$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/f787fc4c-dee8-3662-9060-884db8e24160.roa File: f787fc4c-dee8-3662-9060-884db8e24160.roa (raw, json) Hash identifier: wYLDV+p2VjIl/d2vDo/kVqwmkTsqwkG0+AaQroYdpEE= Subject key identifier: D2:01:99:46:F7:92:29:8D:B0:29:C7:56:DE:AB:10:81:0F:7D:4E:45 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584FAFB7532912A8A5C3C382BDB0 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/f787fc4c-dee8-3662-9060-884db8e24160.roa Signing time: Sat 31 Oct 2026 16:11:17 +0000 ROA not before: Sat 31 Oct 2026 16:11:17 +0000 ROA not after: Fri 29 Jan 2027 17:11:17 +0000 asID: 46841 IP address blocks: 104.153.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:af:b7:53:29:12:a8:a5:c3:c3:82:bd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Oct 31 16:11:17 2026 GMT Not After : Jan 29 17:11:17 2027 GMT Subject: CN=d6a7c471-fc25-4f06-9814-b8b46246b21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:1a:6d:44:d1:ac:dc:7d:cf:f2:c2:1e:3f: 71:35:5a:6a:d1:93:90:9c:43:df:4a:4c:a5:d5:a0: d1:43:69:35:51:9b:2c:f9:d4:6d:95:84:9e:21:0c: 1b:2c:17:92:ab:0a:cb:d6:7e:ba:86:1d:02:94:d8: 50:0a:cb:04:d5:53:7c:72:15:46:d3:fc:65:5d:ed: 71:d7:ab:61:60:42:62:8d:20:3a:df:57:75:58:af: e2:d6:af:d5:7f:72:aa:e2:c2:cc:0d:c6:ce:5f:e5: ea:0e:06:cd:ba:8c:26:85:d4:f3:0c:c4:87:48:99: 88:00:36:a7:3d:23:7a:14:9f:89:be:5d:81:a6:61: 56:37:e4:76:c8:1d:c3:1b:b9:c0:cd:de:b2:02:eb: 8a:5f:39:86:81:84:35:89:90:81:ce:53:76:bb:b1: a2:cb:fb:e6:e8:bd:6b:2f:32:8d:73:b1:4a:c2:89: 7a:31:35:1b:d6:55:b6:5b:20:f4:27:1f:ab:9f:39: fa:3f:d3:c5:72:16:5d:5b:e8:8f:b6:b8:94:cb:7b: 2d:8e:3b:73:4d:46:c4:5d:c5:ed:b7:21:2c:a0:26: 5a:91:ae:b0:a9:de:a2:80:13:11:c4:c0:5d:14:84: 92:3d:f9:36:75:9e:94:51:d7:ef:9a:c9:9c:ad:ce: 96:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:01:99:46:F7:92:29:8D:B0:29:C7:56:DE:AB:10:81:0F:7D:4E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/f787fc4c-dee8-3662-9060-884db8e24160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 104.153.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:ec:e9:08:cd:86:27:66:9a:f1:99:8b:a1:87:df:09:04:03: 55:4c:18:26:db:43:ad:c5:82:08:47:da:ce:08:a4:1c:d6:68: 1f:9b:86:dc:b2:b0:f5:f9:b4:a0:2c:dd:5c:94:7a:0b:75:c0: 40:55:4d:ad:6e:2a:23:04:89:21:d7:9c:17:40:fb:79:d5:93: 10:0b:19:43:e3:81:19:2f:69:d3:80:33:b3:dc:03:ed:44:9b: 8e:f8:bb:8c:96:f4:f3:64:b7:88:45:09:93:4a:a0:92:a7:f4: 6b:5b:ca:34:74:0a:62:c2:7b:fd:70:b0:f6:50:cf:a8:5e:e0: 35:46:c4:d0:8f:73:82:46:40:29:c1:42:c5:98:dd:46:9b:4a: 8d:d0:a5:54:d1:a1:c0:6b:b9:fe:bf:15:44:df:cf:d9:6b:ee: 30:4f:b8:0a:4c:33:ad:79:f5:09:4e:a1:fe:50:a2:5f:ea:7b: 17:46:92:ad:15:95:a9:1d:48:55:84:f3:fd:02:73:ff:51:ca: a7:59:f9:54:f0:b0:76:3c:25:5b:76:d0:e9:17:91:65:b1:d6: c4:39:af:8a:40:d3:13:f8:ec:0c:4e:a4:8c:1b:f3:93:ed:48: a0:9c:65:86:c2:dd:17:1b:35:2a:35:5e:55:ee:07:2c:2c:90: a8:34:63:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+vt1MpEqilw8OCvbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI2MTAzMTE2MTExN1oXDTI3MDEyOTE3MTExN1owLzEtMCsGA1UEAxMk ZDZhN2M0NzEtZmMyNS00ZjA2LTk4MTQtYjhiNDYyNDZiMjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqogabUTRrNx9z/LCHj9xNVpq0ZOQnEPfSkyl 1aDRQ2k1UZss+dRtlYSeIQwbLBeSqwrL1n66hh0ClNhQCssE1VN8chVG0/xlXe1x 16thYEJijSA631d1WK/i1q/Vf3Kq4sLMDcbOX+XqDgbNuowmhdTzDMSHSJmIADan PSN6FJ+Jvl2BpmFWN+R2yB3DG7nAzd6yAuuKXzmGgYQ1iZCBzlN2u7Giy/vm6L1r LzKNc7FKwol6MTUb1lW2WyD0Jx+rnzn6P9PFchZdW+iPtriUy3stjjtzTUbEXcXt tyEsoCZaka6wqd6igBMRxMBdFISSPfk2dZ6UUdfvmsmcrc6WpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIBmUb3kimNsCnHVt6rEIEPfU5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvZjc4N2ZjNGMtZGVlOC0z NjYyLTkwNjAtODg0ZGI4ZTI0MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJmXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHs6QjNhidmmvGZi6GH3wkEA1VMGCbbQ63FgghH2s4IpBzWaB+bhtyy sPX5tKAs3VyUegt1wEBVTa1uKiMEiSHXnBdA+3nVkxALGUPjgRkvadOAM7PcA+1E m474u4yW9PNkt4hFCZNKoJKn9GtbyjR0CmLCe/1wsPZQz6he4DVGxNCPc4JGQCnB QsWY3UabSo3QpVTRocBruf6/FUTfz9lr7jBPuApMM6159QlOof5Qol/qexdGkq0V lakdSFWE8/0Cc/9RyqdZ+VTwsHY8JVt20OkXkWWx1sQ5r4pA0xP47AxOpIwb85Pt SKCcZYbC3RcbNSo1XlXuBywskKg0Y1k= -----END CERTIFICATE-----Generated at Wed Nov 4 04:16:11 2026 by rpki-client