$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86974a5d-1f15-3451-a1f4-d4c740b32630.roa File: 86974a5d-1f15-3451-a1f4-d4c740b32630.roa (raw, json) Hash identifier: u0Z10Jr4DNUO6kFTfKoqXQFpw1KP5EXtSajWXcaFw54= Subject key identifier: FF:22:1C:CC:D1:46:32:65:AD:80:A8:A2:86:56:8C:17:C6:D0:1F:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDEA013AAF022E19534A9400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86974a5d-1f15-3451-a1f4-d4c740b32630.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 7015 IP address blocks: 2001:559:577::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:ea:01:3a:af:02:2e:19:53:4a:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=cb1e61c9-37c9-4de5-aff3-3e30202d89a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9d:06:d7:39:45:a4:1a:69:39:e3:32:e9:16: 5d:5c:12:18:1c:ec:e1:d5:4e:1c:3f:35:11:53:fb: 1e:65:d4:5d:c1:96:6a:66:2b:c7:45:55:43:aa:bf: d4:59:ea:26:55:91:5d:ef:68:f5:e5:51:08:59:3c: 10:63:8c:59:b5:60:ad:6c:9a:e1:e4:83:aa:9e:4b: a8:ad:1d:49:48:b1:59:57:8c:18:d4:6d:80:f8:18: ab:a9:4b:87:cd:e0:15:97:13:0f:31:59:66:6e:88: ec:69:2f:fa:9d:f5:69:60:d8:f2:38:09:ce:26:a3: 94:75:97:d4:f7:98:4f:57:7c:88:22:eb:3b:8b:71: c3:69:b2:ba:9f:81:00:30:16:5c:ad:b0:6b:ac:bf: 37:a0:29:26:fb:82:99:fc:da:4b:bc:f3:b3:05:db: 1e:99:9f:55:42:27:b6:eb:f3:17:94:77:68:b6:cc: 5e:35:fa:bb:7c:06:0c:6c:f0:63:c1:54:34:ea:d0: 29:56:58:5b:8d:2d:83:f1:5f:0c:d3:6b:c3:4c:c5: be:6f:e8:67:09:e3:d1:63:44:19:78:2f:48:89:3d: 5a:da:22:3a:ed:cb:34:a9:2f:e7:5c:c1:a3:7a:2a: 88:ad:f5:50:42:8f:6d:88:e8:ab:aa:18:72:d1:e1: a6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:22:1C:CC:D1:46:32:65:AD:80:A8:A2:86:56:8C:17:C6:D0:1F:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86974a5d-1f15-3451-a1f4-d4c740b32630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:577::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b3:0d:40:22:37:8b:d9:f5:a3:52:77:fe:aa:79:9b:45:04: 02:2a:0c:8e:26:98:e9:d3:90:47:08:36:e2:5c:31:90:86:85: fb:55:2a:77:78:ee:b1:7d:f8:b8:12:64:28:51:10:b4:17:97: 12:19:7d:1a:79:8a:21:64:ad:47:55:d8:eb:00:c5:a8:1b:96: 75:3d:77:02:4d:d7:e5:af:f8:dd:4a:60:15:01:59:85:20:0e: e9:1d:67:ff:9a:6f:cf:b4:35:f4:85:3e:ab:e3:43:ea:62:80: 00:2b:a2:2a:6d:d2:5a:a5:5d:b5:4d:a6:73:5e:fe:2a:98:84: a2:9c:63:33:df:41:26:be:78:db:7f:3d:8d:7d:e7:c1:24:40: 05:26:b1:20:2e:7e:11:bd:e5:92:05:70:15:1c:f2:0d:65:6e: 24:e8:04:c3:98:f6:c8:b2:62:2b:1e:90:9f:85:94:42:cb:96: c0:b9:dc:98:30:d7:f4:64:a1:58:1c:fb:5c:b4:d3:f4:72:c1: 6a:64:ce:0e:f8:c9:0c:b7:e1:00:99:ab:4c:f2:b6:71:36:c2: 36:55:9b:16:44:47:be:70:9b:7d:6b:52:7a:2e:3e:5e:de:f4: 20:6a:42:40:3f:ff:33:a1:70:19:cb:0e:f5:bc:aa:fa:bd:73: ca:ef:2b:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96gE6rwIuGVNKlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk Y2IxZTYxYzktMzdjOS00ZGU1LWFmZjMtM2UzMDIwMmQ4OWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ0G1zlFpBppOeMy6RZdXBIYHOzh1U4cPzUR U/seZdRdwZZqZivHRVVDqr/UWeomVZFd72j15VEIWTwQY4xZtWCtbJrh5IOqnkuo rR1JSLFZV4wY1G2A+BirqUuHzeAVlxMPMVlmbojsaS/6nfVpYNjyOAnOJqOUdZfU 95hPV3yIIus7i3HDabK6n4EAMBZcrbBrrL83oCkm+4KZ/NpLvPOzBdsemZ9VQie2 6/MXlHdotsxeNfq7fAYMbPBjwVQ06tApVlhbjS2D8V8M02vDTMW+b+hnCePRY0QZ eC9IiT1a2iI67cs0qS/nXMGjeiqIrfVQQo9tiOirqhhy0eGmhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP8iHMzRRjJlrYCoooZWjBfG0B/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODY5NzRhNWQtMWYxNS0z NDUxLWExZjQtZDRjNzQwYjMyNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQV3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEGzDUAiN4vZ9aNSd/6qeZtFBAIqDI4mmOnTkEcINuJcMZCGhftV Knd47rF9+LgSZChRELQXlxIZfRp5iiFkrUdV2OsAxagblnU9dwJN1+Wv+N1KYBUB WYUgDukdZ/+ab8+0NfSFPqvjQ+pigAAroipt0lqlXbVNpnNe/iqYhKKcYzPfQSa+ eNt/PY1958EkQAUmsSAufhG95ZIFcBUc8g1lbiToBMOY9siyYisekJ+FlELLlsC5 3Jgw1/RkoVgc+1y00/RywWpkzg74yQy34QCZq0zytnE2wjZVmxZER75wm31rUnou Pl7e9CBqQkA//zOhcBnLDvW8qvq9c8rvK68= -----END CERTIFICATE-----Generated at Sun Mar 1 19:14:49 2026 by rpki-client