$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa File: c47f8c8a-a763-38be-9577-076076c9c6f9.roa (raw, json) Hash identifier: kW0bt4nV85Fm+qkZNx0neFmf0KQJuBQXtH6gfNeuVvE= Subject key identifier: AE:FC:A0:8C:AF:49:FE:E1:BB:3B:A0:4D:97:BB:C8:AE:E6:5E:E4:1B Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F4328584B477C7BB4494B687D56C08700 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 7050 IP address blocks: 2606:8700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:7b:b4:49:4b:68:7d:56:c0:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=65424a5c-6674-4bb6-96d5-3f8afab40fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:df:67:e4:52:05:fe:e8:e6:bb:98:eb:81: 5d:70:ae:87:07:67:32:6b:98:9c:d0:04:e7:2d:b5: 8c:54:8d:65:9f:fe:6d:b4:ae:f7:79:f6:c5:ac:8f: 51:52:79:46:d6:2c:65:d3:74:a0:80:85:f7:40:ac: 6a:4d:86:56:7a:85:3d:d5:04:2f:a1:8c:ff:5d:d4: f8:bb:33:48:25:93:ea:c0:e4:49:ed:87:50:2e:fb: 56:f0:8c:52:88:ba:23:d3:10:7a:ac:88:a6:0b:e2: 1a:8a:db:01:05:2f:24:a1:64:35:45:64:8a:94:95: 98:fd:52:d5:ee:46:9a:4f:2b:81:97:6c:f7:82:c1: c4:71:16:b4:de:80:45:39:07:0a:72:f3:51:59:4b: 2a:69:17:2a:9f:ca:95:a1:f8:22:96:04:c7:ee:a5: 25:d3:52:b0:ac:a1:77:71:ba:19:8a:16:f7:11:29: 13:23:df:e2:0e:5a:18:a2:fb:42:60:19:98:f8:64: a1:67:67:fe:07:95:0b:88:60:62:93:0d:d0:4c:be: 70:55:62:c6:69:2e:07:fc:73:ca:de:f6:01:ec:d5: 6b:01:32:cb:46:dd:19:00:e2:5e:c1:5e:ba:dc:a4: 72:f9:d0:74:58:71:5b:2e:a3:8b:4d:5e:79:7a:96: b8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FC:A0:8C:AF:49:FE:E1:BB:3B:A0:4D:97:BB:C8:AE:E6:5E:E4:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv6: 2606:8700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:25:63:6e:44:b5:28:0d:c8:a8:0d:c9:b7:21:ba:cc:67:cf: 46:d1:80:53:c1:b2:55:0e:04:6c:49:f2:30:63:d7:34:29:dc: 77:f6:c8:2d:18:48:65:a6:c7:d7:d2:42:80:b4:e3:51:54:83: 9c:7e:00:33:92:9e:5e:9f:75:5f:6b:9e:70:db:57:7b:01:e3: 8e:d9:66:46:0e:b9:30:b0:26:7f:4b:96:1d:01:f3:09:c8:ad: dc:7b:d3:45:5c:6d:fc:27:cc:56:f5:33:32:8a:89:0e:f5:f0: 61:e0:9a:c3:88:e8:37:71:48:d8:c7:46:55:9d:83:72:c0:cf: db:39:84:c9:de:86:70:f4:58:ab:ea:84:fc:69:d8:3c:62:9c: 7e:e1:be:fb:84:78:d6:18:b6:ac:43:05:14:5c:ee:bd:32:b8: f9:e2:24:d3:95:a2:92:51:62:24:85:61:87:61:a6:4a:09:d5: 2f:9e:52:19:4e:2e:36:e2:05:04:3f:2e:c0:d2:e2:5b:7c:a3: cf:68:34:af:cc:16:05:de:27:7e:fb:18:5c:3b:f4:5a:73:2f: 3d:fc:fd:1d:75:4c:23:26:8e:11:64:ab:bb:70:04:c5:bf:69: ba:24:5b:f7:2b:20:3f:bb:40:fc:ba:37:dc:99:ab:0f:0f:ad: 0a:3d:2c:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfHu0SUtofVbAhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NjU0MjRhNWMtNjY3NC00YmI2LTk2ZDUtM2Y4YWZhYjQwZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUjfZ+RSBf7o5ruY64FdcK6HB2cya5ic0ATn LbWMVI1ln/5ttK73efbFrI9RUnlG1ixl03SggIX3QKxqTYZWeoU91QQvoYz/XdT4 uzNIJZPqwORJ7YdQLvtW8IxSiLoj0xB6rIimC+IaitsBBS8koWQ1RWSKlJWY/VLV 7kaaTyuBl2z3gsHEcRa03oBFOQcKcvNRWUsqaRcqn8qVofgilgTH7qUl01KwrKF3 cboZihb3ESkTI9/iDloYovtCYBmY+GShZ2f+B5ULiGBikw3QTL5wVWLGaS4H/HPK 3vYB7NVrATLLRt0ZAOJewV663KRy+dB0WHFbLqOLTV55epa4aQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK78oIyvSf7huzugTZe7yK7mXuQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvYzQ3ZjhjOGEtYTc2My0z OGJlLTk1NzctMDc2MDc2YzljNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByJWNuRLUoDcioDcm3IbrMZ89G0YBTwbJVDgRsSfIwY9c0Kdx39sgt GEhlpsfX0kKAtONRVIOcfgAzkp5en3Vfa55w21d7AeOO2WZGDrkwsCZ/S5YdAfMJ yK3ce9NFXG38J8xW9TMyiokO9fBh4JrDiOg3cUjYx0ZVnYNywM/bOYTJ3oZw9Fir 6oT8adg8Ypx+4b77hHjWGLasQwUUXO69Mrj54iTTlaKSUWIkhWGHYaZKCdUvnlIZ Ti424gUEPy7A0uJbfKPPaDSvzBYF3id++xhcO/Racy89/P0ddUwjJo4RZKu7cATF v2m6JFv3KyA/u0D8ujfcmasPD60KPSwC -----END CERTIFICATE-----Generated at Tue Oct 21 11:40:32 2025 by rpki-client