$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa File: b32af959-6588-30ef-ac6a-e1c8ea97071b.roa (raw, json) Hash identifier: Cta/LCEwEI5V6zrRDtHjE2mPPcj3RTnX4XwTvPjpnBA= Subject key identifier: 65:85:0B:27:4F:C2:51:3B:96:E4:6F:1D:AC:8E:A0:FE:1F:DA:1F:94 Certificate issuer: /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Certificate serial: 010D0C9F4328584CA5F717E39A87021E42D55C40 Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 3390 IP address blocks: 2610:e0:a040::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:17:e3:9a:87:02:1e:42:d5:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=bc5fe00a-172a-47fa-b8a7-cd1e84bac8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:78:62:85:65:ba:cc:6d:50:aa:c3:b7:b0:f2: 19:1d:ec:8b:46:31:2e:b5:00:74:7e:2b:e3:a9:59: e2:fb:d5:f7:96:74:56:7c:dd:37:fa:60:fd:92:fd: f7:d3:02:18:9a:c9:b1:c5:c7:df:67:52:b3:08:3e: 32:a8:d5:6b:16:7f:14:b8:e6:50:76:be:79:f2:14: 79:8f:b4:cb:9b:ec:50:79:4a:63:b3:23:b9:b2:aa: 9a:bf:dd:26:bc:b1:f6:07:7e:b3:3b:fd:7c:85:ba: fb:5d:bb:13:4e:71:ed:a4:cd:89:31:b9:dd:e5:b0: e3:ee:97:c5:e3:a3:07:15:7f:34:fe:e5:32:01:59: bd:b1:d1:0f:7a:be:cf:14:42:4f:d4:03:29:ea:bd: 72:ff:c9:0b:44:0b:5d:f8:9a:21:d3:3b:6d:80:ac: 6a:69:ea:c6:3a:95:c2:0b:f9:88:10:be:36:3e:9d: 51:bf:9d:34:13:1d:da:66:df:ce:c1:1d:d0:d7:69: 30:d3:d9:ad:69:ce:0f:24:b7:44:11:4b:a1:a4:dc: 5d:1d:db:c4:1b:e5:cf:c5:fa:84:cf:b8:7d:12:5f: b6:f0:2f:33:1e:3d:f9:16:9d:a6:fa:76:e6:5b:7c: 14:1e:3c:90:dc:a0:ee:58:a7:73:07:6c:93:21:6c: 9b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:85:0B:27:4F:C2:51:3B:96:E4:6F:1D:AC:8E:A0:FE:1F:DA:1F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl X509v3 Authority Key Identifier: keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer sbgp-ipAddrBlock: critical IPv6: 2610:e0:a040::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:9c:6b:85:c1:0c:56:79:99:56:48:89:e2:a9:14:08:c2:42: 02:0d:cd:95:d8:70:6a:e9:47:ba:da:88:41:a2:55:71:9c:42: 05:a4:28:30:d7:3c:a1:13:5a:18:a3:f6:97:a4:34:5d:11:b9: 43:32:bf:a6:dd:a6:9e:c0:fa:90:e6:9a:1a:7e:f6:b0:ce:89: f1:79:e5:02:f5:ae:b0:43:cb:2a:db:4f:89:dd:81:04:4a:5d: 9c:bf:67:08:1e:cc:f9:a6:96:29:25:c0:96:5e:40:7f:14:4f: bc:6f:f9:c6:93:db:f0:fa:07:69:f5:11:af:6f:ae:64:c7:7e: 37:8d:70:05:38:93:95:00:5f:92:b6:51:cf:df:36:aa:80:7e: ca:b6:5d:63:f9:16:3f:b2:28:77:bc:b6:24:a3:4c:b5:ba:e2: a8:a2:95:42:e2:c5:2d:70:eb:54:fd:0c:ec:34:ee:fa:48:e4: 5f:45:6c:84:04:94:bf:b6:3b:4c:3c:77:ec:6f:84:2c:f1:84: ac:6a:af:9d:04:c0:67:01:99:36:2f:22:52:8a:90:4f:13:80: b9:61:5e:fc:cc:0a:c2:ff:9a:8a:23:bd:1f:9c:ad:5a:8a:91: c2:68:a6:75:6d:7f:d9:4b:f4:54:0b:35:e3:bf:0e:5e:7e:f7: ef:9b:17:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyl9xfjmocCHkLVXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj N2JlMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk YmM1ZmUwMGEtMTcyYS00N2ZhLWI4YTctY2QxZTg0YmFjOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHhihWW6zG1QqsO3sPIZHeyLRjEutQB0fivj qVni+9X3lnRWfN03+mD9kv330wIYmsmxxcffZ1KzCD4yqNVrFn8UuOZQdr558hR5 j7TLm+xQeUpjsyO5sqqav90mvLH2B36zO/18hbr7XbsTTnHtpM2JMbnd5bDj7pfF 46MHFX80/uUyAVm9sdEPer7PFEJP1AMp6r1y/8kLRAtd+Joh0zttgKxqaerGOpXC C/mIEL42Pp1Rv500Ex3aZt/OwR3Q12kw09mtac4PJLdEEUuhpNxdHdvEG+XPxfqE z7h9El+28C8zHj35Fp2m+nbmW3wUHjyQ3KDuWKdzB2yTIWybSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGWFCydPwlE7luRvHayOoP4f2h+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4 Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvYjMyYWY5NTktNjU4OC0z MGVmLWFjNmEtZTFjOGVhOTcwNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1 YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3 OGU1NWM3YmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAA4KBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAACca4XBDFZ5mVZIieKpFAjCQgINzZXYcGrpR7raiEGiVXGcQgWk KDDXPKETWhij9pekNF0RuUMyv6bdpp7A+pDmmhp+9rDOifF55QL1rrBDyyrbT4nd gQRKXZy/ZwgezPmmliklwJZeQH8UT7xv+caT2/D6B2n1Ea9vrmTHfjeNcAU4k5UA X5K2Uc/fNqqAfsq2XWP5Fj+yKHe8tiSjTLW64qiilULixS1w61T9DOw07vpI5F9F bIQElL+2O0w8d+xvhCzxhKxqr50EwGcBmTYvIlKKkE8TgLlhXvzMCsL/moojvR+c rVqKkcJopnVtf9lL9FQLNeO/Dl5+9++bF7c= -----END CERTIFICATE-----Generated at Mon Mar 2 04:00:26 2026 by rpki-client