$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/262e6852-a72f-3e0b-a5e5-3cf27f370213.roa File: 262e6852-a72f-3e0b-a5e5-3cf27f370213.roa (raw, json) Hash identifier: NQ5+IlRzeZ4spSMRm5A45hDxX72mV0I4T0UJHcqlwKQ= Subject key identifier: FC:40:58:EA:FD:51:FD:64:A3:46:99:9A:B2:61:8C:1F:51:D7:4D:9E Certificate issuer: /CN=84052649-3401-4ba6-ad82-6f310741b104 Certificate serial: 010D0C9F43285849CBCF8E959BA46A08CA2FE200 Authority key identifier: C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/262e6852-a72f-3e0b-a5e5-3cf27f370213.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 19969 IP address blocks: 66.85.72.0/21 maxlen: 32 69.195.128.0/19 maxlen: 32 96.43.128.0/20 maxlen: 32 104.192.168.0/22 maxlen: 32 104.218.16.0/21 maxlen: 32 108.59.192.0/20 maxlen: 32 172.86.176.0/21 maxlen: 32 204.27.56.0/21 maxlen: 32 208.94.240.0/21 maxlen: 32 2604:5800::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:8e:95:9b:a4:6a:08:ca:2f:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84052649-3401-4ba6-ad82-6f310741b104 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=96953a5e-77e2-4d13-a88a-607aa0e36809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:61:62:35:b6:aa:58:e1:4d:4e:c7:cf:8b:a6: b3:e1:ec:56:63:de:29:95:07:1d:39:37:00:db:41: 8e:05:04:68:8e:83:93:45:21:7c:e0:4f:2c:a9:03: c5:f0:55:74:57:7e:67:d2:a3:69:b2:96:a4:b0:3e: a0:6c:f5:3c:a3:71:01:d7:06:14:69:3b:c1:39:4e: a2:9a:90:5c:68:32:d4:07:cc:71:3b:df:3a:c6:16: c9:b9:24:a7:36:61:b4:7e:1a:84:74:70:e6:64:22: 1b:af:85:36:76:d2:89:1e:f3:94:d8:a0:da:da:2f: 93:32:52:cf:a1:ab:3a:d0:1c:f9:2f:03:d9:1e:bb: 3c:d9:6a:0d:74:2d:8f:52:df:2c:f4:fb:45:93:b0: 5e:d5:65:b2:22:de:5a:29:51:23:96:d3:db:41:b2: 91:0f:07:fb:ae:00:cd:99:e4:19:14:55:96:35:18: 91:89:45:e2:66:ab:ad:7b:24:f6:fa:3e:1d:6d:11: 24:65:cb:36:a2:51:3f:81:e3:21:db:60:6b:14:cf: 05:89:42:bf:d0:8e:78:32:21:3f:24:64:99:6c:91: de:5d:32:e3:d0:ab:e3:2b:5f:72:5f:c5:8e:9f:9f: 2a:89:6c:b5:75:f7:f0:1f:98:e7:de:e1:aa:1d:c5: e0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:40:58:EA:FD:51:FD:64:A3:46:99:9A:B2:61:8C:1F:51:D7:4D:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/262e6852-a72f-3e0b-a5e5-3cf27f370213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl X509v3 Authority Key Identifier: keyid:C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer sbgp-ipAddrBlock: critical IPv4: 66.85.72.0/21 69.195.128.0/19 96.43.128.0/20 104.192.168.0/22 104.218.16.0/21 108.59.192.0/20 172.86.176.0/21 204.27.56.0/21 208.94.240.0/21 IPv6: 2604:5800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:8e:e6:31:bb:39:2d:4a:c7:94:e7:20:c0:3c:36:37:de:57: