$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa File: 86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa (raw, json) Hash identifier: k9ElmKKDQHId/G5h5v2Foa2qgqOvohHzFFm3EKRzwQg= Subject key identifier: 12:E4:D7:12:F1:11:4E:56:51:51:B3:8F:BA:24:9A:B8:3E:80:2D:0E Certificate issuer: /CN=86b37376-2d1b-4536-b941-7858431c5839 Certificate serial: 010D0C9F4328584F5A32DBE3F5452AC2518B09C0 Authority key identifier: FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 30115 IP address blocks: 104.166.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:db:e3:f5:45:2a:c2:51:8b:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b37376-2d1b-4536-b941-7858431c5839 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=087c43e5-3308-45b3-919f-5e8f28b1a9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c9:86:c8:ef:8f:66:30:df:da:a5:49:73:09: 21:1e:bf:d7:ac:4d:f4:67:a0:8e:7c:06:18:4b:a0: 0e:a9:57:21:b4:e2:f3:6e:70:d5:6d:96:7c:62:97: e2:da:a9:6e:4d:6f:0e:22:90:80:be:8e:a5:95:c1: 5e:6c:78:bf:c1:34:05:64:fd:68:db:91:e8:e1:79: 54:36:f1:b4:54:59:b2:46:a3:b9:a4:0c:47:0d:d8: 16:61:ca:75:84:7c:6d:14:58:aa:fe:d8:24:b5:d3: e2:49:d2:f7:94:1d:b8:f7:5d:18:fe:a4:15:a3:04: 6a:4a:ce:6f:3b:16:b8:dc:da:d2:6c:b3:7f:52:be: 8d:a1:f8:7e:85:50:3d:6a:ef:16:af:85:28:7a:1c: d2:f8:64:f2:79:6a:a5:c2:2f:38:ef:1f:a2:e9:c9: 1d:77:02:c3:82:1d:c7:ea:a4:54:97:40:43:10:a2: 4a:67:03:13:6c:c1:45:33:31:48:13:8b:27:2a:47: f8:34:92:6b:f2:4b:c4:6e:09:53:ef:08:10:a0:11: cb:c2:86:2e:4a:33:d9:09:72:e2:1c:c4:ec:78:67: f9:5b:98:f1:25:2b:44:1e:5a:dc:0a:95:6f:1d:dd: 7a:97:ac:cc:32:30:49:00:ea:9c:bd:68:51:c1:f3: c0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E4:D7:12:F1:11:4E:56:51:51:B3:8F:BA:24:9A:B8:3E:80:2D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.crl X509v3 Authority Key Identifier: keyid:FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer sbgp-ipAddrBlock: critical IPv4: 104.166.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ff:73:1a:83:42:5d:14:a7:a3:fd:a4:d4:25:d7:39:89:49: a8:d8:21:50:1a:fa:e6:e6:88:e4:39:4d:02:7f:bf:41:cb:3c: 86:9e:32:24:a9:1c:8b:d9:ff:59:74:02:d8:00:32:7e:ff:60: 5a:b2:00:82:6c:7c:79:36:01:49:5b:cc:b5:65:52:e2:73:4a: 27:fe:b1:bb:75:c2:8e:e3:a8:a2:e6:74:2b:6b:d7:1d:1f:8b: a1:36:38:06:60:3b:6c:61:cc:03:dd:ee:8c:a6:c5:7d:1f:ef: 26:27:47:a8:9a:23:73:62:ad:5d:1f:cf:b2:ee:e0:e3:1b:35: b0:03:fb:d7:7f:a1:07:7d:dc:ef:e9:84:74:e6:2a:42:6d:69: c6:80:f2:e2:37:3f:c3:90:95:f1:26:da:b0:65:a2:38:f9:f9: fb:02:84:4c:18:91:34:71:ea:bb:40:47:1b:9d:58:d3:87:95: 83:08:da:92:d9:8f:c2:a7:82:27:9a:53:c1:08:3d:17:c8:ac: d8:b8:6b:80:e6:43:7d:ed:c8:01:6c:4d:76:e2:92:41:d9:cf: 2f:21:43:98:f5:c1:1e:3d:d4:4d:2d:6a:63:e1:5c:04:51:76: d3:66:0e:70:bf:07:ce:4f:44:8e:a5:79:4f:ae:72:68:f4:9a: f2:99:e0:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtvj9UUqwlGLCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzczNzYtMmQxYi00NTM2LWI5NDEtNzg1ODQzMWM1 ODM5MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MDg3YzQzZTUtMzMwOC00NWIzLTkxOWYtNWU4ZjI4YjFhOWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicmGyO+PZjDf2qVJcwkhHr/XrE30Z6COfAYY S6AOqVchtOLzbnDVbZZ8Ypfi2qluTW8OIpCAvo6llcFebHi/wTQFZP1o25Ho4XlU NvG0VFmyRqO5pAxHDdgWYcp1hHxtFFiq/tgktdPiSdL3lB24910Y/qQVowRqSs5v Oxa43NrSbLN/Ur6Nofh+hVA9au8Wr4UoehzS+GTyeWqlwi847x+i6ckddwLDgh3H 6qRUl0BDEKJKZwMTbMFFMzFIE4snKkf4NJJr8kvEbglT7wgQoBHLwoYuSjPZCXLi HMTseGf5W5jxJStEHlrcCpVvHd16l6zMMjBJAOqcvWhRwfPAVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLk1xLxEU5WUVGzj7okmrg+gC0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NmIz NzM3Ni0yZDFiLTQ1MzYtYjk0MS03ODU4NDMxYzU4MzkvODZjNzc3ZjgtMGFmZC0z Y2I0LTlhZmUtNzJlOGZlNjZiYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODZiMzczNzYtMmQxYi00NTM2LWI5 NDEtNzg1ODQzMWM1ODM5Lzg2YjM3Mzc2LTJkMWItNDUzNi1iOTQxLTc4NTg0MzFj NTgzOS5jcmwwHwYDVR0jBBgwFoAU/Zeqz6JXzqQ9oYPgyfe+yRagiYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NmIzNzM3Ni0yZDFiLTQ1MzYtYjk0MS03ODU4 NDMxYzU4MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaKZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIz/cxqDQl0Up6P9pNQl1zmJSajYIVAa+ubmiOQ5TQJ/v0HLPIaeMiSp HIvZ/1l0AtgAMn7/YFqyAIJsfHk2AUlbzLVlUuJzSif+sbt1wo7jqKLmdCtr1x0f i6E2OAZgO2xhzAPd7oymxX0f7yYnR6iaI3NirV0fz7Lu4OMbNbAD+9d/oQd93O/p hHTmKkJtacaA8uI3P8OQlfEm2rBlojj5+fsChEwYkTRx6rtARxudWNOHlYMI2pLZ j8KngieaU8EIPRfIrNi4a4DmQ33tyAFsTXbikkHZzy8hQ5j1wR491E0tamPhXARR dtNmDnC/B85PRI6leU+ucmj0mvKZ4Mk= -----END CERTIFICATE-----Generated at Wed Oct 14 22:15:27 2026 by rpki-client