$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa File: 1da50353-f473-3027-9512-8f06238fa823.roa (raw, json) Hash identifier: WqIkzy7YcOUxTG69wghF2A6mNzOauq/KzZHrBWJEPvs= Subject key identifier: A5:80:DB:29:3F:AF:CA:89:3A:F9:09:18:4F:02:14:E1:E7:2F:39:4C Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584BD3306E4FDCF124C9C3BBBA40 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 174 IP address blocks: 2001:49f0:d049::/48 maxlen: 48 2001:49f0:d04a::/48 maxlen: 48 2001:49f0:d077::/48 maxlen: 48 2001:49f0:d078::/48 maxlen: 48 2001:49f0:d07a::/48 maxlen: 48 2001:49f0:d07b::/48 maxlen: 48 2001:49f0:d07d::/48 maxlen: 48 2001:49f0:d07e::/48 maxlen: 48 2001:49f0:d07f::/48 maxlen: 48 2001:49f0:d081::/48 maxlen: 48 2001:49f0:d082::/48 maxlen: 48 2001:49f0:d083::/48 maxlen: 48 2001:49f0:d084::/48 maxlen: 48 2001:49f0:d087::/48 maxlen: 48 2001:49f0:d089::/48 maxlen: 48 2001:49f0:d08a::/48 maxlen: 48 2001:49f0:d08f::/48 maxlen: 48 2001:49f0:d097::/49 maxlen: 49 2001:49f0:d0a5::/48 maxlen: 48 2001:49f0:d0b2::/48 maxlen: 48 2001:49f0:d0b3::/48 maxlen: 48 2001:49f0:d0b4::/48 maxlen: 48 2001:49f0:d0b5::/48 maxlen: 48 2001:49f0:d0b6::/48 maxlen: 48 2001:49f0:d0d5::/48 maxlen: 48 2001:49f0:d0d6::/48 maxlen: 48 2001:49f0:d0d7::/48 maxlen: 48 2001:49f0:d0dd::/48 maxlen: 48 2001:49f0:d0e1::/48 maxlen: 48 2001:49f0:d0e2::/48 maxlen: 48 2001:49f0:d0e3::/48 maxlen: 48 2001:49f0:d105::/48 maxlen: 48 2001:49f0:d106::/48 maxlen: 48 2001:49f0:d107::/48 maxlen: 48 2001:49f0:d108::/48 maxlen: 48 2001:49f0:d109::/48 maxlen: 48 2001:49f0:d10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:6e:4f:dc:f1:24:c9:c3:bb:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=08233e0d-8555-48b0-bd50-9cbedd7a451d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:39:c8:1a:f7:2e:4a:4f:dd:45:97:42:b8:a2: f6:45:71:2d:34:67:06:6d:8d:52:c4:4b:c8:a7:80: 44:c1:18:d0:a2:9b:b6:eb:ba:28:10:5f:a0:82:43: 65:76:90:97:16:7f:d9:86:b7:4d:99:9c:00:59:f4: 79:fa:c5:37:1b:54:02:d6:90:96:fd:0d:77:45:25: b8:ce:bf:23:6a:95:77:21:89:0a:ab:52:dc:09:cb: 6c:32:4a:13:e3:46:29:09:57:28:51:24:61:40:85: 92:aa:e3:12:2c:57:1c:57:57:ef:ac:c5:7a:bd:94: b0:ed:b7:cc:db:fa:34:2e:aa:5e:55:25:2d:97:ff: 5a:5c:3f:ed:ba:82:1f:1f:5b:a3:5f:a0:08:9b:b1: b0:4a:15:07:59:b7:2f:f4:b0:1d:cc:20:08:92:2a: ca:1b:49:ef:71:fb:be:46:83:d6:15:0c:83:e7:e8: f5:e5:f2:e1:8c:bc:bf:0d:3c:56:de:e8:d3:12:cb: 3f:a4:73:59:ea:9a:9e:47:c1:55:d4:44:86:2a:66: 77:b3:31:f5:5f:15:78:bf:df:dd:5a:c1:ff:19:ac: 75:0f:24:e7:84:5c:77:47:78:4e:60:1a:b5:e3:e4: 79:fd:b0:1e:75:ee:8b:c4:6f:69:6f:c2:a1:e8:3c: 3d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:80:DB:29:3F:AF:CA:89:3A:F9:09:18:4F:02:14:E1:E7:2F:39:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff 2001:49f0:d07a::/47 2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff 