$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/6fd99c21-281a-36a9-bea0-daae7520319b.roa File: 6fd99c21-281a-36a9-bea0-daae7520319b.roa (raw, json) Hash identifier: EgNjKs1+yGH5Ww4eMx7X0xjEakb6V7I/t3DD8PRIq9k= Subject key identifier: 3F:AC:C6:6E:2C:FE:BE:7C:43:DA:9C:AD:33:F8:00:DE:C9:AA:98:BB Certificate issuer: /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Certificate serial: 010D0C9F4328584B9E07B6C004F1BDB940F91600 Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/6fd99c21-281a-36a9-bea0-daae7520319b.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 3561 IP address blocks: 208.70.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b6:c0:04:f1:bd:b9:40:f9:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=3c6da743-931b-47a2-8264-961ee38f3a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3f:bf:99:a7:75:e6:36:5a:5f:14:4a:04:88: 90:7c:3b:2b:a0:77:11:ed:cc:6f:cf:8c:1b:ef:32: ce:32:1d:e8:b2:51:98:dc:26:62:57:7f:4c:82:66: 74:2b:7e:79:61:2c:64:24:63:59:f5:bb:7b:22:f5: f2:c1:4a:05:40:ae:3c:2b:cf:a0:c0:17:a7:dd:3d: 99:a3:43:c1:4c:59:ce:70:48:37:37:92:7b:10:e2: b1:f9:37:d4:1c:ed:0a:27:ff:88:4f:eb:38:2e:a0: 89:15:aa:11:f1:b8:e7:da:3e:32:51:d3:1b:1a:04: cc:0c:0c:52:0e:4b:61:d2:61:9b:fc:7c:ad:dd:a4: 05:af:d8:16:28:5a:7a:ef:fb:0b:79:64:ce:4c:89: 51:19:7b:98:b1:6f:08:0e:dd:17:55:6c:9b:da:11: 76:fe:4b:0e:20:45:b9:0d:a5:16:e9:1f:1c:15:92: ea:90:78:1f:c2:1f:ba:1a:c0:be:26:95:15:c8:84: 0a:34:a4:81:f0:cf:b5:d8:9d:2e:05:4f:5b:60:b7: 0c:39:cb:04:1f:a4:42:b6:c9:3f:b3:dd:8a:84:9c: 67:ea:9e:a6:2a:30:c0:83:98:90:42:04:3d:24:25: 23:5a:f5:7b:c7:b9:cf:5a:10:ac:9c:68:71:83:e9: ee:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AC:C6:6E:2C:FE:BE:7C:43:DA:9C:AD:33:F8:00:DE:C9:AA:98:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/6fd99c21-281a-36a9-bea0-daae7520319b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl X509v3 Authority Key Identifier: keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer sbgp-ipAddrBlock: critical IPv4: 208.70.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c1:69:9d:ea:cf:01:99:fb:b6:56:c7:b7:24:49:35:8b:dc: e3:b0:fc:09:8c:5d:51:c9:4b:9d:2d:8d:16:94:bd:de:eb:57: 75:b6:0e:81:c8:b0:a7:11:e0:ce:b4:5f:98:4c:c9:dc:3b:52: 86:d4:be:f9:95:87:96:66:f8:59:75:a7:f5:b4:59:1d:5e:4f: c3:89:87:14:bc:d3:69:2a:22:02:71:a4:db:52:8a:f7:98:34: 56:9b:f0:43:34:68:15:cb:d5:e7:00:bb:3f:05:c5:8b:d1:aa: 17:3b:89:b3:f6:cc:bc:1b:08:3e:1a:d1:26:fa:37:91:9b:d8: 7e:7e:45:e4:95:bb:9e:ea:cd:45:c4:0e:84:6b:b3:b3:1d:c7: 01:2c:86:7f:0e:91:5d:6d:46:72:24:b1:ca:10:e3:60:f5:bc: 75:71:26:00:a2:59:1a:3e:51:04:09:ef:00:6a:40:c6:20:52: 0c:7d:ca:97:df:3c:c0:b7:01:11:aa:18:67:1c:3e:5d:81:60: de:ef:96:86:e5:55:dd:1e:ce:aa:c3:de:ef:0a:9a:c4:4e:9f: ec:7f:33:eb:f7:f5:61:42:36:86:6f:3a:67:3a:ce:c8:24:c4: 48:3b:7a:cb:c0:dd:d6:f0:7b:9f:b4:94:45:b0:15:87:26:39: 4c:75:40:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7bABPG9uUD5FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc2YmI1YTQtNzFlNS00OTdmLWE0YTQtZWIzZjFhOGFm ZDFjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk M2M2ZGE3NDMtOTMxYi00N2EyLTgyNjQtOTYxZWUzOGYzYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT+/mad15jZaXxRKBIiQfDsroHcR7cxvz4wb 7zLOMh3oslGY3CZiV39MgmZ0K355YSxkJGNZ9bt7IvXywUoFQK48K8+gwBen3T2Z o0PBTFnOcEg3N5J7EOKx+TfUHO0KJ/+IT+s4LqCJFaoR8bjn2j4yUdMbGgTMDAxS Dkth0mGb/Hyt3aQFr9gWKFp67/sLeWTOTIlRGXuYsW8IDt0XVWyb2hF2/ksOIEW5 DaUW6R8cFZLqkHgfwh+6GsC+JpUVyIQKNKSB8M+12J0uBU9bYLcMOcsEH6RCtsk/ s92KhJxn6p6mKjDAg5iQQgQ9JCUjWvV7x7nPWhCsnGhxg+nujwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+sxm4s/r58Q9qcrTP4AN7Jqpi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzZi YjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4YWZkMWMvNmZkOTljMjEtMjgxYS0z NmE5LWJlYTAtZGFhZTc1MjAzMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc2YmI1YTQtNzFlNS00OTdmLWE0 YTQtZWIzZjFhOGFmZDFjLzg3NmJiNWE0LTcxZTUtNDk3Zi1hNGE0LWViM2YxYThh ZmQxYy5jcmwwHwYDVR0jBBgwFoAUE2GiTAhkvDkz5Ehc1jDniqqapGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNm MWE4YWZkMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7BaZ3qzwGZ+7ZWx7ckSTWL3OOw/AmMXVHJS50tjRaUvd7rV3W2DoHI sKcR4M60X5hMydw7UobUvvmVh5Zm+Fl1p/W0WR1eT8OJhxS802kqIgJxpNtSiveY NFab8EM0aBXL1ecAuz8FxYvRqhc7ibP2zLwbCD4a0Sb6N5Gb2H5+ReSVu57qzUXE DoRrs7MdxwEshn8OkV1tRnIkscoQ42D1vHVxJgCiWRo+UQQJ7wBqQMYgUgx9ypff PMC3ARGqGGccPl2BYN7vloblVd0ezqrD3u8KmsROn+x/M+v39WFCNoZvOmc6zsgk xEg7esvA3dbwe5+0lEWwFYcmOUx1QLU= -----END CERTIFICATE-----Generated at Wed Nov 5 02:34:03 2025 by rpki-client