$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa File: 86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa (raw, json) Hash identifier: ljnWPFPHBqn1ZtkWrBZkyluCeSMsJoG1OJRGtRFx5+4= Subject key identifier: 00:B8:7B:C4:16:00:18:DF:00:DB:19:64:32:A2:C1:82:2F:C4:CD:E9 Certificate issuer: /CN=86b37376-2d1b-4536-b941-7858431c5839 Certificate serial: 010D0C9F4328584D359FAADEB46DEE632F2E7200 Authority key identifier: FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 30115 IP address blocks: 104.166.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:aa:de:b4:6d:ee:63:2f:2e:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b37376-2d1b-4536-b941-7858431c5839 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=a94ad008-1019-46cb-b1b9-ad90c4b52b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2e:3d:6f:72:ca:27:c2:fd:18:20:b5:5e:c9: 5c:9d:a7:89:e1:86:89:69:9f:37:ac:0a:b2:ee:1c: 80:e5:28:16:e6:6b:e1:97:ec:8a:66:71:78:a9:32: 64:b7:8d:71:3c:4c:ef:23:95:56:e0:92:ce:44:b8: 52:70:83:e4:38:34:54:6d:2b:a8:a2:0a:7b:33:08: 39:33:ec:32:28:5b:ae:bb:37:58:f4:4e:e1:b2:2e: 4d:42:25:cb:7b:b1:88:84:85:a4:ec:ca:c9:85:ed: 1b:86:d8:7f:fb:71:57:cb:13:17:95:cd:27:3d:8c: b8:1d:ea:f5:95:ed:f2:28:9c:ac:c3:77:b1:75:cd: 74:a9:f1:3c:5f:88:d1:73:be:e0:0a:ac:9d:fd:e3: 87:09:79:31:ae:f3:54:31:8a:bd:17:26:63:0b:6e: f0:9a:9f:a7:d6:21:11:99:5e:4f:1c:c3:a8:e6:7a: 2e:6f:57:32:04:53:94:a6:5a:f3:48:4d:31:28:8d: 42:bd:43:7e:62:e7:3b:71:c0:8b:16:4c:61:a6:cc: 40:d5:b4:a9:46:45:a6:6c:e9:c8:d3:6a:58:fa:91: 01:c4:f1:cd:17:94:a8:2d:ac:1c:86:f9:8b:64:f0: e0:ef:dd:1f:cd:1e:be:8f:d7:0e:27:fc:0d:8f:4c: cd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B8:7B:C4:16:00:18:DF:00:DB:19:64:32:A2:C1:82:2F:C4:CD:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.crl X509v3 Authority Key Identifier: keyid:FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer sbgp-ipAddrBlock: critical IPv4: 104.166.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:fa:ab:67:77:bc:5c:94:c3:21:fd:c3:b6:e4:b8:ad:02:11: 8a:a1:95:9f:9d:e6:f7:69:9f:68:19:fb:d8:04:c4:8c:87:db: c4:b1:de:bc:d0:8d:00:b2:83:e1:a2:98:4e:27:5e:f9:cf:37: 94:ec:c2:e0:24:a3:97:d2:64:7a:0a:e3:9d:44:b8:a8:71:55: e7:05:21:e9:c6:b3:8a:7e:af:c3:b8:ff:85:cb:46:3e:e1:df: e1:2c:64:cc:2d:06:93:e2:b5:12:b3:b7:24:26:fe:ae:40:b9: 49:3b:b4:81:84:be:2b:9b:51:6e:5d:d5:2e:cf:a8:b4:5c:76: b0:d4:48:a2:0e:7c:7b:db:e9:ed:26:49:1e:d1:d3:f9:6d:ee: 0f:b2:d6:e7:2b:cd:e5:1e:43:8d:19:5d:fc:eb:99:f0:93:cf: f1:0e:85:e1:c7:90:ec:00:df:24:86:6f:d4:b0:30:73:98:e7: ee:1e:9b:4a:1a:93:e6:4e:a6:c5:a5:e7:78:a2:6d:17:17:48: 73:88:a2:19:c2:a9:19:57:d5:97:77:cc:8f:e4:c3:35:6e:c9: 0c:e3:39:e9:61:8d:f0:aa:fc:3e:0c:3c:46:b2:8d:7c:69:dc: de:f9:46:af:b1:54:92:a5:48:dd:be:53:7f:e1:98:92:b7:a5: 95:59:a5:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6retG3uYy8ucgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzczNzYtMmQxYi00NTM2LWI5NDEtNzg1ODQzMWM1 ODM5MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YTk0YWQwMDgtMTAxOS00NmNiLWIxYjktYWQ5MGM0YjUyYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i49b3LKJ8L9GCC1XslcnaeJ4YaJaZ83rAqy 7hyA5SgW5mvhl+yKZnF4qTJkt41xPEzvI5VW4JLORLhScIPkODRUbSuoogp7Mwg5 M+wyKFuuuzdY9E7hsi5NQiXLe7GIhIWk7MrJhe0bhth/+3FXyxMXlc0nPYy4Her1 le3yKJysw3exdc10qfE8X4jRc77gCqyd/eOHCXkxrvNUMYq9FyZjC27wmp+n1iER mV5PHMOo5noub1cyBFOUplrzSE0xKI1CvUN+Yuc7ccCLFkxhpsxA1bSpRkWmbOnI 02pY+pEBxPHNF5SoLawchvmLZPDg790fzR6+j9cOJ/wNj0zNIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC4e8QWABjfANsZZDKiwYIvxM3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NmIz NzM3Ni0yZDFiLTQ1MzYtYjk0MS03ODU4NDMxYzU4MzkvODZjNzc3ZjgtMGFmZC0z Y2I0LTlhZmUtNzJlOGZlNjZiYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODZiMzczNzYtMmQxYi00NTM2LWI5 NDEtNzg1ODQzMWM1ODM5Lzg2YjM3Mzc2LTJkMWItNDUzNi1iOTQxLTc4NTg0MzFj NTgzOS5jcmwwHwYDVR0jBBgwFoAU/Zeqz6JXzqQ9oYPgyfe+yRagiYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NmIzNzM3Ni0yZDFiLTQ1MzYtYjk0MS03ODU4 NDMxYzU4MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaKZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET6q2d3vFyUwyH9w7bkuK0CEYqhlZ+d5vdpn2gZ+9gExIyH28Sx3rzQ jQCyg+GimE4nXvnPN5TswuAko5fSZHoK451EuKhxVecFIenGs4p+r8O4/4XLRj7h 3+EsZMwtBpPitRKztyQm/q5AuUk7tIGEviubUW5d1S7PqLRcdrDUSKIOfHvb6e0m SR7R0/lt7g+y1ucrzeUeQ40ZXfzrmfCTz/EOheHHkOwA3ySGb9SwMHOY5+4em0oa k+ZOpsWl53iibRcXSHOIohnCqRlX1Zd3zI/kwzVuyQzjOelhjfCq/D4MPEayjXxp 3N75Rq+xVJKlSN2+U3/hmJK3pZVZpQg= -----END CERTIFICATE-----Generated at Thu Mar 26 23:06:39 2026 by rpki-client