$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa File: e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa (raw, json) Hash identifier: 8ZjeicXbHNIH9BSQY97zQ1Yio47+IfPfv9SGarces5E= Subject key identifier: 16:D1:0D:FE:FC:81:FA:7D:83:F4:2B:AB:59:C9:BD:A0:DE:48:F2:63 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584AF2568730F0B98B952CE630C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 1239 IP address blocks: 2001:49f0:d049::/48 maxlen: 48 2001:49f0:d04a::/48 maxlen: 48 2001:49f0:d077::/48 maxlen: 48 2001:49f0:d078::/48 maxlen: 48 2001:49f0:d07a::/48 maxlen: 48 2001:49f0:d07b::/48 maxlen: 48 2001:49f0:d07d::/48 maxlen: 48 2001:49f0:d07e::/48 maxlen: 48 2001:49f0:d07f::/48 maxlen: 48 2001:49f0:d081::/48 maxlen: 48 2001:49f0:d082::/48 maxlen: 48 2001:49f0:d083::/48 maxlen: 48 2001:49f0:d084::/48 maxlen: 48 2001:49f0:d087::/48 maxlen: 48 2001:49f0:d089::/48 maxlen: 48 2001:49f0:d08a::/48 maxlen: 48 2001:49f0:d08f::/48 maxlen: 48 2001:49f0:d097::/49 maxlen: 49 2001:49f0:d0a5::/48 maxlen: 48 2001:49f0:d0b2::/48 maxlen: 48 2001:49f0:d0b3::/48 maxlen: 48 2001:49f0:d0b4::/48 maxlen: 48 2001:49f0:d0b5::/48 maxlen: 48 2001:49f0:d0b6::/48 maxlen: 48 2001:49f0:d0d5::/48 maxlen: 48 2001:49f0:d0d6::/48 maxlen: 48 2001:49f0:d0d7::/48 maxlen: 48 2001:49f0:d0dd::/48 maxlen: 48 2001:49f0:d0e1::/48 maxlen: 48 2001:49f0:d0e2::/48 maxlen: 48 2001:49f0:d0e3::/48 maxlen: 48 2001:49f0:d105::/48 maxlen: 48 2001:49f0:d106::/48 maxlen: 48 2001:49f0:d107::/48 maxlen: 48 2001:49f0:d108::/48 maxlen: 48 2001:49f0:d109::/48 maxlen: 48 2001:49f0:d10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:87:30:f0:b9:8b:95:2c:e6:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=b3d7361c-b88c-43b6-ad43-47e8e9fe9909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d5:a9:02:55:e5:e8:32:72:a5:87:56:12:d4: 12:cc:25:b2:d4:28:9b:5d:65:7c:09:12:da:2b:19: 4e:95:20:26:92:7c:96:b5:4d:f3:27:2f:0c:77:7e: f5:8d:20:b7:df:85:a8:2a:a2:b8:b8:c3:7d:71:fb: 14:a7:99:59:cd:bd:28:af:8a:4d:9e:0d:65:3e:97: e0:e7:56:6c:6d:7b:0b:b2:1d:b7:9b:27:c5:25:3a: 9e:2d:db:8a:8f:74:1c:87:65:6d:0c:a3:39:57:57: dc:c4:52:10:5e:0e:1c:73:8f:a6:13:cb:50:1a:d5: 59:92:11:7c:2c:d1:f4:a0:b6:84:e6:76:a3:16:ef: 23:a1:63:d1:58:46:d1:42:88:65:6e:32:0e:3b:1c: 75:3c:d4:54:90:50:02:0c:54:c5:6d:df:4a:44:88: 98:40:68:1e:25:82:b8:8b:7f:5d:5e:2d:c7:6f:78: 8e:02:58:af:2a:39:cc:63:48:43:52:de:a3:83:f9: 5d:62:87:07:b9:1b:c9:82:96:5e:f8:19:eb:db:d0: 0c:4c:79:14:44:b7:1a:c8:6d:a5:07:1c:0c:5b:4c: b7:0d:99:92:ba:dc:c6:e1:4e:06:bf:79:ce:73:3b: 2a:16:ff:75:29:e2:37:df:67:c5:75:7e:25:ab:5a: c9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D1:0D:FE:FC:81:FA:7D:83:F4:2B:AB:59:C9:BD:A0:DE:48:F2:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff 2001:49f0:d07a::/47 