$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa File: 1da50353-f473-3027-9512-8f06238fa823.roa (raw, json) Hash identifier: mZl2nQXRSMsE2fJwca061tl1MLAlVi+5YoCn0BVnYbI= Subject key identifier: 52:B1:58:72:1D:2B:6B:1A:0C:56:54:E3:17:6D:41:81:6D:D7:59:9E Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A119AB6DACC653649470FCA00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 174 IP address blocks: 2001:49f0:d049::/48 maxlen: 48 2001:49f0:d04a::/48 maxlen: 48 2001:49f0:d077::/48 maxlen: 48 2001:49f0:d078::/48 maxlen: 48 2001:49f0:d07a::/48 maxlen: 48 2001:49f0:d07b::/48 maxlen: 48 2001:49f0:d07d::/48 maxlen: 48 2001:49f0:d07e::/48 maxlen: 48 2001:49f0:d07f::/48 maxlen: 48 2001:49f0:d081::/48 maxlen: 48 2001:49f0:d082::/48 maxlen: 48 2001:49f0:d083::/48 maxlen: 48 2001:49f0:d084::/48 maxlen: 48 2001:49f0:d087::/48 maxlen: 48 2001:49f0:d089::/48 maxlen: 48 2001:49f0:d08a::/48 maxlen: 48 2001:49f0:d08f::/48 maxlen: 48 2001:49f0:d097::/49 maxlen: 49 2001:49f0:d0a5::/48 maxlen: 48 2001:49f0:d0b2::/48 maxlen: 48 2001:49f0:d0b3::/48 maxlen: 48 2001:49f0:d0b4::/48 maxlen: 48 2001:49f0:d0b5::/48 maxlen: 48 2001:49f0:d0b6::/48 maxlen: 48 2001:49f0:d0d5::/48 maxlen: 48 2001:49f0:d0d6::/48 maxlen: 48 2001:49f0:d0d7::/48 maxlen: 48 2001:49f0:d0dd::/48 maxlen: 48 2001:49f0:d0e1::/48 maxlen: 48 2001:49f0:d0e2::/48 maxlen: 48 2001:49f0:d0e3::/48 maxlen: 48 2001:49f0:d105::/48 maxlen: 48 2001:49f0:d106::/48 maxlen: 48 2001:49f0:d107::/48 maxlen: 48 2001:49f0:d108::/48 maxlen: 48 2001:49f0:d109::/48 maxlen: 48 2001:49f0:d10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:b6:da:cc:65:36:49:47:0f:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=88c888d3-372d-4a94-8249-ba6bcf92d9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fa:f0:80:f3:64:db:d7:25:a5:35:cc:1f:cf: 12:6f:96:b6:eb:22:50:9c:ec:5b:36:38:19:ce:7c: 14:1c:59:65:32:26:ed:10:89:67:c2:d4:22:71:c7: ce:fa:f4:77:07:68:cd:90:b5:15:af:bc:31:af:cb: a2:e0:d0:5a:1e:50:b2:7e:56:7d:8b:05:93:2f:a9: 0a:17:ae:f4:e6:38:3f:7c:99:cf:7c:08:31:91:43: dd:37:04:a4:de:63:4e:d6:26:1a:fd:bc:86:c0:b3: 87:16:aa:8b:14:ef:67:3c:51:65:e1:16:77:80:89: 82:5c:ae:08:fb:54:70:f3:8c:27:79:82:cb:3d:52: 0c:f8:29:20:7a:ca:40:fb:99:54:6e:06:9b:6d:f8: 3d:82:6d:34:d1:15:62:84:5b:d5:3c:cf:08:f4:91: ab:6a:84:aa:0f:ca:13:ff:0b:c1:30:1d:d8:dc:eb: 0c:0f:0f:f9:92:23:89:e9:76:9c:fd:fc:25:02:46: 7e:6e:5a:dd:db:4c:63:4f:93:50:a3:1f:5f:c6:d1: 62:b7:cf:15:a1:bb:97:93:ae:2a:1e:69:14:c1:80: cc:53:95:28:b4:e7:db:b8:c8:8f:34:7b:b7:16:75: 23:d4:c0:94:29:54:f4:56:a1:2a:ec:f8:be:dd:29: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B1:58:72:1D:2B:6B:1A:0C:56:54:E3:17:6D:41:81:6D:D7:59:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff 2001:49f0:d07a::/47 2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff 