$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/6fd99c21-281a-36a9-bea0-daae7520319b.roa File: 6fd99c21-281a-36a9-bea0-daae7520319b.roa (raw, json) Hash identifier: lY/t9rP/Jwwe+IoglucHftANVrkCh+xyI0IXFfq9F3E= Subject key identifier: 5F:DE:04:1B:32:3D:AC:B1:04:16:C1:56:F6:8D:F2:17:68:A7:FA:69 Certificate issuer: /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Certificate serial: 010D0C9F4328584ABD4B97D13C5466FBDDDAF300 Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/6fd99c21-281a-36a9-bea0-daae7520319b.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 3561 IP address blocks: 208.70.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:97:d1:3c:54:66:fb:dd:da:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=851b11aa-43f0-49f0-a146-0ab3a941decd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:15:be:55:d5:c3:f4:a2:79:62:58:b4:74: 61:b5:50:33:9f:4a:52:2c:1c:a0:da:1d:a9:a1:e1: aa:db:ec:23:91:e6:d7:2c:5a:bf:97:d1:6b:f8:f0: 4d:7f:2c:81:af:4a:a1:21:2c:52:d6:ef:d5:76:d2: c8:b7:9e:b3:46:93:cf:ba:1e:9a:0c:3c:9f:22:16: 1d:38:e3:36:17:f1:ee:cc:e1:37:05:bf:52:45:c8: f7:8e:7e:14:07:2a:ec:ba:ec:d8:5c:fd:00:95:43: 75:19:5c:8d:fd:59:7a:bc:29:1f:10:80:3c:c5:75: 8b:0e:86:9b:54:29:cc:d1:7b:df:9f:88:6d:ae:ca: dd:4b:18:87:70:ab:6e:ec:25:74:94:99:5e:78:fb: 8f:04:a8:09:f0:03:b7:c7:1e:cf:30:79:77:26:2c: 52:73:c2:99:81:13:ea:5b:91:6f:6e:70:9b:bf:1e: bd:90:57:e6:c1:8f:ee:de:be:1e:b0:6a:90:1d:e1: a8:de:23:18:77:40:ce:59:c7:ff:9e:51:d1:51:39: ff:8c:be:fb:7b:46:b8:89:f2:f1:ec:c8:8e:00:b0: f1:49:4a:64:f2:6c:5c:bc:e3:f3:1e:ae:dd:d8:e4: 88:45:1c:bc:ed:47:b0:a2:19:d9:4c:1f:25:7d:c8: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DE:04:1B:32:3D:AC:B1:04:16:C1:56:F6:8D:F2:17:68:A7:FA:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/6fd99c21-281a-36a9-bea0-daae7520319b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl X509v3 Authority Key Identifier: keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer sbgp-ipAddrBlock: critical IPv4: 208.70.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d3:48:72:af:cd:78:ba:fc:a7:6d:10:5c:e1:ba:79:9f:ed: 9b:9e:ba:0e:87:31:77:71:34:5c:06:27:93:98:21:21:f8:65: 09:db:be:5f:12:25:fa:0d:50:5a:29:20:e7:c3:1e:d6:2a:be: 83:be:3d:10:2a:3c:a8:80:cf:15:86:2d:7d:dd:7c:9e:b8:d6: 29:0f:7b:63:c2:97:c9:6e:52:bc:15:05:09:5e:6b:c2:1d:9b: ee:20:6f:04:6b:7c:a0:01:c9:dc:81:57:f6:aa:46:09:18:e1: 53:16:de:0f:28:2d:cb:10:c6:10:38:d7:58:25:3f:96:0b:ce: ed:9f:f7:1e:0b:70:b0:06:dc:d4:1b:ba:92:da:b0:b2:f8:df: 03:73:bf:85:b4:d7:8e:63:fc:af:a3:9a:8b:83:0f:e0:35:66: 96:09:7c:4b:f7:a4:8f:8a:2d:1e:cc:18:2c:f8:3f:53:fa:0e: 3e:d9:a6:f3:58:54:05:f7:fe:78:33:f0:c5:22:49:a0:8d:fa: 2f:10:27:b6:e1:5e:ab:6a:70:bc:11:e0:b3:11:7b:88:f4:34: 1e:8c:31:41:fb:09:53:f9:a8:74:71:f1:4f:4d:ff:d4:00:71: 16:e4:fe:27:f7:1e:14:26:93:e1:b5:96:59:3a:65:18:17:0c: be:6c:92:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5fRPFRm+93a8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc2YmI1YTQtNzFlNS00OTdmLWE0YTQtZWIzZjFhOGFm ZDFjMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ODUxYjExYWEtNDNmMC00OWYwLWExNDYtMGFiM2E5NDFkZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7AVvlXVw/SieWJYtHRhtVAzn0pSLByg2h2p oeGq2+wjkebXLFq/l9Fr+PBNfyyBr0qhISxS1u/VdtLIt56zRpPPuh6aDDyfIhYd OOM2F/HuzOE3Bb9SRcj3jn4UByrsuuzYXP0AlUN1GVyN/Vl6vCkfEIA8xXWLDoab VCnM0Xvfn4htrsrdSxiHcKtu7CV0lJleePuPBKgJ8AO3xx7PMHl3JixSc8KZgRPq W5FvbnCbvx69kFfmwY/u3r4esGqQHeGo3iMYd0DOWcf/nlHRUTn/jL77e0a4ifLx 7MiOALDxSUpk8mxcvOPzHq7d2OSIRRy87UewohnZTB8lfcitDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/eBBsyPayxBBbBVvaN8hdop/ppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzZi YjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4YWZkMWMvNmZkOTljMjEtMjgxYS0z NmE5LWJlYTAtZGFhZTc1MjAzMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc2YmI1YTQtNzFlNS00OTdmLWE0 YTQtZWIzZjFhOGFmZDFjLzg3NmJiNWE0LTcxZTUtNDk3Zi1hNGE0LWViM2YxYThh ZmQxYy5jcmwwHwYDVR0jBBgwFoAUE2GiTAhkvDkz5Ehc1jDniqqapGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNm MWE4YWZkMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzTSHKvzXi6/KdtEFzhunmf7Zueug6HMXdxNFwGJ5OYISH4ZQnbvl8S JfoNUFopIOfDHtYqvoO+PRAqPKiAzxWGLX3dfJ641ikPe2PCl8luUrwVBQlea8Id m+4gbwRrfKABydyBV/aqRgkY4VMW3g8oLcsQxhA411glP5YLzu2f9x4LcLAG3NQb upLasLL43wNzv4W0145j/K+jmouDD+A1ZpYJfEv3pI+KLR7MGCz4P1P6Dj7ZpvNY VAX3/ngz8MUiSaCN+i8QJ7bhXqtqcLwR4LMRe4j0NB6MMUH7CVP5qHRx8U9N/9QA cRbk/if3HhQmk+G1llk6ZRgXDL5sknI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:41:36 2025 by rpki-client