$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/58cf0412-fc51-30be-becd-a5c8d211d8db.roa File: 58cf0412-fc51-30be-becd-a5c8d211d8db.roa (raw, json) Hash identifier: j6jpKLvpiUojPRzkcAIyhZNMdGKqUZ30lo1AmMoR3IU= Subject key identifier: C9:BA:8E:47:0B:1C:D5:38:92:4E:D0:EC:CC:91:C4:15:A5:6A:E5:E6 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584D00D32A877EE53CD14548B540 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/58cf0412-fc51-30be-becd-a5c8d211d8db.roa Signing time: Fri 27 Feb 2026 15:07:03 +0000 ROA not before: Fri 27 Feb 2026 15:07:03 +0000 ROA not after: Thu 28 May 2026 14:07:03 +0000 asID: 25198 IP address blocks: 69.42.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:d3:2a:87:7e:e5:3c:d1:45:48:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Feb 27 15:07:03 2026 GMT Not After : May 28 14:07:03 2026 GMT Subject: CN=c5764c5d-10c6-408b-bf44-8042b0539d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:86:6a:49:36:bd:b2:81:4e:54:0c:cd:c8:7a: d4:1f:39:6b:75:7e:86:6c:56:b2:63:93:b4:ef:e3: 5a:59:96:c7:74:f8:9e:f8:70:6a:3f:6e:7f:00:4e: 21:4e:fe:80:3a:fe:09:dc:eb:ba:60:40:25:9a:cb: d4:3b:67:a3:fb:aa:9b:fa:56:eb:fd:e1:19:e2:55: b5:4e:42:e3:9f:23:bf:d4:ed:16:47:60:ae:8c:86: 0f:04:42:bb:9f:36:ef:eb:79:a8:b4:f1:db:d2:01: fc:55:28:b7:dc:d8:72:89:f1:60:1f:df:c1:e3:d2: db:77:a8:23:bb:30:e7:59:dc:3d:dc:07:c0:45:27: 6b:9e:01:e5:bd:e3:cf:6f:e1:64:ad:6b:32:cb:66: b7:94:37:f9:67:a6:fc:54:66:cd:6d:64:55:2d:81: e6:e9:6e:54:9f:e3:6e:7a:ac:88:06:ec:f0:48:4e: 3a:1f:39:6f:6d:1a:31:16:62:fa:59:a1:ca:9c:54: 18:2d:ae:17:0d:7a:32:32:44:72:39:06:e4:7d:9b: 49:7d:95:13:1a:b8:57:a0:39:50:82:34:4f:c5:bc: 6d:e4:e6:23:03:86:34:43:14:d9:c4:cd:c5:68:50: 4f:98:69:d5:0d:8a:bf:ef:33:4a:4d:7f:7c:83:ac: d7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BA:8E:47:0B:1C:D5:38:92:4E:D0:EC:CC:91:C4:15:A5:6A:E5:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/58cf0412-fc51-30be-becd-a5c8d211d8db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 69.42.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:60:8f:37:eb:43:bf:e1:f3:a9:4a:bf:cc:ee:a5:10:59:31: fe:fd:a6:ba:5b:b6:ff:ba:9b:84:a2:be:f7:99:9f:38:02:c7: 55:9c:88:86:0a:06:3c:7f:2a:ec:62:ba:71:12:70:24:59:ae: 49:fd:b4:ee:e4:f4:fa:5f:42:6f:c7:fb:e5:c0:e0:98:20:ab: 2e:b8:13:08:7b:a6:9b:0f:e0:3a:b1:64:b8:38:3e:28:c1:81: 8b:b6:61:46:49:66:6a:a7:b6:95:07:2e:a2:c5:a8:24:23:70: e2:dc:99:b9:55:e5:6e:10:91:a4:23:15:73:8a:0a:2e:8a:37: e4:7e:88:e2:dc:a9:9f:7f:f5:04:85:c4:b4:b0:d6:04:48:a6: cf:28:32:ed:30:1e:59:fb:f5:ad:08:27:91:c7:a2:c4:9d:e5: 16:08:1f:c6:5e:f9:04:01:08:68:29:85:4e:7f:d9:97:11:8b: dc:65:2b:f1:ae:d2:3e:d1:27:2f:5d:fc:1f:94:51:99:1b:88: e7:c6:02:4d:57:b5:05:25:25:57:57:52:d9:3f:0d:c7:7b:bf: d0:41:b3:ee:bc:77:b3:eb:f3:4e:43:f8:84:52:0c:b3:d7:e3: 44:6d:41:a8:70:51:bb:32:de:dc:06:1a:0e:da:d1:e2:58:e1: 0a:0a:58:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0A0yqHfuU80UVItUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDIyNzE1MDcwM1oXDTI2MDUyODE0MDcwM1owLzEtMCsGA1UEAxMk YzU3NjRjNWQtMTBjNi00MDhiLWJmNDQtODA0MmIwNTM5ZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYZqSTa9soFOVAzNyHrUHzlrdX6GbFayY5O0 7+NaWZbHdPie+HBqP25/AE4hTv6AOv4J3Ou6YEAlmsvUO2ej+6qb+lbr/eEZ4lW1 TkLjnyO/1O0WR2CujIYPBEK7nzbv63motPHb0gH8VSi33NhyifFgH9/B49Lbd6gj uzDnWdw93AfARSdrngHlvePPb+FkrWsyy2a3lDf5Z6b8VGbNbWRVLYHm6W5Un+Nu eqyIBuzwSE46HzlvbRoxFmL6WaHKnFQYLa4XDXoyMkRyOQbkfZtJfZUTGrhXoDlQ gjRPxbxt5OYjA4Y0QxTZxM3FaFBPmGnVDYq/7zNKTX98g6zXTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMm6jkcLHNU4kk7Q7MyRxBWlauXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvNThjZjA0MTItZmM1MS0z MGJlLWJlY2QtYTVjOGQyMTFkOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSrTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhgjzfrQ7/h86lKv8zupRBZMf79prpbtv+6m4SivveZnzgCx1WciIYK Bjx/KuxiunEScCRZrkn9tO7k9PpfQm/H++XA4Jggqy64Ewh7ppsP4DqxZLg4PijB gYu2YUZJZmqntpUHLqLFqCQjcOLcmblV5W4QkaQjFXOKCi6KN+R+iOLcqZ9/9QSF xLSw1gRIps8oMu0wHln79a0IJ5HHosSd5RYIH8Ze+QQBCGgphU5/2ZcRi9xlK/Gu 0j7RJy9d/B+UUZkbiOfGAk1XtQUlJVdXUtk/Dcd7v9BBs+68d7Pr805D+IRSDLPX 40RtQahwUbsy3twGGg7a0eJY4QoKWMg= -----END CERTIFICATE-----Generated at Mon Mar 2 12:47:17 2026 by rpki-client