2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff 2001:49f0:d087::/48 2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d08f::/48 2001:49f0:d097::/49 2001:49f0:d0a5::/48 2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0dd::/48 2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff 2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:53:86:70:2c:66:0c:5e:d5:ea:58:67:65:c4:66:ac:66:24: 94:07:fd:ad:07:1d:76:54:2f:87:59:b4:5c:cd:a4:01:11:b6: 9d:18:6b:fd:0f:7b:d1:63:4b:73:1b:b4:75:4d:af:f6:2e:dc: 65:7f:2f:57:a3:e3:26:77:57:be:e3:9f:25:99:f7:0a:8a:b7: a9:6e:ea:97:9f:1d:7b:62:e3:fa:b8:70:2c:b1:36:1b:52:1b: 2d:b8:2d:ce:09:36:29:d3:64:10:6c:4d:42:f8:f4:cd:fb:60: a9:9c:4a:c1:c1:4c:63:5b:99:b7:48:f0:42:b9:a5:46:7a:8d: 26:0e:c5:09:49:8e:64:9e:cf:3a:d0:bc:59:9f:ac:84:eb:11: 77:e6:04:0d:e4:11:de:a1:68:e9:97:7d:df:9a:5e:ad:f2:2d: 77:23:21:70:17:67:b3:9c:c4:8a:f4:3d:8c:e9:c3:26:59:f0: f6:fe:fb:ac:2b:9c:f6:e4:94:3e:11:af:69:58:1b:6e:0b:ad: c1:df:65:26:22:3b:28:48:67:21:e8:df:cf:08:42:ce:2e:27: 39:84:44:9c:b0:18:9f:d0:0b:fc:e9:2b:75:5e:b9:dd:75:f1: e0:ad:63:ab:f7:18:4e:df:96:1f:5f:72:56:d2:f9:b0:c2:0c: 89:0b:32:dd -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEvTMG5P3PEkycO7ukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk MDgyMzNlMGQtODU1NS00OGIwLWJkNTAtOWNiZWRkN2E0NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmznIGvcuSk/dRZdCuKL2RXEtNGcGbY1SxEvI p4BEwRjQopu267ooEF+ggkNldpCXFn/ZhrdNmZwAWfR5+sU3G1QC1pCW/Q13RSW4 zr8japV3IYkKq1LcCctsMkoT40YpCVcoUSRhQIWSquMSLFccV1fvrMV6vZSw7bfM 2/o0LqpeVSUtl/9aXD/tuoIfH1ujX6AIm7GwShUHWbcv9LAdzCAIkirKG0nvcfu+ RoPWFQyD5+j15fLhjLy/DTxW3ujTEss/pHNZ6pqeR8FV1ESGKmZ3szH1XxV4v9/d WsH/Gax1DyTnhFx3R3hOYBq14+R5/bAede6LxG9pb8Kh6Dw9lwIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFKWA2yk/r8qJOvkJGE8CFOHnLzlMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWRhNTAzNTMtZjQ3My0z MDI3LTk1MTItOGYwNjIzOGZhODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgACMIHrMBID BwAgAUnw0EkDBwAgAUnw0EowEgMHACABSfDQdwMHACABSfDQeAMHASABSfDQejAS AwcAIAFJ8NB9AwcHIAFJ8NAAMBIDBwAgAUnw0IEDBwAgAUnw0IQDBwAgAUnw0Icw EgMHACABSfDQiQMHACABSfDQigMHACABSfDQjwMIByABSfDQlwADBwAgAUnw0KUw EgMHASABSfDQsgMHACABSfDQtjASAwcAIAFJ8NDVAwcDIAFJ8NDQAwcAIAFJ8NDd MBIDBwAgAUnw0OEDBwIgAUnw0OAwEgMHACABSfDRBQMHACABSfDRCjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQB3U4ZwLGYMXtXqWGdlxGasZiSUB/2tBx12VC+HWbRczaQBEbadGGv9D3vRY0tz G7R1Ta/2Ltxlfy9Xo+Mmd1e+458lmfcKirepbuqXnx17YuP6uHAssTYbUhstuC3O CTYp02QQbE1C+PTN+2CpnErBwUxjW5m3SPBCuaVGeo0mDsUJSY5kns860LxZn6yE 6xF35gQN5BHeoWjpl33fml6t8i13IyFwF2eznMSK9D2M6cMmWfD2/vusK5z25JQ+ Ea9pWBtuC63B32UmIjsoSGch6N/PCELOLic5hEScsBif0Av86St1XrnddfHgrWOr 9xhO35YfX3JW0vmwwgyJCzLd -----END CERTIFICATE-----Generated at Mon Nov 17 04:25:13 2025 by rpki-client