$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa File: 39dd6475-e512-3d33-a668-8df455daedf3.roa (raw, json) Hash identifier: 6K+H5pidIZ2wPbYRvS2nz9mIvAMKtaeiz5YV3UH7frU= Subject key identifier: 76:A8:AF:AB:3F:1F:C5:45:5B:2A:71:11:24:29:69:10:BA:99:63:70 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584B2A2C2D44DFAA179B9EAF4D00 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 46841 IP address blocks: 104.153.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:2d:44:df:aa:17:9b:9e:af:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=bd120f40-3d88-4457-b4e9-13eb46744c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cb:f3:fd:72:9b:db:d8:02:71:74:5f:39:18: 23:be:4a:86:2b:50:63:17:64:b0:b6:30:f8:c0:cf: 8f:cb:97:dc:30:d8:d2:64:18:b4:6c:6c:ca:9d:a3: b9:47:54:d7:0a:a4:ea:c3:40:a1:be:28:aa:f6:02: 00:c8:9c:28:9e:5d:15:fb:bf:41:7b:77:85:87:ec: 54:93:de:65:a6:60:dc:4c:05:ea:d7:28:25:1a:b6: 29:ce:a7:80:ab:ef:f7:64:1d:0f:33:b7:35:7f:e1: cf:38:c3:0b:cb:db:e9:c4:91:2b:d6:e0:1d:1a:b0: 8d:84:8b:fa:a7:bf:de:63:50:cf:4a:3d:5f:f1:b1: 1f:37:44:1c:d8:70:f6:f8:37:15:41:b1:32:f8:7a: 95:a6:74:ae:57:7d:db:58:e7:b5:89:54:53:1f:5c: 13:6c:91:0a:15:13:8d:44:9f:c6:1f:d7:06:83:74: e4:f2:4a:2a:9d:25:6d:55:1f:99:96:34:06:9f:c0: 56:f4:8b:38:db:a1:97:49:7c:6f:43:65:54:a3:19: 54:e5:80:16:7c:94:59:71:0e:e2:67:8c:f4:f2:c7: 4c:97:a3:0b:e3:88:ea:f0:2b:ac:5e:a1:9e:99:db: 58:2c:8b:21:ac:ff:d4:dd:fb:96:4f:42:87:1f:0e: 48:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A8:AF:AB:3F:1F:C5:45:5B:2A:71:11:24:29:69:10:BA:99:63:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 104.153.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:0a:da:0f:c4:c9:fd:27:9b:e9:2f:aa:15:86:64:95:45:e4: 70:81:80:30:ed:bf:fb:61:ca:9a:37:80:25:65:ec:6d:7a:32: dc:41:3b:2f:62:58:cc:5b:2b:05:b3:96:e4:df:10:fd:00:4e: 77:a6:b1:d9:6a:9a:36:c6:2d:7b:a1:75:5b:3d:af:b7:e6:a1: 45:eb:3a:7d:bf:e2:78:f0:68:1d:79:7a:34:b3:b4:53:40:49: c9:25:96:39:1c:ae:a3:5b:92:d0:77:dd:31:fa:54:d6:b7:70: 59:16:85:9f:9b:a8:a0:3d:02:92:a3:a1:8c:f3:c2:38:59:6d: a8:04:e6:34:8b:33:68:8d:7c:3b:00:22:91:52:67:94:b2:b2: b4:32:34:eb:0e:76:1f:de:45:9a:3a:d5:a8:73:4e:da:07:a8: 60:42:77:7e:4f:a4:32:28:1a:44:5d:fb:49:b7:fc:0c:3a:ac: 4e:e8:b8:3e:5b:45:d2:c8:7b:4a:96:dd:e1:c8:81:20:f9:a8: 08:88:f3:4d:6d:18:f9:23:d6:0b:4d:99:e8:d4:49:13:84:b2: 19:ad:b5:34:a1:e2:8e:0d:cb:3a:38:84:fa:98:9c:1c:41:d3: 71:48:fd:34:78:a0:ec:85:40:18:cb:6a:1c:cb:6a:85:48:ee: 6e:67:36:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLC1E36oXm56vTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk YmQxMjBmNDAtM2Q4OC00NDU3LWI0ZTktMTNlYjQ2NzQ0YzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58vz/XKb29gCcXRfORgjvkqGK1BjF2SwtjD4 wM+Py5fcMNjSZBi0bGzKnaO5R1TXCqTqw0Chviiq9gIAyJwonl0V+79Be3eFh+xU k95lpmDcTAXq1yglGrYpzqeAq+/3ZB0PM7c1f+HPOMMLy9vpxJEr1uAdGrCNhIv6 p7/eY1DPSj1f8bEfN0Qc2HD2+DcVQbEy+HqVpnSuV33bWOe1iVRTH1wTbJEKFRON RJ/GH9cGg3Tk8koqnSVtVR+ZljQGn8BW9Is426GXSXxvQ2VUoxlU5YAWfJRZcQ7i Z4z08sdMl6ML44jq8CusXqGemdtYLIshrP/U3fuWT0KHHw5I6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaor6s/H8VFWypxESQpaRC6mWNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvMzlkZDY0NzUtZTUxMi0z ZDMzLWE2NjgtOGRmNDU1ZGFlZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8K2g/Eyf0nm+kvqhWGZJVF5HCBgDDtv/thypo3gCVl7G16MtxBOy9i WMxbKwWzluTfEP0ATnemsdlqmjbGLXuhdVs9r7fmoUXrOn2/4njwaB15ejSztFNA ScklljkcrqNbktB33TH6VNa3cFkWhZ+bqKA9ApKjoYzzwjhZbagE5jSLM2iNfDsA IpFSZ5SysrQyNOsOdh/eRZo61ahzTtoHqGBCd35PpDIoGkRd+0m3/Aw6rE7ouD5b RdLIe0qW3eHIgSD5qAiI801tGPkj1gtNmejUSROEshmttTSh4o4Nyzo4hPqYnBxB 03FI/TR4oOyFQBjLahzLaoVI7m5nNoA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:35 2025 by rpki-client