$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa File: ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa (raw, json) Hash identifier: ATA8yJGajbm3He+6TcYvJYvZ7CgDcTNa99g3Z1/h33c= Subject key identifier: 0C:E6:A8:80:48:9A:F7:B2:80:AB:F7:61:F5:2B:F2:A5:A9:83:CA:F6 Certificate issuer: /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Certificate serial: 010D0C9F4328584B9E07B6F49C7ABE9CCD569880 Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 208.70.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b6:f4:9c:7a:be:9c:cd:56:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=7e27f587-93a6-4943-b6fc-a0b8968b4476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:bf:cd:cc:77:ed:5b:a1:ac:35:40:34:1a: 88:02:80:be:10:40:f7:19:a5:3c:4f:1c:94:2b:28: 65:df:94:13:18:71:08:fa:a7:02:00:e3:58:8e:54: be:3c:75:35:7e:4e:89:db:49:64:31:88:c5:15:01: 97:4e:f2:6a:4f:c2:bc:55:71:03:35:7e:09:c8:20: d3:2d:5c:2a:31:7d:95:99:8a:80:f5:25:61:be:99: 3a:43:95:da:dd:39:19:30:b0:58:80:07:9a:11:23: 66:94:c2:a6:dc:b8:43:c9:0f:9d:52:fe:3f:0e:16: 0f:88:71:4e:6a:22:40:fe:94:cc:0a:03:f5:7d:40: 6f:d2:66:8c:ed:b5:33:bd:44:68:b9:27:5a:1c:4a: dc:5f:c1:c1:3e:3c:62:bc:a6:21:ba:51:52:78:82: 1a:ce:ec:73:d1:9b:b3:93:44:b5:73:ed:af:5c:20: c6:68:1f:14:2d:a9:7b:1d:86:89:93:89:4c:5b:88: 7a:94:54:f0:78:d5:a2:a4:f1:05:4b:00:53:4f:77: ec:03:cc:15:29:ca:fe:9f:b5:e2:72:e2:3e:43:44: 37:2a:d0:fe:be:db:f4:04:81:43:08:a0:f3:c2:20: a4:bd:4b:6f:9f:ce:c7:95:5e:19:8c:2f:f0:c9:65: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E6:A8:80:48:9A:F7:B2:80:AB:F7:61:F5:2B:F2:A5:A9:83:CA:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl X509v3 Authority Key Identifier: keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer sbgp-ipAddrBlock: critical IPv4: 208.70.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:64:af:b6:6b:ce:d2:24:97:a4:03:1f:f0:78:91:fe:2b:e2: e4:3f:e5:bc:69:c8:d3:24:2c:bb:2d:be:67:5e:cc:ff:f4:40: d4:c8:9b:c0:ac:0f:ec:44:57:63:a8:97:f8:8b:4a:4c:e9:d4: 1b:8a:64:ee:6f:a1:12:81:f9:06:91:da:92:68:af:25:55:90: 53:f4:01:0b:4d:a0:49:2f:93:b1:23:f4:61:b9:67:fb:a0:a1: db:b1:7a:30:75:05:4b:a0:1b:83:fa:f2:92:62:57:16:ad:09: 19:be:3a:16:31:fc:e8:de:2a:b5:3f:1b:2d:83:07:a7:cc:57: 50:de:9b:5f:b6:2d:bf:59:48:22:1a:1f:f6:61:d5:c4:12:96: b1:15:30:2e:30:e7:e0:e2:f9:4c:a1:20:71:58:80:e5:23:21: 5d:a7:c8:f8:8e:7a:2e:32:af:fe:08:96:a3:2f:f9:5d:c1:d6: 8d:5f:d2:4d:f0:d8:4f:a2:46:42:d4:80:07:b2:41:e4:a6:7d: 32:c9:2a:80:86:e0:5e:94:13:03:1e:32:00:b4:71:12:1f:8b: 10:b2:84:de:1b:51:c1:ab:d2:97:ca:02:0c:f3:98:ef:87:a5: 31:41:52:e6:66:f5:66:45:d6:bc:e4:be:24:a1:1d:32:c6:ba: e7:9d:5e:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7b0nHq+nM1WmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc2YmI1YTQtNzFlNS00OTdmLWE0YTQtZWIzZjFhOGFm ZDFjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk N2UyN2Y1ODctOTNhNi00OTQzLWI2ZmMtYTBiODk2OGI0NDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRe/zcx37VuhrDVANBqIAoC+EED3GaU8TxyU Kyhl35QTGHEI+qcCAONYjlS+PHU1fk6J20lkMYjFFQGXTvJqT8K8VXEDNX4JyCDT LVwqMX2VmYqA9SVhvpk6Q5Xa3TkZMLBYgAeaESNmlMKm3LhDyQ+dUv4/DhYPiHFO aiJA/pTMCgP1fUBv0maM7bUzvURouSdaHErcX8HBPjxivKYhulFSeIIazuxz0Zuz k0S1c+2vXCDGaB8ULal7HYaJk4lMW4h6lFTweNWipPEFSwBTT3fsA8wVKcr+n7Xi cuI+Q0Q3KtD+vtv0BIFDCKDzwiCkvUtvn87HlV4ZjC/wyWWwkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzmqIBImveygKv3YfUr8qWpg8r2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzZi YjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4YWZkMWMvZWJiN2YzYjUtZWRmOS0z ZmU2LTkyMzAtZjFiNGNhMzg5NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc2YmI1YTQtNzFlNS00OTdmLWE0 YTQtZWIzZjFhOGFmZDFjLzg3NmJiNWE0LTcxZTUtNDk3Zi1hNGE0LWViM2YxYThh ZmQxYy5jcmwwHwYDVR0jBBgwFoAUE2GiTAhkvDkz5Ehc1jDniqqapGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNm MWE4YWZkMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhkr7ZrztIkl6QDH/B4kf4r4uQ/5bxpyNMkLLstvmdezP/0QNTIm8Cs D+xEV2Ool/iLSkzp1BuKZO5voRKB+QaR2pJoryVVkFP0AQtNoEkvk7Ej9GG5Z/ug oduxejB1BUugG4P68pJiVxatCRm+OhYx/OjeKrU/Gy2DB6fMV1Dem1+2Lb9ZSCIa H/Zh1cQSlrEVMC4w5+Di+UyhIHFYgOUjIV2nyPiOei4yr/4IlqMv+V3B1o1f0k3w 2E+iRkLUgAeyQeSmfTLJKoCG4F6UEwMeMgC0cRIfixCyhN4bUcGr0pfKAgzzmO+H pTFBUuZm9WZF1rzkviShHTLGuuedXrA= -----END CERTIFICATE-----Generated at Wed Nov 5 21:09:59 2025 by rpki-client