$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa File: c47f8c8a-a763-38be-9577-076076c9c6f9.roa (raw, json) Hash identifier: j4qidhNGJjrwxEaROeqSwJARV3SR5/lql0iqLdYYVmE= Subject key identifier: 20:24:1B:61:7C:35:42:21:C9:45:8B:08:1A:E3:59:CC:93:F8:55:06 Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F432858498769BA45BC8F4E79485F9F00 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 7050 IP address blocks: 2606:8700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ba:45:bc:8f:4e:79:48:5f:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=66b0bd94-244f-40ab-8902-e4faeb6fa385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e8:c4:dc:ed:cf:83:b3:8d:ce:66:d7:b5:82: b6:1d:d9:c8:da:ea:2c:c9:cb:30:e8:bb:5f:9a:fd: ab:9a:f9:77:e5:67:ee:13:08:df:08:cc:3f:3b:96: fe:a2:52:b8:be:61:0d:b7:09:f9:41:e8:6f:b2:6b: 5c:b8:73:71:44:77:4b:40:4c:d8:3a:0d:84:57:7b: 8c:26:16:6e:76:4c:9b:1b:11:27:64:a0:61:94:ca: b8:00:c6:88:04:e8:ed:a0:96:eb:a9:a2:c9:48:38: e9:36:4d:fc:f6:ae:15:77:cd:fc:84:82:67:1f:50: 96:d1:58:36:ce:63:61:9c:79:7b:7e:54:57:02:df: 06:12:16:80:75:c8:ae:13:60:18:c5:d6:cd:2f:cd: 5c:e7:ac:53:e3:61:32:79:96:e1:0c:4a:97:e8:4e: b5:35:8b:db:da:6b:16:b7:4e:aa:f7:3b:91:fc:ab: 1b:7b:45:a5:f9:f5:f9:a4:fb:ce:5d:66:65:42:04: 44:20:77:ee:98:61:b6:e0:f8:f7:77:b2:43:c3:4a: 86:7f:47:62:d4:3f:66:96:8d:0c:60:76:2f:9d:8c: ed:6e:5d:9b:ba:8a:02:d7:e9:d8:2b:e6:fb:6d:1e: 43:29:07:e1:4c:93:ea:c0:c3:95:a8:a4:57:93:00: 96:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:24:1B:61:7C:35:42:21:C9:45:8B:08:1A:E3:59:CC:93:F8:55:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv6: 2606:8700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ac:5a:73:4f:b2:28:91:33:2c:68:fa:c7:fa:46:b8:49:e0: 33:01:87:a9:48:38:0b:8d:23:1c:56:9a:05:6b:9d:63:79:7b: ef:61:dd:0c:fb:a5:7e:6b:57:dc:b9:6f:6b:13:5c:c1:fd:72: 65:15:05:f6:ff:08:60:e2:ce:49:73:f7:18:02:09:a3:5e:cc: c7:cf:85:6d:85:c0:ff:3a:fc:b5:c8:d4:c0:43:ec:21:af:f7: e9:f3:c2:b5:0c:4d:5c:c0:df:a8:89:c3:a7:c6:4a:3a:48:8f: 00:9c:7e:dc:a5:cd:e2:d4:10:b2:d1:b8:fd:86:f0:32:1a:2a: d0:f5:7f:9e:80:fe:2b:66:03:09:fe:b1:37:cf:65:46:e6:ea: 0b:9d:6d:d8:80:9c:c0:22:a0:5d:00:ca:5f:a2:27:87:75:43: b0:89:e8:e2:f9:60:c5:99:9b:54:b5:c8:96:cc:eb:1d:c6:e9: bc:b2:24:a4:d7:66:d5:3e:14:50:62:c9:d3:fa:20:f8:e6:24: fa:cd:a1:70:ea:96:8a:06:9f:a9:40:8a:46:b8:9a:02:3c:43: 08:08:aa:02:44:89:68:47:39:7e:42:eb:e1:21:fa:f0:f0:6b: 0f:fb:c6:e1:89:04:ff:26:e2:c4:69:f5:a0:5a:3b:1f:01:62: 37:da:dc:32 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHabpFvI9OeUhfnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NjZiMGJkOTQtMjQ0Zi00MGFiLTg5MDItZTRmYWViNmZhMzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+jE3O3Pg7ONzmbXtYK2HdnI2uosycsw6Ltf mv2rmvl35WfuEwjfCMw/O5b+olK4vmENtwn5QehvsmtcuHNxRHdLQEzYOg2EV3uM JhZudkybGxEnZKBhlMq4AMaIBOjtoJbrqaLJSDjpNk389q4Vd838hIJnH1CW0Vg2 zmNhnHl7flRXAt8GEhaAdciuE2AYxdbNL81c56xT42EyeZbhDEqX6E61NYvb2msW t06q9zuR/Ksbe0Wl+fX5pPvOXWZlQgREIHfumGG24Pj3d7JDw0qGf0di1D9mlo0M YHYvnYztbl2buooC1+nYK+b7bR5DKQfhTJPqwMOVqKRXkwCW3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCAkG2F8NUIhyUWLCBrjWcyT+FUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvYzQ3ZjhjOGEtYTc2My0z OGJlLTk1NzctMDc2MDc2YzljNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABrFpzT7IokTMsaPrH+ka4SeAzAYepSDgLjSMcVpoFa51jeXvvYd0M +6V+a1fcuW9rE1zB/XJlFQX2/whg4s5Jc/cYAgmjXszHz4VthcD/Ovy1yNTAQ+wh r/fp88K1DE1cwN+oicOnxko6SI8AnH7cpc3i1BCy0bj9hvAyGirQ9X+egP4rZgMJ /rE3z2VG5uoLnW3YgJzAIqBdAMpfoieHdUOwieji+WDFmZtUtciWzOsdxum8siSk 12bVPhRQYsnT+iD45iT6zaFw6paKBp+pQIpGuJoCPEMICKoCRIloRzl+QuvhIfrw 8GsP+8bhiQT/JuLEafWgWjsfAWI32twy -----END CERTIFICATE-----Generated at Thu May 1 08:22:08 2025 by rpki-client