$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cd6a0dce-34d3-3443-8f65-55c2d98a3d96.roa File: cd6a0dce-34d3-3443-8f65-55c2d98a3d96.roa (raw, json) Hash identifier: Bjvd5NiRKagPz19HENFffzIZ848vXbiTEV3G4Uizo6s= Subject key identifier: 2D:2F:EA:A6:E4:F5:11:64:99:0A:46:A4:F6:E6:13:48:21:FF:73:F0 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A42758471B96B365BF867A5C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cd6a0dce-34d3-3443-8f65-55c2d98a3d96.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 30058 IP address blocks: 2001:49f0:d13a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:84:71:b9:6b:36:5b:f8:67:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=f75fc0d9-781d-4b28-80df-c2bb5ca00b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:50:3a:72:20:7f:22:da:67:cf:5e:79:89:a6: 1a:9c:95:a8:fe:ad:0a:ab:83:6f:94:3f:f6:e4:a8: 70:24:c6:7b:11:a2:23:6b:07:73:13:e2:4d:21:36: e9:97:29:1f:f1:69:e0:52:2e:bf:f3:33:56:49:c4: 96:47:57:6a:d0:0c:d1:b8:05:56:0d:94:0c:c9:3f: a8:28:8a:f3:f8:b1:dd:75:65:b7:99:de:76:1a:56: d4:61:17:73:61:ec:f6:9d:37:98:9b:5b:3c:45:52: c3:c0:5d:33:45:a0:49:83:1b:2e:e3:3d:fc:89:61: 48:d9:9d:d0:47:7c:a5:16:68:e7:33:c8:60:4c:4d: 65:36:1b:04:50:28:71:51:00:11:b9:55:2d:55:90: 6c:7b:fc:88:94:81:87:b6:e8:25:f8:77:ab:83:82: 4a:ee:a9:3c:7f:06:2f:ee:34:cb:ea:f0:ee:fe:c7: 2f:47:38:14:b7:95:74:c0:73:cd:75:a3:d7:b1:98: 4f:70:2e:ee:35:ae:86:3c:b0:46:c3:85:70:2b:a5: f5:f8:5e:0c:43:4f:7b:29:7e:ff:2a:eb:e5:b9:20: fb:c8:37:6a:1d:63:23:80:39:13:9a:bf:b8:95:5c: fc:c6:6e:6c:b3:3c:71:92:9f:b9:cc:ec:52:68:ed: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2F:EA:A6:E4:F5:11:64:99:0A:46:A4:F6:E6:13:48:21:FF:73:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cd6a0dce-34d3-3443-8f65-55c2d98a3d96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d13a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:1a:fc:0d:ff:f4:81:a9:39:76:d6:57:ed:7c:93:61:e6:95: 09:61:bb:98:14:63:41:c8:a5:b2:63:9f:0f:b3:d5:e0:b4:02: 62:e1:fe:ef:14:b8:23:e1:78:03:22:b8:0c:02:14:e6:56:ca: b3:41:58:04:69:ca:af:41:2d:81:a5:17:ca:4d:81:04:5d:87: d1:e6:b2:a8:2c:85:f9:71:e9:33:fd:2f:bc:51:19:0a:8a:5c: 00:6d:58:8e:b3:6d:a8:56:61:64:a0:c7:00:17:81:c9:e9:fc: 68:25:93:00:82:0b:6b:0b:32:44:00:6d:ec:ad:9d:30:8e:ff: b5:58:bc:b5:41:40:0f:d2:0e:1b:b2:01:9e:80:e2:15:8c:7f: 90:6e:f3:30:2c:84:60:2a:d6:04:e1:bd:83:17:d2:a8:1b:1c: 2c:68:a8:79:44:57:e4:4d:15:82:28:ea:27:18:26:ed:12:e1: 98:83:38:83:0e:92:a1:3a:f9:12:78:8c:ef:a6:47:c5:37:ba: 89:51:ed:f0:77:7c:6b:e3:f8:3e:07:57:ac:5c:47:13:e4:30: 6f:db:f6:18:a5:0e:ec:b6:20:77:0a:e4:3e:00:cd:cb:f5:b7: d1:4b:d0:5c:0f:14:fa:25:d1:d1:87:1d:f4:1a:c7:fd:9a:32: 98:87:23:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpCdYRxuWs2W/hnpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk Zjc1ZmMwZDktNzgxZC00YjI4LTgwZGYtYzJiYjVjYTAwYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1A6ciB/Itpnz155iaYanJWo/q0Kq4NvlD/2 5KhwJMZ7EaIjawdzE+JNITbplykf8WngUi6/8zNWScSWR1dq0AzRuAVWDZQMyT+o KIrz+LHddWW3md52GlbUYRdzYez2nTeYm1s8RVLDwF0zRaBJgxsu4z38iWFI2Z3Q R3ylFmjnM8hgTE1lNhsEUChxUQARuVUtVZBse/yIlIGHtugl+Herg4JK7qk8fwYv 7jTL6vDu/scvRzgUt5V0wHPNdaPXsZhPcC7uNa6GPLBGw4VwK6X1+F4MQ097KX7/ KuvluSD7yDdqHWMjgDkTmr+4lVz8xm5sszxxkp+5zOxSaO0nSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC0v6qbk9RFkmQpGpPbmE0gh/3PwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvY2Q2YTBkY2UtMzRkMy0z NDQzLThmNjUtNTVjMmQ5OGEzZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFJ8NE6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJwa/A3/9IGpOXbWV+18k2HmlQlhu5gUY0HIpbJjnw+z1eC0AmLh /u8UuCPheAMiuAwCFOZWyrNBWARpyq9BLYGlF8pNgQRdh9Hmsqgshflx6TP9L7xR GQqKXABtWI6zbahWYWSgxwAXgcnp/GglkwCCC2sLMkQAbeytnTCO/7VYvLVBQA/S DhuyAZ6A4hWMf5Bu8zAshGAq1gThvYMX0qgbHCxoqHlEV+RNFYIo6icYJu0S4ZiD OIMOkqE6+RJ4jO+mR8U3uolR7fB3fGvj+D4HV6xcRxPkMG/b9hilDuy2IHcK5D4A zcv1t9FL0FwPFPol0dGHHfQax/2aMpiHI6c= -----END CERTIFICATE-----Generated at Sun Jun 29 08:05:01 2025 by rpki-client