$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa File: baf7f460-f90c-35af-abcf-66f43a931e52.roa (raw, json) Hash identifier: SYpuA0KAjdVQAH/KvitUpImyzwU7sLzqUE8vA1+SbBE= Subject key identifier: 4C:63:55:72:9B:E4:00:2F:34:0D:1B:C5:59:4C:46:D6:BF:43:85:1D Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584D93256529A7363310F9B8FC60 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 32806 IP address blocks: 2604:9900:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:65:29:a7:36:33:10:f9:b8:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=d334e69e-a3f7-4db6-8397-fe540832b8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:43:39:6e:1e:06:e5:db:a2:bd:f7:85:be: da:fb:78:dd:75:f6:34:0e:f5:81:0b:8b:95:70:55: 84:4a:ba:ff:59:b7:22:0d:41:51:b9:cf:0b:d2:93: 30:de:7f:53:3c:74:35:1f:32:cc:8d:1d:c1:7a:14: d7:49:2e:35:ff:bd:61:66:f7:90:9b:2e:e8:30:79: 14:8f:cf:41:4a:88:d1:f4:b1:eb:78:41:d4:06:7f: 9a:db:8e:e4:85:b6:b0:4b:4e:39:42:f7:4d:76:a3: 4f:ae:3f:5f:0e:f5:68:18:e0:4d:27:68:d4:92:2f: 53:e4:cd:db:31:95:5a:ef:71:92:47:42:a7:96:18: 49:62:0a:5b:97:03:05:23:ae:f6:59:6c:b2:4c:0c: 73:0f:ab:e3:cb:f1:23:21:57:3e:a2:e1:ab:9d:15: d4:29:0d:63:fc:d1:8f:48:e0:df:ff:ba:18:27:15: 08:c4:cb:0d:47:ff:0b:b5:1f:24:9d:18:de:50:48: 42:14:cc:dc:72:5b:6f:1e:87:de:db:d2:d1:9c:06: 0b:7d:81:ac:8e:a6:82:a7:77:18:e8:79:36:83:eb: 1e:db:dd:ee:6b:83:2e:36:38:3e:f9:90:01:fa:d1: f0:98:8a:9a:e3:eb:37:01:61:e8:29:63:b0:7e:10: 17:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:63:55:72:9B:E4:00:2F:34:0D:1B:C5:59:4C:46:D6:BF:43:85:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:08:68:ae:03:5c:9e:51:24:85:2d:c2:99:77:48:22:cd:ad: 0d:08:f1:08:b6:fe:8f:73:1e:52:25:48:ee:3e:08:a9:51:27: 6e:ce:d6:09:b7:ff:d0:71:1f:c1:f2:d0:8e:96:d1:83:72:0b: 01:c8:a4:b5:75:4d:8d:df:83:3b:26:2b:db:3c:dd:73:01:8f: 87:d6:a2:ee:72:19:43:ae:34:5c:bc:0a:5e:96:47:ca:da:33: 80:bb:28:e2:be:1c:7d:83:0f:2d:b5:d5:31:f4:9c:6d:fe:ab: d5:e9:c0:b5:1c:41:1a:0e:19:c6:b3:44:2a:ee:82:b9:99:ed: 65:89:04:04:a3:4b:15:28:67:01:66:57:65:7a:c8:d2:2b:98: 97:e6:03:14:4b:99:5f:0a:c3:e3:15:b3:b1:a9:5f:68:2b:ce: ee:9b:bb:58:a9:15:95:e6:05:e9:62:87:bd:4e:73:c5:67:6f: c4:5b:9c:db:0b:5a:7f:f3:88:5c:99:e8:53:98:7f:2f:31:54: c3:84:00:76:2c:b9:b8:0f:99:6f:ec:69:bc:e4:5c:36:41:0a: 1a:fd:9a:1c:ca:9c:c3:c2:68:55:49:b0:70:82:e6:35:9a:1f: 88:ef:82:0d:37:b2:e8:71:d5:3b:50:d5:8e:fa:5a:3c:81:6e: 52:2b:cb:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2TJWUppzYzEPm4/GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZDMzNGU2OWUtYTNmNy00ZGI2LTgzOTctZmU1NDA4MzJiOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsdDOW4eBuXbor33hb7a+3jddfY0DvWBC4uV cFWESrr/WbciDUFRuc8L0pMw3n9TPHQ1HzLMjR3BehTXSS41/71hZveQmy7oMHkU j89BSojR9LHreEHUBn+a247khbawS045QvdNdqNPrj9fDvVoGOBNJ2jUki9T5M3b MZVa73GSR0KnlhhJYgpblwMFI672WWyyTAxzD6vjy/EjIVc+ouGrnRXUKQ1j/NGP SODf/7oYJxUIxMsNR/8LtR8knRjeUEhCFMzccltvHofe29LRnAYLfYGsjqaCp3cY 6Hk2g+se293ua4MuNjg++ZAB+tHwmIqa4+s3AWHoKWOwfhAXQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFExjVXKb5AAvNA0bxVlMRta/Q4UdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvYmFmN2Y0NjAtZjkwYy0z NWFmLWFiY2YtNjZmNDNhOTMxZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALEIaK4DXJ5RJIUtwpl3SCLNrQ0I8Qi2/o9zHlIlSO4+CKlRJ27O 1gm3/9BxH8Hy0I6W0YNyCwHIpLV1TY3fgzsmK9s83XMBj4fWou5yGUOuNFy8Cl6W R8raM4C7KOK+HH2DDy211TH0nG3+q9XpwLUcQRoOGcazRCrugrmZ7WWJBASjSxUo ZwFmV2V6yNIrmJfmAxRLmV8Kw+MVs7GpX2grzu6bu1ipFZXmBelih71Oc8Vnb8Rb nNsLWn/ziFyZ6FOYfy8xVMOEAHYsubgPmW/sabzkXDZBChr9mhzKnMPCaFVJsHCC 5jWaH4jvgg03suhx1TtQ1Y76WjyBblIryys= -----END CERTIFICATE-----Generated at Wed May 13 15:05:25 2026 by rpki-client