$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa File: 1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa (raw, json) Hash identifier: SH4q0L47aDx9iQz9mS0tG2pXhG50+MUe1QBh7+M1FFs= Subject key identifier: 88:00:2F:83:F1:30:FD:15:BC:40:41:B4:EC:BB:46:A5:53:8E:B4:E0 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584B2A2C25219554269E1B686580 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 396194 IP address blocks: 104.153.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:25:21:95:54:26:9e:1b:68:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=4c3180a3-806d-4473-8808-20c6a1ad2bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ce:b9:26:da:c8:4e:c6:9d:c0:7c:83:28:42: 7d:89:f9:1a:3d:a7:71:c0:87:75:7f:e6:ed:21:13: 0f:51:7e:bd:1b:d3:ae:24:fe:e7:93:57:47:19:07: 0b:62:3e:a5:75:b1:fa:23:ca:52:2a:52:5a:99:bb: 83:63:b5:2f:8e:8c:48:83:b2:24:4b:40:29:0c:8a: ae:27:4c:77:30:fe:b2:1b:97:37:44:65:f5:a2:5d: 1f:15:23:2f:e7:70:ce:27:62:8f:d2:a5:55:6b:2c: 03:f1:e1:63:be:fa:7f:c4:19:4b:74:68:b1:86:ba: 95:fd:f7:28:b2:99:2d:f1:d5:93:b9:92:7a:ec:2e: 71:c5:2c:f1:11:0a:7f:5a:06:97:d7:de:60:1c:11: d1:c2:ee:85:84:e1:a3:4a:fc:5f:57:96:ca:e2:88: 84:fe:dc:4f:42:81:96:fc:e7:16:5e:a3:96:8d:93: 0c:2c:4a:48:91:50:4c:27:da:63:02:9b:dd:a7:65: 4a:41:85:2f:da:93:39:87:4a:cf:b6:7e:aa:11:05: b5:6b:a6:34:44:af:eb:00:e6:0f:53:71:c3:9c:14: 76:2c:f5:e5:09:4d:68:2f:3b:6f:de:f9:43:73:31: 1b:63:8c:eb:d5:57:d2:52:94:37:e9:dd:20:bc:7a: 74:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:00:2F:83:F1:30:FD:15:BC:40:41:B4:EC:BB:46:A5:53:8E:B4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1bc1a61a-434a-3e22-9c8f-6248ad17612b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 104.153.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:96:35:dc:fa:3e:2b:98:97:a8:df:e7:d5:c0:bf:3f:37:31: 50:b7:d5:bb:e1:81:e2:b4:20:25:4f:91:07:59:6e:b2:a3:29: a8:e8:10:ab:49:b0:eb:cf:13:ec:ac:ad:4e:e8:61:fc:18:f3: 0f:01:30:ad:67:eb:16:57:ca:04:6b:c2:0b:7f:67:25:85:dc: fd:96:71:eb:09:6e:7a:87:40:d8:23:86:f2:01:8a:4f:81:a0: aa:80:9b:99:2f:37:68:26:93:99:b2:d9:e8:52:a8:b4:87:5b: b4:b5:46:51:3a:df:3c:b7:5b:64:39:b4:6b:1c:12:75:ec:68: 1e:e2:4f:11:9e:a9:32:bc:39:15:b4:89:b0:c2:c7:10:57:cb: 8e:e9:74:6f:c3:26:6c:6f:ac:08:b0:04:bd:02:bb:06:df:34: e6:f8:a6:6b:97:de:78:0f:36:d0:d9:95:05:b2:d7:12:44:15: f1:ed:2c:2b:6d:f3:09:35:9a:f2:0b:3d:e1:06:3a:ee:d5:9b: 5c:e8:72:2c:a5:2c:13:a2:a7:a8:0e:44:18:81:f4:7f:9b:d0: 6f:75:94:73:0c:2e:ff:b2:03:d5:77:b6:1d:99:f2:f1:e1:ac: c5:97:4e:df:82:72:42:cf:6d:e8:88:8d:ca:0f:05:5c:9f:50: 74:60:9c:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLCUhlVQmnhtoZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NGMzMTgwYTMtODA2ZC00NDczLTg4MDgtMjBjNmExYWQyYmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg865JtrITsadwHyDKEJ9ifkaPadxwId1f+bt IRMPUX69G9OuJP7nk1dHGQcLYj6ldbH6I8pSKlJambuDY7UvjoxIg7IkS0ApDIqu J0x3MP6yG5c3RGX1ol0fFSMv53DOJ2KP0qVVaywD8eFjvvp/xBlLdGixhrqV/fco spkt8dWTuZJ67C5xxSzxEQp/WgaX195gHBHRwu6FhOGjSvxfV5bK4oiE/txPQoGW /OcWXqOWjZMMLEpIkVBMJ9pjApvdp2VKQYUv2pM5h0rPtn6qEQW1a6Y0RK/rAOYP U3HDnBR2LPXlCU1oLztv3vlDczEbY4zr1VfSUpQ36d0gvHp0iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgAL4PxMP0VvEBBtOy7RqVTjrTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvMWJjMWE2MWEtNDM0YS0z ZTIyLTljOGYtNjI0OGFkMTc2MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqWNdz6PiuYl6jf59XAvz83MVC31bvhgeK0ICVPkQdZbrKjKajoEKtJ sOvPE+ysrU7oYfwY8w8BMK1n6xZXygRrwgt/ZyWF3P2WcesJbnqHQNgjhvIBik+B oKqAm5kvN2gmk5my2ehSqLSHW7S1RlE63zy3W2Q5tGscEnXsaB7iTxGeqTK8ORW0 ibDCxxBXy47pdG/DJmxvrAiwBL0CuwbfNOb4pmuX3ngPNtDZlQWy1xJEFfHtLCtt 8wk1mvILPeEGOu7Vm1zociylLBOip6gORBiB9H+b0G91lHMMLv+yA9V3th2Z8vHh rMWXTt+CckLPbeiIjcoPBVyfUHRgnHQ= -----END CERTIFICATE-----Generated at Sun Oct 19 17:53:10 2025 by rpki-client