ZGYtOTc2MS02NzdlNjg3OTRjNjkvMmY3MzMzMGUtMTUzMi0z NTE3LWE1MWYtZGM0NmNiMTFjMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDI4YzA1OTYtYzNkZC00NGRmLTk3 NjEtNjc3ZTY4Nzk0YzY5LzAyOGMwNTk2LWMzZGQtNDRkZi05NzYxLTY3N2U2ODc5 NGM2OS5jcmwwHwYDVR0jBBgwFoAU13vNAHAryYoSeo0O6DqODdIIi7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhjMDU5Ni1jM2RkLTQ0ZGYtOTc2MS02Nzdl Njg3OTRjNjkuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjA8BAIAATA2AwQCQRLMAwQD QqsoAwQGROtAAwQCaNvEAwQCov5AAwQEzZWQAwQAzt99AwQC0E0YAwQF0b/AMBYE AgACMBADBwAgAQUEACkDBQQmAGQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABrkDAj5yNRj47Vt2juVPLkH a5qhsFZ8so89j0Nh4JqixxqSoJPZ5cI4PbQsRxyupkYSVxnq6ugB9kte+/+5hGV0 XpFU+Rz+btwI9Hjpj/3y3iJ+c8miBwTc91WAFyh5i2jHzPPyq1H5kprkbhCqY8Hq RuySW9k9+j21K5kWY8VJag1EEdEMaTjioYGVC24/MlAgJn73W5yJIypaQLDkkOGl IKUMrxZIPTHICI6F3IUzVynKqw/3dSRXkCGOJw8A/dpCk2DafFdGh/a/7+jzm7M0 pQrLGghDwi8W6m1f00LoRrvY1f5Lu96XblgLXPMBmx0i7LaCZvTbnuGTeLXeeKs= -----END CERTIFICATE-----Generated at Sun Jun 15 23:07:32 2025 by rpki-client