$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa File: 1da50353-f473-3027-9512-8f06238fa823.roa (raw, json) Hash identifier: FlZdLJufS9nXUgKmE5jRCXqmofWEJ0OsetqTS1+qcxI= Subject key identifier: D2:6E:8B:D1:AF:A0:F6:71:90:30:84:88:A3:47:C1:73:3C:E1:06:5E Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858493243E5EC66AD71901BAE5D80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 174 IP address blocks: 2001:49f0:d049::/48 maxlen: 48 2001:49f0:d04a::/48 maxlen: 48 2001:49f0:d077::/48 maxlen: 48 2001:49f0:d078::/48 maxlen: 48 2001:49f0:d07a::/48 maxlen: 48 2001:49f0:d07b::/48 maxlen: 48 2001:49f0:d07d::/48 maxlen: 48 2001:49f0:d07e::/48 maxlen: 48 2001:49f0:d07f::/48 maxlen: 48 2001:49f0:d081::/48 maxlen: 48 2001:49f0:d082::/48 maxlen: 48 2001:49f0:d083::/48 maxlen: 48 2001:49f0:d084::/48 maxlen: 48 2001:49f0:d087::/48 maxlen: 48 2001:49f0:d089::/48 maxlen: 48 2001:49f0:d08a::/48 maxlen: 48 2001:49f0:d08f::/48 maxlen: 48 2001:49f0:d097::/49 maxlen: 49 2001:49f0:d0a5::/48 maxlen: 48 2001:49f0:d0b2::/48 maxlen: 48 2001:49f0:d0b3::/48 maxlen: 48 2001:49f0:d0b4::/48 maxlen: 48 2001:49f0:d0b5::/48 maxlen: 48 2001:49f0:d0b6::/48 maxlen: 48 2001:49f0:d0d5::/48 maxlen: 48 2001:49f0:d0d6::/48 maxlen: 48 2001:49f0:d0d7::/48 maxlen: 48 2001:49f0:d0dd::/48 maxlen: 48 2001:49f0:d0e1::/48 maxlen: 48 2001:49f0:d0e2::/48 maxlen: 48 2001:49f0:d0e3::/48 maxlen: 48 2001:49f0:d105::/48 maxlen: 48 2001:49f0:d106::/48 maxlen: 48 2001:49f0:d107::/48 maxlen: 48 2001:49f0:d108::/48 maxlen: 48 2001:49f0:d109::/48 maxlen: 48 2001:49f0:d10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e5:ec:66:ad:71:90:1b:ae:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=4c82d86e-c9c4-4030-a55f-24a766b7fad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ca:95:c9:ef:c1:41:d7:5c:1b:15:5e:36:f0: 42:22:e6:25:aa:d9:7d:69:0c:bf:33:f7:0c:a6:b0: c0:dc:07:e6:a5:d8:70:f1:ab:ce:1a:c6:9c:ae:40: e5:a5:43:4d:86:06:81:ab:b6:14:5e:0f:20:61:a1: a2:d8:6e:b7:b9:f3:97:8c:ba:c1:26:a1:c7:60:48: cf:80:d3:b2:c4:f4:95:1a:c4:1e:b0:56:0e:f4:1d: 74:7b:84:82:58:5e:3c:dc:f0:c1:03:e0:1d:cb:0f: 51:ae:32:4f:e2:33:d7:38:a0:7a:2a:bf:52:7a:b3: c2:54:c6:79:d3:81:77:9b:2d:57:3d:a9:73:b5:b8: e8:f8:23:2a:35:d4:53:e0:de:25:45:9f:36:12:92: 0a:56:b0:2f:5c:ab:f1:1d:df:d8:ce:5f:de:3d:51: 91:1d:3c:e4:87:ed:bc:d4:04:ad:1e:f2:d3:3b:73: b6:48:db:a3:40:87:11:90:28:af:c9:29:1e:d5:42: b6:b3:5e:b3:f5:08:fa:d8:e2:3b:2b:ba:13:9e:5b: 60:48:62:31:f7:61:0c:00:3c:8e:5e:3d:46:42:ec: 0b:26:ea:ee:3a:80:a1:eb:79:19:14:ca:47:78:a0: 79:1f:73:4b:98:31:8c:c9:04:9e:4b:87:f9:67:9a: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6E:8B:D1:AF:A0:F6:71:90:30:84:88:A3:47:C1:73:3C:E1:06:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff 2001:49f0:d07a::/47 2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff 