$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa File: e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa (raw, json) Hash identifier: V5avNyn1r/i5aP2SDQfAzpIqZlVsk1IYZ0MSEPuxHHc= Subject key identifier: E7:3E:A6:8A:68:BE:A2:C3:4B:5B:7F:5A:0D:9C:87:D2:A6:63:E5:85 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584D9325515347020E3B0E0DE080 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 1239 IP address blocks: 2001:49f0:d049::/48 maxlen: 48 2001:49f0:d04a::/48 maxlen: 48 2001:49f0:d077::/48 maxlen: 48 2001:49f0:d078::/48 maxlen: 48 2001:49f0:d07a::/48 maxlen: 48 2001:49f0:d07b::/48 maxlen: 48 2001:49f0:d07d::/48 maxlen: 48 2001:49f0:d07e::/48 maxlen: 48 2001:49f0:d07f::/48 maxlen: 48 2001:49f0:d081::/48 maxlen: 48 2001:49f0:d082::/48 maxlen: 48 2001:49f0:d083::/48 maxlen: 48 2001:49f0:d084::/48 maxlen: 48 2001:49f0:d087::/48 maxlen: 48 2001:49f0:d089::/48 maxlen: 48 2001:49f0:d08a::/48 maxlen: 48 2001:49f0:d08f::/48 maxlen: 48 2001:49f0:d097::/49 maxlen: 49 2001:49f0:d0a5::/48 maxlen: 48 2001:49f0:d0b2::/48 maxlen: 48 2001:49f0:d0b3::/48 maxlen: 48 2001:49f0:d0b4::/48 maxlen: 48 2001:49f0:d0b5::/48 maxlen: 48 2001:49f0:d0b6::/48 maxlen: 48 2001:49f0:d0d5::/48 maxlen: 48 2001:49f0:d0d6::/48 maxlen: 48 2001:49f0:d0d7::/48 maxlen: 48 2001:49f0:d0dd::/48 maxlen: 48 2001:49f0:d0e1::/48 maxlen: 48 2001:49f0:d0e2::/48 maxlen: 48 2001:49f0:d0e3::/48 maxlen: 48 2001:49f0:d105::/48 maxlen: 48 2001:49f0:d106::/48 maxlen: 48 2001:49f0:d107::/48 maxlen: 48 2001:49f0:d108::/48 maxlen: 48 2001:49f0:d109::/48 maxlen: 48 2001:49f0:d10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:51:53:47:02:0e:3b:0e:0d:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=233171fe-21a2-4480-bd7f-bfe69fb7a42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:51:50:12:4f:7d:d7:49:9c:36:4d:ec:1b:11: 4f:63:7a:54:86:fd:07:22:c8:45:99:42:4c:2b:77: 13:08:7d:35:15:38:f2:70:29:84:98:38:56:9f:86: a8:9b:21:a9:9e:f2:28:25:93:7a:39:08:7f:4f:57: 2b:f3:7f:6e:9d:95:5e:7a:96:2c:28:f7:41:79:12: b7:41:50:d1:be:12:c1:c1:6e:c2:c6:e0:b5:fa:79: d5:1a:8d:f2:ae:13:71:07:55:7e:78:41:ea:aa:56: fa:b4:86:a6:44:03:bd:de:7b:a3:40:7a:e4:32:68: 7b:2a:a0:d3:cc:cf:84:ce:d8:6c:c7:0d:3e:7d:c7: 79:87:bc:98:fd:2c:42:fd:e8:c0:d5:ee:9f:01:99: 4b:a7:bf:a2:0f:f5:ca:29:f3:88:94:28:34:d8:97: 9e:b4:1c:6d:4f:84:f5:b4:33:18:d8:cd:e3:37:b9: a4:01:bb:d6:13:2c:71:95:65:23:86:6e:b4:2c:09: 36:60:9d:98:ee:f4:b6:3e:b6:b7:6c:c5:7d:f5:ec: 42:e8:63:13:5e:6b:d3:2d:0d:dc:23:c9:45:33:28: c3:51:6f:6e:b8:77:1e:da:ff:ef:f3:5d:b5:6e:59: 49:8a:cf:78:5d:c5:ac:dd:94:d9:d7:e9:6e:2f:7a: d0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3E:A6:8A:68:BE:A2:C3:4B:5B:7F:5A:0D:9C:87:D2:A6:63:E5:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff 2001:49f0:d07a::/47 