$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa File: 7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa (raw, json) Hash identifier: owZwCyA4vOAZOO50we3I1krNcPkKH8S4ahKTsEixtQ0= Subject key identifier: D9:CB:12:5F:9D:AB:1C:26:BC:F2:00:6B:D9:9B:97:37:6D:F9:27:41 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849780F13AEB48A47A288BBD260 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 174 IP address blocks: 2001:49f0:d009::/48 maxlen: 48 2001:49f0:d014::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:13:ae:b4:8a:47:a2:88:bb:d2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=87dfce68-ba9b-4fa7-b890-b7fa0ee38edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3c:fc:fd:29:22:1a:e6:aa:04:c5:a6:0f:23: bc:0a:40:e8:88:ee:54:89:45:fe:19:e4:fc:96:3a: bb:e5:27:f2:6d:be:29:aa:59:02:97:40:d5:f8:f3: 63:ef:28:e2:ba:c0:57:cf:9b:a6:8c:39:0b:14:8f: e6:83:dd:e3:9e:28:0d:78:76:51:40:67:0f:0a:cc: 49:fe:34:ee:58:b8:87:2f:bc:31:80:a3:70:0c:aa: 8c:3c:6d:94:cf:5a:6d:c3:7b:b8:e9:9c:f2:fa:14: 8f:d3:d3:01:3d:08:b6:7f:ef:40:f0:cd:ba:d0:24: 2c:6b:b9:42:ee:c8:1e:43:0c:de:6f:9d:07:41:0f: 8c:57:43:58:3d:b3:0d:1b:83:46:9e:05:77:17:a1: e4:08:c9:cb:0d:2d:1b:d2:4d:70:4b:f9:05:72:ad: aa:2b:69:d2:4c:c1:39:f5:c5:61:61:ad:0f:ee:65: 59:34:a8:f6:17:46:66:f2:b7:f3:5a:57:3f:d7:0e: b0:61:ef:14:1c:1a:ff:c7:0d:cb:fc:c3:a4:5b:a2: 05:ca:fd:be:1d:0d:fc:38:1e:a8:51:e1:d4:17:77: 3d:a3:7e:92:45:d3:2e:4f:72:8d:7d:2a:4d:72:8d: 69:b3:f7:ae:25:32:87:d5:9c:30:b1:d2:50:d6:81: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CB:12:5F:9D:AB:1C:26:BC:F2:00:6B:D9:9B:97:37:6D:F9:27:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d009::/48 2001:49f0:d014::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:5f:36:5b:5c:28:9a:78:7a:f0:a7:8f:b6:09:fd:7d:e4:33: 03:8e:fa:b5:ba:4b:3e:7e:0b:ed:e2:11:6b:60:c7:3e:dc:d1: 79:a4:df:3d:ee:a9:ce:7d:d2:6a:6b:4d:a6:ef:37:51:11:1e: 69:1b:c0:2c:21:c6:5f:2e:4e:4e:c2:b8:20:c1:94:99:0a:b8: 4c:1f:71:84:75:d1:e8:f7:81:ea:0b:c6:0a:40:42:a1:e2:a4: ee:f5:a6:74:0f:c0:c6:ae:b3:11:df:36:69:9d:80:90:26:8f: 43:42:17:ba:5f:f3:32:1a:e1:41:57:78:9f:da:fc:46:ef:93: 4b:c3:63:aa:68:ee:72:bf:26:b9:35:a9:70:57:87:bf:e6:2b: c2:40:c6:30:e6:5b:d9:75:10:8e:f6:fa:6b:fa:83:8e:05:45: f3:eb:9b:3b:16:8e:42:a1:ec:f3:d0:de:ba:97:44:23:aa:e3: cc:92:b7:93:83:1d:2d:85:84:52:23:fc:af:60:d5:4e:51:d5: 33:17:93:ad:52:5c:16:90:b0:69:35:cb:2b:40:46:07:27:df: eb:52:6b:e4:05:25:eb:3b:33:0f:01:e2:95:ff:8b:86:55:04: 6d:51:1c:86:41:7f:53:48:e5:4a:bd:a7:bd:e8:22:44:1c:d1: 08:b1:0f:a5 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEl4DxOutIpHooi70mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk ODdkZmNlNjgtYmE5Yi00ZmE3LWI4OTAtYjdmYTBlZTM4ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojz8/SkiGuaqBMWmDyO8CkDoiO5UiUX+GeT8 ljq75Sfybb4pqlkCl0DV+PNj7yjiusBXz5umjDkLFI/mg93jnigNeHZRQGcPCsxJ /jTuWLiHL7wxgKNwDKqMPG2Uz1ptw3u46Zzy+hSP09MBPQi2f+9A8M260CQsa7lC 7sgeQwzeb50HQQ+MV0NYPbMNG4NGngV3F6HkCMnLDS0b0k1wS/kFcq2qK2nSTME5 9cVhYa0P7mVZNKj2F0Zm8rfzWlc/1w6wYe8UHBr/xw3L/MOkW6IFyv2+HQ38OB6o UeHUF3c9o36SRdMuT3KNfSpNco1ps/euJTKH1ZwwsdJQ1oGZMwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNnLEl+dqxwmvPIAa9mblzdt+SdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvN2FjMzJhZGEtMWZmNS0z YzcwLTgzNzUtMmZkOTBmNmYyNDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAFJ8NAJ AwcAIAFJ8NAUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALFfNltcKJp4evCnj7YJ/X3kMwOO+rW6Sz5+C+3i EWtgxz7c0Xmk3z3uqc590mprTabvN1ERHmkbwCwhxl8uTk7CuCDBlJkKuEwfcYR1 0ej3geoLxgpAQqHipO71pnQPwMausxHfNmmdgJAmj0NCF7pf8zIa4UFXeJ/a/Ebv k0vDY6po7nK/Jrk1qXBXh7/mK8JAxjDmW9l1EI72+mv6g44FRfPrmzsWjkKh7PPQ 3rqXRCOq48ySt5ODHS2FhFIj/K9g1U5R1TMXk61SXBaQsGk1yytARgcn3+tSa+QF Jes7Mw8B4pX/i4ZVBG1RHIZBf1NI5Uq9p73oIkQc0QixD6U= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:08 2025 by rpki-client