$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/eb9326df-0150-3250-b938-62f7bde0ad4b.roa File: eb9326df-0150-3250-b938-62f7bde0ad4b.roa (raw, json) Hash identifier: pqH1IvmRDmKnj6VxQTx0Z9a0QWmerwpyGNHPz9GH8ws= Subject key identifier: E3:03:6A:51:44:A9:5E:DD:58:BA:D5:86:6A:AB:E2:C8:00:BC:A0:2F Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F43285849D594EE312C72A50FE1222DA0 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/eb9326df-0150-3250-b938-62f7bde0ad4b.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 399441 IP address blocks: 104.153.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:ee:31:2c:72:a5:0f:e1:22:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=d830d7d0-0491-4be0-a327-b80d5fdd00de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:2c:05:27:ed:4d:18:75:14:c9:18:c2:98: dd:28:d2:08:bf:69:58:6a:90:ab:5b:ce:36:29:ff: 6a:56:e8:26:cd:cc:fb:2d:ad:d2:3e:9a:41:7b:d6: 31:41:16:38:56:45:da:e2:c2:0c:58:d1:5e:55:25: 6b:b6:65:64:21:00:f9:f5:6b:18:5e:3c:d9:77:cd: 3c:6d:3b:0d:9b:88:3f:0a:9f:f4:8f:23:25:d4:c2: 20:9e:51:a8:1e:ef:0b:b5:cd:65:fc:2c:12:b7:12: df:d5:df:3b:a8:7c:3b:37:ed:68:3f:c3:ca:33:7b: 02:f4:c8:27:32:39:11:1c:0b:e2:01:39:e1:41:22: 8c:fa:b1:5e:e4:a0:3f:4d:ed:0a:82:d7:94:38:cc: 3f:3c:95:4e:84:f9:be:82:e4:21:b7:85:5a:08:d8: 15:fb:2a:b7:ca:28:2f:10:95:cb:59:e0:79:aa:f1: 12:c4:15:50:53:c1:e2:7f:8e:34:c9:64:dc:13:ea: 68:0e:c6:b3:60:c3:0b:1e:98:73:7b:88:fd:81:11: f0:71:72:fb:24:e3:f4:6c:29:08:de:45:d4:63:3c: b8:ed:dc:eb:46:67:e3:1e:06:2a:8d:1e:ee:45:34: 75:62:47:b8:cf:34:2a:0e:af:14:7f:f4:49:73:58: 11:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:03:6A:51:44:A9:5E:DD:58:BA:D5:86:6A:AB:E2:C8:00:BC:A0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/eb9326df-0150-3250-b938-62f7bde0ad4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 104.153.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2e:23:12:75:f5:c5:b0:bc:16:f5:67:92:94:d9:94:52:ff: 3e:3e:23:b2:5c:cd:62:f2:89:af:fd:a1:ba:56:b6:42:e0:eb: 23:41:44:52:2f:76:ee:af:da:c3:5a:15:ae:50:99:d8:81:dd: c6:f0:ae:42:01:79:7b:20:9e:75:30:38:d4:df:ba:9c:02:fd: e7:9c:18:17:e2:48:34:cb:25:26:f8:2c:1b:45:57:05:82:55: ea:16:25:3a:2f:af:bd:8b:54:97:54:2f:5b:b9:2a:d3:3e:9d: 0a:20:a4:f3:91:73:58:5b:e7:45:ac:33:10:7e:5d:3f:57:90: 96:9a:5c:2c:34:09:13:17:01:5e:9d:63:f3:fa:1a:64:11:b1: 25:7d:0f:61:bd:ee:03:90:7d:17:c5:17:a2:0f:b4:dc:3d:f0: f4:ff:0d:f3:ac:02:f5:5e:16:25:3b:36:fd:6e:0d:af:3b:9c: 5a:f5:dd:15:54:1f:6d:41:34:7d:3e:64:ef:fc:c2:c4:96:c3: 2f:ef:7a:32:ef:88:21:8a:0b:27:a1:7a:c7:46:cd:78:b7:cf: b6:c0:14:b6:b2:cc:fe:f9:e5:95:be:d2:d1:43:1f:04:ce:49: d3:f8:82:79:35:a6:6c:d7:ec:00:de:52:b2:e5:14:bd:10:56: 13:7f:c1:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlO4xLHKlD+EiLaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ZDgzMGQ3ZDAtMDQ5MS00YmUwLWEzMjctYjgwZDVmZGQwMGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRssBSftTRh1FMkYwpjdKNIIv2lYapCrW842 Kf9qVugmzcz7La3SPppBe9YxQRY4VkXa4sIMWNFeVSVrtmVkIQD59WsYXjzZd808 bTsNm4g/Cp/0jyMl1MIgnlGoHu8Ltc1l/CwStxLf1d87qHw7N+1oP8PKM3sC9Mgn MjkRHAviATnhQSKM+rFe5KA/Te0KgteUOMw/PJVOhPm+guQht4VaCNgV+yq3yigv EJXLWeB5qvESxBVQU8Hif440yWTcE+poDsazYMMLHphze4j9gRHwcXL7JOP0bCkI 3kXUYzy47dzrRmfjHgYqjR7uRTR1Yke4zzQqDq8Uf/RJc1gRuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMDalFEqV7dWLrVhmqr4sgAvKAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvZWI5MzI2ZGYtMDE1MC0z MjUwLWI5MzgtNjJmN2JkZTBhZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8uIxJ19cWwvBb1Z5KU2ZRS/z4+I7JczWLyia/9obpWtkLg6yNBRFIv du6v2sNaFa5QmdiB3cbwrkIBeXsgnnUwONTfupwC/eecGBfiSDTLJSb4LBtFVwWC VeoWJTovr72LVJdUL1u5KtM+nQogpPORc1hb50WsMxB+XT9XkJaaXCw0CRMXAV6d Y/P6GmQRsSV9D2G97gOQfRfFF6IPtNw98PT/DfOsAvVeFiU7Nv1uDa87nFr13RVU H21BNH0+ZO/8wsSWwy/vejLviCGKCyehesdGzXi3z7bAFLayzP755ZW+0tFDHwTO SdP4gnk1pmzX7ADeUrLlFL0QVhN/wcE= -----END CERTIFICATE-----Generated at Sun Jun 8 11:00:12 2025 by rpki-client