$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa File: e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa (raw, json) Hash identifier: nTAQ9nup18g/A5RGoxLt9C7uRxAD3zYWhNEDw22iDTE= Subject key identifier: 15:DE:B0:F8:77:7B:4E:3E:59:74:70:D9:A8:3E:BC:84:82:80:09:A9 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A119AB6F2141BE5535F0DAB40 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 1239 IP address blocks: 2001:49f0:d049::/48 maxlen: 48 2001:49f0:d04a::/48 maxlen: 48 2001:49f0:d077::/48 maxlen: 48 2001:49f0:d078::/48 maxlen: 48 2001:49f0:d07a::/48 maxlen: 48 2001:49f0:d07b::/48 maxlen: 48 2001:49f0:d07d::/48 maxlen: 48 2001:49f0:d07e::/48 maxlen: 48 2001:49f0:d07f::/48 maxlen: 48 2001:49f0:d081::/48 maxlen: 48 2001:49f0:d082::/48 maxlen: 48 2001:49f0:d083::/48 maxlen: 48 2001:49f0:d084::/48 maxlen: 48 2001:49f0:d087::/48 maxlen: 48 2001:49f0:d089::/48 maxlen: 48 2001:49f0:d08a::/48 maxlen: 48 2001:49f0:d08f::/48 maxlen: 48 2001:49f0:d097::/49 maxlen: 49 2001:49f0:d0a5::/48 maxlen: 48 2001:49f0:d0b2::/48 maxlen: 48 2001:49f0:d0b3::/48 maxlen: 48 2001:49f0:d0b4::/48 maxlen: 48 2001:49f0:d0b5::/48 maxlen: 48 2001:49f0:d0b6::/48 maxlen: 48 2001:49f0:d0d5::/48 maxlen: 48 2001:49f0:d0d6::/48 maxlen: 48 2001:49f0:d0d7::/48 maxlen: 48 2001:49f0:d0dd::/48 maxlen: 48 2001:49f0:d0e1::/48 maxlen: 48 2001:49f0:d0e2::/48 maxlen: 48 2001:49f0:d0e3::/48 maxlen: 48 2001:49f0:d105::/48 maxlen: 48 2001:49f0:d106::/48 maxlen: 48 2001:49f0:d107::/48 maxlen: 48 2001:49f0:d108::/48 maxlen: 48 2001:49f0:d109::/48 maxlen: 48 2001:49f0:d10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:b6:f2:14:1b:e5:53:5f:0d:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=109b145f-3fb6-4bad-bc03-06657eaff6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8d:e0:81:28:3c:10:cc:bc:88:1a:79:93:ee: 8e:2f:59:a8:ec:57:33:d1:7d:f8:80:e4:08:3b:6f: 03:48:42:1a:49:22:47:e7:9b:74:56:cd:b1:ce:92: 40:a5:87:75:51:e2:76:78:d2:e9:1c:61:a0:f7:fc: b4:28:b2:85:56:63:53:24:43:32:60:61:a7:80:70: 8d:66:fa:cf:46:ac:b5:50:35:c9:4f:cb:2c:84:51: e2:d2:17:00:73:50:7e:a0:ce:54:ba:fc:58:6c:27: f0:06:6a:0c:31:de:98:6b:7d:dd:b4:75:a5:a4:9a: 91:a6:67:4b:71:22:a3:8d:38:33:82:61:62:4b:5f: 11:82:5a:81:1d:1b:b0:19:6c:fd:56:fe:29:10:10: 40:fb:1c:69:ad:c5:b0:2b:2d:79:f8:fb:b7:ee:01: e7:ad:db:7f:4a:71:ca:87:b4:85:c2:73:67:2d:4b: 90:22:6a:f8:51:f6:b5:2e:28:76:ac:b0:fd:f5:ab: d9:c6:a0:5f:15:46:14:0a:d0:06:78:c3:1b:a7:e6: 82:1b:eb:a8:80:17:0d:21:b1:57:ae:66:24:08:a8: 5b:be:dd:04:9c:c2:62:88:c5:18:b2:97:2d:3d:1a: cc:da:8f:67:e5:ee:14:dd:ba:99:3a:1e:74:3a:1e: 7f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DE:B0:F8:77:7B:4E:3E:59:74:70:D9:A8:3E:BC:84:82:80:09:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff 2001:49f0:d07a::/47 