$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa File: e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa (raw, json) Hash identifier: uY/5yDWu32sfZJbVvb94Drb4HSuQPxpHWZnrm/+22sU= Subject key identifier: 95:5C:31:AB:3A:BC:18:D0:02:4E:A1:1A:26:F0:45:03:70:E2:C1:6E Certificate issuer: /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Certificate serial: 010D0C9F4328584A03A54FD27F0EFFC40A1B9100 Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 2572 IP address blocks: 2610:e0::/32 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4f:d2:7f:0e:ff:c4:0a:1b:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=0b014452-6313-4815-8a52-7da2aa5ee6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7d:5d:d0:80:51:49:28:61:37:8d:98:b3:08: 9a:60:04:38:fd:0e:3c:f5:cf:23:c5:e1:b4:05:7a: 37:76:68:4a:90:e2:87:fe:02:1c:f2:bc:6e:cc:da: 1a:60:76:fd:b6:ec:19:97:f2:92:22:99:20:61:17: 74:07:b8:db:94:77:27:50:17:bc:db:f1:66:6b:30: c6:52:a3:9a:8a:87:cd:ab:3f:63:70:03:63:93:7a: 7b:65:6e:bc:11:be:cd:71:fe:f6:d6:9b:dd:b8:3d: 3c:2e:cd:d2:07:87:0f:b3:30:b0:55:d9:3c:af:93: 66:f4:94:13:61:60:f1:15:37:6c:84:e6:92:2e:57: 5f:eb:38:e3:17:4c:82:31:e7:0e:1e:b4:b8:d4:0f: de:d9:72:24:a6:d1:32:56:29:de:23:76:30:2f:66: 0e:e0:90:c6:6c:57:eb:7e:19:73:7d:7f:fa:00:ce: 99:7a:09:26:c8:24:f9:86:5b:3b:0a:85:3e:3c:55: fd:d4:ed:00:26:eb:ee:13:04:57:5c:1f:d3:25:62: 0b:ba:9c:de:19:46:95:12:4a:dd:1a:f5:63:99:88: 03:ee:84:aa:ff:1f:76:94:ca:d4:02:f2:65:c8:cd: e2:f2:51:f5:be:40:1b:01:06:4c:39:3f:c2:87:01: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5C:31:AB:3A:BC:18:D0:02:4E:A1:1A:26:F0:45:03:70:E2:C1:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl X509v3 Authority Key Identifier: keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer sbgp-ipAddrBlock: critical IPv6: 2610:e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b0:e0:4d:44:b0:ee:b4:c4:cd:93:da:f7:c6:fc:a5:29:a2: 7a:c5:98:98:72:dd:f2:1b:12:fa:fa:0d:73:ab:ec:e2:d5:cb: 25:84:e6:38:90:08:aa:4e:09:1e:4f:6d:3e:a1:d8:26:88:e8: 9e:48:ec:de:4b:4d:9e:a6:02:5b:61:e8:01:dc:0c:1b:6b:91: 92:05:db:70:4e:81:95:1f:80:8a:ee:e1:de:77:10:3f:69:22: 5d:13:a6:e1:58:4f:a0:64:01:5e:41:37:63:91:6e:cb:5d:58: 84:6b:cb:47:0d:08:f3:9a:c3:f1:72:6f:70:73:b6:07:ae:aa: 36:f8:9c:64:ce:a2:25:8b:b0:60:99:e6:9e:8d:61:ab:8e:98: 32:ea:f1:75:df:9d:9a:90:c5:49:d7:5b:19:e3:c6:90:56:66: 42:e7:cf:28:c0:3f:3a:0e:84:7a:67:cb:ae:24:ae:2a:26:e9: 2d:d3:a1:ae:46:5f:1c:8c:ba:30:f1:47:03:0b:2e:e1:be:95: c1:03:a8:81:ad:c8:df:b9:c1:8b:eb:90:77:b8:6b:1b:d2:19: be:e7:60:24:fa:56:7c:16:c6:5c:b0:12:23:07:27:52:ff:69: b8:ad:d2:8f:60:6e:0b:c7:e6:d8:46:d3:1c:6c:f1:74:37:36: 8d:9f:17:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoDpU/Sfw7/xAobkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj N2JlMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MGIwMTQ0NTItNjMxMy00ODE1LThhNTItN2RhMmFhNWVlNmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH1d0IBRSShhN42YswiaYAQ4/Q489c8jxeG0 BXo3dmhKkOKH/gIc8rxuzNoaYHb9tuwZl/KSIpkgYRd0B7jblHcnUBe82/FmazDG UqOaiofNqz9jcANjk3p7ZW68Eb7Ncf721pvduD08Ls3SB4cPszCwVdk8r5Nm9JQT YWDxFTdshOaSLldf6zjjF0yCMecOHrS41A/e2XIkptEyVineI3YwL2YO4JDGbFfr fhlzfX/6AM6ZegkmyCT5hls7CoU+PFX91O0AJuvuEwRXXB/TJWILupzeGUaVEkrd GvVjmYgD7oSq/x92lMrUAvJlyM3i8lH1vkAbAQZMOT/ChwEtxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJVcMas6vBjQAk6hGibwRQNw4sFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4 Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvZTAzOGI2OWQtYzNjYS0z OGViLTk2MGMtOWRiZjIwNmMxMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1 YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3 OGU1NWM3YmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhAA4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0sOBNRLDutMTNk9r3xvylKaJ6xZiYct3yGxL6+g1zq+zi1cslhOY4 kAiqTgkeT20+odgmiOieSOzeS02epgJbYegB3Awba5GSBdtwToGVH4CK7uHedxA/ aSJdE6bhWE+gZAFeQTdjkW7LXViEa8tHDQjzmsPxcm9wc7YHrqo2+JxkzqIli7Bg meaejWGrjpgy6vF1352akMVJ11sZ48aQVmZC588owD86DoR6Z8uuJK4qJukt06Gu Rl8cjLow8UcDCy7hvpXBA6iBrcjfucGL65B3uGsb0hm+52Ak+lZ8FsZcsBIjBydS /2m4rdKPYG4Lx+bYRtMcbPF0NzaNnxeE -----END CERTIFICATE-----Generated at Sun Jun 15 22:35:56 2025 by rpki-client