$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/3c699552-8917-32e5-abcd-caeae2d0c2cd.roa File: 3c699552-8917-32e5-abcd-caeae2d0c2cd.roa (raw, json) Hash identifier: is8ijTOI6eySYI/J8aoNQIWtv9RTHjLHaRjeD5Fj8WI= Subject key identifier: 37:16:C9:A8:92:AD:59:F6:58:E3:59:74:7D:3A:86:A0:40:5D:E7:63 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584D932548C4A0B78387A6BD3200 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/3c699552-8917-32e5-abcd-caeae2d0c2cd.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 32806 IP address blocks: 2604:9900:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:48:c4:a0:b7:83:87:a6:bd:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=57399a8f-baf4-4f1b-a1ca-e7d7fb2feef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:07:b7:e2:45:56:51:df:7d:e8:fd:fa:d6: b1:b7:d1:1a:16:9c:0b:6c:25:5f:6c:dc:06:ed:76: 59:5c:70:ac:13:9c:fa:6e:ff:e8:c9:6f:45:0b:19: 58:7f:bb:78:d9:54:1f:e1:12:f9:ad:f9:c3:f4:e5: 13:44:e9:ea:e5:34:e7:d8:e7:31:c2:f6:71:f0:8d: 58:41:40:96:1c:5e:e8:aa:d5:f6:11:59:2e:92:b1: d7:a2:77:54:b0:c3:4c:4e:21:8a:1c:b5:0c:90:4f: 66:87:d0:db:d2:56:ab:7f:f1:23:ba:73:cb:37:23: c1:8d:e9:57:79:4e:8b:01:ba:8c:23:19:c1:44:d6: 92:ba:8b:70:d2:88:4c:ae:84:1a:74:7f:32:5d:31: 02:18:81:e8:77:d1:3c:6c:b2:d0:3f:87:87:e3:15: f8:ba:b5:2b:75:86:1a:20:3c:24:09:79:d3:b9:b1: 88:32:6c:be:39:3c:33:09:1c:ea:37:45:e8:9c:49: e1:7f:48:0e:ff:34:9c:48:57:75:12:17:10:34:3b: 2a:da:8f:22:33:0e:cb:d3:fb:46:fb:bf:d8:e6:1a: 8e:e7:ef:5d:98:84:1f:90:3f:5c:13:8d:43:4b:6c: 94:b7:16:10:c7:ff:fb:df:0b:b3:15:e7:ae:21:ab: 6f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:16:C9:A8:92:AD:59:F6:58:E3:59:74:7D:3A:86:A0:40:5D:E7:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/3c699552-8917-32e5-abcd-caeae2d0c2cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e2:18:28:4f:38:13:3d:e6:84:59:b6:f7:d4:1f:92:b9:2f: ed:1d:48:39:b9:e5:93:fa:58:f4:54:e3:bf:34:27:35:08:c8: 28:57:df:57:bc:38:f0:be:77:25:4d:0e:f8:98:4a:35:76:6e: 1c:03:30:8d:32:08:be:5a:7d:4b:49:40:b8:33:fe:9d:51:04: 7f:be:c7:ec:af:87:35:f2:a0:ee:0c:9e:3b:4c:39:51:a5:dd: 48:9e:28:89:84:d8:2b:42:85:ed:44:43:bf:20:69:8d:6b:ea: 4a:1c:f2:9a:de:3e:85:7a:26:95:51:2d:27:6a:4f:24:a2:d0: 85:f0:e3:e2:1e:d4:f2:b8:79:c9:d6:93:10:ed:22:c4:78:ca: c1:52:16:97:69:fd:d5:db:eb:50:e1:55:03:9b:b5:35:7b:d3: 61:27:e5:90:03:21:6f:aa:a8:7e:de:44:7f:e3:0e:00:e8:60: 7b:ab:f6:43:46:98:c4:da:13:08:09:ec:c4:f1:39:83:36:9a: dc:e5:da:31:4c:7b:68:2b:a7:f5:6d:b4:4c:02:98:24:a3:47: 84:55:26:67:52:26:9e:b3:c9:4d:e8:38:35:61:d3:1f:9e:27: 78:f0:d5:68:fa:d7:30:cb:4e:2a:55:9a:aa:0b:0d:aa:9f:48: 02:95:08:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2TJUjEoLeDh6a9MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NTczOTlhOGYtYmFmNC00ZjFiLWExY2EtZTdkN2ZiMmZlZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwroHt+JFVlHffej9+taxt9EaFpwLbCVfbNwG 7XZZXHCsE5z6bv/oyW9FCxlYf7t42VQf4RL5rfnD9OUTROnq5TTn2OcxwvZx8I1Y QUCWHF7oqtX2EVkukrHXondUsMNMTiGKHLUMkE9mh9Db0larf/EjunPLNyPBjelX eU6LAbqMIxnBRNaSuotw0ohMroQadH8yXTECGIHod9E8bLLQP4eH4xX4urUrdYYa IDwkCXnTubGIMmy+OTwzCRzqN0XonEnhf0gO/zScSFd1EhcQNDsq2o8iMw7L0/tG +7/Y5hqO5+9dmIQfkD9cE41DS2yUtxYQx//73wuzFeeuIatvDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDcWyaiSrVn2WONZdH06hqBAXedjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvM2M2OTk1NTItODkxNy0z MmU1LWFiY2QtY2FlYWUyZDBjMmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGziGChPOBM95oRZtvfUH5K5L+0dSDm55ZP6WPRU4780JzUIyChX 31e8OPC+dyVNDviYSjV2bhwDMI0yCL5afUtJQLgz/p1RBH++x+yvhzXyoO4MnjtM OVGl3UieKImE2CtChe1EQ78gaY1r6koc8prePoV6JpVRLSdqTySi0IXw4+Ie1PK4 ecnWkxDtIsR4ysFSFpdp/dXb61DhVQObtTV702En5ZADIW+qqH7eRH/jDgDoYHur 9kNGmMTaEwgJ7MTxOYM2mtzl2jFMe2grp/VttEwCmCSjR4RVJmdSJp6zyU3oODVh 0x+eJ3jw1Wj61zDLTipVmqoLDaqfSAKVCK8= -----END CERTIFICATE-----Generated at Wed May 13 07:33:52 2026 by rpki-client