$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa File: e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa (raw, json) Hash identifier: Xcu3K1pRxcaCcxaC8UrpiniQD1nRndjXjDKU1r6KXrE= Subject key identifier: 61:9B:C2:5F:76:72:A9:5D:38:A8:F8:A4:7F:F2:94:F1:24:24:E1:4F Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858493243E6078795EBFB5D55DA80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 1239 IP address blocks: 2001:49f0:d049::/48 maxlen: 48 2001:49f0:d04a::/48 maxlen: 48 2001:49f0:d077::/48 maxlen: 48 2001:49f0:d078::/48 maxlen: 48 2001:49f0:d07a::/48 maxlen: 48 2001:49f0:d07b::/48 maxlen: 48 2001:49f0:d07d::/48 maxlen: 48 2001:49f0:d07e::/48 maxlen: 48 2001:49f0:d07f::/48 maxlen: 48 2001:49f0:d081::/48 maxlen: 48 2001:49f0:d082::/48 maxlen: 48 2001:49f0:d083::/48 maxlen: 48 2001:49f0:d084::/48 maxlen: 48 2001:49f0:d087::/48 maxlen: 48 2001:49f0:d089::/48 maxlen: 48 2001:49f0:d08a::/48 maxlen: 48 2001:49f0:d08f::/48 maxlen: 48 2001:49f0:d097::/49 maxlen: 49 2001:49f0:d0a5::/48 maxlen: 48 2001:49f0:d0b2::/48 maxlen: 48 2001:49f0:d0b3::/48 maxlen: 48 2001:49f0:d0b4::/48 maxlen: 48 2001:49f0:d0b5::/48 maxlen: 48 2001:49f0:d0b6::/48 maxlen: 48 2001:49f0:d0d5::/48 maxlen: 48 2001:49f0:d0d6::/48 maxlen: 48 2001:49f0:d0d7::/48 maxlen: 48 2001:49f0:d0dd::/48 maxlen: 48 2001:49f0:d0e1::/48 maxlen: 48 2001:49f0:d0e2::/48 maxlen: 48 2001:49f0:d0e3::/48 maxlen: 48 2001:49f0:d105::/48 maxlen: 48 2001:49f0:d106::/48 maxlen: 48 2001:49f0:d107::/48 maxlen: 48 2001:49f0:d108::/48 maxlen: 48 2001:49f0:d109::/48 maxlen: 48 2001:49f0:d10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e6:07:87:95:eb:fb:5d:55:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=e01cdf72-edf9-408b-af8b-594823018497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:2c:33:ab:c2:40:a3:05:e3:1d:c7:4e:89: 7b:15:a6:48:21:03:16:7c:ef:d5:81:01:2c:52:dd: ee:94:9d:a4:55:a5:aa:2a:9a:c9:3a:08:1e:9f:c5: 56:8e:27:d1:45:30:86:a4:be:1e:c8:bd:ee:8f:38: 83:5a:d2:f8:e1:aa:c6:2d:e2:db:ba:b1:6a:bc:4e: 0a:2b:d7:77:9f:a3:c8:98:a4:74:6d:a6:1a:1a:b2: 57:ea:89:12:1a:ac:b3:be:3d:49:54:bd:ef:1f:d7: 75:cf:42:dd:83:de:2c:03:e4:86:4b:3a:4c:de:0f: de:69:81:a1:56:7b:5e:c0:ff:51:90:ea:60:d1:12: 74:68:f9:87:0f:69:d4:66:61:18:62:da:87:b8:79: 09:94:73:d5:f2:a6:94:16:1c:13:60:56:94:84:82: 58:9b:d2:97:00:4e:d8:fa:84:10:54:94:74:84:db: a8:8f:52:a2:cf:20:a2:f3:6e:ef:ca:61:c9:96:ef: 80:ab:9f:4c:42:1c:a0:da:21:58:50:f6:23:f2:0f: f3:75:f4:6e:10:7a:96:a4:13:47:d8:84:65:62:34: 99:aa:39:ed:92:19:a4:01:a0:92:fd:51:80:94:cd: 63:3a:71:98:27:cf:4b:e2:e9:6f:b2:9a:2c:cb:ac: c7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9B:C2:5F:76:72:A9:5D:38:A8:F8:A4:7F:F2:94:F1:24:24:E1:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff 2001:49f0:d07a::/47 