$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/af2b9587-c7e7-3560-a142-285f95c0baea.roa File: af2b9587-c7e7-3560-a142-285f95c0baea.roa (raw, json) Hash identifier: X+TQjnCHgwvmdpueCkqLX4f4b06ciy7pFVPB0kPvZUA= Subject key identifier: 06:11:4C:56:DC:D2:36:2F:76:AF:23:5F:CF:8D:E8:AC:33:4B:39:1F Certificate issuer: /CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0 Certificate serial: 010D0C9F43285848EC9691F4B36ED454B6CDF260 Authority key identifier: 48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/af2b9587-c7e7-3560-a142-285f95c0baea.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 6082 IP address blocks: 66.182.128.0/22 maxlen: 24 66.182.149.0/24 maxlen: 24 66.182.156.0/22 maxlen: 24 66.182.170.0/23 maxlen: 24 66.182.172.0/23 maxlen: 24 66.182.174.0/23 maxlen: 24 199.71.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:91:f4:b3:6e:d4:54:b6:cd:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=f2ce4336-282a-4f8d-b052-e24263367e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8e:c4:eb:95:da:79:91:37:0a:23:2e:1d:ea: f3:82:48:04:c0:b8:ef:05:c2:2a:f4:90:93:1e:d1: d3:c0:33:f2:15:b7:c5:1b:42:cb:81:69:f1:ac:cf: 9c:15:74:43:ba:5c:23:68:87:65:f1:6f:f5:0e:a0: 3d:34:1d:26:de:3d:08:e3:1a:48:9d:74:02:67:41: 57:c0:48:c2:5e:75:ff:c7:84:71:70:76:be:a9:8e: be:f1:e2:89:46:89:24:3d:0a:f0:c3:39:f6:d9:86: 47:04:c4:8f:0a:61:d5:58:59:c1:9a:f1:34:36:c6: 16:cd:ba:02:94:5d:0d:79:0c:51:b2:41:fb:4f:1d: c9:c5:c6:b6:c9:65:7b:1d:be:fb:2a:1a:b5:06:a9: 36:61:39:eb:40:11:26:59:6a:10:d3:f4:48:bd:37: 20:76:af:78:89:42:20:f2:61:07:fe:30:7f:a3:0f: b2:1f:49:7d:1c:05:2b:24:90:7e:51:8d:c3:14:fd: b3:35:57:7a:83:03:84:43:53:d8:33:a9:f6:43:cc: 0d:c1:ce:ed:0f:9a:a8:b7:76:91:51:c2:4f:2e:58: 5c:d3:01:3b:55:d8:b7:39:3a:c0:81:20:2c:ba:88: 4a:e0:78:7a:80:98:48:63:18:8f:24:97:09:5f:05: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:11:4C:56:DC:D2:36:2F:76:AF:23:5F:CF:8D:E8:AC:33:4B:39:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/af2b9587-c7e7-3560-a142-285f95c0baea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl X509v3 Authority Key Identifier: keyid:48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer sbgp-ipAddrBlock: critical IPv4: 66.182.128.0/22 66.182.149.0/24 66.182.156.0/22 66.182.170.0-66.182.175.255 199.71.