$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef/97fccf3d-c3e1-3eb6-b35a-300c0e0af8cd.roa File: 97fccf3d-c3e1-3eb6-b35a-300c0e0af8cd.roa (raw, json) Hash identifier: P4hZlqzDyiF4fHtFim3l4gLVcIVP/X8+ph9iE//8hMM= Subject key identifier: F8:6C:52:12:7B:DF:06:66:88:02:B4:1E:ED:71:4A:F4:BC:EE:D0:D4 Certificate issuer: /CN=86f7a77b-e956-481e-b990-dda9c01233ef Certificate serial: 010D0C9F4328584D04E23E3A4D09A4E79C0E2BC0 Authority key identifier: C0:AD:7F:FD:65:87:FA:30:98:CE:CE:07:A9:0F:4D:7E:AF:91:4A:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef/97fccf3d-c3e1-3eb6-b35a-300c0e0af8cd.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 26996 IP address blocks: 2620:b7:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef/86f7a77b-e956-481e-b990-dda9c01233ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef/86f7a77b-e956-481e-b990-dda9c01233ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:3e:3a:4d:09:a4:e7:9c:0e:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f7a77b-e956-481e-b990-dda9c01233ef Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=9d6859f7-cdf5-4f92-b512-aa9f48a7f5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4c:0e:9c:2c:34:95:b7:5f:37:9b:36:e3:bc: 04:db:03:d1:f6:0a:bd:bc:44:a0:cf:2b:58:aa:98: 10:9f:d8:e1:a3:6a:84:bf:cf:3a:51:4d:ca:9c:8b: d8:38:ff:4c:c1:2b:04:43:51:24:95:8e:a3:96:7b: f5:32:46:80:0e:d7:68:e2:cb:27:4f:ee:18:6a:af: b0:43:5c:71:3e:ad:12:4c:be:e2:45:37:a6:31:ef: 3c:52:8f:41:e0:1d:8d:2f:23:c9:85:76:95:8b:c8: 7f:10:9d:5b:18:ca:63:0a:7e:9d:a5:c0:4b:dd:cd: c4:76:6a:72:b4:c3:b9:b0:de:8b:09:61:c0:d6:00: 48:72:b6:a5:8f:02:6e:2e:ef:73:93:f5:43:aa:02: 03:25:1f:69:c9:9e:94:87:4d:49:5b:31:f5:e8:b5: 69:fd:04:e9:c0:32:37:4e:49:ad:f5:97:8f:52:c9: 8d:ab:09:c7:30:7b:4a:aa:40:fd:e8:86:1a:85:83: 24:73:90:2d:7b:ff:c9:af:0b:00:fa:22:fe:7d:0c: 23:dd:b3:c6:21:9c:54:fb:94:77:50:0d:88:80:e5: 1c:b7:41:0a:22:3e:32:58:a1:3b:4b:43:3f:f2:13: 7e:17:03:70:b6:f1:45:de:03:83:d3:d9:bf:f2:f5: f5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6C:52:12:7B:DF:06:66:88:02:B4:1E:ED:71:4A:F4:BC:EE:D0:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef/97fccf3d-c3e1-3eb6-b35a-300c0e0af8cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef/86f7a77b-e956-481e-b990-dda9c01233ef.crl X509v3 Authority Key Identifier: keyid:C0:AD:7F:FD:65:87:FA:30:98:CE:CE:07:A9:0F:4D:7E:AF:91:4A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef.cer sbgp-ipAddrBlock: critical IPv6: 2620:b7:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:73:4f:c7:b3:d4:d8:4d:05:79:cb:3f:62:a5:1e:59:db:64: