$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9115ec74-37e1-34da-a063-999141bb5287.roa File: 9115ec74-37e1-34da-a063-999141bb5287.roa (raw, json) Hash identifier: pyEBA8qShPWrTPNH5Ttw+6Q5X3fnvAWv9AEebn0qoME= Subject key identifier: 87:3E:2E:76:1B:67:0A:62:B3:29:5D:BB:CD:94:D5:71:18:69:34:62 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F43285849DC7C288EF09C94759480A700 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9115ec74-37e1-34da-a063-999141bb5287.roa Signing time: Thu 15 May 2025 12:21:50 +0000 ROA not before: Thu 15 May 2025 12:21:50 +0000 ROA not after: Wed 13 Aug 2025 12:21:50 +0000 asID: 208208 IP address blocks: 2607:ffd8:ff01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:7c:28:8e:f0:9c:94:75:94:80:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: May 15 12:21:50 2025 GMT Not After : Aug 13 12:21:50 2025 GMT Subject: CN=b59bfd33-8cc3-4af7-a4b5-5e9f67dde8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:10:a1:da:0f:a5:f9:19:d4:2c:4c:ee:29: 3f:2c:fe:bc:27:fd:8a:96:fe:0d:5b:9e:54:6c:bb: 94:80:18:51:bf:cf:2f:8a:96:f2:28:a4:8d:1e:8e: 44:e8:53:a2:b6:8c:22:9a:19:60:eb:31:e0:e2:9f: 00:95:53:cb:dc:3d:2f:45:27:a0:8a:4e:b5:52:c6: 85:c3:8f:f2:24:1b:5b:2d:78:ff:67:3a:73:51:a3: e2:55:74:ba:5d:42:39:25:fa:62:e9:35:3d:eb:af: 65:0c:e8:11:c7:71:2b:81:7e:95:59:f1:74:f2:d4: b2:b4:d8:18:a7:bb:19:cf:3a:14:c7:cd:31:66:0c: 6e:59:d6:1b:64:34:93:84:16:31:b5:33:9f:d4:a4: 3b:84:82:f2:4c:e2:2e:0e:f7:9b:5b:ab:7a:0e:94: c6:a1:4e:8d:ba:56:e0:84:ec:e8:c0:bd:b7:1d:08: 3c:a6:51:41:23:ad:3f:cf:50:46:79:01:6e:41:42: b0:e4:9f:45:8e:bb:58:15:86:e2:27:24:6a:d7:22: 25:1b:8a:49:7b:b7:0b:ef:93:b1:16:e1:3f:54:ed: b6:49:c0:f6:f6:f0:64:ae:a8:62:2f:53:cf:94:e2: 58:bf:7f:58:4d:57:92:31:c7:f0:7e:7d:4b:5a:bf: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3E:2E:76:1B:67:0A:62:B3:29:5D:BB:CD:94:D5:71:18:69:34:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9115ec74-37e1-34da-a063-999141bb5287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv6: 2607:ffd8:ff01::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:96:a9:73:cf:78:db:40:3b:27:e2:af:84:f9:0d:cb:e4:13: 3f:7f:30:9d:e1:09:be:81:5a:de:77:dd:5b:e3:c0:5a:74:0f: 34:a6:f4:ab:e2:c9:47:43:5f:0b:6e:2a:67:78:1d:f7:ea:f7: 5e:b5:0b:bc:58:92:96:29:4d:17:d0:2e:c5:91:e7:3d:9d:6e: 9a:ed:e3:55:e7:7e:c8:59:40:6e:77:6a:b8:e2:4b:df:14:ba: 62:ad:4b:94:5b:aa:df:1c:fe:94:8a:07:62:59:f6:42:15:26: dd:b1:35:99:32:46:d9:4d:a4:f1:bc:aa:34:35:53:a9:6c:ac: e1:44:eb:b2:ea:a0:1b:21:a8:94:ae:00:3d:33:42:31:e1:43: 61:0b:a1:eb:b6:f7:62:1a:bc:96:50:44:56:b4:7c:d0:50:a2: 23:86:27:e7:29:36:c7:75:81:bd:b7:e1:26:1e:61:84:a5:d9: 54:08:9c:84:95:34:69:12:d9:c0:2b:e7:3c:fe:e4:74:aa:d3: 6b:53:cd:57:84:92:7a:19:0c:ea:4f:46:62:09:fa:2f:53:d3: 56:a4:8b:b0:d9:36:21:85:a2:38:74:5c:a8:05:9f:9b:31:7c: 0b:85:82:1f:b0:5c:77:6c:eb:fa:87:5b:c6:36:91:76:46:fa: 7b:42:66:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncfCiO8JyUdZSApwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDUxNTEyMjE1MFoXDTI1MDgxMzEyMjE1MFowLzEtMCsGA1UEAxMk YjU5YmZkMzMtOGNjMy00YWY3LWE0YjUtNWU5ZjY3ZGRlOGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyEQodoPpfkZ1CxM7ik/LP68J/2Klv4NW55U bLuUgBhRv88vipbyKKSNHo5E6FOitowimhlg6zHg4p8AlVPL3D0vRSegik61UsaF w4/yJBtbLXj/ZzpzUaPiVXS6XUI5Jfpi6TU9669lDOgRx3ErgX6VWfF08tSytNgY p7sZzzoUx80xZgxuWdYbZDSThBYxtTOf1KQ7hILyTOIuDvebW6t6DpTGoU6Nulbg hOzowL23HQg8plFBI60/z1BGeQFuQUKw5J9FjrtYFYbiJyRq1yIlG4pJe7cL75Ox FuE/VO22ScD29vBkrqhiL1PPlOJYv39YTVeSMcfwfn1LWr/fOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIc+LnYbZwpisyldu82U1XEYaTRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvOTExNWVjNzQtMzdlMS0z NGRhLWEwNjMtOTk5MTQxYmI1Mjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf/2P8B MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEKWqXPPeNtAOyfir4T5DcvkEz9/MJ3hCb6BWt533VvjwFp0DzSm 9KviyUdDXwtuKmd4Hffq9161C7xYkpYpTRfQLsWR5z2dbprt41XnfshZQG53arji S98UumKtS5Rbqt8c/pSKB2JZ9kIVJt2xNZkyRtlNpPG8qjQ1U6lsrOFE67LqoBsh qJSuAD0zQjHhQ2ELoeu292IavJZQRFa0fNBQoiOGJ+cpNsd1gb234SYeYYSl2VQI nISVNGkS2cAr5zz+5HSq02tTzVeEknoZDOpPRmIJ+i9T01aki7DZNiGFojh0XKgF n5sxfAuFgh+wXHds6/qHW8Y2kXZG+ntCZg0= -----END CERTIFICATE-----Generated at Wed Jul 2 21:57:39 2025 by rpki-client