$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa File: 39dd6475-e512-3d33-a668-8df455daedf3.roa (raw, json) Hash identifier: 1XokfK/LU797t+Ksh2+9Cn8eScpbc443793df0HIBx0= Subject key identifier: C1:71:19:DE:7E:B0:9A:B8:19:22:71:D1:2B:25:EE:B4:96:4B:0B:F9 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584DCAFAFC6234197939843A47C0 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 46841 IP address blocks: 104.153.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fa:fc:62:34:19:79:39:84:3a:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=7e166eb2-aec2-42e6-9c67-5d19f94ff668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4d:3d:bc:95:53:e1:a3:51:41:48:95:29:82: d1:69:dd:05:e6:2a:f6:09:ac:98:5b:fa:b5:5f:4f: 34:23:ea:e2:45:16:4f:00:04:4c:3f:d2:59:81:4a: 89:78:c9:52:0a:34:c5:b9:6f:1e:1d:04:a6:e5:fc: 19:18:49:cb:bb:b3:f8:59:dd:30:13:5b:7e:c7:43: bf:4c:08:73:4b:12:99:00:85:8d:bb:e3:5c:c6:1d: 60:e8:8c:14:29:fa:9c:b4:d4:9d:98:91:1b:73:d7: 62:93:a2:65:f4:5e:88:7a:20:b8:e2:2f:89:65:70: 5c:7d:36:9d:a0:66:27:be:83:d1:f9:ab:03:73:48: 71:dc:ce:35:04:29:ee:53:0d:7c:80:ae:8a:3c:31: 69:e5:95:9c:c4:3e:d1:22:05:10:05:bb:01:98:48: 31:21:9d:6b:d7:46:bb:2f:22:b7:5c:09:cd:5f:24: b7:42:a5:27:0f:56:8e:02:c0:32:ea:18:41:aa:9d: e9:fe:f8:de:c7:74:81:22:c0:b3:ae:fc:78:f2:bf: e1:50:0a:b9:33:c4:58:81:f0:bd:0d:cc:c9:ed:1a: 75:30:38:4e:55:52:38:08:bf:3f:ea:b9:a0:59:10: 97:12:4c:d7:01:9d:c1:49:25:34:17:da:91:9c:da: 66:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:71:19:DE:7E:B0:9A:B8:19:22:71:D1:2B:25:EE:B4:96:4B:0B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 104.153.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b0:b0:33:e8:e9:16:9e:7e:d1:80:b3:df:f1:90:b6:e5:5f: 97:2f:6a:10:82:23:b0:6b:57:3f:2a:82:72:33:af:06:99:84: 89:76:26:75:66:46:76:01:be:96:e8:a1:e9:8f:76:2b:ff:33: 99:26:04:0e:25:80:2e:b5:79:36:67:46:db:8d:13:94:45:e4: 71:dd:72:dc:09:03:18:2f:bd:1b:b6:90:b1:a9:f1:89:80:ef: 72:04:f4:01:5a:b7:6a:f3:9e:b0:c1:51:5b:b5:ae:f5:ca:27: b8:d7:c9:3f:45:62:8d:44:01:20:3a:ac:43:db:ba:80:0b:69: f7:6f:0f:26:2b:d1:e2:3c:a2:e9:50:2d:ef:7d:df:77:b1:71: d8:56:79:0e:71:55:cc:ad:6e:c1:3b:68:3f:2a:84:c7:dc:3b: 15:cb:3c:aa:20:4e:28:22:4f:43:e2:af:46:9f:ef:6a:18:1e: a9:15:39:a8:02:88:6b:db:bb:63:88:51:92:88:de:9e:e7:dc: 37:1d:b1:82:77:ee:2c:c7:cd:e4:a4:4c:06:80:c1:df:10:c0: f8:3e:25:55:93:8f:14:40:92:0e:ee:65:c5:44:09:28:ce:65: 28:96:0c:6a:69:93:dc:4d:48:2b:27:25:a4:f2:06:12:7b:dc: fe:a9:4e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+vxiNBl5OYQ6R8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk N2UxNjZlYjItYWVjMi00MmU2LTljNjctNWQxOWY5NGZmNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi009vJVT4aNRQUiVKYLRad0F5ir2CayYW/q1 X080I+riRRZPAARMP9JZgUqJeMlSCjTFuW8eHQSm5fwZGEnLu7P4Wd0wE1t+x0O/ TAhzSxKZAIWNu+Ncxh1g6IwUKfqctNSdmJEbc9dik6Jl9F6IeiC44i+JZXBcfTad oGYnvoPR+asDc0hx3M41BCnuUw18gK6KPDFp5ZWcxD7RIgUQBbsBmEgxIZ1r10a7 LyK3XAnNXyS3QqUnD1aOAsAy6hhBqp3p/vjex3SBIsCzrvx48r/hUAq5M8RYgfC9 DczJ7Rp1MDhOVVI4CL8/6rmgWRCXEkzXAZ3BSSU0F9qRnNpmbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFxGd5+sJq4GSJx0Ssl7rSWSwv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvMzlkZDY0NzUtZTUxMi0z ZDMzLWE2NjgtOGRmNDU1ZGFlZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2wsDPo6RaeftGAs9/xkLblX5cvahCCI7BrVz8qgnIzrwaZhIl2JnVm RnYBvpbooemPdiv/M5kmBA4lgC61eTZnRtuNE5RF5HHdctwJAxgvvRu2kLGp8YmA 73IE9AFat2rznrDBUVu1rvXKJ7jXyT9FYo1EASA6rEPbuoALafdvDyYr0eI8oulQ Le9933excdhWeQ5xVcytbsE7aD8qhMfcOxXLPKogTigiT0Pir0af72oYHqkVOagC iGvbu2OIUZKI3p7n3DcdsYJ37izHzeSkTAaAwd8QwPg+JVWTjxRAkg7uZcVECSjO ZSiWDGppk9xNSCsnJaTyBhJ73P6pTt0= -----END CERTIFICATE-----Generated at Wed May 13 04:15:14 2026 by rpki-client