$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa File: 6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa (raw, json) Hash identifier: +s2XVDHp/9IId3NKkwkLJQX06V/vVORrcaoi+Dbz64E= Subject key identifier: 81:91:7F:85:48:8D:5F:0E:4F:F7:A9:69:57:2B:04:4A:23:EC:C1:AF Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A119AB707399AC3C6E6407800 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 30058 IP address blocks: 2001:49f0:d049::/48 maxlen: 48 2001:49f0:d04a::/48 maxlen: 48 2001:49f0:d077::/48 maxlen: 48 2001:49f0:d078::/48 maxlen: 48 2001:49f0:d07a::/48 maxlen: 48 2001:49f0:d07b::/48 maxlen: 48 2001:49f0:d07d::/48 maxlen: 48 2001:49f0:d07e::/48 maxlen: 48 2001:49f0:d07f::/48 maxlen: 48 2001:49f0:d081::/48 maxlen: 48 2001:49f0:d082::/48 maxlen: 48 2001:49f0:d083::/48 maxlen: 48 2001:49f0:d084::/48 maxlen: 48 2001:49f0:d087::/48 maxlen: 48 2001:49f0:d089::/48 maxlen: 48 2001:49f0:d08a::/48 maxlen: 48 2001:49f0:d08f::/48 maxlen: 48 2001:49f0:d097::/49 maxlen: 49 2001:49f0:d0a5::/48 maxlen: 48 2001:49f0:d0b2::/48 maxlen: 48 2001:49f0:d0b3::/48 maxlen: 48 2001:49f0:d0b4::/48 maxlen: 48 2001:49f0:d0b5::/48 maxlen: 48 2001:49f0:d0b6::/48 maxlen: 48 2001:49f0:d0d5::/48 maxlen: 48 2001:49f0:d0d6::/48 maxlen: 48 2001:49f0:d0d7::/48 maxlen: 48 2001:49f0:d0dd::/48 maxlen: 48 2001:49f0:d0e1::/48 maxlen: 48 2001:49f0:d0e2::/48 maxlen: 48 2001:49f0:d0e3::/48 maxlen: 48 2001:49f0:d105::/48 maxlen: 48 2001:49f0:d106::/48 maxlen: 48 2001:49f0:d107::/48 maxlen: 48 2001:49f0:d108::/48 maxlen: 48 2001:49f0:d109::/48 maxlen: 48 2001:49f0:d10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:b7:07:39:9a:c3:c6:e6:40:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=165403e7-dfd0-4d3b-85dc-be46c8a21234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:76:36:e9:73:36:bf:1b:fe:d6:6c:71:e6: 41:65:6c:a9:a0:b6:f0:eb:f0:91:ef:ac:f2:05:a4: 20:96:8d:65:9a:cb:8c:f9:a8:7f:0c:b5:e0:fa:88: f7:1e:e2:48:af:38:92:97:36:74:2e:d5:94:ae:fe: 16:51:13:ae:fd:48:e4:92:7e:7c:b5:0d:87:38:20: 17:46:d2:6b:de:8f:ba:45:be:db:c1:ae:e1:14:ec: 4c:48:9c:b0:11:1e:9a:37:f4:70:7c:bc:79:d8:3f: 60:02:cb:c3:0d:30:3e:6e:1b:1e:8c:64:c1:dd:e7: 24:58:cc:8c:06:ec:cd:4d:dd:26:6a:4f:41:06:26: c4:1b:f6:b0:d8:80:23:62:c6:f9:a0:3b:d6:12:ac: 80:01:a2:f8:d4:b9:0c:9b:5c:20:02:72:a9:ab:83: 4b:cf:d0:95:b4:d3:db:93:89:87:f9:67:41:db:ed: ff:45:96:da:37:80:42:73:a0:1f:80:af:51:c0:71: aa:5e:53:69:14:97:a8:70:dd:9a:2b:1d:93:3d:c4: bd:3c:c5:90:78:07:54:a8:c9:e9:9d:4c:8d:37:85: 34:3d:43:77:72:dc:56:5f:56:6d:23:4e:60:6f:1f: e5:09:30:73:c0:55:71:6d:be:51:94:3e:2c:c3:85: 7c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:91:7F:85:48:8D:5F:0E:4F:F7:A9:69:57:2B:04:4A:23:EC:C1:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff 2001:49f0:d07a::/47 