$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa File: 2f73330e-1532-3517-a51f-dc46cb11c22c.roa (raw, json) Hash identifier: i1Zo1rzhiGirLjDQopcjRm8gXK+uDtWR5a9FUSsbzNA= Subject key identifier: 45:50:AF:4D:14:CF:5B:54:DF:4F:D5:B4:62:24:1B:9E:E1:AF:0A:9B Certificate issuer: /CN=028c0596-c3dd-44df-9761-677e68794c69 Certificate serial: 010D0C9F4328584B8BE216DCCDCC9490E3D1A080 Authority key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 14371 IP address blocks: 65.18.204.0/22 maxlen: 24 66.171.40.0/21 maxlen: 24 68.235.64.0/18 maxlen: 24 104.219.196.0/22 maxlen: 24 162.254.64.0/22 maxlen: 24 205.149.144.0/20 maxlen: 24 206.223.125.0/24 maxlen: 24 208.77.24.0/22 maxlen: 24 209.191.192.0/19 maxlen: 24 2001:504:29::/48 maxlen: 48 2600:6400::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:16:dc:cd:cc:94:90:e3:d1:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028c0596-c3dd-44df-9761-677e68794c69 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=daf766e7-4f52-44ad-85bf-171674d50d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ec:09:6e:2e:d4:83:06:42:a6:94:48:e5:db: ff:eb:05:04:a9:29:4b:ea:91:b0:43:1e:ce:6c:63: 58:bc:57:b3:d0:c2:6b:23:37:cc:65:39:46:28:8d: 7f:1f:f9:1c:f4:d7:5b:c4:e3:90:c0:60:8b:bd:6d: 32:5c:a1:48:a6:c1:29:5d:3d:f0:30:11:f9:0e:a7: 5a:cc:31:fb:cb:6c:28:1e:48:6c:40:92:c7:d2:96: 5f:f7:04:aa:d1:19:74:b6:65:7a:cc:49:8a:03:97: 66:ef:71:bb:73:ee:75:68:15:fa:3e:bc:e6:68:68: af:a1:70:9a:99:95:39:93:89:cf:f1:88:72:45:51: 9a:b9:b1:bb:78:a6:8e:a0:7e:e2:85:e7:2c:8b:32: 60:a9:d9:d5:d8:8f:8e:ff:c6:97:2b:83:94:f7:af: 03:9b:89:63:3d:83:6a:23:43:04:9b:1f:88:8e:14: 34:a2:1a:ec:26:fc:d6:1e:b6:c6:5c:c6:b9:08:b0: fc:53:68:98:12:b8:b3:77:75:49:54:44:95:4c:43: 48:9e:74:6b:94:14:45:11:b6:49:68:f4:02:d4:0b: 3c:3b:d0:d3:a0:8e:a6:98:6a:f3:ba:a2:69:f2:4b: 65:a1:e8:dd:22:4f:47:11:73:aa:76:74:3a:d1:6a: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:50:AF:4D:14:CF:5B:54:DF:4F:D5:B4:62:24:1B:9E:E1:AF:0A:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl X509v3 Authority Key Identifier: keyid:D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer sbgp-ipAddrBlock: critical IPv4: 65.18.204.0/22 66.171.40.0/21 68.235.64.0/18 104.219.196.0/22 162.254.64.0/22 205.149.144.0/20 206.223.125.0/24 208.77.24.0/22 209.191.192.0/19 IPv6: 2001:504:29::/48 2600:6400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c7:e7:90:83:9c:47:08:1e:a6:db:ab:7d:af:75:36:5f:c4: 0d:97:65:65:f9:da:7e:bc:6c:0e:23:e4:7f:4b:2d:fa:b6:e6: