$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa File: c47f8c8a-a763-38be-9577-076076c9c6f9.roa (raw, json) Hash identifier: vlvIGLxKeNUqjLhZ22B45oJJp9QusCVFE7m8fSfi8r8= Subject key identifier: 3B:06:6D:60:A5:FA:19:B3:66:18:F5:94:71:3A:66:C6:84:4C:24:84 Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F4328584A66C077E768E3CEA0155ADAC0 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 7050 IP address blocks: 2606:8700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:77:e7:68:e3:ce:a0:15:5a:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=afaca0ed-38a3-4e20-91c4-6c4ec56ce6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:3e:19:c5:bd:4c:31:e2:e8:00:fa:a2:04: 9b:81:f5:40:da:f7:a3:21:a4:70:98:6b:f0:e1:f4: 7a:0a:06:63:e7:d2:40:b1:24:33:23:f5:e4:84:dc: 28:19:d3:12:76:80:a1:46:0a:fa:ed:62:62:8a:4e: 9f:fa:c7:b1:18:55:98:ef:08:95:ac:e6:8e:72:0d: ed:29:4c:c6:f4:3b:04:4f:ce:51:fa:28:d1:f3:f4: a0:fa:ce:e3:cf:1d:cb:9d:b5:24:fb:8a:cf:3d:e5: 95:c4:b7:e3:1f:3c:22:36:09:28:75:ed:e3:dc:94: f6:b3:f6:35:43:3c:5f:d0:05:f6:4b:03:35:bf:15: d4:3b:94:88:9d:ce:85:87:02:68:88:41:37:a5:7f: 1d:80:db:e0:62:20:3d:ef:6f:47:80:4f:59:2b:dd: e6:49:33:42:1e:b3:a1:19:f8:f6:48:a8:1b:a9:6d: 24:0f:59:08:cf:e8:c2:aa:f0:49:ca:d4:f8:e3:ee: 2e:9f:6e:8b:7b:fe:1f:58:8d:1e:42:fa:92:26:ea: c8:37:12:48:a9:0d:ed:a3:28:ad:99:96:54:e4:9f: 97:3d:f6:ba:f5:ab:ad:17:7c:49:aa:69:37:06:b8: 0c:03:1b:62:7a:26:02:49:17:5b:d3:8b:31:7f:b7: 7d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:06:6D:60:A5:FA:19:B3:66:18:F5:94:71:3A:66:C6:84:4C:24:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv6: 2606:8700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ce:83:7c:90:a3:25:f4:59:72:fd:b6:8b:d6:38:6c:85:e8: 16:e8:dd:cc:d2:05:f4:50:67:e5:d6:38:8f:2f:40:2d:41:0c: fb:b1:e7:68:e1:6b:34:e5:ad:fa:45:8c:03:18:9f:69:c0:55: fa:fb:98:bb:e5:e7:4c:f7:b1:22:42:f5:d6:53:4f:b9:35:6b: 0e:df:eb:93:dd:6e:27:d8:80:08:23:be:45:4a:7e:ca:95:d0: c1:56:b2:9e:75:43:c9:7f:5d:bd:68:79:82:e2:27:48:b6:d7: 3c:54:6d:20:84:8b:3d:6a:0b:a8:d6:3f:5d:1e:cb:0b:ba:ac: d8:a3:ad:28:21:99:4e:5d:28:c5:e9:9c:58:83:8a:dc:f2:84: c7:71:c0:60:e0:6a:c8:20:5f:09:c3:8d:d5:c2:8e:00:52:83: ee:07:ce:ea:19:30:d4:9a:94:24:bb:e5:25:ec:38:47:3c:15: 3a:cc:48:5c:f1:57:8f:c6:2c:92:b7:f9:ea:5a:61:56:47:05: 72:0b:f6:0b:dc:2d:3b:1b:10:bc:7d:ac:2b:d2:d6:5d:ad:4f: 78:c3:2e:2e:9a:86:e1:11:19:d9:6c:96:1d:6c:b0:d6:69:27: a7:19:cb:c3:0c:04:25:40:10:2b:c4:da:1d:d8:00:1a:41:12: e5:52:b0:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwHfnaOPOoBVa2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk YWZhY2EwZWQtMzhhMy00ZTIwLTkxYzQtNmM0ZWM1NmNlNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoQ+GcW9TDHi6AD6ogSbgfVA2vejIaRwmGvw 4fR6CgZj59JAsSQzI/XkhNwoGdMSdoChRgr67WJiik6f+sexGFWY7wiVrOaOcg3t KUzG9DsET85R+ijR8/Sg+s7jzx3LnbUk+4rPPeWVxLfjHzwiNgkode3j3JT2s/Y1 Qzxf0AX2SwM1vxXUO5SInc6FhwJoiEE3pX8dgNvgYiA9729HgE9ZK93mSTNCHrOh Gfj2SKgbqW0kD1kIz+jCqvBJytT44+4un26Le/4fWI0eQvqSJurINxJIqQ3toyit mZZU5J+XPfa69autF3xJqmk3BrgMAxtieiYCSRdb04sxf7d9SwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDsGbWCl+hmzZhj1lHE6ZsaETCSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvYzQ3ZjhjOGEtYTc2My0z OGJlLTk1NzctMDc2MDc2YzljNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBEzoN8kKMl9Fly/baL1jhshegW6N3M0gX0UGfl1jiPL0AtQQz7sedo 4Ws05a36RYwDGJ9pwFX6+5i75edM97EiQvXWU0+5NWsO3+uT3W4n2IAII75FSn7K ldDBVrKedUPJf129aHmC4idIttc8VG0ghIs9aguo1j9dHssLuqzYo60oIZlOXSjF 6ZxYg4rc8oTHccBg4GrIIF8Jw43Vwo4AUoPuB87qGTDUmpQku+Ul7DhHPBU6zEhc 8VePxiySt/nqWmFWRwVyC/YL3C07GxC8fawr0tZdrU94wy4umobhERnZbJYdbLDW aSenGcvDDAQlQBArxNod2AAaQRLlUrA9 -----END CERTIFICATE-----Generated at Fri Jul 4 17:56:36 2025 by rpki-client