2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff 2001:49f0:d087::/48 2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d08f::/48 2001:49f0:d097::/49 2001:49f0:d0a5::/48 2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0dd::/48 2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff 2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:6d:a0:a4:61:d6:c9:ed:5b:35:0e:d0:e6:9a:6d:b7:cc:e9: 34:e0:10:d3:3b:49:fd:fe:4e:04:4d:dd:ce:2f:f7:15:28:bb: 74:83:a9:ea:1b:c7:0c:fd:13:36:c4:71:bf:7c:1a:ad:0e:46: 96:f5:b9:6d:bb:94:56:18:d7:7a:49:45:59:2c:15:ce:21:fe: 5b:0c:9a:33:d3:30:9c:b2:7d:0e:53:da:6a:ba:bc:48:ef:99: 41:9f:5f:78:d8:4d:ff:a4:08:a2:fb:12:75:92:7c:0f:f1:3b: 58:35:be:63:5d:39:17:19:bf:10:2b:d5:15:58:8a:13:51:38: 94:af:06:7d:a5:a3:24:b2:74:e6:f5:66:12:cf:ee:b8:d6:66: ef:0d:2d:62:fb:7c:b3:c1:2c:ff:bd:b9:22:33:a0:e4:2c:c9: ee:fc:a1:bf:a1:2b:20:7b:f1:00:6d:49:4a:04:b5:80:07:e9: 6e:2f:98:9d:b3:25:e9:4e:7f:35:44:7d:60:59:17:5c:90:cb: 3e:ab:80:75:31:4b:af:5b:f7:43:c1:ce:96:01:e8:5d:67:5c: 29:78:06:c5:b3:77:60:0d:71:9a:86:ef:57:41:ab:50:58:fb: b1:4a:59:0a:ed:ca:ac:bf:76:8c:8a:2b:fb:7a:05:b9:b9:ab: 43:ca:d7:d7 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEoRmrbazGU2SUcPygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk ODhjODg4ZDMtMzcyZC00YTk0LTgyNDktYmE2YmNmOTJkOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/rwgPNk29clpTXMH88Sb5a26yJQnOxbNjgZ znwUHFllMibtEIlnwtQiccfO+vR3B2jNkLUVr7wxr8ui4NBaHlCyflZ9iwWTL6kK F6705jg/fJnPfAgxkUPdNwSk3mNO1iYa/byGwLOHFqqLFO9nPFFl4RZ3gImCXK4I +1Rw84wneYLLPVIM+CkgespA+5lUbgabbfg9gm000RVihFvVPM8I9JGraoSqD8oT /wvBMB3Y3OsMDw/5kiOJ6Xac/fwlAkZ+blrd20xjT5NQox9fxtFit88VobuXk64q HmkUwYDMU5UotOfbuMiPNHu3FnUj1MCUKVT0VqEq7Pi+3SmJ9QIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFFKxWHIdK2saDFZU4xdtQYFt11meMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWRhNTAzNTMtZjQ3My0z MDI3LTk1MTItOGYwNjIzOGZhODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgACMIHrMBID BwAgAUnw0EkDBwAgAUnw0EowEgMHACABSfDQdwMHACABSfDQeAMHASABSfDQejAS AwcAIAFJ8NB9AwcHIAFJ8NAAMBIDBwAgAUnw0IEDBwAgAUnw0IQDBwAgAUnw0Icw EgMHACABSfDQiQMHACABSfDQigMHACABSfDQjwMIByABSfDQlwADBwAgAUnw0KUw EgMHASABSfDQsgMHACABSfDQtjASAwcAIAFJ8NDVAwcDIAFJ8NDQAwcAIAFJ8NDd MBIDBwAgAUnw0OEDBwIgAUnw0OAwEgMHACABSfDRBQMHACABSfDRCjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAcbaCkYdbJ7Vs1DtDmmm23zOk04BDTO0n9/k4ETd3OL/cVKLt0g6nqG8cM/RM2 xHG/fBqtDkaW9bltu5RWGNd6SUVZLBXOIf5bDJoz0zCcsn0OU9pqurxI75lBn194 2E3/pAii+xJ1knwP8TtYNb5jXTkXGb8QK9UVWIoTUTiUrwZ9paMksnTm9WYSz+64 1mbvDS1i+3yzwSz/vbkiM6DkLMnu/KG/oSsge/EAbUlKBLWAB+luL5idsyXpTn81 RH1gWRdckMs+q4B1MUuvW/dDwc6WAehdZ1wpeAbFs3dgDXGahu9XQatQWPuxSlkK 7cqsv3aMiiv7egW5uatDytfX -----END CERTIFICATE-----Generated at Fri Jun 6 11:35:27 2025 by rpki-client