2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff 2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff 2001:49f0:d087::/48 2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d08f::/48 2001:49f0:d097::/49 2001:49f0:d0a5::/48 2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0dd::/48 2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff 2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:21:27:96:ac:12:e8:b8:f4:5e:a7:35:64:9f:f5:a3:24:aa: 0e:0c:a0:42:d1:f0:5a:6b:0a:14:ca:f5:39:67:92:5f:d4:b0: 24:3c:44:03:dd:19:9c:30:2c:2b:32:b3:d4:88:53:9d:62:0c: 6f:93:2d:f3:51:9b:d1:ec:b4:89:03:44:61:82:b2:cd:ac:81: 78:db:15:85:f1:f6:d5:bb:b9:ad:fa:c0:2e:87:3e:18:ac:32: 76:92:6f:d3:58:76:20:8a:39:14:73:46:62:90:b1:3a:60:c5: 4e:35:e6:f0:d7:d2:f0:0d:e7:e8:38:f6:67:c6:bf:a0:1b:89: cc:01:76:b3:22:05:56:0a:1e:7b:9e:e4:ba:89:92:c7:13:3a: 70:52:a9:f5:87:04:07:36:db:c5:99:b0:1d:39:00:7e:3a:2f: 78:c9:80:d8:f7:51:cf:26:ff:39:81:25:4a:cd:35:7f:27:76: b6:ee:d0:bc:8b:d7:43:90:6c:14:6c:9d:f3:33:85:0a:59:4a: d5:39:d4:ed:22:da:95:db:89:94:7a:94:e3:28:b1:bb:73:5a: 57:a3:06:9b:2d:aa:90:13:60:42:a7:0e:8a:9c:9b:cf:79:7b: 2a:fa:ec:67:83:e6:5f:27:c3:45:3d:22:f2:1f:e4:03:17:e6: 3c:86:91:12 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEryVocw8LmLlSzmMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YjNkNzM2MWMtYjg4Yy00M2I2LWFkNDMtNDdlOGU5ZmU5OTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdWpAlXl6DJypYdWEtQSzCWy1CibXWV8CRLa KxlOlSAmknyWtU3zJy8Md371jSC334WoKqK4uMN9cfsUp5lZzb0or4pNng1lPpfg 51ZsbXsLsh23myfFJTqeLduKj3Qch2VtDKM5V1fcxFIQXg4cc4+mE8tQGtVZkhF8 LNH0oLaE5najFu8joWPRWEbRQohlbjIOOxx1PNRUkFACDFTFbd9KRIiYQGgeJYK4 i39dXi3Hb3iOAlivKjnMY0hDUt6jg/ldYocHuRvJgpZe+Bnr29AMTHkURLcayG2l BxwMW0y3DZmSutzG4U4Gv3nOczsqFv91KeI332fFdX4lq1rJBQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFBbRDf78gfp9g/Qrq1nJvaDeSPJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZTQ5ZTUyYTktN2IwYy0z MWU2LThhNmItYTA0MmExMTI5ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgACMIHrMBID BwAgAUnw0EkDBwAgAUnw0EowEgMHACABSfDQdwMHACABSfDQeAMHASABSfDQejAS AwcAIAFJ8NB9AwcHIAFJ8NAAMBIDBwAgAUnw0IEDBwAgAUnw0IQDBwAgAUnw0Icw EgMHACABSfDQiQMHACABSfDQigMHACABSfDQjwMIByABSfDQlwADBwAgAUnw0KUw EgMHASABSfDQsgMHACABSfDQtjASAwcAIAFJ8NDVAwcDIAFJ8NDQAwcAIAFJ8NDd MBIDBwAgAUnw0OEDBwIgAUnw0OAwEgMHACABSfDRBQMHACABSfDRCjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAHISeWrBLouPRepzVkn/WjJKoODKBC0fBaawoUyvU5Z5Jf1LAkPEQD3RmcMCwr MrPUiFOdYgxvky3zUZvR7LSJA0RhgrLNrIF42xWF8fbVu7mt+sAuhz4YrDJ2km/T WHYgijkUc0ZikLE6YMVONebw19LwDefoOPZnxr+gG4nMAXazIgVWCh57nuS6iZLH EzpwUqn1hwQHNtvFmbAdOQB+Oi94yYDY91HPJv85gSVKzTV/J3a27tC8i9dDkGwU bJ3zM4UKWUrVOdTtItqV24mUepTjKLG7c1pXowabLaqQE2BCpw6KnJvPeXsq+uxn g+ZfJ8NFPSLyH+QDF+Y8hpES -----END CERTIFICATE-----Generated at Sat Aug 23 08:12:10 2025 by rpki-client