f9:b5:b8:e2:ee:ad:61:56:a7:7b:46:ef:43:58:dd:e2:5f:ba: 35:f4:b4:4e:04:a2:ec:0c:af:25:cb:6c:99:51:ae:71:e2:48: d4:9f:e9:dd:b2:79:ba:2e:e5:9a:f0:7f:9e:10:04:8b:43:33: 96:23:a2:f6:e2:be:4e:aa:78:85:a4:5f:ba:ad:fe:a8:07:9d: cf:a4:39:27:90:8f:ba:ae:41:9c:e1:85:c8:78:6e:16:20:ee: d3:a8:69:f4:43:b6:23:b8:52:93:39:25:76:e7:d9:10:c3:14: c9:47:de:cf:6c:66:f1:72:af:d0:31:71:ca:e3:ef:a7:05:e4: 79:7b:1d:a1:6a:c7:79:8d:4d:72:e1:6d:e2:62:cb:80:ae:f1: 52:44:9b:0f:65:6b:f5:14:40:57:bb:7d:c3:d7:08:d9:54:b4: c4:7c:29:79:c1:55:90:66:f3:30:bc:87:02:c5:32:3b:f3:67: fa:6a:e9:65:62:a7:fd:f4:71:25:75:18:e5:e8:0f:a7:4e:3c: ca:ea:3b:da:bf:d5:c9:3f:4c:b2:2c:02:07:60:77:5f:32:0f: 9e:ed:e3:90:78:55:e7:06:01:15:2b:93:00:e4:cd:66:26:8e: 18:cc:87:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0E4j46TQmk55wOK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmN2E3N2ItZTk1Ni00ODFlLWI5OTAtZGRhOWMwMTIz M2VmMB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk OWQ2ODU5ZjctY2RmNS00ZjkyLWI1MTItYWE5ZjQ4YTdmNWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEwOnCw0lbdfN5s247wE2wPR9gq9vESgzytY qpgQn9jho2qEv886UU3KnIvYOP9MwSsEQ1EklY6jlnv1MkaADtdo4ssnT+4Yaq+w Q1xxPq0STL7iRTemMe88Uo9B4B2NLyPJhXaVi8h/EJ1bGMpjCn6dpcBL3c3Edmpy tMO5sN6LCWHA1gBIcraljwJuLu9zk/VDqgIDJR9pyZ6Uh01JWzH16LVp/QTpwDI3 Tkmt9ZePUsmNqwnHMHtKqkD96IYahYMkc5Ate//JrwsA+iL+fQwj3bPGIZxU+5R3 UA2IgOUct0EKIj4yWKE7S0M/8hN+FwNwtvFF3gOD09m/8vX11wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPhsUhJ73wZmiAK0Hu1xSvS87tDUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmY3 YTc3Yi1lOTU2LTQ4MWUtYjk5MC1kZGE5YzAxMjMzZWYvOTdmY2NmM2QtYzNlMS0z ZWI2LWIzNWEtMzAwYzBlMGFmOGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmN2E3N2ItZTk1Ni00ODFlLWI5 OTAtZGRhOWMwMTIzM2VmLzg2ZjdhNzdiLWU5NTYtNDgxZS1iOTkwLWRkYTljMDEy MzNlZi5jcmwwHwYDVR0jBBgwFoAUwK1//WWH+jCYzs4HqQ9Nfq+RSjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmY3YTc3Yi1lOTU2LTQ4MWUtYjk5MC1kZGE5 YzAxMjMzZWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAt4AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVzT8ez1NhNBXnLP2KlHlnbZPm1uOLurWFWp3tG70NY3eJfujX0 tE4EouwMryXLbJlRrnHiSNSf6d2yebou5Zrwf54QBItDM5Yjovbivk6qeIWkX7qt /qgHnc+kOSeQj7quQZzhhch4bhYg7tOoafRDtiO4UpM5JXbn2RDDFMlH3s9sZvFy r9Axccrj76cF5Hl7HaFqx3mNTXLhbeJiy4Cu8VJEmw9la/UUQFe7fcPXCNlUtMR8 KXnBVZBm8zC8hwLFMjvzZ/pq6WVip/30cSV1GOXoD6dOPMrqO9q/1ck/TLIsAgdg d18yD57t45B4VecGARUrkwDkzWYmjhjMh/c= -----END CERTIFICATE-----Generated at Mon Mar 2 23:23:48 2026 by rpki-client