2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff 2001:49f0:d087::/48 2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d08f::/48 2001:49f0:d097::/49 2001:49f0:d0a5::/48 2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0dd::/48 2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff 2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f6:bd:09:73:b4:36:94:0f:f0:3b:58:ff:e3:44:57:f4:a3: 18:f2:70:94:53:c6:63:bb:26:17:51:14:83:99:2d:d9:39:4b: bf:11:18:a8:ea:ba:30:dd:de:e3:a7:d8:99:6c:6f:3c:48:07: 77:ce:d2:05:cc:16:61:4a:4d:b7:84:ba:21:0a:45:fa:45:67: 91:78:c6:f0:d0:fd:de:db:3e:5a:bf:ba:4b:e2:c9:12:fe:aa: 83:89:63:5c:18:c9:0a:dd:17:94:fb:3b:1c:c7:62:59:5f:81: ac:b2:4e:d3:2e:08:bd:81:50:59:76:bb:0f:14:57:92:2e:78: b8:8d:42:47:bc:99:e7:a6:00:68:5b:64:34:2d:10:8e:3d:63: 3d:fa:b7:9c:32:0f:fd:5a:e3:fd:e2:b1:61:85:66:74:3a:0b: b7:d7:e1:25:11:32:9d:6d:8e:e3:6d:01:ad:ec:29:6b:96:8f: d2:93:4d:c5:41:bf:13:9a:cd:df:36:c5:de:b2:a7:9f:43:ff: 9d:e9:a8:eb:de:84:da:13:f8:ad:19:b0:7c:21:3f:f9:ac:56: 6c:a8:37:a0:b9:11:40:c8:8e:31:94:45:23:a5:53:16:f1:47: 27:e1:e8:76:c9:a9:d7:00:ec:fe:25:12:4b:21:23:53:87:f4: 7a:72:49:6c -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEkyQ+XsZq1xkBuuXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk NGM4MmQ4NmUtYzljNC00MDMwLWE1NWYtMjRhNzY2YjdmYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncqVye/BQddcGxVeNvBCIuYlqtl9aQy/M/cM prDA3Afmpdhw8avOGsacrkDlpUNNhgaBq7YUXg8gYaGi2G63ufOXjLrBJqHHYEjP gNOyxPSVGsQesFYO9B10e4SCWF483PDBA+Adyw9RrjJP4jPXOKB6Kr9SerPCVMZ5 04F3my1XPalztbjo+CMqNdRT4N4lRZ82EpIKVrAvXKvxHd/Yzl/ePVGRHTzkh+28 1AStHvLTO3O2SNujQIcRkCivySke1UK2s16z9Qj62OI7K7oTnltgSGIx92EMADyO Xj1GQuwLJuruOoCh63kZFMpHeKB5H3NLmDGMyQSeS4f5Z5o1fQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFNJui9GvoPZxkDCEiKNHwXM84QZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWRhNTAzNTMtZjQ3My0z MDI3LTk1MTItOGYwNjIzOGZhODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgACMIHrMBID BwAgAUnw0EkDBwAgAUnw0EowEgMHACABSfDQdwMHACABSfDQeAMHASABSfDQejAS AwcAIAFJ8NB9AwcHIAFJ8NAAMBIDBwAgAUnw0IEDBwAgAUnw0IQDBwAgAUnw0Icw EgMHACABSfDQiQMHACABSfDQigMHACABSfDQjwMIByABSfDQlwADBwAgAUnw0KUw EgMHASABSfDQsgMHACABSfDQtjASAwcAIAFJ8NDVAwcDIAFJ8NDQAwcAIAFJ8NDd MBIDBwAgAUnw0OEDBwIgAUnw0OAwEgMHACABSfDRBQMHACABSfDRCjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQCL9r0Jc7Q2lA/wO1j/40RX9KMY8nCUU8ZjuyYXURSDmS3ZOUu/ERio6row3d7j p9iZbG88SAd3ztIFzBZhSk23hLohCkX6RWeReMbw0P3e2z5av7pL4skS/qqDiWNc GMkK3ReU+zscx2JZX4Gssk7TLgi9gVBZdrsPFFeSLni4jUJHvJnnpgBoW2Q0LRCO PWM9+recMg/9WuP94rFhhWZ0Ogu31+ElETKdbY7jbQGt7Clrlo/Sk03FQb8Tms3f NsXesqefQ/+d6ajr3oTaE/itGbB8IT/5rFZsqDeguRFAyI4xlEUjpVMW8Ucn4eh2 yanXAOz+JRJLISNTh/R6ckls -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:22 2025 by rpki-client