2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff 2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff 2001:49f0:d087::/48 2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d08f::/48 2001:49f0:d097::/49 2001:49f0:d0a5::/48 2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0dd::/48 2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff 2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:4e:78:7e:85:72:c6:94:e3:de:9b:e2:01:48:78:06:38:17: 5e:f1:13:c8:ee:d6:f7:8e:8c:59:b7:94:10:1a:ec:6f:3d:75: 8c:f6:d9:99:cf:b8:8f:f5:85:0a:bc:cc:bc:3e:b9:86:c7:21: eb:63:b8:ea:93:3f:7a:3b:d2:5e:e3:2f:e6:d7:98:4d:33:e1: f6:48:fd:e4:92:ce:34:d8:8f:1f:d3:c9:e7:0e:36:f4:1d:6c: ec:ec:34:41:18:34:74:38:f0:5e:e0:91:09:12:60:d7:90:13: f6:75:fa:5b:91:dd:68:19:a4:4b:5c:20:22:61:4a:89:7c:8a: db:53:ef:bd:2a:a4:8a:cc:09:60:6e:da:5e:3b:f1:b0:c8:2d: 08:11:db:b2:fa:fe:72:44:ec:2e:9a:8d:a8:c9:bd:de:1b:f9: d8:29:35:a5:21:d6:c2:da:2f:ea:ea:2b:f3:73:75:e3:e7:15: 79:6f:8c:c0:52:00:18:35:d0:51:c9:4b:27:53:69:20:73:7b: 2a:11:f9:cd:b2:c4:a1:b1:0d:b0:cf:d6:8f:7e:46:d4:9b:de: a8:6e:9a:b3:7c:e0:a3:6c:b9:94:c1:aa:1d:58:63:f2:41:60: bf:53:0c:a7:d7:7b:ac:2f:26:ef:59:1a:be:d9:91:96:33:5f: e8:0a:c7:5b -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEkyQ+YHh5Xr+11V2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk ZTAxY2RmNzItZWRmOS00MDhiLWFmOGItNTk0ODIzMDE4NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ0sM6vCQKMF4x3HTol7FaZIIQMWfO/VgQEs Ut3ulJ2kVaWqKprJOggen8VWjifRRTCGpL4eyL3ujziDWtL44arGLeLburFqvE4K K9d3n6PImKR0baYaGrJX6okSGqyzvj1JVL3vH9d1z0Ldg94sA+SGSzpM3g/eaYGh VntewP9RkOpg0RJ0aPmHD2nUZmEYYtqHuHkJlHPV8qaUFhwTYFaUhIJYm9KXAE7Y +oQQVJR0hNuoj1KizyCi827vymHJlu+Aq59MQhyg2iFYUPYj8g/zdfRuEHqWpBNH 2IRlYjSZqjntkhmkAaCS/VGAlM1jOnGYJ89L4ulvsposy6zHjQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFGGbwl92cqldOKj4pH/ylPEkJOFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZTQ5ZTUyYTktN2IwYy0z MWU2LThhNmItYTA0MmExMTI5ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgACMIHrMBID BwAgAUnw0EkDBwAgAUnw0EowEgMHACABSfDQdwMHACABSfDQeAMHASABSfDQejAS AwcAIAFJ8NB9AwcHIAFJ8NAAMBIDBwAgAUnw0IEDBwAgAUnw0IQDBwAgAUnw0Icw EgMHACABSfDQiQMHACABSfDQigMHACABSfDQjwMIByABSfDQlwADBwAgAUnw0KUw EgMHASABSfDQsgMHACABSfDQtjASAwcAIAFJ8NDVAwcDIAFJ8NDQAwcAIAFJ8NDd MBIDBwAgAUnw0OEDBwIgAUnw0OAwEgMHACABSfDRBQMHACABSfDRCjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQDbTnh+hXLGlOPem+IBSHgGOBde8RPI7tb3joxZt5QQGuxvPXWM9tmZz7iP9YUK vMy8PrmGxyHrY7jqkz96O9Je4y/m15hNM+H2SP3kks402I8f08nnDjb0HWzs7DRB GDR0OPBe4JEJEmDXkBP2dfpbkd1oGaRLXCAiYUqJfIrbU++9KqSKzAlgbtpeO/Gw yC0IEduy+v5yROwumo2oyb3eG/nYKTWlIdbC2i/q6ivzc3Xj5xV5b4zAUgAYNdBR yUsnU2kgc3sqEfnNssShsQ2wz9aPfkbUm96obpqzfOCjbLmUwaodWGPyQWC/Uwyn 13usLybvWRq+2ZGWM1/oCsdb -----END CERTIFICATE-----Generated at Sat Apr 5 06:29:08 2025 by rpki-client