$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1d51f65f-4003-3b7d-80b2-50d69f9c5969.roa File: 1d51f65f-4003-3b7d-80b2-50d69f9c5969.roa (raw, json) Hash identifier: 9Ktepw0rF/8jMWFJjNz6649mez9qt02FuagiDwfgNas= Subject key identifier: D8:E9:06:57:17:8D:BD:9B:F5:62:2D:F9:78:9A:90:A5:B4:88:22:4C Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849849EFA14EE469B22FB9FC8C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1d51f65f-4003-3b7d-80b2-50d69f9c5969.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 1239 IP address blocks: 2001:49f0:d13d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:fa:14:ee:46:9b:22:fb:9f:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=fc42c55e-ac1f-4581-a4d6-e5a680ed9c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:0f:10:55:e8:a4:f9:35:e7:9d:d8:bd:82: 7f:7c:e7:57:2d:dc:81:48:21:3b:dd:9b:dc:4c:7d: 57:b0:23:42:f2:82:43:f0:37:32:69:b6:ce:a9:4c: 75:24:a4:47:84:1c:b4:b7:bd:05:36:57:db:16:c9: 13:1e:7d:32:73:ef:2f:f8:1d:c5:0a:b6:dc:56:a3: 3a:5a:bf:d4:8c:b5:8c:76:42:f3:f3:af:31:9e:a5: ce:d1:de:54:14:57:44:50:e9:f8:6a:2c:88:ba:ce: d9:8d:33:7c:bc:19:45:69:17:b9:80:13:27:66:9d: f6:de:64:71:0d:cb:1b:cf:65:94:09:67:92:1f:f4: c7:d8:ec:2e:4a:31:aa:ed:c5:68:15:cf:7e:d9:8b: b0:73:42:ce:4a:92:c3:fa:0f:aa:e9:34:af:31:48: 15:e4:5e:ad:df:27:05:6f:32:fc:bd:47:04:c4:f4: 76:4a:9c:88:77:db:10:24:8f:44:63:b2:53:43:58: 57:0f:8d:9f:85:34:8b:88:d2:76:6f:ee:d9:d2:52: 7d:b6:63:6f:fc:c3:6e:3f:64:ec:89:49:cb:f4:c7: 75:da:c0:a0:53:39:f1:5d:ed:c7:53:e2:bb:d5:b1: 30:82:4f:ed:8f:09:99:0b:30:7b:51:01:59:23:e1: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E9:06:57:17:8D:BD:9B:F5:62:2D:F9:78:9A:90:A5:B4:88:22:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1d51f65f-4003-3b7d-80b2-50d69f9c5969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d13d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:fb:59:d2:3c:33:b9:d4:74:7b:47:79:ff:ea:0f:59:5a:43: 04:90:85:eb:8e:45:4f:16:87:89:08:8b:a5:a1:00:67:76:3f: 37:52:f6:97:83:55:2b:49:47:59:af:5e:70:b9:cc:76:d1:a3: ef:01:17:74:c9:78:6d:e5:ca:8a:3e:23:b7:a1:4b:ce:dd:cb: 15:c0:2c:bf:af:1d:2b:af:87:ae:5b:4d:78:f2:ac:13:94:f6: aa:23:9f:59:29:36:21:74:80:b4:33:f5:d0:d9:79:2c:5f:0c: bd:d5:4e:e6:c7:b1:a7:20:79:81:5e:2c:51:c1:83:4e:89:be: cf:e6:91:dd:3c:30:87:92:b1:cd:86:c4:fd:d9:fd:8d:0a:fd: 44:56:8f:87:f4:7a:db:43:17:02:33:0d:d0:fc:84:45:c1:45: b9:ea:f3:4f:8c:6b:8b:b9:7c:8e:7b:1b:69:f8:2a:f6:34:cd: df:d2:ae:b2:fc:4e:76:ce:36:df:82:7f:a2:31:bd:17:9e:31: 90:73:2b:6e:23:ea:73:ca:24:e1:02:ae:78:56:f0:54:ca:c8: 31:e9:b9:8a:69:7d:9e:64:7b:aa:8c:78:d0:ae:3a:fc:be:4d: 83:70:99:00:c0:bb:5d:2b:11:b0:0b:6d:a0:a3:85:bc:88:09: ef:4d:a0:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmEnvoU7kabIvufyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk ZmM0MmM1NWUtYWMxZi00NTgxLWE0ZDYtZTVhNjgwZWQ5YzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulEPEFXopPk1553YvYJ/fOdXLdyBSCE73Zvc TH1XsCNC8oJD8DcyabbOqUx1JKRHhBy0t70FNlfbFskTHn0yc+8v+B3FCrbcVqM6 Wr/UjLWMdkLz868xnqXO0d5UFFdEUOn4aiyIus7ZjTN8vBlFaRe5gBMnZp323mRx Dcsbz2WUCWeSH/TH2OwuSjGq7cVoFc9+2Yuwc0LOSpLD+g+q6TSvMUgV5F6t3ycF bzL8vUcExPR2SpyId9sQJI9EY7JTQ1hXD42fhTSLiNJ2b+7Z0lJ9tmNv/MNuP2Ts iUnL9Md12sCgUznxXe3HU+K71bEwgk/tjwmZCzB7UQFZI+Ec6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNjpBlcXjb2b9WIt+XiakKW0iCJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWQ1MWY2NWYtNDAwMy0z YjdkLTgwYjItNTBkNjlmOWM1OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFJ8NE9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAN37WdI8M7nUdHtHef/qD1laQwSQheuORU8Wh4kIi6WhAGd2PzdS 9peDVStJR1mvXnC5zHbRo+8BF3TJeG3lyoo+I7ehS87dyxXALL+vHSuvh65bTXjy rBOU9qojn1kpNiF0gLQz9dDZeSxfDL3VTubHsacgeYFeLFHBg06Jvs/mkd08MIeS sc2GxP3Z/Y0K/URWj4f0ettDFwIzDdD8hEXBRbnq80+Ma4u5fI57G2n4KvY0zd/S rrL8TnbONt+Cf6IxvReeMZBzK24j6nPKJOECrnhW8FTKyDHpuYppfZ5ke6qMeNCu Ovy+TYNwmQDAu10rEbALbaCjhbyICe9NoLQ= -----END CERTIFICATE-----Generated at Sun Jun 29 16:17:30 2025 by rpki-client