bc:85:11:f5:e4:89:b1:e6:f1:c3:62:38:db:01:0d:c7:d3:4b: 5b:5b:bf:57:1b:37:9c:6e:49:3b:bf:c3:0a:fc:ab:57:1e:26: 77:4c:9d:56:21:3d:77:8f:ee:91:7a:0c:5d:bb:5f:bb:12:2f: b2:be:3b:f4:b3:c7:2a:22:03:5d:1f:d8:f1:ac:99:11:d9:55: 83:3c:3d:82:d4:a2:77:10:30:20:a5:ec:ff:f6:8c:a1:6b:88: 20:72:63:9f:c1:f7:50:02:43:d5:af:e3:cd:66:b9:8e:7d:17: ae:cc:db:79:fa:70:c7:99:48:d8:d2:02:2a:ff:86:8c:ad:67: 20:92:56:ab:e9:d4:b7:a2:fe:23:d6:84:04:07:f6:04:25:cb: f3:e4:10:4c:d8:21:d6:b2:b8:0a:72:d3:8f:64:48:87:ae:36: 72:4e:4e:4c:22:ae:f1:0d:2c:1d:c0:2c:e9:0e:62:c7:40:84: 48:bc:8c:fc:fe:b7:a5:36:03:97:17:0b:86:fe:cf:8e:81:9e: 86:a8:b1:44:49:bc:91:3b:42:5f:af:f7:bb:19:05:7d:01:29: 9c:37:2d:72:b8:78:51:6a:f9:cd:8e:d3:8d:ad:9b:6f:0d:be: 80:23:57:dd -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEnLz46Vm6RqCMov4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQwNTI2NDktMzQwMS00YmE2LWFkODItNmYzMTA3NDFi MTA0MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk OTY5NTNhNWUtNzdlMi00ZDEzLWE4OGEtNjA3YWEwZTM2ODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWFiNbaqWOFNTsfPi6az4exWY94plQcdOTcA 20GOBQRojoOTRSF84E8sqQPF8FV0V35n0qNpspaksD6gbPU8o3EB1wYUaTvBOU6i mpBcaDLUB8xxO986xhbJuSSnNmG0fhqEdHDmZCIbr4U2dtKJHvOU2KDa2i+TMlLP oas60Bz5LwPZHrs82WoNdC2PUt8s9PtFk7Be1WWyIt5aKVEjltPbQbKRDwf7rgDN meQZFFWWNRiRiUXiZquteyT2+j4dbREkZcs2olE/geMh22BrFM8FiUK/0I54MiE/ JGSZbJHeXTLj0KvjK19yX8WOn58qiWy1dffwH5jn3uGqHcXgrwIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFPxAWOr9Uf1ko0aZmrJhjB9R102eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1 MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMxMDc0MWIxMDQvMjYyZTY4NTItYTcyZi0z ZTBiLWE1ZTUtM2NmMjdmMzcwMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODQwNTI2NDktMzQwMS00YmE2LWFk ODItNmYzMTA3NDFiMTA0Lzg0MDUyNjQ5LTM0MDEtNGJhNi1hZDgyLTZmMzEwNzQx YjEwNC5jcmwwHwYDVR0jBBgwFoAUxX6Uv/iI2K38KlbO/GLK91AHs6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMx MDc0MWIxMDQuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDQlVIAwQF RcOAAwQEYCuAAwQCaMCoAwQDaNoQAwQEbDvAAwQDrFawAwQDzBs4AwQD0F7wMA0E AgACMAcDBQAmBFgAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAG2O5jG7OS1Kx5TnIMA8NjfeV7yFEfXkibHm 8cNiONsBDcfTS1tbv1cbN5xuSTu/wwr8q1ceJndMnVYhPXeP7pF6DF27X7sSL7K+ O/SzxyoiA10f2PGsmRHZVYM8PYLUoncQMCCl7P/2jKFriCByY5/B91ACQ9Wv481m uY59F67M23n6cMeZSNjSAir/hoytZyCSVqvp1Lei/iPWhAQH9gQly/PkEEzYIday uApy049kSIeuNnJOTkwirvENLB3ALOkOYsdAhEi8jPz+t6U2A5cXC4b+z46Bnoao sURJvJE7Ql+v97sZBX0BKZw3LXK4eFFq+c2O042tm28NvoAjV90= -----END CERTIFICATE-----Generated at Tue Jun 17 13:19:53 2025 by rpki-client