$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa File: 3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa (raw, json) Hash identifier: ZYnQQpa7ykng8/PiVyV1A0zLjce8w5J567C42McREto= Subject key identifier: E6:E2:06:5E:0E:85:20:DB:D1:0E:C2:8F:52:A6:8B:C9:FA:E3:6C:EB Certificate issuer: /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Certificate serial: 010D0C9F43285849DC8FC359672DE28D9E8FAC40 Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 208.70.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c3:59:67:2d:e2:8d:9e:8f:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=d71437ea-ae89-4fa3-85d7-b87f02ba12ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:20:c6:f6:29:61:b3:9f:ce:f5:85:26:18: 7d:25:6d:b5:25:f1:75:01:56:1a:e9:42:81:9f:96: 08:f3:56:c8:4b:19:4a:57:58:f9:a5:0c:8e:38:68: b9:fa:12:82:e5:f9:c7:e4:42:81:f5:3e:a1:b0:16: e5:87:b5:d1:16:30:8d:7c:34:73:dc:50:64:02:05: 48:34:c5:89:da:3b:13:75:e5:ea:50:5e:7a:71:dd: b2:1d:13:50:4a:cd:2a:0d:0a:36:fa:e6:83:1a:22: c2:2e:71:cd:0e:a4:b8:bc:14:57:c2:53:3b:ba:0f: f4:a0:82:fd:6b:34:d5:fd:92:9c:75:d7:56:f6:1f: 40:62:a8:99:aa:76:1a:ad:47:bc:91:c0:7c:5f:ff: 1f:81:8f:8b:2a:e9:a8:ef:50:2c:f9:2f:19:02:3c: 8b:b4:9d:f2:61:de:73:9a:5a:44:ba:80:34:13:cd: 18:73:59:0a:81:d2:90:84:7a:f2:e0:24:53:6b:ce: 9b:e3:cc:70:63:e4:e3:37:12:b4:ca:85:a7:30:26: 98:85:70:4d:38:b1:c6:84:32:e3:b3:a1:c1:7d:82: bd:72:cf:7f:51:e6:54:3b:80:01:b8:42:c1:26:8c: f8:11:13:00:e7:ba:9e:54:73:f1:b3:00:a0:02:0b: b3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E2:06:5E:0E:85:20:DB:D1:0E:C2:8F:52:A6:8B:C9:FA:E3:6C:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl X509v3 Authority Key Identifier: keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer sbgp-ipAddrBlock: critical IPv4: 208.70.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:83:f9:f2:91:6f:b2:71:28:43:f9:34:b6:0e:9e:c3:07:ce: ef:27:4b:98:52:70:3f:d4:56:0d:a1:05:05:42:30:5b:91:ae: bc:8b:31:0c:93:9a:21:b9:b4:1e:3f:95:52:25:7d:33:d2:ee: 1c:0f:13:07:70:72:09:d2:35:72:fe:b1:7e:4e:47:c1:c0:c3: 02:06:48:e2:23:67:bd:cf:ea:de:f0:54:00:e0:7e:d3:f4:94: 80:20:73:ab:22:3a:b7:49:2d:31:71:e2:18:d3:ee:d2:a0:5b: 71:e4:fd:c3:4c:e7:f6:5f:7a:ca:50:7a:4a:c0:04:66:85:57: bc:b9:9c:69:9e:af:d5:fe:8b:d0:e5:3e:e7:d8:29:db:6d:53: 4a:37:b8:0e:9a:d8:d0:c0:c2:b7:f3:8f:2a:c8:b6:2e:2e:b4: d4:65:e9:40:73:ec:eb:eb:2d:00:22:4e:6f:d7:0a:51:bc:4c: a0:7b:51:d1:d8:27:db:d3:71:36:a7:36:83:6b:a5:62:5f:a7: bb:92:d2:93:08:93:32:85:90:40:ff:39:df:3d:25:3b:2c:8a: e5:df:5f:9d:3a:6e:f4:7b:af:a8:37:81:f5:26:0a:02:d2:63: 4e:41:2e:70:1d:8e:ca:51:8a:b4:5b:6b:c9:26:b1:e4:10:f7: 3e:65:96:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8NZZy3ijZ6PrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc2YmI1YTQtNzFlNS00OTdmLWE0YTQtZWIzZjFhOGFm ZDFjMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDcxNDM3ZWEtYWU4OS00ZmEzLTg1ZDctYjg3ZjAyYmExMmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse0gxvYpYbOfzvWFJhh9JW21JfF1AVYa6UKB n5YI81bISxlKV1j5pQyOOGi5+hKC5fnH5EKB9T6hsBblh7XRFjCNfDRz3FBkAgVI NMWJ2jsTdeXqUF56cd2yHRNQSs0qDQo2+uaDGiLCLnHNDqS4vBRXwlM7ug/0oIL9 azTV/ZKcdddW9h9AYqiZqnYarUe8kcB8X/8fgY+LKumo71As+S8ZAjyLtJ3yYd5z mlpEuoA0E80Yc1kKgdKQhHry4CRTa86b48xwY+TjNxK0yoWnMCaYhXBNOLHGhDLj s6HBfYK9cs9/UeZUO4ABuELBJoz4ERMA57qeVHPxswCgAguznQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObiBl4OhSDb0Q7Cj1Kmi8n642zrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzZi YjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4YWZkMWMvMzg2N2VhN2YtYjY2Ny0z NjFhLWExZGMtNWRkOWIwYTIwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc2YmI1YTQtNzFlNS00OTdmLWE0 YTQtZWIzZjFhOGFmZDFjLzg3NmJiNWE0LTcxZTUtNDk3Zi1hNGE0LWViM2YxYThh ZmQxYy5jcmwwHwYDVR0jBBgwFoAUE2GiTAhkvDkz5Ehc1jDniqqapGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNm MWE4YWZkMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeD+fKRb7JxKEP5NLYOnsMHzu8nS5hScD/UVg2hBQVCMFuRrryLMQyT miG5tB4/lVIlfTPS7hwPEwdwcgnSNXL+sX5OR8HAwwIGSOIjZ73P6t7wVADgftP0 lIAgc6siOrdJLTFx4hjT7tKgW3Hk/cNM5/ZfespQekrABGaFV7y5nGmer9X+i9Dl PufYKdttU0o3uA6a2NDAwrfzjyrIti4utNRl6UBz7OvrLQAiTm/XClG8TKB7UdHY J9vTcTanNoNrpWJfp7uS0pMIkzKFkED/Od89JTssiuXfX506bvR7r6g3gfUmCgLS Y05BLnAdjspRirRba8kmseQQ9z5lltQ= -----END CERTIFICATE-----Generated at Sat Jun 14 05:59:57 2025 by rpki-client