2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff 2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff 2001:49f0:d087::/48 2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d08f::/48 2001:49f0:d097::/49 2001:49f0:d0a5::/48 2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0dd::/48 2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff 2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c8:8b:a2:30:ae:6a:e8:b6:96:bc:97:bf:db:eb:cd:5d:b2: d5:5f:59:a1:c2:3b:2a:f8:ca:39:49:5c:a8:bf:1b:15:4a:f4: e1:0a:f1:60:ea:b9:25:e8:2d:a2:21:6b:fa:6a:a3:1a:da:2e: 0f:69:a5:08:b0:1a:cc:25:db:d1:5f:93:bb:8c:a7:2c:0e:0e: b0:11:fb:c9:68:7f:72:a6:18:bd:17:18:c7:4f:4c:83:5e:9f: 64:69:e6:eb:64:19:8d:d5:84:a9:6f:60:b3:9b:d6:5b:35:72: 68:cb:dd:6a:94:14:6b:fc:6c:81:da:f6:cf:c0:5e:f2:39:d4: 1a:59:89:7c:00:ff:6c:8c:c8:3e:eb:30:b1:0d:b5:61:6d:07: d6:77:5f:2e:77:95:08:04:3a:1a:82:12:fe:09:a2:43:36:52: e2:0a:18:e8:9f:63:55:74:1e:7d:25:aa:1e:fd:c2:80:cc:a4: 9f:05:d4:d3:26:48:bb:de:49:98:9a:74:be:08:e8:3c:3f:cb: 53:d2:1e:b6:a7:5e:75:de:8e:86:3b:dc:80:65:d1:d6:7b:8b: 2e:8a:ae:72:76:1b:5b:b0:e5:24:c3:dd:c2:b9:f9:75:84:fe: a2:50:39:ea:c2:98:a9:88:f4:4e:52:fe:bc:c0:d3:97:a5:e0: c5:f9:61:25 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEoRmrcHOZrDxuZAeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk MTY1NDAzZTctZGZkMC00ZDNiLTg1ZGMtYmU0NmM4YTIxMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsF2NulzNr8b/tZsceZBZWypoLbw6/CR76zy BaQglo1lmsuM+ah/DLXg+oj3HuJIrziSlzZ0LtWUrv4WUROu/Ujkkn58tQ2HOCAX RtJr3o+6Rb7bwa7hFOxMSJywER6aN/RwfLx52D9gAsvDDTA+bhsejGTB3eckWMyM BuzNTd0mak9BBibEG/aw2IAjYsb5oDvWEqyAAaL41LkMm1wgAnKpq4NLz9CVtNPb k4mH+WdB2+3/RZbaN4BCc6AfgK9RwHGqXlNpFJeocN2aKx2TPcS9PMWQeAdUqMnp nUyNN4U0PUN3ctxWX1ZtI05gbx/lCTBzwFVxbb5RlD4sw4V85wIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFIGRf4VIjV8OT/epaVcrBEoj7MGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNjgyN2Q4ZDMtYzJhYS0z ZmNhLWI2MDUtZTQ2OWJjNTBiOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgACMIHrMBID BwAgAUnw0EkDBwAgAUnw0EowEgMHACABSfDQdwMHACABSfDQeAMHASABSfDQejAS AwcAIAFJ8NB9AwcHIAFJ8NAAMBIDBwAgAUnw0IEDBwAgAUnw0IQDBwAgAUnw0Icw EgMHACABSfDQiQMHACABSfDQigMHACABSfDQjwMIByABSfDQlwADBwAgAUnw0KUw EgMHASABSfDQsgMHACABSfDQtjASAwcAIAFJ8NDVAwcDIAFJ8NDQAwcAIAFJ8NDd MBIDBwAgAUnw0OEDBwIgAUnw0OAwEgMHACABSfDRBQMHACABSfDRCjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBEyIuiMK5q6LaWvJe/2+vNXbLVX1mhwjsq+Mo5SVyovxsVSvThCvFg6rkl6C2i IWv6aqMa2i4PaaUIsBrMJdvRX5O7jKcsDg6wEfvJaH9yphi9FxjHT0yDXp9kaebr ZBmN1YSpb2Czm9ZbNXJoy91qlBRr/GyB2vbPwF7yOdQaWYl8AP9sjMg+6zCxDbVh bQfWd18ud5UIBDoaghL+CaJDNlLiChjon2NVdB59Jaoe/cKAzKSfBdTTJki73kmY mnS+COg8P8tT0h62p1513o6GO9yAZdHWe4suiq5ydhtbsOUkw93Cufl1hP6iUDnq wpipiPROUv68wNOXpeDF+WEl -----END CERTIFICATE-----Generated at Sun Jun 15 17:42:41 2025 by rpki-client