$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/b99a41da-dcc1-3461-8231-cbabb41c7c6f.roa File: b99a41da-dcc1-3461-8231-cbabb41c7c6f.roa (raw, json) Hash identifier: rd+uYgJfCikfp9xUt+yEZvJMxmRhnKG6p8BVQuv0fvY= Subject key identifier: 43:49:3A:41:D6:1D:94:EF:A3:3A:94:62:B6:12:C0:52:DC:07:03:49 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584EA78893DDDBFCEB9F7EF56760 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/b99a41da-dcc1-3461-8231-cbabb41c7c6f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11215 IP address blocks: 104.153.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:93:dd:db:fc:eb:9f:7e:f5:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=11cbb1c1-77ae-4354-96eb-34b61c2bc198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d9:69:95:c4:4c:f6:0d:78:18:01:c6:55:3f: ee:08:bf:7d:cc:42:3a:e9:c8:36:d5:c9:77:11:ae: 5e:39:bd:53:f8:99:a2:d8:eb:6e:ec:8b:da:9c:76: cc:e7:88:d1:cc:e9:c2:0d:a6:59:11:bb:08:8c:46: 50:6f:89:15:8e:a7:e3:9a:8e:54:da:ae:06:fc:90: 63:5f:50:5c:54:41:ea:39:dd:36:a2:84:fe:ca:f7: 55:63:39:e0:25:61:cc:67:88:34:74:4d:55:fe:48: 2e:70:44:95:1e:32:58:af:78:bb:18:94:e8:a6:bf: 05:ba:16:be:36:f6:23:41:db:b5:38:93:ef:4b:56: 78:9d:95:bc:bc:92:34:a4:20:2e:8b:d0:8e:5a:a7: 8e:36:a1:59:7e:3e:fa:8e:1a:d9:75:fc:25:40:f8: ac:a2:ad:67:53:2c:7d:5f:0b:98:1a:e3:e6:e0:e7: 0d:06:dc:60:3f:4c:5d:5f:2c:11:cf:a3:c5:5e:b0: 2e:08:b8:3d:55:11:d9:62:4d:ca:04:0e:cf:e4:dc: 4b:61:e9:03:48:ea:cd:1e:c8:6e:fc:8d:3d:29:90: 8b:49:08:b7:16:77:8a:02:ac:f0:3b:9e:48:0a:4b: 73:70:d0:5c:b8:eb:8a:12:bf:67:51:ad:4c:ef:ff: fd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:49:3A:41:D6:1D:94:EF:A3:3A:94:62:B6:12:C0:52:DC:07:03:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/b99a41da-dcc1-3461-8231-cbabb41c7c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 104.153.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:13:a9:92:b6:6a:d2:ba:83:5e:af:d2:4d:d2:1a:ef:c3:b1: 35:d5:e2:26:cb:fc:a0:4f:7e:a7:d6:a5:64:85:3a:c9:6c:21: ff:dd:a9:08:66:99:54:56:88:24:bf:12:67:10:b3:77:06:33: 76:c0:63:c1:55:38:e8:af:53:d2:42:5a:24:df:50:6e:2c:5c: 10:b2:8a:c8:9f:01:b7:49:23:19:4f:8e:db:b9:2b:54:32:30: eb:4a:cc:a3:c7:1a:1c:1d:12:fc:d5:ac:93:26:8a:9e:92:cc: 4c:95:c8:d5:02:83:eb:10:f1:9d:88:d0:de:9a:03:bf:c9:ec: dc:cc:f8:87:2b:85:72:7a:e7:fb:1e:cd:8d:9d:4a:d0:9a:3d: 63:27:5c:42:03:4d:54:87:df:97:75:5e:52:12:7a:38:11:e6: 38:1d:19:15:8c:0c:56:7b:5e:3a:20:9f:e3:b8:56:02:01:6f: db:d9:05:b2:3e:22:5a:b0:37:80:c9:da:ea:7d:1f:d6:92:61: ce:c2:05:02:fb:92:ea:e7:b8:33:0e:8a:61:1d:6d:a9:6f:f8: 50:43:fa:a0:1a:b0:2b:c1:29:17:63:99:e9:71:9a:0e:df:88: b3:51:33:cd:7e:b2:6b:59:5b:32:ac:a8:bc:68:bb:14:ae:4c: 60:b6:b8:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJPd2/zrn371Z2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTFjYmIxYzEtNzdhZS00MzU0LTk2ZWItMzRiNjFjMmJjMTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9lplcRM9g14GAHGVT/uCL99zEI66cg21cl3 Ea5eOb1T+Jmi2Otu7IvanHbM54jRzOnCDaZZEbsIjEZQb4kVjqfjmo5U2q4G/JBj X1BcVEHqOd02ooT+yvdVYzngJWHMZ4g0dE1V/kgucESVHjJYr3i7GJTopr8Fuha+ NvYjQdu1OJPvS1Z4nZW8vJI0pCAui9COWqeONqFZfj76jhrZdfwlQPisoq1nUyx9 XwuYGuPm4OcNBtxgP0xdXywRz6PFXrAuCLg9VRHZYk3KBA7P5NxLYekDSOrNHshu /I09KZCLSQi3FneKAqzwO55ICktzcNBcuOuKEr9nUa1M7//9qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENJOkHWHZTvozqUYrYSwFLcBwNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvYjk5YTQxZGEtZGNjMS0z NDYxLTgyMzEtY2JhYmI0MWM3YzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMTqZK2atK6g16v0k3SGu/DsTXV4ibL/KBPfqfWpWSFOslsIf/dqQhm mVRWiCS/EmcQs3cGM3bAY8FVOOivU9JCWiTfUG4sXBCyisifAbdJIxlPjtu5K1Qy MOtKzKPHGhwdEvzVrJMmip6SzEyVyNUCg+sQ8Z2I0N6aA7/J7NzM+IcrhXJ65/se zY2dStCaPWMnXEIDTVSH35d1XlISejgR5jgdGRWMDFZ7Xjogn+O4VgIBb9vZBbI+ IlqwN4DJ2up9H9aSYc7CBQL7kurnuDMOimEdbalv+FBD+qAasCvBKRdjmelxmg7f iLNRM81+smtZWzKsqLxouxSuTGC2uCQ= -----END CERTIFICATE-----Generated at Sat Aug 22 09:04:10 2026 by rpki-client