$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/b99a41da-dcc1-3461-8231-cbabb41c7c6f.roa File: b99a41da-dcc1-3461-8231-cbabb41c7c6f.roa (raw, json) Hash identifier: huZ6QU5kdRTDnxOlaITUtlNCd+w9VksSkB39JW0n6Zs= Subject key identifier: BA:57:1C:A4:B7:E4:F2:83:0D:9F:42:74:E4:7B:73:BD:1A:63:05:B9 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584979743B64E591E0F496BE1780 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/b99a41da-dcc1-3461-8231-cbabb41c7c6f.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 11215 IP address blocks: 104.153.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:3b:64:e5:91:e0:f4:96:be:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=fbd51bf7-7c1c-4806-a7bb-a89778a4dce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:77:73:ef:dc:b6:b5:3f:4a:88:d4:16:32: 65:12:50:32:5b:a9:4a:c9:70:8a:1d:bf:e5:5c:77: c9:64:6e:db:0a:61:17:15:6f:a5:3a:ad:5a:52:4a: 81:b2:2b:e4:a0:2d:62:f5:ae:8a:fc:e1:6a:05:bc: da:7f:0a:78:2c:11:9e:82:7a:ed:35:f1:0a:30:83: d4:f4:48:2a:09:07:e4:00:0f:70:04:e6:6e:3e:5d: f3:9a:4a:96:f3:06:b8:6c:d9:10:91:fb:fe:d1:bf: 1e:89:ed:65:9c:aa:f0:9a:b6:30:fd:14:a1:d9:50: fc:ad:17:90:67:1b:e7:95:5f:39:e7:c3:54:ed:57: 18:ab:68:11:32:4f:7e:3b:14:ca:71:61:d7:d2:66: b9:52:02:87:6e:11:e6:83:20:d8:8e:f3:1c:93:fa: 60:f5:9b:ed:33:b3:58:57:17:a2:21:5a:f5:1c:a8: 29:e3:68:8c:2c:88:64:df:be:46:1d:63:4d:0f:5e: 23:3f:f1:a5:20:28:f6:28:47:31:7f:2f:db:98:19: 2e:34:52:9b:ce:05:d9:8e:38:65:d3:90:77:64:37: 2b:3d:c1:14:53:81:90:65:5e:82:0e:f3:45:4e:b8: 69:b2:8f:f0:3c:53:15:c4:2d:cf:e3:6e:e1:6a:c1: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:57:1C:A4:B7:E4:F2:83:0D:9F:42:74:E4:7B:73:BD:1A:63:05:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/b99a41da-dcc1-3461-8231-cbabb41c7c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 104.153.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:0a:35:86:9e:81:0e:d3:59:13:5c:21:e4:2d:8c:9b:7c:88: 30:c1:7f:15:67:16:b0:49:26:e2:ff:fd:55:ad:7a:96:a6:0f: 03:2b:c8:89:d4:cc:96:3a:99:cf:a4:90:03:4d:28:c2:9a:7d: 65:b2:9f:99:d5:0e:f2:22:e2:8e:96:10:80:6a:b7:e4:3c:c4: c8:c9:95:76:3b:9a:76:31:b0:d6:43:36:4e:cc:41:20:f4:66: 9d:e4:c1:04:ba:67:52:0e:57:f4:5c:40:34:d7:fa:b8:35:16: 46:27:35:a3:4b:a4:7a:88:4d:7a:1b:d1:8b:93:4e:fd:d7:c3: 16:e7:65:60:d1:bf:bc:77:2b:27:2b:85:4a:4f:68:35:88:6d: 38:db:98:e8:e8:fe:01:b2:4f:78:a1:83:ce:21:85:4b:cf:61: e3:66:c1:34:9c:d2:13:35:a3:c3:53:3e:6a:31:ec:02:5b:07: c1:05:77:45:70:64:fc:d6:a3:14:1e:57:6e:e8:22:c9:cb:69: 3c:0b:60:55:b3:d7:33:db:a0:e9:a5:5a:03:31:da:34:86:4c: ad:49:a0:c0:b5:2f:a3:f3:b1:f4:c2:07:18:bc:af:b2:c8:50: 59:7d:54:a4:3a:58:2e:0e:a3:85:5c:25:8a:4e:87:2e:f2:bc: 12:77:ea:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dDtk5ZHg9Ja+F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk ZmJkNTFiZjctN2MxYy00ODA2LWE3YmItYTg5Nzc4YTRkY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwip3c+/ctrU/SojUFjJlElAyW6lKyXCKHb/l XHfJZG7bCmEXFW+lOq1aUkqBsivkoC1i9a6K/OFqBbzafwp4LBGegnrtNfEKMIPU 9EgqCQfkAA9wBOZuPl3zmkqW8wa4bNkQkfv+0b8eie1lnKrwmrYw/RSh2VD8rReQ ZxvnlV8558NU7VcYq2gRMk9+OxTKcWHX0ma5UgKHbhHmgyDYjvMck/pg9ZvtM7NY VxeiIVr1HKgp42iMLIhk375GHWNND14jP/GlICj2KEcxfy/bmBkuNFKbzgXZjjhl 05B3ZDcrPcEUU4GQZV6CDvNFTrhpso/wPFMVxC3P427hasEpNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpXHKS35PKDDZ9CdOR7c70aYwW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvYjk5YTQxZGEtZGNjMS0z NDYxLTgyMzEtY2JhYmI0MWM3YzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUKNYaegQ7TWRNcIeQtjJt8iDDBfxVnFrBJJuL//VWtepamDwMryInU zJY6mc+kkANNKMKafWWyn5nVDvIi4o6WEIBqt+Q8xMjJlXY7mnYxsNZDNk7MQSD0 Zp3kwQS6Z1IOV/RcQDTX+rg1FkYnNaNLpHqITXob0YuTTv3XwxbnZWDRv7x3Kycr hUpPaDWIbTjbmOjo/gGyT3ihg84hhUvPYeNmwTSc0hM1o8NTPmox7AJbB8EFd0Vw ZPzWoxQeV27oIsnLaTwLYFWz1zPboOmlWgMx2jSGTK1JoMC1L6PzsfTCBxi8r7LI UFl9VKQ6WC4Oo4VcJYpOhy7yvBJ36no= -----END CERTIFICATE-----Generated at Sun Apr 13 05:07:06 2025 by rpki-client