2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff 2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff 2001:49f0:d087::/48 2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d08f::/48 2001:49f0:d097::/49 2001:49f0:d0a5::/48 2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0dd::/48 2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff 2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:5a:ff:e7:f9:a2:0a:e9:71:76:c5:c7:9d:81:04:e5:a3:96: dc:4c:46:36:31:5c:42:1a:cd:00:c9:37:53:03:c7:e4:ee:76: 24:e2:d9:bd:e8:e4:d5:cd:4f:8d:01:10:8e:e0:7e:97:69:ff: d9:66:ff:2c:47:39:f8:1f:64:c6:51:ef:95:f1:1f:cf:8f:0b: 5a:9f:52:3b:e3:d3:1b:a2:d2:2f:77:cd:e9:79:b2:c2:b5:6a: 52:0c:62:8b:9f:71:20:c7:c7:8f:ad:9f:95:34:5c:df:d6:eb: 64:55:e8:48:28:15:ea:ac:70:41:1a:c5:ee:e3:98:f8:f6:99: ee:c1:06:84:f3:cf:28:6c:2a:00:11:57:e4:f2:83:aa:de:8c: 73:33:7a:8b:ca:32:92:09:87:69:4f:85:15:14:b9:6c:19:bc: 8c:c3:23:3c:be:7e:de:3e:9d:3d:82:0a:3f:47:d6:de:86:81: 26:ab:5e:6b:69:90:f7:4f:45:d5:60:c4:fc:3b:dc:0c:a0:6b: bc:00:c3:eb:aa:86:4b:43:b3:75:f1:14:63:0e:de:22:b4:53: c6:63:e6:3c:f4:0c:5d:3c:3b:41:e6:93:65:58:3e:b0:03:db: 3d:7e:b1:b8:d8:ad:a7:03:09:e1:0d:85:02:c4:3e:48:95:50: 64:6c:1e:10 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEoRmrbyFBvlU18Nq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk MTA5YjE0NWYtM2ZiNi00YmFkLWJjMDMtMDY2NTdlYWZmNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj43ggSg8EMy8iBp5k+6OL1mo7Fcz0X34gOQI O28DSEIaSSJH55t0Vs2xzpJApYd1UeJ2eNLpHGGg9/y0KLKFVmNTJEMyYGGngHCN ZvrPRqy1UDXJT8sshFHi0hcAc1B+oM5UuvxYbCfwBmoMMd6Ya33dtHWlpJqRpmdL cSKjjTgzgmFiS18RglqBHRuwGWz9Vv4pEBBA+xxprcWwKy15+Pu37gHnrdt/SnHK h7SFwnNnLUuQImr4Ufa1Lih2rLD99avZxqBfFUYUCtAGeMMbp+aCG+uogBcNIbFX rmYkCKhbvt0EnMJiiMUYspctPRrM2o9n5e4U3bqZOh50Oh5/dwIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFBXesPh3e04+WXRw2ag+vISCgAmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZTQ5ZTUyYTktN2IwYy0z MWU2LThhNmItYTA0MmExMTI5ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgACMIHrMBID BwAgAUnw0EkDBwAgAUnw0EowEgMHACABSfDQdwMHACABSfDQeAMHASABSfDQejAS AwcAIAFJ8NB9AwcHIAFJ8NAAMBIDBwAgAUnw0IEDBwAgAUnw0IQDBwAgAUnw0Icw EgMHACABSfDQiQMHACABSfDQigMHACABSfDQjwMIByABSfDQlwADBwAgAUnw0KUw EgMHASABSfDQsgMHACABSfDQtjASAwcAIAFJ8NDVAwcDIAFJ8NDQAwcAIAFJ8NDd MBIDBwAgAUnw0OEDBwIgAUnw0OAwEgMHACABSfDRBQMHACABSfDRCjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQDBWv/n+aIK6XF2xcedgQTlo5bcTEY2MVxCGs0AyTdTA8fk7nYk4tm96OTVzU+N ARCO4H6Xaf/ZZv8sRzn4H2TGUe+V8R/Pjwtan1I749MbotIvd83pebLCtWpSDGKL n3Egx8ePrZ+VNFzf1utkVehIKBXqrHBBGsXu45j49pnuwQaE888obCoAEVfk8oOq 3oxzM3qLyjKSCYdpT4UVFLlsGbyMwyM8vn7ePp09ggo/R9behoEmq15raZD3T0XV YMT8O9wMoGu8AMPrqoZLQ7N18RRjDt4itFPGY+Y89AxdPDtB5pNlWD6wA9s9frG4 2K2nAwnhDYUCxD5IlVBkbB4Q -----END CERTIFICATE-----Generated at Sun Jun 15 14:41:51 2025 by rpki-client