$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa File: 1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa (raw, json) Hash identifier: gD8i9kEhHCQQEtqEYqkbRRlNymQPUn/1Y5SXW9uO52M= Subject key identifier: FB:02:6F:37:59:9E:9E:82:6A:8E:49:5B:A3:8E:03:F2:05:53:5F:95 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584A49705FD4D580FAF2A3328A80 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 396194 IP address blocks: 104.153.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:5f:d4:d5:80:fa:f2:a3:32:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=8f8ab76e-3c72-4411-a4ab-c900fe56b2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0a:6b:61:cf:c2:ac:6d:5d:8f:b3:c5:f4:82: e2:19:41:cf:a2:f6:6c:76:1d:6c:90:8c:e4:46:52: 91:ce:08:58:82:0c:10:10:f0:96:0c:96:a2:3c:62: 6d:ee:15:99:ef:15:f2:81:e6:ea:20:c1:7c:85:50: a6:44:fa:20:95:86:8e:4e:ba:7a:3a:00:d0:93:30: 10:9b:98:7e:18:09:27:e5:63:56:f6:e9:ad:dd:b2: 64:19:83:89:7f:f3:df:a6:93:ae:f3:29:e0:5c:d5: 9b:0a:cb:b1:13:af:09:ab:8b:b0:80:ef:9d:77:00: 18:9b:59:24:34:d7:67:96:90:cd:0a:fe:f3:47:2b: 34:c5:8f:28:41:d9:fe:7f:08:4c:70:26:be:64:14: b5:30:a1:1f:d8:cb:7c:2d:e5:59:94:6b:03:f0:1e: 8f:0b:37:17:32:8b:1e:bb:b8:2b:13:90:cd:92:d4: 0d:7b:fb:5f:0d:bb:4f:8a:f5:07:71:3a:4c:64:4e: ab:42:19:bd:a0:7c:7c:dd:38:b4:b6:0e:ea:e8:50: 7a:20:68:32:92:04:ee:30:d4:e0:cc:2e:3d:33:1e: 86:f1:d9:fd:b9:d7:2b:f8:07:3e:b5:7d:06:11:cf: 5d:05:e1:ac:e1:bb:2b:59:ce:b3:46:1b:6e:52:3f: 5f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:02:6F:37:59:9E:9E:82:6A:8E:49:5B:A3:8E:03:F2:05:53:5F:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 104.153.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:10:0d:ff:a6:a7:fe:fb:9b:10:2b:1a:d7:a1:ea:3b:eb:40: 42:7a:5e:c6:c0:64:79:05:fb:a8:f8:81:f2:60:b3:d8:60:fa: f5:a3:05:d5:e3:fc:63:9d:b4:c4:3a:94:dd:6b:e4:0c:67:9b: 3a:a8:6e:01:fe:3a:4e:55:04:9a:d8:fb:07:67:18:9b:f9:b0: 49:d3:c7:c0:ac:39:11:4a:ba:31:9f:26:c7:a4:4e:b7:d9:35: ac:bf:ec:6f:30:05:f0:57:6e:e2:80:db:aa:d9:87:2a:72:ae: 03:94:1e:bb:1a:fd:29:a7:3b:84:ea:53:88:11:04:f4:f4:f2: ae:9d:ce:0e:32:b2:43:b5:3c:9c:3a:4a:37:9d:82:0c:fc:07: 17:15:f4:77:8c:67:1a:8f:08:44:57:8c:e5:1e:3b:05:2a:55: c7:3a:5d:67:0b:97:c3:91:1c:ca:dd:4d:28:eb:98:6f:71:9a: 9e:a7:9c:d0:04:d2:f5:38:e0:46:5f:76:a4:cc:2f:b0:7b:d4: 8d:6a:f0:c1:f4:00:d5:15:c3:22:7e:48:7f:8a:ae:49:60:4a: 0f:bb:b2:82:de:2b:e2:98:e1:60:50:0d:b4:08:a9:9a:64:df: b7:b0:48:cd:45:81:ef:09:ab:44:7b:00:8c:af:8e:2a:7d:a1: 75:36:9a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcF/U1YD68qMyioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk OGY4YWI3NmUtM2M3Mi00NDExLWE0YWItYzkwMGZlNTZiMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAprYc/CrG1dj7PF9ILiGUHPovZsdh1skIzk RlKRzghYggwQEPCWDJaiPGJt7hWZ7xXygebqIMF8hVCmRPoglYaOTrp6OgDQkzAQ m5h+GAkn5WNW9umt3bJkGYOJf/PfppOu8yngXNWbCsuxE68Jq4uwgO+ddwAYm1kk NNdnlpDNCv7zRys0xY8oQdn+fwhMcCa+ZBS1MKEf2Mt8LeVZlGsD8B6PCzcXMose u7grE5DNktQNe/tfDbtPivUHcTpMZE6rQhm9oHx83Ti0tg7q6FB6IGgykgTuMNTg zC49Mx6G8dn9udcr+Ac+tX0GEc9dBeGs4bsrWc6zRhtuUj9fvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsCbzdZnp6Cao5JW6OOA/IFU1+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvMWJjMWE2MWEtNDM0YS0z ZTIyLTljOGYtNjI0OGFkMTc2MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAQDf+mp/77mxArGteh6jvrQEJ6XsbAZHkF+6j4gfJgs9hg+vWjBdXj /GOdtMQ6lN1r5AxnmzqobgH+Ok5VBJrY+wdnGJv5sEnTx8CsORFKujGfJsekTrfZ Nay/7G8wBfBXbuKA26rZhypyrgOUHrsa/SmnO4TqU4gRBPT08q6dzg4yskO1PJw6 Sjedggz8BxcV9HeMZxqPCERXjOUeOwUqVcc6XWcLl8ORHMrdTSjrmG9xmp6nnNAE 0vU44EZfdqTML7B71I1q8MH0ANUVwyJ+SH+KrklgSg+7soLeK+KY4WBQDbQIqZpk 37ewSM1Fge8Jq0R7AIyvjip9oXU2mlk= -----END CERTIFICATE-----Generated at Mon Jun 30 19:43:50 2025 by rpki-client