$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa File: 3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa (raw, json) Hash identifier: nvSyfhEJhUnXQA4kvFUV534PaW7Oe4RL566UqLiF1+U= Subject key identifier: 1A:12:49:63:64:D4:73:A0:54:28:49:A9:D2:E2:29:37:89:53:B9:76 Certificate issuer: /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Certificate serial: 010D0C9F4328584B9E07B6E34061AEBFA480B500 Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 208.70.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b6:e3:40:61:ae:bf:a4:80:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=556d612b-cdb1-4362-b6f5-aaea681fb4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:d3:91:55:4e:41:5a:ea:e9:c6:2e:d0:20: 50:a2:91:bd:4e:7d:d2:4c:d9:a5:59:e4:b1:d1:9b: 35:54:da:19:74:05:b4:45:93:6a:21:0f:4e:b3:ee: 27:cc:fc:59:bc:9a:e3:de:0a:47:ef:3a:ea:96:0d: 1e:18:06:f6:78:48:d2:6e:bb:95:26:5a:cf:5f:0b: 47:d7:3f:18:20:32:04:6a:4f:65:34:c1:e7:16:22: 7f:d8:12:37:ad:68:42:f9:06:44:7b:5d:fa:54:0e: 53:7e:0a:98:fb:c5:f1:1c:77:26:fa:a6:a3:d0:25: 6c:8a:47:67:2d:07:74:9a:76:7a:ad:68:e4:45:e7: af:9f:ef:3b:e8:6f:29:06:80:6c:be:ab:2d:d6:f9: 84:24:5d:8f:47:34:8e:1b:89:7e:ef:a9:50:4c:44: c1:28:64:e9:ee:13:1b:83:30:d1:5a:73:eb:ab:f8: c6:9f:eb:36:d4:5a:ea:24:3c:51:23:14:47:9b:2a: 30:b5:eb:57:cc:00:c7:99:d8:31:66:42:f0:2b:a3: a4:72:4d:97:4b:c0:b2:35:b7:ba:71:13:9e:b3:44: 64:fc:d0:9a:da:72:28:38:f6:58:17:63:68:1c:79: 75:a5:0f:78:13:6c:8b:e1:15:7e:c4:f0:64:5c:a0: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:12:49:63:64:D4:73:A0:54:28:49:A9:D2:E2:29:37:89:53:B9:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl X509v3 Authority Key Identifier: keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer sbgp-ipAddrBlock: critical IPv4: 208.70.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:d4:d2:88:35:a2:29:8c:51:0e:12:0d:c6:16:01:67:ca:26: f6:e6:10:b1:37:b0:21:15:21:8a:df:f0:3e:dd:62:bf:df:f5: 90:02:0a:a7:c8:a1:69:5e:32:bf:1f:1e:e1:e9:3c:67:da:e2: 5b:93:0d:07:5b:23:5a:06:ea:1d:35:b1:ce:94:6d:55:3f:7a: e3:d1:f7:a3:90:c0:6e:c1:90:e0:85:cf:4f:25:bd:c9:b1:fc: 97:88:b2:e0:34:47:7f:19:79:a1:b7:8e:0a:2b:28:ea:3c:fd: 16:78:3f:0c:80:f3:1e:a8:7d:bd:8a:94:4b:5b:98:c8:6e:fb: e2:3a:a9:b3:74:82:f7:f6:68:fc:6c:a8:0b:84:cc:59:87:a2: 91:d1:e2:0b:b1:3a:fd:bc:af:27:7d:b1:4d:84:8b:de:22:21: a6:e0:8f:fc:37:4d:76:02:5c:37:cd:ba:28:06:07:d6:60:da: d1:a2:84:6f:d0:ce:bd:fc:26:67:32:3b:93:22:f1:51:57:0c: 1d:ba:5e:fa:8f:e9:97:df:8b:98:fd:16:97:f8:50:85:e2:1e: 1d:00:1a:32:fe:bb:48:7a:93:46:2d:a0:70:19:ba:85:76:c7: e6:ad:c0:3d:e7:88:ed:4c:e8:b3:d7:8c:81:a9:5a:b1:ce:70: 99:da:cf:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7bjQGGuv6SAtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc2YmI1YTQtNzFlNS00OTdmLWE0YTQtZWIzZjFhOGFm ZDFjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NTU2ZDYxMmItY2RiMS00MzYyLWI2ZjUtYWFlYTY4MWZiNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo97TkVVOQVrq6cYu0CBQopG9Tn3STNmlWeSx 0Zs1VNoZdAW0RZNqIQ9Os+4nzPxZvJrj3gpH7zrqlg0eGAb2eEjSbruVJlrPXwtH 1z8YIDIEak9lNMHnFiJ/2BI3rWhC+QZEe136VA5TfgqY+8XxHHcm+qaj0CVsikdn LQd0mnZ6rWjkReevn+876G8pBoBsvqst1vmEJF2PRzSOG4l+76lQTETBKGTp7hMb gzDRWnPrq/jGn+s21FrqJDxRIxRHmyowtetXzADHmdgxZkLwK6Okck2XS8CyNbe6 cROes0Rk/NCa2nIoOPZYF2NoHHl1pQ94E2yL4RV+xPBkXKCrdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoSSWNk1HOgVChJqdLiKTeJU7l2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzZi YjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4YWZkMWMvMzg2N2VhN2YtYjY2Ny0z NjFhLWExZGMtNWRkOWIwYTIwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc2YmI1YTQtNzFlNS00OTdmLWE0 YTQtZWIzZjFhOGFmZDFjLzg3NmJiNWE0LTcxZTUtNDk3Zi1hNGE0LWViM2YxYThh ZmQxYy5jcmwwHwYDVR0jBBgwFoAUE2GiTAhkvDkz5Ehc1jDniqqapGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNm MWE4YWZkMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7U0og1oimMUQ4SDcYWAWfKJvbmELE3sCEVIYrf8D7dYr/f9ZACCqfI oWleMr8fHuHpPGfa4luTDQdbI1oG6h01sc6UbVU/euPR96OQwG7BkOCFz08lvcmx /JeIsuA0R38ZeaG3jgorKOo8/RZ4PwyA8x6ofb2KlEtbmMhu++I6qbN0gvf2aPxs qAuEzFmHopHR4guxOv28ryd9sU2Ei94iIabgj/w3TXYCXDfNuigGB9Zg2tGihG/Q zr38JmcyO5Mi8VFXDB26XvqP6Zffi5j9Fpf4UIXiHh0AGjL+u0h6k0YtoHAZuoV2 x+atwD3niO1M6LPXjIGpWrHOcJnaz50= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:11 2025 by rpki-client