$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/2054b58a-4054-3f0a-90d2-d724e1f1da7a.roa File: 2054b58a-4054-3f0a-90d2-d724e1f1da7a.roa (raw, json) Hash identifier: DBrIT/shHeSEYa6ccirHu32feW41ZFLbsdKCXgZgnrU= Subject key identifier: 55:2D:5F:45:72:B8:8F:D7:58:00:65:C1:F9:97:48:4F:35:ED:28:81 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584D93256511D4942D89DD23A200 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/2054b58a-4054-3f0a-90d2-d724e1f1da7a.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 32806 IP address blocks: 2604:9900:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:65:11:d4:94:2d:89:dd:23:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=4559b042-1551-48af-bad0-9007a7e522f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:17:3e:a0:30:27:b2:76:58:57:1d:9c:d9: d2:79:30:01:01:f2:9d:fb:6e:f0:92:39:70:0e:7f: 64:93:1c:01:49:cc:5d:b2:98:52:22:18:81:0d:50: 21:4f:d6:6e:aa:8f:82:cd:74:73:aa:54:98:ac:45: ba:1b:28:17:6a:5e:b5:1b:06:df:45:82:94:e2:38: 6d:bf:f6:03:07:6f:85:56:08:b9:45:aa:e0:4d:38: 73:08:23:ea:99:85:4e:20:31:58:35:75:e3:64:13: e9:16:04:04:70:b0:ef:07:59:a9:0b:75:1a:23:f5: 29:a5:df:c1:20:6c:ed:29:cf:98:d0:fa:51:f1:41: 6b:40:3e:83:d4:68:65:d2:b0:2e:6f:ec:6f:7f:96: 04:3a:13:f0:cf:2b:33:95:e9:e7:a9:b7:ca:a0:30: 9e:28:9b:c7:7d:1a:da:c1:c6:c2:85:8a:aa:45:8c: 45:cd:7f:b5:61:59:46:86:e7:57:74:3f:05:96:cf: fe:cf:5d:3c:23:eb:2b:ca:66:1e:d4:dc:1c:78:ae: 0c:46:ce:ac:b5:b7:69:6a:9a:88:fd:6d:46:35:8b: d0:b7:e9:18:13:b0:6b:14:2c:58:4a:8c:c3:2a:52: 4d:39:d6:71:a2:1e:2c:0f:59:39:b0:d5:b3:9e:18: ba:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2D:5F:45:72:B8:8F:D7:58:00:65:C1:F9:97:48:4F:35:ED:28:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/2054b58a-4054-3f0a-90d2-d724e1f1da7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:f3:87:8a:e8:dc:81:31:37:5e:b0:f0:14:42:e8:c1:f4:40: af:ba:1d:1c:37:5c:9e:af:a2:41:12:c2:b6:0a:b3:21:5d:42: 97:2b:40:3d:ce:aa:12:50:a5:65:aa:2b:72:48:d5:9a:dd:fd: 3f:51:58:31:94:bf:28:62:b4:88:c9:f8:05:ab:36:64:52:b7: 95:d0:b6:76:0b:45:9a:71:d4:cb:a7:8a:0a:17:f9:a8:79:17: 17:ed:fd:53:23:cf:ee:be:8f:c0:17:db:ce:14:81:c6:79:5a: 14:41:cd:0b:5b:02:ae:72:c5:00:43:11:2d:ca:1d:78:d3:67: 3c:d7:c5:d3:1b:9a:db:8b:3e:f8:3d:1b:f8:a2:35:98:d8:a1: c5:ba:c5:f4:8c:35:bc:1d:7a:59:0c:a7:cb:db:e8:fb:41:22: f6:bb:89:ca:ef:5d:ea:e8:f7:d8:fb:84:27:26:1c:c9:7c:c3: 71:71:c6:59:ad:12:54:5f:ab:87:0d:2b:74:39:76:6b:4a:bc: 4d:b3:a8:ca:98:37:a9:9e:f0:e6:68:f0:42:ba:95:39:9d:ee: 85:93:ab:28:92:21:e8:6a:a9:c9:1c:84:e1:68:e0:cb:0a:6a: c6:56:40:47:e0:ba:46:40:80:11:35:7a:c0:9e:5e:f0:c8:35: df:0f:b2:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2TJWUR1JQtid0jogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NDU1OWIwNDItMTU1MS00OGFmLWJhZDAtOTAwN2E3ZTUyMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovgXPqAwJ7J2WFcdnNnSeTABAfKd+27wkjlw Dn9kkxwBScxdsphSIhiBDVAhT9Zuqo+CzXRzqlSYrEW6GygXal61GwbfRYKU4jht v/YDB2+FVgi5RargTThzCCPqmYVOIDFYNXXjZBPpFgQEcLDvB1mpC3UaI/Uppd/B IGztKc+Y0PpR8UFrQD6D1Ghl0rAub+xvf5YEOhPwzyszlennqbfKoDCeKJvHfRra wcbChYqqRYxFzX+1YVlGhudXdD8Fls/+z108I+srymYe1NwceK4MRs6stbdpapqI /W1GNYvQt+kYE7BrFCxYSozDKlJNOdZxoh4sD1k5sNWznhi6kQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFUtX0VyuI/XWABlwfmXSE817SiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvMjA1NGI1OGEtNDA1NC0z ZjBhLTkwZDItZDcyNGUxZjFkYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKbzh4ro3IExN16w8BRC6MH0QK+6HRw3XJ6vokESwrYKsyFdQpcr QD3OqhJQpWWqK3JI1Zrd/T9RWDGUvyhitIjJ+AWrNmRSt5XQtnYLRZpx1MunigoX +ah5Fxft/VMjz+6+j8AX284UgcZ5WhRBzQtbAq5yxQBDES3KHXjTZzzXxdMbmtuL Pvg9G/iiNZjYocW6xfSMNbwdelkMp8vb6PtBIva7icrvXero99j7hCcmHMl8w3Fx xlmtElRfq4cNK3Q5dmtKvE2zqMqYN6me8OZo8EK6lTmd7oWTqyiSIehqqckchOFo 4MsKasZWQEfgukZAgBE1esCeXvDINd8PssE= -----END CERTIFICATE-----Generated at Wed May 13 10:51:23 2026 by rpki-client