$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a7987361-4873-32c4-a38e-998697c90971.roa File: a7987361-4873-32c4-a38e-998697c90971.roa (raw, json) Hash identifier: BPyMDSlHgAKn/AxzLUv76IhSbUvBl0iPMiC42vc5k6w= Subject key identifier: 75:1E:5D:EE:25:A7:79:79:21:8D:4D:FE:81:1C:07:89:84:39:ED:74 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A6DBB382F9EBA7CD0F370A300 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a7987361-4873-32c4-a38e-998697c90971.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 30058 IP address blocks: 2001:49f0:d091::/48 maxlen: 48 2001:49f0:d0b0::/48 maxlen: 48 2001:49f0:d0dc::/48 maxlen: 48 2001:49f0:d11b::/48 maxlen: 48 2001:49f0:d13f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:38:2f:9e:ba:7c:d0:f3:70:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=deb3f52e-c526-44d0-9db9-e48a2169afce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:be:1d:59:3a:cc:e0:43:39:f2:05:30:8c:24: fa:9e:22:cf:64:24:ab:56:2e:be:44:a1:be:c9:01: 97:76:7c:92:f0:be:5e:a8:1c:17:7f:d5:ba:d2:4a: e7:2d:98:5d:f8:61:c2:27:88:b4:08:a2:eb:7d:14: b5:08:29:35:1c:fc:8a:66:75:22:a2:fe:f4:a1:ae: fb:5b:94:07:eb:c6:1d:8c:d2:ba:92:fc:76:24:a6: 32:a2:ac:d4:4c:37:0c:37:f7:2e:28:ed:97:e2:e5: e5:16:37:e6:6f:96:08:3f:d9:02:38:9a:2a:7a:00: 1d:28:dc:b4:9b:76:da:0a:15:af:95:3a:c7:43:6d: 7c:4c:cf:01:b3:3d:d5:82:19:18:48:0c:74:19:c7: 7d:9a:5a:f1:88:8b:81:77:8e:26:2c:44:13:ab:a1: 3e:94:57:bb:c0:b9:cd:52:cd:55:45:d8:84:9a:a0: 1f:b8:85:e4:5f:7a:5f:a8:ca:5d:02:53:85:33:22: eb:19:e5:f7:a4:79:c5:ab:2c:f9:c1:ba:03:1b:69: 1f:94:72:0c:b7:a1:db:ca:37:0d:8b:9f:b1:24:fe: 0b:c0:75:97:46:3d:0a:9d:22:5f:4c:37:b9:27:9e: 57:8e:49:92:fe:ad:5b:39:ae:48:59:fa:e0:d0:b7: 12:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1E:5D:EE:25:A7:79:79:21:8D:4D:FE:81:1C:07:89:84:39:ED:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a7987361-4873-32c4-a38e-998697c90971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d091::/48 2001:49f0:d0b0::/48 2001:49f0:d0dc::/48 2001:49f0:d11b::/48 2001:49f0:d13f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f8:d4:14:2d:ab:3b:fe:8b:46:2c:a8:d8:b6:88:34:8c:90: 68:bd:66:8d:e3:ac:b2:17:12:7a:12:38:7d:da:df:e3:04:2c: 12:10:32:9d:23:01:78:84:0a:66:c1:f3:54:0a:aa:55:40:ae: f4:de:48:09:9a:ff:00:24:69:f4:32:b8:aa:b5:06:a2:1d:7e: e2:bc:11:ec:86:03:b2:ec:1b:1d:75:28:f8:7c:a6:a9:e8:2f: 3a:1a:84:4d:77:f3:e3:df:dd:26:16:d0:de:bd:bf:4e:a3:76: db:5b:71:e0:fb:4a:c1:4f:cd:dd:c9:05:c3:2f:44:54:49:f6: e8:07:13:af:03:48:6b:a9:db:24:13:57:57:23:db:4e:36:a2: 68:cc:8a:19:e3:05:0f:13:5d:7c:b7:ce:4a:cf:d8:b9:4a:1a: 48:de:ce:5e:aa:3e:36:24:4a:c0:de:b2:e6:af:0d:6b:a8:e3: a9:d5:a0:3c:54:c3:20:46:2a:9d:83:47:e4:80:6a:03:e9:ba: 9d:08:e6:b1:e5:5c:6e:78:cd:bc:db:fe:e1:25:df:08:b5:94: 91:65:bb:3e:26:75:84:b2:71:42:a4:29:d5:51:3f:6c:10:1f: 08:d4:a6:57:aa:bd:4f:77:ce:a8:79:5d:ba:0e:82:03:a0:5c: f6:e8:08:33 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEptuzgvnrp80PNwowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk ZGViM2Y1MmUtYzUyNi00NGQwLTlkYjktZTQ4YTIxNjlhZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL4dWTrM4EM58gUwjCT6niLPZCSrVi6+RKG+ yQGXdnyS8L5eqBwXf9W60krnLZhd+GHCJ4i0CKLrfRS1CCk1HPyKZnUiov70oa77 W5QH68YdjNK6kvx2JKYyoqzUTDcMN/cuKO2X4uXlFjfmb5YIP9kCOJoqegAdKNy0 m3baChWvlTrHQ218TM8Bsz3VghkYSAx0Gcd9mlrxiIuBd44mLEQTq6E+lFe7wLnN Us1VRdiEmqAfuIXkX3pfqMpdAlOFMyLrGeX3pHnFqyz5wboDG2kflHIMt6HbyjcN i5+xJP4LwHWXRj0KnSJfTDe5J55XjkmS/q1bOa5IWfrg0LcS7wIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFHUeXe4lp3l5IY1N/oEcB4mEOe10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYTc5ODczNjEtNDg3My0z MmM0LWEzOGUtOTk4Njk3YzkwOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAIAFJ8NCR AwcAIAFJ8NCwAwcAIAFJ8NDcAwcAIAFJ8NEbAwcAIAFJ8NE/MFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACH4 1BQtqzv+i0YsqNi2iDSMkGi9Zo3jrLIXEnoSOH3a3+MELBIQMp0jAXiECmbB81QK qlVArvTeSAma/wAkafQyuKq1BqIdfuK8EeyGA7LsGx11KPh8pqnoLzoahE138+Pf 3SYW0N69v06jdttbceD7SsFPzd3JBcMvRFRJ9ugHE68DSGup2yQTV1cj2042omjM ihnjBQ8TXXy3zkrP2LlKGkjezl6qPjYkSsDesuavDWuo46nVoDxUwyBGKp2DR+SA agPpup0I5rHlXG54zbzb/uEl3wi1lJFluz4mdYSycUKkKdVRP2wQHwjUpleqvU93 zqh5XboOggOgXPboCDM= -----END CERTIFICATE-----Generated at Mon Jul 21 02:13:18 2025 by rpki-client