$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa File: 1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa (raw, json) Hash identifier: rYefv90SRZcvjH+UWglWnlNIGQTu+4PWQ02H9EybZzI= Subject key identifier: 65:38:6C:C9:37:B3:6D:56:E2:A3:F3:99:FD:F4:06:06:A1:19:C0:33 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584F4973A070F51B55DD6706DD80 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396194 IP address blocks: 104.153.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a0:70:f5:1b:55:dd:67:06:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=97d4ab76-ceeb-4390-b710-27f1348ad1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f5:2c:1a:69:86:c9:4d:92:a8:f3:1d:3c:36: 37:8e:08:0f:9a:44:13:df:c7:66:d6:0d:31:7c:68: b9:2a:62:33:9e:ad:f8:24:20:6c:6d:26:70:74:99: 79:46:bb:c1:f6:20:20:4d:b4:f5:79:7f:fb:a6:da: 98:c0:cf:18:12:bc:7c:a4:0e:93:4a:46:0d:fb:30: eb:0f:b3:27:82:20:1e:f0:1d:29:f0:84:d3:00:a0: c7:eb:c1:82:b5:b0:b3:1c:b7:36:73:b3:d7:29:ab: 03:80:8c:20:d7:53:b2:1c:21:1f:3b:99:09:63:65: cc:b0:a1:2a:8b:15:a0:13:e6:9c:d5:a2:f1:87:61: 3c:12:49:bb:d0:80:17:cc:5c:d5:2c:a7:6c:64:1c: 6c:c3:fb:f0:39:5b:6a:ab:15:1b:60:e7:e9:d5:e4: 79:0a:fd:83:f7:11:3d:89:44:ad:a5:c4:d6:ef:a8: 70:d7:d3:d8:00:33:50:ca:69:a1:8f:77:69:fe:6f: 1b:de:23:66:02:94:c5:58:02:be:8e:92:48:8e:b4: 02:ca:8a:fd:ec:50:d2:21:bf:83:dc:0a:d7:af:56: a4:23:6a:9f:f9:c1:00:d4:54:e2:61:c9:c0:08:78: 68:c9:cf:cb:d0:c9:61:d9:0c:21:cd:76:8f:ef:76: 0b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:38:6C:C9:37:B3:6D:56:E2:A3:F3:99:FD:F4:06:06:A1:19:C0:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 104.153.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ea:1d:ec:cb:a0:06:f8:62:18:46:98:73:17:29:0c:2e:4b: 33:ea:3c:d3:99:8a:84:66:b2:36:50:e4:20:32:7f:f1:24:4d: e0:13:e4:a9:8e:61:30:3c:fa:dd:d5:ec:0d:a7:b8:07:a6:30: 1a:b0:b6:11:95:81:53:ce:c7:04:ac:ad:5e:64:d6:36:7f:34: 67:fa:98:d3:20:99:e4:91:cc:04:69:a9:8f:34:e7:ad:f0:22: 91:6c:39:91:de:6b:fb:50:75:20:7e:2c:e0:4a:67:3c:2d:fd: 84:e0:1f:ef:da:e5:6a:e8:c0:a4:75:06:a5:7d:3b:06:51:a4: 9e:87:d0:12:e4:67:a8:b2:16:60:17:bb:06:37:a6:06:2f:9e: a5:cc:24:3d:c0:be:d8:a5:f3:14:18:a1:1f:38:ad:11:29:d6: ad:da:cc:1c:3f:22:13:a3:34:c7:b0:2b:7a:b7:91:aa:7c:5d: 53:f9:15:04:95:25:26:9c:84:69:ba:39:44:12:98:44:fe:ae: 68:3d:d5:ba:28:6f:b2:5a:28:6c:e6:d2:bb:a9:49:9a:4f:2d: d2:98:b6:61:2b:40:2a:81:85:9f:9d:26:5a:14:fa:31:4d:e0: 30:e8:22:39:b1:bc:ea:58:c8:b9:c0:56:28:3d:2c:2f:26:dd: 57:ea:53:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6Bw9RtV3WcG3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTdkNGFiNzYtY2VlYi00MzkwLWI3MTAtMjdmMTM0OGFkMWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/UsGmmGyU2SqPMdPDY3jggPmkQT38dm1g0x fGi5KmIznq34JCBsbSZwdJl5RrvB9iAgTbT1eX/7ptqYwM8YErx8pA6TSkYN+zDr D7MngiAe8B0p8ITTAKDH68GCtbCzHLc2c7PXKasDgIwg11OyHCEfO5kJY2XMsKEq ixWgE+ac1aLxh2E8Ekm70IAXzFzVLKdsZBxsw/vwOVtqqxUbYOfp1eR5Cv2D9xE9 iUStpcTW76hw19PYADNQymmhj3dp/m8b3iNmApTFWAK+jpJIjrQCyor97FDSIb+D 3ArXr1akI2qf+cEA1FTiYcnACHhoyc/L0Mlh2QwhzXaP73YLvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU4bMk3s21W4qPzmf30BgahGcAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvMWJjMWE2MWEtNDM0YS0z ZTIyLTljOGYtNjI0OGFkMTc2MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrqHezLoAb4YhhGmHMXKQwuSzPqPNOZioRmsjZQ5CAyf/EkTeAT5KmO YTA8+t3V7A2nuAemMBqwthGVgVPOxwSsrV5k1jZ/NGf6mNMgmeSRzARpqY80563w IpFsOZHea/tQdSB+LOBKZzwt/YTgH+/a5WrowKR1BqV9OwZRpJ6H0BLkZ6iyFmAX uwY3pgYvnqXMJD3Avtil8xQYoR84rREp1q3azBw/IhOjNMewK3q3kap8XVP5FQSV JSachGm6OUQSmET+rmg91boob7JaKGzm0rupSZpPLdKYtmErQCqBhZ+dJloU+jFN 4DDoIjmxvOpYyLnAVig9LC8m3VfqU5g= -----END CERTIFICATE-----Generated at Mon Sep 28 16:45:00 2026 by rpki-client