$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9802b0ae-0c4f-3f07-9dab-a4478eeff868.roa File: 9802b0ae-0c4f-3f07-9dab-a4478eeff868.roa (raw, json) Hash identifier: NTO9odCAUarmO+i8jGchclqp6XwM4BOOM0rRXGDekfw= Subject key identifier: F4:70:69:16:2F:91:FD:8E:EC:12:2B:2D:B9:D0:F0:D9:DF:B6:C5:81 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584FB0BDDF7BBAA3BA1EED290480 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9802b0ae-0c4f-3f07-9dab-a4478eeff868.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 33667 IP address blocks: 162.218.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:df:7b:ba:a3:ba:1e:ed:29:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=cae2e182-bdba-4479-8ef1-68cb4bc52edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:77:0f:76:c6:83:d6:9f:4a:f3:33:d0:c5:1a: cf:d3:a4:97:d4:13:27:b5:e6:72:eb:7d:80:24:12: db:4f:f4:a4:cb:27:e7:c2:d0:a8:36:0d:a6:d1:37: 21:f3:93:e3:33:e1:6f:88:3a:24:ac:3c:61:ba:bc: e3:87:ac:8b:75:d2:49:cf:a2:af:81:a3:52:42:dc: 22:3d:48:b6:b7:78:9d:35:cf:6d:0b:ed:bc:e2:a2: 35:d6:60:ee:40:2a:44:0b:b6:f2:e1:d6:f7:d5:57: 4d:ed:fb:db:c9:19:04:f1:ba:66:17:38:3a:39:dd: eb:6f:0d:21:9f:5b:61:b8:77:e7:24:0a:46:33:6e: c2:da:f2:66:16:a9:ad:f8:4c:3e:d2:d4:51:8e:81: c9:7f:4f:87:76:3a:1f:c2:37:39:6f:ca:58:17:d8: 49:3c:8f:9c:9e:51:cc:66:88:ad:26:b3:30:50:ac: e9:7a:a1:25:f1:45:ed:30:e5:45:48:57:8b:71:45: 14:e4:70:eb:f8:23:02:b7:e3:80:2c:02:86:04:c1: 91:c0:94:5a:75:79:75:f9:b2:78:99:75:c2:ae:af: f5:a9:53:17:9e:4d:4d:44:88:04:de:6f:4f:71:4f: f0:3c:9b:04:59:b8:b6:66:c1:54:22:96:1f:49:c5: fc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:70:69:16:2F:91:FD:8E:EC:12:2B:2D:B9:D0:F0:D9:DF:B6:C5:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9802b0ae-0c4f-3f07-9dab-a4478eeff868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 162.218.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:64:44:14:06:2e:c0:37:be:59:78:9b:a2:93:ab:34:e1:cf: 42:98:31:37:1e:15:90:2b:47:89:20:06:92:2f:a0:b0:32:8b: 0f:c7:18:07:9c:7a:7c:e8:a9:c2:74:f3:9b:f0:3d:a4:b1:d9: 08:ef:4d:2f:67:d8:63:03:86:58:14:c1:e2:3e:a9:fb:89:dd: c9:84:e1:50:b2:94:5b:c1:6a:85:91:68:8a:59:d1:88:8d:ac: 9b:c6:70:c8:f2:c7:16:cc:d9:78:79:ea:95:fc:70:74:c3:aa: 4a:44:46:3d:af:c4:9a:5c:17:07:c0:43:99:28:ed:fa:f2:7d: e3:ab:c3:5c:a4:6b:59:97:b1:cc:d4:ce:a6:5f:e0:b7:33:24: 5c:ae:b6:75:cc:a7:0c:4a:c6:21:b3:85:3f:9d:8b:f1:e6:39: 01:5e:6c:fc:3e:52:a0:bc:57:1b:76:21:87:bc:86:9b:5c:45: ed:46:72:75:87:b2:22:a4:04:ae:a7:a3:9b:63:ab:77:08:26: e3:35:44:ad:9c:65:cf:8c:91:e0:05:6c:e3:ac:a3:a9:8f:85: 65:13:e9:2c:d5:70:96:7d:99:30:07:db:b6:4d:45:f2:16:4d: ec:db:78:d3:89:83:10:f0:1b:b2:c2:d2:1a:b5:a2:8e:de:3e: 18:ff:fa:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wvd97uqO6Hu0pBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk Y2FlMmUxODItYmRiYS00NDc5LThlZjEtNjhjYjRiYzUyZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3cPdsaD1p9K8zPQxRrP06SX1BMnteZy632A JBLbT/SkyyfnwtCoNg2m0Tch85PjM+FviDokrDxhurzjh6yLddJJz6KvgaNSQtwi PUi2t3idNc9tC+284qI11mDuQCpEC7by4db31VdN7fvbyRkE8bpmFzg6Od3rbw0h n1thuHfnJApGM27C2vJmFqmt+Ew+0tRRjoHJf0+Hdjofwjc5b8pYF9hJPI+cnlHM ZoitJrMwUKzpeqEl8UXtMOVFSFeLcUUU5HDr+CMCt+OALAKGBMGRwJRadXl1+bJ4 mXXCrq/1qVMXnk1NRIgE3m9PcU/wPJsEWbi2ZsFUIpYfScX87QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRwaRYvkf2O7BIrLbnQ8NnftsWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvOTgwMmIwYWUtMGM0Zi0z ZjA3LTlkYWItYTQ0NzhlZWZmODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBotpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOVkRBQGLsA3vll4m6KTqzThz0KYMTceFZArR4kgBpIvoLAyiw/HGAec enzoqcJ085vwPaSx2QjvTS9n2GMDhlgUweI+qfuJ3cmE4VCylFvBaoWRaIpZ0YiN rJvGcMjyxxbM2Xh56pX8cHTDqkpERj2vxJpcFwfAQ5ko7fryfeOrw1yka1mXsczU zqZf4LczJFyutnXMpwxKxiGzhT+di/HmOQFebPw+UqC8Vxt2IYe8hptcRe1GcnWH siKkBK6no5tjq3cIJuM1RK2cZc+MkeAFbOOso6mPhWUT6SzVcJZ9mTAH27ZNRfIW TezbeNOJgxDwG7LC0hq1oo7ePhj/+go= -----END CERTIFICATE-----Generated at Wed Nov 4 08:55:32 2026 by rpki-client