$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa File: c47f8c8a-a763-38be-9577-076076c9c6f9.roa (raw, json) Hash identifier: s/EK9e1NG7cYkpPSPzfGhcM0hmxYGUiZEc2TXTvsZxE= Subject key identifier: 2E:C7:61:E4:97:6F:5D:AC:47:C6:9D:71:38:9B:CC:E8:92:72:07:73 Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F4328584D473811AC93E7303F974E7900 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 7050 IP address blocks: 2606:8700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:38:11:ac:93:e7:30:3f:97:4e:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=205d8d5b-6d12-4326-8fcb-83086a25dd26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a1:f7:5c:32:c7:e4:50:bf:49:d8:38:7c:19: 25:e7:d7:ce:26:9d:41:d2:7c:a9:f4:a6:70:82:75: 4d:c6:25:cb:64:ba:e8:a3:b8:cf:65:f4:3a:50:a8: c0:f4:2b:7a:69:99:96:e0:2c:6d:be:a9:2a:8f:bb: 82:9a:40:56:80:6f:02:cc:90:6c:f1:80:92:d9:4d: 72:db:fb:59:e5:4f:63:77:97:5d:e7:66:d3:7c:2e: bd:65:d6:2b:cb:30:96:17:c6:6d:8d:35:40:47:f5: 50:28:2b:9d:df:76:17:50:df:78:96:36:f9:f8:07: 04:96:4f:1a:e9:d3:c7:26:96:18:64:c5:70:61:fa: c9:96:f0:9e:98:2b:c7:14:74:e3:05:29:6c:68:5c: 98:c3:58:39:60:e3:1e:4c:2b:79:98:2b:68:a7:bc: de:d5:76:4e:a3:5f:10:64:2d:b6:b8:1a:9a:47:ca: 94:a9:d3:ba:cb:1a:36:4a:5f:46:9e:e2:b2:52:6e: da:37:4e:a2:97:1f:20:94:55:98:37:cb:c0:1b:cb: 0c:64:34:6c:c7:d4:8b:9c:75:e3:98:b6:0e:8e:c6: 81:3f:ab:25:84:ba:41:89:38:27:08:f0:e8:e7:95: 8d:8d:f5:f4:25:e6:84:cf:4e:7d:13:b1:2c:89:fe: 5e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C7:61:E4:97:6F:5D:AC:47:C6:9D:71:38:9B:CC:E8:92:72:07:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv6: 2606:8700::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:33:68:6d:45:0b:cb:4b:96:c1:ca:f6:01:e4:03:ba:a9:89: 06:d1:1c:a4:da:3f:55:1f:e7:b9:c8:e7:11:95:eb:08:28:0e: 7b:52:0b:a1:61:82:9a:b4:84:58:12:eb:2d:44:bb:14:e9:65: 77:d5:d7:45:32:5e:b9:77:bc:8b:dc:d9:36:63:e8:40:8b:5c: af:bf:7d:4f:2b:a7:62:bf:40:aa:f4:fc:bf:2a:62:5b:db:df: fe:85:d3:51:a7:e9:22:3e:b4:76:9d:c8:2c:47:5d:0c:09:e5: c9:39:4f:e1:73:f8:7b:d9:b8:e6:63:8b:31:62:c4:15:1f:86: 4f:ee:c0:76:a7:7e:c6:9a:f3:8d:a0:74:7c:6a:c6:02:7b:86: 5f:4d:7d:e8:9b:f9:68:15:bd:7c:34:50:66:ad:c4:83:57:ce: 79:39:fc:49:0a:8d:d7:bf:aa:57:c4:c2:e8:ef:df:2c:24:db: 9e:0e:67:4e:81:7a:27:75:a0:9b:d2:91:5d:9a:f7:08:51:39: 92:d5:ec:dc:35:78:2b:93:17:e3:74:98:eb:a9:4a:8b:17:0c: 91:04:02:c0:46:c1:5b:29:bc:98:8c:7a:02:1b:f3:84:c2:a1: d5:39:90:58:51:33:2f:91:41:12:96:0c:eb:6c:02:60:76:e2: c6:dd:05:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1HOBGsk+cwP5dOeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MjA1ZDhkNWItNmQxMi00MzI2LThmY2ItODMwODZhMjVkZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qH3XDLH5FC/Sdg4fBkl59fOJp1B0nyp9KZw gnVNxiXLZLroo7jPZfQ6UKjA9Ct6aZmW4Cxtvqkqj7uCmkBWgG8CzJBs8YCS2U1y 2/tZ5U9jd5dd52bTfC69ZdYryzCWF8ZtjTVAR/VQKCud33YXUN94ljb5+AcElk8a 6dPHJpYYZMVwYfrJlvCemCvHFHTjBSlsaFyYw1g5YOMeTCt5mCtop7ze1XZOo18Q ZC22uBqaR8qUqdO6yxo2Sl9GnuKyUm7aN06ilx8glFWYN8vAG8sMZDRsx9SLnHXj mLYOjsaBP6slhLpBiTgnCPDo55WNjfX0JeaEz059E7Esif5eeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC7HYeSXb12sR8adcTibzOiScgdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvYzQ3ZjhjOGEtYTc2My0z OGJlLTk1NzctMDc2MDc2YzljNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgaHAAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI8zaG1FC8tLlsHK9gHkA7qpiQbRHKTaP1Uf57nI5xGV6wgoDntS C6Fhgpq0hFgS6y1EuxTpZXfV10UyXrl3vIvc2TZj6ECLXK+/fU8rp2K/QKr0/L8q Ylvb3/6F01Gn6SI+tHadyCxHXQwJ5ck5T+Fz+HvZuOZjizFixBUfhk/uwHanfsaa 842gdHxqxgJ7hl9Nfeib+WgVvXw0UGatxINXznk5/EkKjde/qlfEwujv3ywk254O Z06Beid1oJvSkV2a9whROZLV7Nw1eCuTF+N0mOupSosXDJEEAsBGwVspvJiMegIb 84TCodU5kFhRMy+RQRKWDOtsAmB24sbdBfY= -----END CERTIFICATE-----Generated at Thu Mar 26 22:06:45 2026 by rpki-client