$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa File: c47f8c8a-a763-38be-9577-076076c9c6f9.roa (raw, json) Hash identifier: 4Z3KxA70V/4SRXTSrUX/tVyMKjv1ckFN9zDB/7XaETs= Subject key identifier: 70:F6:CF:BA:96:ED:E2:41:5F:02:B3:5E:2A:86:47:C5:DF:E4:D4:6D Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F4328584D6B49E734D77D6D506DD2AB00 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa Signing time: Mon 06 Apr 2026 18:21:58 +0000 ROA not before: Mon 06 Apr 2026 18:21:58 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 7050 IP address blocks: 2606:8700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:49:e7:34:d7:7d:6d:50:6d:d2:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Apr 6 18:21:58 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=b2d70c7e-c219-4155-ba82-5dae70854417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:74:b4:71:85:da:ff:78:aa:78:8d:44:10:58: 99:d9:df:bf:e0:18:51:6e:a6:79:2f:84:31:d8:01: af:88:42:ea:20:4d:4d:9f:e7:64:6c:a0:f5:24:bf: 72:16:40:26:c9:81:b7:d3:a2:52:9b:fe:66:3a:aa: bb:cb:89:19:57:0f:0e:a9:44:c2:4e:a9:9e:86:0d: 63:aa:49:82:80:c8:5d:d2:21:30:9a:c9:58:b0:0c: 22:83:b3:8f:48:ec:99:c5:06:a5:f6:30:7a:be:d7: 7b:80:8b:01:10:49:da:d8:fd:eb:35:1a:c5:2f:eb: 56:b8:b4:54:cb:f5:bf:55:94:66:91:d0:2e:e4:3b: 11:c4:c5:4d:65:0e:39:fb:c8:1f:d8:1f:2e:a8:80: d9:9c:48:c8:20:03:72:83:0f:5c:0c:18:ee:a4:1d: c1:86:41:0d:d2:34:d7:be:74:05:a0:8f:3e:3a:bf: 31:f0:db:99:ec:bd:44:be:24:18:ae:8a:d1:e7:b9: c6:24:81:41:49:aa:31:93:28:b6:f3:95:15:76:74: 40:6f:c1:3f:f5:f0:92:28:75:58:d7:97:67:14:23: 83:28:78:a3:58:f9:c5:d4:9f:1c:06:19:da:c5:85: bb:af:d2:dd:c9:34:ba:be:ac:df:f5:ba:ef:2d:b3: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F6:CF:BA:96:ED:E2:41:5F:02:B3:5E:2A:86:47:C5:DF:E4:D4:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv6: 2606:8700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:2c:26:24:c3:f0:45:67:bd:67:8c:62:6c:a5:23:f6:e1:ac: 58:12:40:e4:30:45:dd:2c:6a:84:77:90:37:4b:b0:c9:7b:79: 8b:46:56:6f:ad:8e:e0:61:f2:0c:ff:6a:5a:65:21:f1:86:6e: bf:f8:52:64:df:5f:87:90:dc:a0:89:8b:62:6d:d6:6b:e1:2a: 90:29:1b:c2:98:d4:3a:1b:46:c5:cd:5d:c6:c8:68:05:6e:9e: 3f:3e:35:cb:32:7f:f3:f1:cd:b7:07:3c:15:27:63:be:dc:a2: aa:34:a5:f9:0f:52:25:4b:99:60:95:77:29:55:78:a7:62:bb: 5c:b8:c3:92:e0:62:3c:f7:a4:a7:46:3c:37:e9:cf:b9:15:44: b3:b1:3e:0b:96:ff:a8:b6:58:fa:05:95:fa:c4:c9:de:26:b8: 68:18:9d:77:43:2e:c8:89:d9:95:22:f8:a2:82:aa:55:9e:b4: 89:2a:d1:2c:40:fb:1c:b9:71:3a:01:29:da:9f:72:f7:f3:dc: 98:42:b2:90:3d:46:53:b2:b0:0a:60:dd:ea:5d:c7:9a:cb:0f: dd:9e:cf:6a:ac:9e:09:d8:c7:99:3e:bb:7a:90:ac:b4:43:57: 53:1d:1e:df:32:d7:b2:f7:4c:09:28:68:48:c3:ba:3d:e9:d9: 56:31:f2:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1rSec0131tUG3SqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI2MDQwNjE4MjE1OFoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YjJkNzBjN2UtYzIxOS00MTU1LWJhODItNWRhZTcwODU0NDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03S0cYXa/3iqeI1EEFiZ2d+/4BhRbqZ5L4Qx 2AGviELqIE1Nn+dkbKD1JL9yFkAmyYG306JSm/5mOqq7y4kZVw8OqUTCTqmehg1j qkmCgMhd0iEwmslYsAwig7OPSOyZxQal9jB6vtd7gIsBEEna2P3rNRrFL+tWuLRU y/W/VZRmkdAu5DsRxMVNZQ45+8gf2B8uqIDZnEjIIANygw9cDBjupB3BhkEN0jTX vnQFoI8+Or8x8NuZ7L1EviQYrorR57nGJIFBSaoxkyi285UVdnRAb8E/9fCSKHVY 15dnFCODKHijWPnF1J8cBhnaxYW7r9LdyTS6vqzf9brvLbN35wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHD2z7qW7eJBXwKzXiqGR8Xf5NRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvYzQ3ZjhjOGEtYTc2My0z OGJlLTk1NzctMDc2MDc2YzljNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQLCYkw/BFZ71njGJspSP24axYEkDkMEXdLGqEd5A3S7DJe3mLRlZv rY7gYfIM/2paZSHxhm6/+FJk31+HkNygiYtibdZr4SqQKRvCmNQ6G0bFzV3GyGgF bp4/PjXLMn/z8c23BzwVJ2O+3KKqNKX5D1IlS5lglXcpVXinYrtcuMOS4GI896Sn Rjw36c+5FUSzsT4Llv+otlj6BZX6xMneJrhoGJ13Qy7IidmVIviigqpVnrSJKtEs QPscuXE6ASnan3L389yYQrKQPUZTsrAKYN3qXceayw/dns9qrJ4J2MeZPrt6kKy0 Q1dTHR7fMtey90wJKGhIw7o96dlWMfKO -----END CERTIFICATE-----Generated at Fri Apr 17 19:23:47 2026 by rpki-client