$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa File: e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa (raw, json) Hash identifier: 9NU4ce7C359h5GlApa9CXhMJVDcnSDl43imzwPoYVVI= Subject key identifier: 58:66:44:32:0C:34:01:F0:FC:F9:6D:9D:A0:B9:C2:8B:CE:03:B8:63 Certificate issuer: /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Certificate serial: 010D0C9F4328584AE4611EC1C690C8987EE0AB20 Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 2572 IP address blocks: 2610:e0::/32 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:1e:c1:c6:90:c8:98:7e:e0:ab:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=b0a08dcb-fb65-4adf-a107-7e9f6b89a147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:41:b8:f1:1e:26:46:6f:2a:e9:7e:5d:b1: bb:5b:d3:be:96:7a:cf:c0:98:ab:3b:97:a2:ca:c7: 47:2c:26:4d:6f:d1:a6:9e:7c:53:5b:29:6f:bb:07: 0b:a0:7f:54:ce:94:f3:74:7b:ce:19:1e:fe:0a:b8: 9b:f7:e9:a3:0c:2c:70:d3:2c:7f:59:db:16:22:56: 4f:55:5a:f8:63:9b:29:7f:96:dd:a9:86:cc:c4:ec: 46:41:fe:38:f7:16:a4:27:05:2f:d3:95:11:c0:51: 86:78:29:c4:b3:7f:17:f5:97:19:bf:2e:c3:d4:24: 74:bf:5d:04:2f:01:60:59:47:ac:18:21:68:02:0c: 55:eb:6a:fa:a6:21:32:5f:6e:79:92:ba:4a:22:ab: 44:3d:df:d5:79:71:d3:00:c3:0c:45:fe:1d:df:47: a0:dc:11:21:94:b8:7e:8e:46:82:60:9d:c3:d5:06: 9c:97:90:c7:4a:da:97:59:da:fa:d4:46:4e:3a:55: 90:89:55:0f:3e:7b:90:34:8d:23:7b:5d:65:44:ab: bf:02:7b:90:e0:91:51:aa:60:21:ee:b8:a8:64:4d: ed:3a:59:a4:1d:5b:27:30:13:15:cb:22:9f:63:70: 49:12:b5:09:72:3b:52:3d:e9:f7:30:70:d4:77:6e: 7e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:66:44:32:0C:34:01:F0:FC:F9:6D:9D:A0:B9:C2:8B:CE:03:B8:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl X509v3 Authority Key Identifier: keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer sbgp-ipAddrBlock: critical IPv6: 2610:e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8c:6f:b4:93:54:04:26:c3:0a:d4:c1:fa:9b:61:f4:d3:f2: 35:88:de:8c:59:06:73:d7:2c:cc:34:29:ef:27:05:49:4f:31: 4d:d3:62:6b:e5:41:79:1f:b9:06:31:58:26:9f:d8:94:5f:1d: ec:11:11:1d:98:98:66:cf:db:60:62:10:66:83:c8:d6:57:67: 36:4f:6a:b0:7e:cc:ad:f2:b9:6e:48:a1:99:07:85:48:5a:ae: d8:0d:fc:88:c8:c2:da:c3:66:6d:78:5b:7f:49:2f:49:43:78: a2:fa:9b:e0:13:a3:e4:4d:f3:62:9b:85:b3:41:23:ba:e7:b7: b4:a1:b9:38:e4:57:52:11:7e:dc:c7:32:99:d2:da:aa:1a:21: ab:4b:27:48:ea:cf:47:3a:c4:09:2c:c7:e1:4c:cc:09:d2:37: c1:56:6e:1b:e9:4a:93:23:a3:89:cc:78:b0:8a:37:0f:51:70: bf:41:5c:6d:95:92:ba:b8:84:83:97:c7:bd:64:52:e7:89:59: 63:5a:db:63:df:7e:83:53:e7:d4:61:dc:62:e1:27:86:52:d3: dd:06:b5:ba:91:2e:1d:aa:db:56:55:60:d2:6c:98:95:05:38: c6:8a:91:44:56:fd:3b:c3:9c:59:0b:1c:cb:bd:8c:dd:b7:e3: ef:4e:90:e4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErkYR7BxpDImH7gqyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj N2JlMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YjBhMDhkY2ItZmI2NS00YWRmLWExMDctN2U5ZjZiODlhMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9pBuPEeJkZvKul+XbG7W9O+lnrPwJirO5ei ysdHLCZNb9GmnnxTWylvuwcLoH9UzpTzdHvOGR7+Crib9+mjDCxw0yx/WdsWIlZP VVr4Y5spf5bdqYbMxOxGQf449xakJwUv05URwFGGeCnEs38X9ZcZvy7D1CR0v10E LwFgWUesGCFoAgxV62r6piEyX255krpKIqtEPd/VeXHTAMMMRf4d30eg3BEhlLh+ jkaCYJ3D1Qacl5DHStqXWdr61EZOOlWQiVUPPnuQNI0je11lRKu/AnuQ4JFRqmAh 7rioZE3tOlmkHVsnMBMVyyKfY3BJErUJcjtSPen3MHDUd25+OwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFhmRDIMNAHw/PltnaC5wovOA7hjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4 Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvZTAzOGI2OWQtYzNjYS0z OGViLTk2MGMtOWRiZjIwNmMxMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1 YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3 OGU1NWM3YmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhAA4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPjG+0k1QEJsMK1MH6m2H00/I1iN6MWQZz1yzMNCnvJwVJTzFN02Jr 5UF5H7kGMVgmn9iUXx3sEREdmJhmz9tgYhBmg8jWV2c2T2qwfsyt8rluSKGZB4VI Wq7YDfyIyMLaw2ZteFt/SS9JQ3ii+pvgE6PkTfNim4WzQSO657e0obk45FdSEX7c xzKZ0tqqGiGrSydI6s9HOsQJLMfhTMwJ0jfBVm4b6UqTI6OJzHiwijcPUXC/QVxt lZK6uISDl8e9ZFLniVljWttj336DU+fUYdxi4SeGUtPdBrW6kS4dqttWVWDSbJiV BTjGipFEVv07w5xZCxzLvYzdt+PvTpDk -----END CERTIFICATE-----Generated at Sun Aug 24 05:28:46 2025 by rpki-client