2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff 2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff 2001:49f0:d087::/48 2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d08f::/48 2001:49f0:d097::/49 2001:49f0:d0a5::/48 2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0dd::/48 2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff 2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:98:93:eb:2b:f4:d2:f9:e3:75:35:20:0f:01:02:b9:d5:82: 2f:f8:27:6e:5a:c0:45:51:ac:be:9a:ad:0b:58:cd:3c:cb:fc: 01:af:30:13:19:40:11:94:36:3c:bf:5d:65:35:d4:d1:c6:d0: f3:19:63:c6:f4:aa:28:5f:27:4a:d2:bc:74:cf:32:dd:5f:0f: 71:a8:71:c6:13:d4:54:40:01:bc:36:5f:5d:9e:49:06:07:51: 5c:74:b5:d0:97:f8:d4:fb:95:0d:d3:14:a0:5b:d1:91:4b:d5: 66:a3:32:a2:2a:1e:a8:a6:c1:7e:52:21:88:b8:c1:4c:35:66: 1a:e2:6e:ea:0b:39:22:08:22:71:f2:08:6c:45:33:b6:78:ee: 5f:cd:8e:fc:73:0e:9a:ba:29:4d:0e:bf:53:d3:bd:04:7a:d1: 8a:05:cc:0d:bc:03:46:a0:bd:fd:d4:78:96:c3:9d:a3:79:5c: 4a:98:4d:fa:bc:47:35:58:66:12:70:98:c9:67:f0:0a:1d:b7: 80:a1:3e:69:89:97:ea:1a:98:d7:b8:06:9b:16:e9:82:ed:ef: 55:d5:4c:8d:3a:f1:13:d0:81:22:32:19:f6:25:15:ee:2c:3a: 23:47:28:49:00:98:a5:e2:38:9f:d3:0d:91:1e:6a:65:10:2e: c4:47:c2:9f -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWE2TJVFTRwIOOw4N4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk MjMzMTcxZmUtMjFhMi00NDgwLWJkN2YtYmZlNjlmYjdhNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFFQEk9910mcNk3sGxFPY3pUhv0HIshFmUJM K3cTCH01FTjycCmEmDhWn4aomyGpnvIoJZN6OQh/T1cr839unZVeepYsKPdBeRK3 QVDRvhLBwW7CxuC1+nnVGo3yrhNxB1V+eEHqqlb6tIamRAO93nujQHrkMmh7KqDT zM+Ezthsxw0+fcd5h7yY/SxC/ejA1e6fAZlLp7+iD/XKKfOIlCg02JeetBxtT4T1 tDMY2M3jN7mkAbvWEyxxlWUjhm60LAk2YJ2Y7vS2Pra3bMV99exC6GMTXmvTLQ3c I8lFMyjDUW9uuHce2v/v8121bllJis94XcWs3ZTZ1+luL3rQjwIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFOc+popovqLDS1t/Wg2ch9KmY+WFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZTQ5ZTUyYTktN2IwYy0z MWU2LThhNmItYTA0MmExMTI5ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgACMIHrMBID BwAgAUnw0EkDBwAgAUnw0EowEgMHACABSfDQdwMHACABSfDQeAMHASABSfDQejAS AwcAIAFJ8NB9AwcHIAFJ8NAAMBIDBwAgAUnw0IEDBwAgAUnw0IQDBwAgAUnw0Icw EgMHACABSfDQiQMHACABSfDQigMHACABSfDQjwMIByABSfDQlwADBwAgAUnw0KUw EgMHASABSfDQsgMHACABSfDQtjASAwcAIAFJ8NDVAwcDIAFJ8NDQAwcAIAFJ8NDd MBIDBwAgAUnw0OEDBwIgAUnw0OAwEgMHACABSfDRBQMHACABSfDRCjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQB2mJPrK/TS+eN1NSAPAQK51YIv+CduWsBFUay+mq0LWM08y/wBrzATGUARlDY8 v11lNdTRxtDzGWPG9KooXydK0rx0zzLdXw9xqHHGE9RUQAG8Nl9dnkkGB1FcdLXQ l/jU+5UN0xSgW9GRS9VmozKiKh6opsF+UiGIuMFMNWYa4m7qCzkiCCJx8ghsRTO2 eO5fzY78cw6auilNDr9T070EetGKBcwNvANGoL391HiWw52jeVxKmE36vEc1WGYS cJjJZ/AKHbeAoT5piZfqGpjXuAabFumC7e9V1UyNOvET0IEiMhn2JRXuLDojRyhJ AJil4jif0w2RHmplEC7ER8Kf -----END CERTIFICATE-----Generated at Sat May 9 07:11:01 2026 by rpki-client