$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa File: b32af959-6588-30ef-ac6a-e1c8ea97071b.roa (raw, json) Hash identifier: hvELVbbq6EWgwPZo1dbnSLRC8+72IP0hmHVFYg+MFf8= Subject key identifier: B1:96:5D:C4:B1:18:FE:1C:01:E9:33:EE:A5:90:69:2C:52:FC:53:C2 Certificate issuer: /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Certificate serial: 010D0C9F4328584FAB28AE859337D960E4281F00 Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 3390 IP address blocks: 2610:e0:a040::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:ae:85:93:37:d9:60:e4:28:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=0d875e88-66c0-4a06-8d08-865c75b4409f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7c:da:89:e7:21:41:a4:49:63:13:1a:1a:5f: 0b:81:bf:4e:d5:3c:f0:c9:ba:6c:fc:59:ee:7d:67: e4:4a:58:74:5e:8f:a8:0f:19:23:14:00:63:79:a0: 0d:5e:71:00:50:83:c2:e9:9d:19:dc:98:97:9d:cb: f8:08:ab:97:74:98:ed:7b:91:f0:2e:ec:bf:8e:b2: 8d:63:2d:af:69:c6:11:e0:a2:57:45:aa:3b:75:aa: bf:95:64:ee:f4:e7:53:49:3a:ea:37:60:61:f5:5a: f0:7d:18:8e:91:59:74:00:66:b7:04:09:5d:67:ca: 8d:c9:29:01:b6:79:7b:d8:74:ba:12:e0:26:ee:b6: 3f:81:20:52:22:6b:03:ed:b7:c4:75:82:bd:dd:7a: d9:a1:a2:c8:55:4a:5f:9c:d9:c8:0e:1e:d5:ca:05: 95:d1:1f:67:f3:d6:76:3d:3a:d6:58:03:12:41:70: e9:b5:0e:61:78:42:09:7f:b2:04:9f:09:2d:41:b7: 37:f9:65:a1:a1:df:bb:99:ef:dc:8b:46:4c:a5:6f: eb:f5:6e:9d:02:84:09:ba:89:2d:1f:2b:91:3c:10: d8:ba:1e:81:10:df:81:66:e2:34:17:5a:1b:ce:39: 56:43:72:b6:64:d6:b2:79:20:84:44:89:9e:1f:f7: e6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:96:5D:C4:B1:18:FE:1C:01:E9:33:EE:A5:90:69:2C:52:FC:53:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl X509v3 Authority Key Identifier: keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer sbgp-ipAddrBlock: critical IPv6: 2610:e0:a040::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d3:03:54:3c:10:f2:60:b2:ce:fe:ba:4d:d5:12:e3:f6:90: 2e:8f:a7:a2:2a:45:95:f8:f4:a3:00:73:c1:b2:01:7e:f7:3e: 9c:a4:6f:a8:e8:e4:44:53:e6:19:f5:0f:ad:20:8c:9e:a5:4c: 41:a8:24:52:fb:e1:aa:be:cb:06:4d:10:56:48:bb:ce:7b:a9: 30:7c:f6:db:32:fa:81:d2:06:2c:34:6b:eb:26:6a:cd:a9:17: f4:8e:19:c1:30:3a:39:98:17:1a:7e:e9:a0:b1:3d:f9:2e:18: 95:39:56:51:a3:98:66:d6:b8:15:dc:7f:06:7d:88:bc:1a:46: f1:8e:73:9b:8a:84:b4:5d:f1:12:82:9f:eb:85:13:f8:f7:2f: c1:1d:9b:21:10:be:38:d3:bf:80:22:da:92:ac:06:19:18:eb: 01:8f:76:1c:b0:f6:20:7b:69:59:ce:ef:1d:96:c3:3a:f4:a1: 72:69:be:df:11:cf:57:59:96:98:9d:b7:10:32:4a:92:27:e6: 10:ab:ac:b2:b3:42:83:7f:08:24:9f:25:94:22:6e:73:c5:13: 50:5e:6c:c2:90:bb:77:59:69:35:01:db:ca:38:83:55:14:b7: c2:fd:86:d1:76:ec:cb:e0:81:c1:f2:fb:58:33:3f:cb:f7:fe: dc:cf:09:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+rKK6FkzfZYOQoHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj N2JlMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk MGQ4NzVlODgtNjZjMC00YTA2LThkMDgtODY1Yzc1YjQ0MDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnzaiechQaRJYxMaGl8Lgb9O1Tzwybps/Fnu fWfkSlh0Xo+oDxkjFABjeaANXnEAUIPC6Z0Z3JiXncv4CKuXdJjte5HwLuy/jrKN Yy2vacYR4KJXRao7daq/lWTu9OdTSTrqN2Bh9VrwfRiOkVl0AGa3BAldZ8qNySkB tnl72HS6EuAm7rY/gSBSImsD7bfEdYK93XrZoaLIVUpfnNnIDh7VygWV0R9n89Z2 PTrWWAMSQXDptQ5heEIJf7IEnwktQbc3+WWhod+7me/ci0ZMpW/r9W6dAoQJuokt HyuRPBDYuh6BEN+BZuI0F1obzjlWQ3K2ZNayeSCERImeH/fmlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLGWXcSxGP4cAekz7qWQaSxS/FPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4 Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvYjMyYWY5NTktNjU4OC0z MGVmLWFjNmEtZTFjOGVhOTcwNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1 YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3 OGU1NWM3YmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAA4KBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG3TA1Q8EPJgss7+uk3VEuP2kC6Pp6IqRZX49KMAc8GyAX73Ppyk b6jo5ERT5hn1D60gjJ6lTEGoJFL74aq+ywZNEFZIu857qTB89tsy+oHSBiw0a+sm as2pF/SOGcEwOjmYFxp+6aCxPfkuGJU5VlGjmGbWuBXcfwZ9iLwaRvGOc5uKhLRd 8RKCn+uFE/j3L8EdmyEQvjjTv4Ai2pKsBhkY6wGPdhyw9iB7aVnO7x2Wwzr0oXJp vt8Rz1dZlpidtxAySpIn5hCrrLKzQoN/CCSfJZQibnPFE1BebMKQu3dZaTUB28o4 g1UUt8L9htF27MvggcHy+1gzP8v3/tzPCQ0= -----END CERTIFICATE-----Generated at Mon Nov 2 07:27:39 2026 by rpki-client