e0:7c:3c:df:8f:4d:4c:ae:2a:d0:01:cb:40:a7:75:95:88:53: f6:fe:5e:06:7b:64:04:1a:f5:96:30:88:32:38:78:f1:6f:52: 84:4c:ca:a7:93:b8:e5:13:f1:c5:63:7c:d0:0b:ed:ab:dc:30: b8:c3:52:8b:0e:f4:b0:25:30:5c:d2:d2:46:24:23:a5:cb:47: 23:c2:a0:5f:54:cb:8b:67:94:d0:af:8a:75:88:bb:5f:3d:91: ba:5b:ac:d2:4c:24:f5:48:b0:e0:d4:13:eb:da:16:03:bf:a1: 75:a4:bf:bb:19:a4:2b:88:49:a7:9e:58:98:4e:65:11:b7:e3: 4b:ee:7c:3e:25:7f:0c:b5:e2:69:a9:3c:d2:c6:5a:fd:e9:e3: 4c:62:0f:1a:75:ea:25:07:e3:77:5a:5e:d4:15:26:d1:5e:63: c1:de:33:f4:4d:dc:8f:2a:ac:56:1a:9b:13:8c:b7:83:31:e9: d5:ba:4c:11:6a:51:a0:0f:b6:6f:d7:66:f3:16:ec:94:fb:03: 84:a8:ce:c4:35:d0:8c:d1:a9:46:b4:2d:8f:ad:cc:1c:d6:dd: 9b:d0:f1:79 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEuL4hbczcyUkOPRoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4YzA1OTYtYzNkZC00NGRmLTk3NjEtNjc3ZTY4Nzk0 YzY5MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ZGFmNzY2ZTctNGY1Mi00NGFkLTg1YmYtMTcxNjc0ZDUwZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+wJbi7UgwZCppRI5dv/6wUEqSlL6pGwQx7O bGNYvFez0MJrIzfMZTlGKI1/H/kc9NdbxOOQwGCLvW0yXKFIpsEpXT3wMBH5Dqda zDH7y2woHkhsQJLH0pZf9wSq0Rl0tmV6zEmKA5dm73G7c+51aBX6PrzmaGivoXCa mZU5k4nP8YhyRVGaubG7eKaOoH7ihecsizJgqdnV2I+O/8aXK4OU968Dm4ljPYNq I0MEmx+IjhQ0ohrsJvzWHrbGXMa5CLD8U2iYErizd3VJVESVTENInnRrlBRFEbZJ aPQC1As8O9DToI6mmGrzuqJp8ktloejdIk9HEXOqdnQ60WpBPwIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFEVQr00Uz1tU30/VtGIkG57hrwqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhj MDU5Ni1jM2RkLTQ0ZGYtOTc2MS02NzdlNjg3OTRjNjkvMmY3MzMzMGUtMTUzMi0z NTE3LWE1MWYtZGM0NmNiMTFjMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDI4YzA1OTYtYzNkZC00NGRmLTk3 NjEtNjc3ZTY4Nzk0YzY5LzAyOGMwNTk2LWMzZGQtNDRkZi05NzYxLTY3N2U2ODc5 NGM2OS5jcmwwHwYDVR0jBBgwFoAU13vNAHAryYoSeo0O6DqODdIIi7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhjMDU5Ni1jM2RkLTQ0ZGYtOTc2MS02Nzdl Njg3OTRjNjkuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjA8BAIAATA2AwQCQRLMAwQD QqsoAwQGROtAAwQCaNvEAwQCov5AAwQEzZWQAwQAzt99AwQC0E0YAwQF0b/AMBYE AgACMBADBwAgAQUEACkDBQQmAGQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJfH55CDnEcIHqbbq32vdTZf xA2XZWX52n68bA4j5H9LLfq25uB8PN+PTUyuKtABy0CndZWIU/b+XgZ7ZAQa9ZYw iDI4ePFvUoRMyqeTuOUT8cVjfNAL7avcMLjDUosO9LAlMFzS0kYkI6XLRyPCoF9U y4tnlNCvinWIu189kbpbrNJMJPVIsODUE+vaFgO/oXWkv7sZpCuISaeeWJhOZRG3 40vufD4lfwy14mmpPNLGWv3p40xiDxp16iUH43daXtQVJtFeY8HeM/RN3I8qrFYa mxOMt4Mx6dW6TBFqUaAPtm/XZvMW7JT7A4SozsQ10IzRqUa0LY+tzBzW3ZvQ8Xk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:52 2025 by rpki-client