$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa File: 7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa (raw, json) Hash identifier: 9+kAt+NaQ0R3+4dJdVkUqj8ML/vve+8WcaRazoB3FK0= Subject key identifier: C8:6D:F6:56:47:12:AB:66:7A:25:B3:9F:33:99:F3:B5:59:A9:9A:8B Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B3821A1F7D9CDD42F49929B40 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 174 IP address blocks: 2001:49f0:d009::/48 maxlen: 48 2001:49f0:d014::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:a1:f7:d9:cd:d4:2f:49:92:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=37194e2d-bb4d-43ed-992e-4c4759f5f0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:47:c6:96:9a:87:49:dd:aa:39:e9:61:b1: 4a:3b:dc:6d:ee:37:4f:85:a1:2a:d1:bc:46:64:3b: 28:a3:81:f6:91:d8:4e:23:a7:fa:ad:0d:21:fe:c0: 28:94:15:ae:1f:da:5b:68:fe:34:bb:ac:54:cb:27: 56:27:0f:29:3c:b0:28:59:7b:42:97:0c:f0:3b:09: 09:f3:e3:e4:df:f5:17:e6:ae:94:c6:89:5b:13:d3: 03:3c:17:48:b3:39:cb:6c:de:7a:83:69:30:e3:49: ee:f4:2e:40:ce:0d:c1:87:d1:41:7d:55:de:46:6d: ca:44:38:52:75:3d:5f:d5:22:cd:18:b9:50:d0:4c: e5:82:3a:2f:2f:c8:7f:c4:76:0b:1c:6b:48:74:1a: ee:1f:93:86:f4:ab:1f:c2:7c:46:b0:8e:05:e7:cb: a4:a7:43:a8:80:4e:38:d4:9c:db:fc:8c:f8:36:b7: fe:3a:2b:10:26:0f:a2:d6:e0:81:95:16:bd:63:4d: 46:a0:0f:f4:2f:fd:44:25:a8:0b:51:27:1e:f3:37: 60:b5:34:4e:81:05:f4:e1:75:cc:b9:a2:be:29:95: 87:f2:af:4d:c9:9b:50:dd:7f:42:69:1d:29:29:f5: 8e:63:03:1b:2e:cc:6d:0d:b2:90:3a:9f:21:3b:f5: 17:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6D:F6:56:47:12:AB:66:7A:25:B3:9F:33:99:F3:B5:59:A9:9A:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d009::/48 2001:49f0:d014::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:d9:33:ad:34:f0:39:47:0a:a3:cd:ad:ee:18:39:b2:99:39: a3:cf:43:09:76:51:ae:a9:22:57:a1:de:b8:55:0f:0c:1e:48: a8:1f:f8:27:99:48:c9:13:46:39:7a:88:ca:56:d7:06:71:00: 0b:f9:9f:8c:a7:6c:c5:2c:70:17:ee:95:20:0f:ab:ff:2b:71: c4:b7:f9:9d:ba:81:df:16:3f:c7:9e:f5:21:c3:24:c2:5d:2a: 7b:c8:8b:ea:91:6f:f9:63:44:6b:92:2f:0b:b9:c7:db:c0:e4: e8:1f:05:35:c3:86:cf:38:d5:f7:bd:fb:af:3d:cc:0a:bd:31: 5c:e0:ee:22:16:a5:10:64:53:b3:9a:74:68:5f:d6:b3:82:8e: cf:f1:0d:d2:ef:b6:47:1d:06:5c:1b:21:21:24:20:e7:8e:68: 38:c9:42:73:e3:be:2a:61:12:ec:39:20:33:fb:26:90:04:6d: 0b:dc:58:bc:7b:57:b5:9d:42:0d:39:bf:01:28:38:4c:32:2a: c2:02:fd:b7:e0:76:ee:24:9e:22:b1:82:a0:ff:53:72:d4:31: e3:5e:21:8a:bb:13:ef:7e:79:cd:db:eb:de:e3:eb:e9:45:ef: 65:5b:0f:00:e2:74:ce:ca:fc:c1:a4:47:5a:d8:53:ab:ab:34: 74:63:be:72 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEs4IaH32c3UL0mSm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk MzcxOTRlMmQtYmI0ZC00M2VkLTk5MmUtNGM0NzU5ZjVmMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE9Hxpaah0ndqjnpYbFKO9xt7jdPhaEq0bxG ZDsoo4H2kdhOI6f6rQ0h/sAolBWuH9pbaP40u6xUyydWJw8pPLAoWXtClwzwOwkJ 8+Pk3/UX5q6UxolbE9MDPBdIsznLbN56g2kw40nu9C5Azg3Bh9FBfVXeRm3KRDhS dT1f1SLNGLlQ0EzlgjovL8h/xHYLHGtIdBruH5OG9KsfwnxGsI4F58ukp0OogE44 1Jzb/Iz4Nrf+OisQJg+i1uCBlRa9Y01GoA/0L/1EJagLUSce8zdgtTROgQX04XXM uaK+KZWH8q9NyZtQ3X9CaR0pKfWOYwMbLsxtDbKQOp8hO/UXmwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMht9lZHEqtmeiWznzOZ87VZqZqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvN2FjMzJhZGEtMWZmNS0z YzcwLTgzNzUtMmZkOTBmNmYyNDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAFJ8NAJ AwcAIAFJ8NAUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALLZM6008DlHCqPNre4YObKZOaPPQwl2Ua6pIleh 3rhVDwweSKgf+CeZSMkTRjl6iMpW1wZxAAv5n4ynbMUscBfulSAPq/8rccS3+Z26 gd8WP8ee9SHDJMJdKnvIi+qRb/ljRGuSLwu5x9vA5OgfBTXDhs841fe9+689zAq9 MVzg7iIWpRBkU7OadGhf1rOCjs/xDdLvtkcdBlwbISEkIOeOaDjJQnPjviphEuw5 IDP7JpAEbQvcWLx7V7WdQg05vwEoOEwyKsIC/bfgdu4kniKxgqD/U3LUMeNeIYq7 E+9+ec3b697j6+lF72VbDwDidM7K/MGkR1rYU6urNHRjvnI= -----END CERTIFICATE-----Generated at Wed Nov 5 12:19:42 2025 by rpki-client