$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa File: b32af959-6588-30ef-ac6a-e1c8ea97071b.roa (raw, json) Hash identifier: JRnn6Jx3CVrfvTCJ7xr/7UhvPnpB0VSYgwlpOyIVsxY= Subject key identifier: 0A:B3:5D:10:FF:D9:B0:6C:E4:44:E4:0E:A2:5E:4F:05:48:0F:DE:3C Certificate issuer: /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Certificate serial: 010D0C9F4328584F093CF15DC9923AF7980A6420 Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 3390 IP address blocks: 2610:e0:a040::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:f1:5d:c9:92:3a:f7:98:0a:64:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=388b2ffc-a0f1-40ce-bc73-0d8844cbb9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9e:fe:d7:fe:23:c0:63:75:93:d6:60:06:c2: b0:75:64:a8:16:01:af:de:ef:c6:ca:52:01:ae:df: ba:2d:c0:96:75:3b:cf:94:fc:d4:af:a2:13:0d:8b: 98:d4:c8:47:92:9d:0d:e3:85:0d:fc:e8:da:b2:a0: 23:ab:b8:4f:ff:9f:4c:2c:ac:c5:53:c5:b2:31:2a: 74:f9:49:ba:51:79:d7:cc:c4:2a:4c:1c:07:ff:85: df:09:00:98:19:6a:d1:27:6a:45:d5:49:00:05:c6: f8:48:f6:77:7c:46:a8:f2:07:80:41:92:ab:dd:34: 45:1b:8a:72:46:81:66:97:4d:8b:8b:c4:94:16:e6: 16:53:4b:0e:f0:23:57:ee:cd:df:38:4a:01:5d:54: 2b:ae:ce:4c:6e:bb:76:ed:39:89:a5:ef:a9:80:68: 63:48:a7:4f:8d:a7:ec:a4:24:56:6a:79:a2:0f:e6: 4a:ae:e3:7c:f3:a6:b9:90:9a:67:52:0c:fe:aa:1b: 54:da:3c:25:e6:83:fb:78:40:c8:b6:c5:69:0d:55: 15:85:44:9c:ed:f0:3e:92:66:34:65:3d:93:2f:2a: 43:69:41:39:c6:e4:71:70:1c:15:71:74:66:e4:5d: b0:1a:24:97:d1:9f:fd:63:81:ab:b0:d4:20:44:70: cf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B3:5D:10:FF:D9:B0:6C:E4:44:E4:0E:A2:5E:4F:05:48:0F:DE:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl X509v3 Authority Key Identifier: keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer sbgp-ipAddrBlock: critical IPv6: 2610:e0:a040::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:4f:e5:ed:dc:59:26:10:6c:fe:c7:25:6e:8a:62:31:a4:ed: d6:c5:fc:c4:8e:80:7f:f9:df:bc:db:ad:d3:dc:b9:f1:8d:86: 06:ed:ac:3f:0d:6a:45:9c:8b:08:93:a8:ae:6d:25:23:28:7b: de:22:77:c2:95:76:55:5c:e4:d7:1f:bd:89:7a:51:d9:4c:70: 44:4b:c7:2a:e4:e8:62:9f:b5:2e:74:59:34:69:34:8a:2d:65: 4a:20:6b:8c:67:83:55:ba:c6:61:5a:61:fd:58:40:44:0d:da: 73:8c:98:38:ef:0c:cb:ce:3e:dc:30:40:cd:43:12:46:14:ca: 6e:b3:06:98:35:c1:ac:27:af:90:d4:e0:3d:d4:33:32:44:56: 38:60:b4:6a:13:b7:cb:2f:03:fb:bd:74:46:c2:57:56:a7:cd: 6c:de:e2:34:9b:22:34:1b:5b:f5:41:c9:1f:b2:9f:01:36:ae: 10:0c:c3:74:9e:6a:96:22:a1:09:af:2c:40:e9:80:30:58:a1: d9:1a:bd:da:7f:4a:9d:e6:cb:a9:a5:bc:a4:5f:66:4a:97:58: d8:03:e4:be:a2:32:84:90:1d:0d:74:62:0f:d6:44:aa:ca:bc: 4c:56:fa:71:ab:89:33:38:ac:84:07:97:f8:97:51:b3:68:67: 7f:cd:76:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8JPPFdyZI695gKZCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj N2JlMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk Mzg4YjJmZmMtYTBmMS00MGNlLWJjNzMtMGQ4ODQ0Y2JiOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ7+1/4jwGN1k9ZgBsKwdWSoFgGv3u/GylIB rt+6LcCWdTvPlPzUr6ITDYuY1MhHkp0N44UN/OjasqAjq7hP/59MLKzFU8WyMSp0 +Um6UXnXzMQqTBwH/4XfCQCYGWrRJ2pF1UkABcb4SPZ3fEao8geAQZKr3TRFG4py RoFml02Li8SUFuYWU0sO8CNX7s3fOEoBXVQrrs5Mbrt27TmJpe+pgGhjSKdPjafs pCRWanmiD+ZKruN886a5kJpnUgz+qhtU2jwl5oP7eEDItsVpDVUVhUSc7fA+kmY0 ZT2TLypDaUE5xuRxcBwVcXRm5F2wGiSX0Z/9Y4GrsNQgRHDPDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAqzXRD/2bBs5ETkDqJeTwVID948MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4 Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvYjMyYWY5NTktNjU4OC0z MGVmLWFjNmEtZTFjOGVhOTcwNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1 YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3 OGU1NWM3YmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAA4KBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGlP5e3cWSYQbP7HJW6KYjGk7dbF/MSOgH/537zbrdPcufGNhgbt rD8NakWciwiTqK5tJSMoe94id8KVdlVc5NcfvYl6UdlMcERLxyrk6GKftS50WTRp NIotZUoga4xng1W6xmFaYf1YQEQN2nOMmDjvDMvOPtwwQM1DEkYUym6zBpg1wawn r5DU4D3UMzJEVjhgtGoTt8svA/u9dEbCV1anzWze4jSbIjQbW/VByR+ynwE2rhAM w3SeapYioQmvLEDpgDBYodkavdp/Sp3my6mlvKRfZkqXWNgD5L6iMoSQHQ10Yg/W RKrKvExW+nGriTM4rIQHl/iXUbNoZ3/Ndnw= -----END CERTIFICATE-----Generated at Sun Sep 13 13:38:58 2026 by rpki-client