$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/a357236a-6d12-3879-94b9-e640090ac2f3.roa File: a357236a-6d12-3879-94b9-e640090ac2f3.roa (raw, json) Hash identifier: QENMF1HDVHD/X2mc6coyoatvvVoYpTwG686ufD3p8dQ= Subject key identifier: 23:59:42:82:8F:C1:5E:F3:DB:6D:D1:9E:46:D8:A9:99:A0:42:9E:E3 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584FB0BDDF4014F728E03890CB40 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/a357236a-6d12-3879-94b9-e640090ac2f3.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 33667 IP address blocks: 100.42.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:df:40:14:f7:28:e0:38:90:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=f5d5aabb-7592-47db-bd45-0519d970279a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:84:10:a1:f0:0c:7a:47:09:0a:f8:87:a2: d0:d5:27:e1:67:3f:f5:c7:5c:ad:08:07:f3:cd:a0: 49:d2:ff:27:96:d5:c2:59:63:4c:51:15:ba:59:bb: bf:44:e1:3d:08:ef:4b:8b:31:a1:1a:ee:9c:52:a4: f2:25:ee:e5:a8:fd:37:3c:d7:99:12:e9:a3:f6:b2: 44:9c:df:9f:99:fc:b7:ed:24:82:81:24:d1:19:f5: 20:b2:c6:0f:e6:4e:b9:62:50:f9:27:74:cf:84:ca: 04:2c:ed:e5:6b:98:27:58:44:3c:12:39:90:fb:f3: 13:18:fd:cc:41:4f:0e:a7:bb:29:87:ef:21:84:80: b6:ca:74:f8:c3:4a:48:22:85:a7:a6:b9:f1:8f:e2: 1b:a3:7c:3b:07:0e:7f:fd:12:bf:84:d7:93:a9:95: ea:30:37:60:f0:52:47:67:1e:d7:1a:24:d9:03:f9: 08:c8:fa:8d:99:c9:c1:36:63:22:2d:da:54:c5:2e: cc:6c:f1:9a:b8:d4:7b:a7:45:6e:9d:e0:91:13:d3: 70:3d:08:41:49:b6:ab:b0:9f:7e:b5:e7:c7:c0:d4: 55:11:40:95:3e:50:99:56:73:b8:62:97:2e:71:e1: 35:fd:66:c5:26:f1:43:27:1f:d4:bb:eb:da:09:0d: cf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:59:42:82:8F:C1:5E:F3:DB:6D:D1:9E:46:D8:A9:99:A0:42:9E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/a357236a-6d12-3879-94b9-e640090ac2f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 100.42.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:0f:c5:e7:43:ff:44:d8:0d:8c:e8:06:e3:a2:96:73:cf:72: 38:23:a2:cc:7d:f4:9a:09:7c:2d:fc:d0:c5:3d:46:45:04:b5: 24:0e:ba:ed:20:0e:9f:a8:74:49:2d:1e:9d:a5:e2:79:23:5d: 27:0c:09:c6:05:b0:73:df:c3:49:1a:a1:ba:16:0c:55:81:ad: a3:6b:c9:38:60:fd:9d:46:82:ee:18:7d:20:de:f0:a1:b1:da: 41:83:7d:e9:75:c4:de:67:17:bd:33:f2:1f:73:4a:26:6f:80: 6b:36:0d:f1:f3:cf:ec:8d:80:9c:cf:09:3c:bc:3f:5e:96:6a: 0b:32:46:39:d8:36:2c:a9:cc:0b:84:06:5d:f3:9c:dd:52:d3: 81:dc:51:c7:b8:df:2e:ba:e3:9a:80:1d:95:b6:da:c9:34:cf: 9c:87:96:1f:0d:ee:7c:48:18:c4:5a:0a:a1:ee:2d:56:3e:97: c1:f0:bc:f1:09:ae:d1:d8:4a:d1:e3:5c:40:0f:89:e1:fa:0d: cc:aa:54:00:c3:e1:b1:4d:9c:21:b8:e3:2b:10:5b:1f:a2:97: 33:e1:26:99:e4:a1:9a:bd:20:04:86:0e:ea:fb:32:41:69:49: b2:7f:fa:f6:05:37:04:8c:7d:23:34:77:9b:95:59:c4:8b:b9: 3c:9b:f4:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wvd9AFPco4DiQy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk ZjVkNWFhYmItNzU5Mi00N2RiLWJkNDUtMDUxOWQ5NzAyNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIKEEKHwDHpHCQr4h6LQ1SfhZz/1x1ytCAfz zaBJ0v8nltXCWWNMURW6Wbu/ROE9CO9LizGhGu6cUqTyJe7lqP03PNeZEumj9rJE nN+fmfy37SSCgSTRGfUgssYP5k65YlD5J3TPhMoELO3la5gnWEQ8EjmQ+/MTGP3M QU8Op7sph+8hhIC2ynT4w0pIIoWnprnxj+Ibo3w7Bw5//RK/hNeTqZXqMDdg8FJH Zx7XGiTZA/kIyPqNmcnBNmMiLdpUxS7MbPGauNR7p0VuneCRE9NwPQhBSbarsJ9+ tefHwNRVEUCVPlCZVnO4YpcuceE1/WbFJvFDJx/Uu+vaCQ3PwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNZQoKPwV7z223RnkbYqZmgQp7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvYTM1NzIzNmEtNmQxMi0z ODc5LTk0YjktZTY0MDA5MGFjMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZCoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsPxedD/0TYDYzoBuOilnPPcjgjosx99JoJfC380MU9RkUEtSQOuu0g Dp+odEktHp2l4nkjXScMCcYFsHPfw0kaoboWDFWBraNryThg/Z1Ggu4YfSDe8KGx 2kGDfel1xN5nF70z8h9zSiZvgGs2DfHzz+yNgJzPCTy8P16WagsyRjnYNiypzAuE Bl3znN1S04HcUce43y6645qAHZW22sk0z5yHlh8N7nxIGMRaCqHuLVY+l8HwvPEJ rtHYStHjXEAPieH6DcyqVADD4bFNnCG44ysQWx+ilzPhJpnkoZq9IASGDur7MkFp SbJ/+vYFNwSMfSM0d5uVWcSLuTyb9J0= -----END CERTIFICATE-----Generated at Wed Nov 4 01:14:08 2026 by rpki-client