$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa File: ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa (raw, json) Hash identifier: MwM9468Jg04gxwH6+oHkbIG9o6f2Z+dcF/F3rKpgxzo= Subject key identifier: 21:01:A1:2F:5A:81:12:71:CB:D0:72:E3:E1:56:ED:91:D0:91:97:1D Certificate issuer: /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Certificate serial: 010D0C9F4328584C7D7C5DEF2531325ECCA99540 Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 14618 IP address blocks: 208.70.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:5d:ef:25:31:32:5e:cc:a9:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=00c6bc12-4e38-40a4-b4d7-0bf03f92f75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e2:d4:88:8e:92:a5:ea:21:77:55:23:c8:23: 13:d3:21:e7:e2:8f:9d:df:51:86:b5:b3:47:61:e1: 14:2e:ff:11:26:82:41:46:7f:b9:18:5b:4c:6a:3b: 79:f2:a6:48:1b:86:ac:cd:13:80:a8:07:b9:c0:4d: 13:98:8a:da:c4:cb:fc:33:aa:e6:5b:48:4c:3f:f7: be:68:e5:fe:57:89:11:9d:2d:54:26:48:ea:0a:54: 95:08:c7:59:be:d4:a0:8c:45:17:7c:fd:cb:46:8b: 59:72:85:25:9a:b9:74:92:35:27:26:50:5d:e3:fd: 25:9f:97:d7:27:4a:d7:6c:1a:34:cf:5c:fa:2d:23: ae:84:b3:01:21:22:40:aa:24:d2:b0:58:44:bc:73: 15:a0:58:81:ac:15:e8:2f:b2:4f:32:56:57:77:14: fe:7b:61:92:c8:bd:8c:8a:2f:6e:7d:6c:89:07:59: e4:1c:bf:ad:f6:22:03:50:81:28:27:c9:5e:24:c3: 33:35:d5:f2:4f:6d:21:cc:6e:62:d1:0b:22:5e:eb: 0f:ac:2d:35:8f:3e:f4:bb:29:b5:fb:11:06:78:7c: fc:20:da:8b:4c:19:df:85:96:0e:05:db:20:46:dd: 6a:9f:94:7a:ef:f8:7d:2e:1f:00:25:fd:03:b3:26: f7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:01:A1:2F:5A:81:12:71:CB:D0:72:E3:E1:56:ED:91:D0:91:97:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl X509v3 Authority Key Identifier: keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer sbgp-ipAddrBlock: critical IPv4: 208.70.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a8:66:82:91:d6:96:bb:01:d5:50:97:a2:41:fc:e3:73:69: aa:8c:45:c9:f7:55:5d:fa:43:51:27:23:d0:af:32:07:1a:1f: 58:b1:40:12:23:51:e4:fd:de:f2:13:8b:84:34:fc:23:c8:57: 6c:5a:3b:52:b2:92:0f:55:c6:7a:6a:c5:90:87:64:f0:fd:c6: 99:e1:6a:84:d3:3d:2a:db:dc:3b:e9:e8:ac:23:45:63:66:d6: 4a:3d:4e:19:35:a1:91:49:cc:97:7a:37:d3:80:0b:37:27:7b: 3d:80:8e:df:26:a6:c9:51:6e:05:bf:52:04:bd:ba:53:4e:f8: 37:74:9e:46:83:5b:f8:43:41:c2:2a:73:be:31:33:f7:dd:c0: 2a:1f:17:b6:49:c5:7d:eb:cd:56:63:02:1a:44:ac:04:d2:40: 1b:b1:a4:67:a6:ec:4f:c8:24:ee:22:01:7f:39:03:39:0e:93: 12:a0:05:e9:c3:1d:ea:b2:f3:73:70:26:8b:ff:e3:1b:ae:15: ae:6f:bc:29:9d:4d:3e:a8:0d:71:47:96:34:94:f2:b6:91:2e: c6:86:76:87:5a:46:d3:69:06:50:de:36:3e:c3:a8:f1:51:18: 61:2c:ab:0c:7c:70:2a:29:78:fc:1c:45:b9:e4:94:59:ec:67: b5:7f:e0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fF3vJTEyXsyplUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc2YmI1YTQtNzFlNS00OTdmLWE0YTQtZWIzZjFhOGFm ZDFjMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk MDBjNmJjMTItNGUzOC00MGE0LWI0ZDctMGJmMDNmOTJmNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeLUiI6Speohd1UjyCMT0yHn4o+d31GGtbNH YeEULv8RJoJBRn+5GFtMajt58qZIG4aszROAqAe5wE0TmIraxMv8M6rmW0hMP/e+ aOX+V4kRnS1UJkjqClSVCMdZvtSgjEUXfP3LRotZcoUlmrl0kjUnJlBd4/0ln5fX J0rXbBo0z1z6LSOuhLMBISJAqiTSsFhEvHMVoFiBrBXoL7JPMlZXdxT+e2GSyL2M ii9ufWyJB1nkHL+t9iIDUIEoJ8leJMMzNdXyT20hzG5i0QsiXusPrC01jz70uym1 +xEGeHz8INqLTBnfhZYOBdsgRt1qn5R67/h9Lh8AJf0Dsyb3pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEBoS9agRJxy9By4+FW7ZHQkZcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzZi YjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4YWZkMWMvZWJiN2YzYjUtZWRmOS0z ZmU2LTkyMzAtZjFiNGNhMzg5NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc2YmI1YTQtNzFlNS00OTdmLWE0 YTQtZWIzZjFhOGFmZDFjLzg3NmJiNWE0LTcxZTUtNDk3Zi1hNGE0LWViM2YxYThh ZmQxYy5jcmwwHwYDVR0jBBgwFoAUE2GiTAhkvDkz5Ehc1jDniqqapGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNm MWE4YWZkMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2oZoKR1pa7AdVQl6JB/ONzaaqMRcn3VV36Q1EnI9CvMgcaH1ixQBIj UeT93vITi4Q0/CPIV2xaO1Kykg9VxnpqxZCHZPD9xpnhaoTTPSrb3Dvp6KwjRWNm 1ko9Thk1oZFJzJd6N9OACzcnez2Ajt8mpslRbgW/UgS9ulNO+Dd0nkaDW/hDQcIq c74xM/fdwCofF7ZJxX3rzVZjAhpErATSQBuxpGem7E/IJO4iAX85AzkOkxKgBenD Heqy83NwJov/4xuuFa5vvCmdTT6oDXFHljSU8raRLsaGdodaRtNpBlDeNj7DqPFR GGEsqwx8cCopePwcRbnklFnsZ7V/4CE= -----END CERTIFICATE-----Generated at Fri Feb 27 00:46:16 2026 by rpki-client