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:15:8b:e3:47:55:49:76:bf:3c:a9:e4:a2:1f:5d:df:49:58: 35:d5:e3:87:9a:73:f6:c1:ec:bf:1b:fc:cc:d4:d9:1b:18:c5: f2:bd:f9:bb:01:da:ac:48:2f:da:bb:08:80:b7:fa:c7:b8:9c: 7a:8a:65:31:19:25:67:90:d6:2f:bd:df:69:ea:6b:19:fc:bf: 3a:63:2b:2c:eb:93:b5:9c:43:ba:c4:6b:a1:cb:6c:d6:ac:73: aa:9e:c9:e2:2f:d5:3b:c2:86:bf:9a:ae:56:1e:0f:17:0e:cb: 4e:a9:4f:e5:0c:b5:16:b3:ef:1c:6b:8c:f4:f5:bf:9c:2e:c8: ed:79:86:75:da:49:b0:cc:8c:3d:dd:60:09:00:f5:d5:3d:ad: d3:54:a1:59:4e:b1:5c:6b:06:be:ca:b0:a5:38:a2:af:a4:70: 8b:5e:d7:58:6e:03:61:bd:f0:2f:88:8d:99:5f:fc:fd:54:cd: b1:fc:76:fc:66:25:ca:ca:9d:54:f9:8a:ca:5b:5b:6c:b7:a5: 82:80:8b:8a:f0:ae:2f:43:d7:6f:91:7d:53:d5:15:ae:e1:90: 15:af:ab:3e:da:6b:68:ed:e4:ba:97:24:2f:21:33:c4:6c:4a: c8:f4:a0:35:9c:33:3e:94:75:ba:30:f5:14:9a:e5:50:b6:67: f9:27:5f:72 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEjslpH0s27UVLbN8mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY2NWNjNjEtMmI0YS00ZjQ4LWFlNWQtMjgzNjZhYTJk Y2IwMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZjJjZTQzMzYtMjgyYS00ZjhkLWIwNTItZTI0MjYzMzY3ZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh47E65XaeZE3CiMuHerzgkgEwLjvBcIq9JCT HtHTwDPyFbfFG0LLgWnxrM+cFXRDulwjaIdl8W/1DqA9NB0m3j0I4xpInXQCZ0FX wEjCXnX/x4RxcHa+qY6+8eKJRokkPQrwwzn22YZHBMSPCmHVWFnBmvE0NsYWzboC lF0NeQxRskH7Tx3Jxca2yWV7Hb77Khq1Bqk2YTnrQBEmWWoQ0/RIvTcgdq94iUIg 8mEH/jB/ow+yH0l9HAUrJJB+UY3DFP2zNVd6gwOEQ1PYM6n2Q8wNwc7tD5qot3aR UcJPLlhc0wE7Vdi3OTrAgSAsuohK4Hh6gJhIYxiPJJcJXwXAnwIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFAYRTFbc0jYvdq8jX8+N6KwzSzkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZjY1 Y2M2MS0yYjRhLTRmNDgtYWU1ZC0yODM2NmFhMmRjYjAvYWYyYjk1ODctYzdlNy0z NTYwLWExNDItMjg1Zjk1YzBiYWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGY2NWNjNjEtMmI0YS00ZjQ4LWFl NWQtMjgzNjZhYTJkY2IwLzBmNjVjYzYxLTJiNGEtNGY0OC1hZTVkLTI4MzY2YWEy ZGNiMC5jcmwwHwYDVR0jBBgwFoAUSCC3o2IZFe1+Qr9kQZNPTMzuz+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZjY1Y2M2MS0yYjRhLTRmNDgtYWU1ZC0yODM2 NmFhMmRjYjAuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCQraAAwQA QraVAwQCQracMAwDBAFCtqoDBARCtqADBAHHR9IwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAvRWL40dVSXa/ PKnkoh9d30lYNdXjh5pz9sHsvxv8zNTZGxjF8r35uwHarEgv2rsIgLf6x7iceopl MRklZ5DWL73faeprGfy/OmMrLOuTtZxDusRrocts1qxzqp7J4i/VO8KGv5quVh4P Fw7LTqlP5Qy1FrPvHGuM9PW/nC7I7XmGddpJsMyMPd1gCQD11T2t01ShWU6xXGsG vsqwpTiir6Rwi17XWG4DYb3wL4iNmV/8/VTNsfx2/GYlysqdVPmKyltbbLelgoCL ivCuL0PXb5F9U9UVruGQFa+rPtpraO3kupckLyEzxGxKyPSgNZwzPpR1ujD1FJrl ULZn+Sdfcg== -----END CERTIFICATE-----Generated at Sun Apr 27 14:18:25 2025 by rpki-client