$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ffaf171b-accf-3357-80be-1cc3a9494500.roa File: ffaf171b-accf-3357-80be-1cc3a9494500.roa (raw, json) Hash identifier: JmdavqNb9PnvIQPMYmb1SoSUT0+e6Yqc0YfpnaD9GMI= Subject key identifier: 37:CA:01:8A:97:0E:CA:B0:2C:07:45:86:CA:90:41:1A:F1:B7:F2:5B Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584E66DA107E8988A8A0DBCCD600 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ffaf171b-accf-3357-80be-1cc3a9494500.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 32806 IP address blocks: 2604:9900:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:10:7e:89:88:a8:a0:db:cc:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=27d1b2c6-8a07-499b-bf03-741e292041c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7a:73:68:4a:df:dd:17:9f:0c:d4:5d:3d:83: e3:c7:3a:64:03:0e:b6:5e:cd:45:03:51:74:de:f0: 49:b0:57:a8:be:ad:4e:51:2c:74:35:68:6c:98:5a: 06:a5:5a:fe:0e:25:38:64:d1:95:9a:fd:61:bc:d8: 05:3c:41:b3:4b:59:dd:a5:0f:e6:a5:18:dc:fc:9b: 30:1e:6c:7c:2b:9f:99:8f:93:21:7f:f3:f9:8d:0b: 0f:d3:f2:a2:48:3f:fc:91:ce:41:57:a9:12:20:63: 35:ae:81:a7:a9:fe:c3:2f:28:98:34:c5:0f:a3:8b: 17:a5:c1:6c:c0:7e:1a:dc:e8:8e:90:12:a5:4a:d6: 73:de:70:66:76:1c:d4:b9:d7:a9:fd:9d:31:05:d9: ca:99:f3:6c:01:ec:e8:09:37:9a:ef:64:01:93:1e: 84:1b:2e:34:ce:86:bb:d3:c8:be:9e:87:85:3c:b2: 52:93:5d:a0:5f:16:ee:5a:3c:88:ad:04:90:bc:3a: c7:5e:18:55:ad:2b:f0:ba:fe:30:aa:70:4d:57:42: eb:72:15:f2:0a:07:91:b0:aa:2e:95:4c:5c:07:7d: 4d:5c:cf:64:6d:8e:67:d1:f5:78:12:8a:5b:62:93: de:eb:98:1a:ba:c4:0b:0a:4e:f0:1e:ee:ee:4d:d2: 11:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CA:01:8A:97:0E:CA:B0:2C:07:45:86:CA:90:41:1A:F1:B7:F2:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ffaf171b-accf-3357-80be-1cc3a9494500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a2:28:75:7d:1e:fe:30:8e:72:da:c5:60:b6:d0:c9:a6:ed: dd:01:0f:02:e8:16:a8:59:47:7c:43:a3:cd:13:82:73:87:8b: 74:96:82:61:dc:1f:24:9e:f8:8f:18:8d:48:5c:ab:3c:16:f1: 76:66:76:85:fd:a2:50:0a:1e:64:cf:cc:c7:fe:b4:08:e0:aa: 17:3e:2d:74:5c:55:22:d0:00:b6:51:6a:ec:bb:85:31:3b:72: a9:67:96:bf:d8:51:9d:d1:64:bf:e4:70:0d:78:81:78:75:fd: 95:70:21:7d:dc:2a:76:5f:0a:bd:87:fe:63:05:fd:82:fb:3e: 15:33:54:92:73:de:62:cf:d9:12:d7:75:ef:9c:82:fb:fc:0a: ea:27:fd:4d:98:46:bf:12:c9:b7:04:7b:9c:0c:a1:53:b9:b0: 09:af:42:8f:cf:3f:0c:4f:2e:c7:c3:41:42:a3:c2:52:a4:c2: 9e:3b:2a:4e:63:f7:cb:9b:aa:19:e0:85:11:5c:41:3a:b8:ac: 74:c3:d0:75:fc:fd:fc:5d:6d:d1:59:69:a6:a4:85:58:98:e0: 6a:6d:83:3b:97:84:47:3d:b2:ac:a1:85:fc:e8:0a:15:bb:63: ac:74:67:44:25:06:d7:28:93:f5:8e:86:73:cd:f4:b1:2b:b8: 3f:28:cd:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5m2hB+iYiooNvM1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MjdkMWIyYzYtOGEwNy00OTliLWJmMDMtNzQxZTI5MjA0MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHpzaErf3RefDNRdPYPjxzpkAw62Xs1FA1F0 3vBJsFeovq1OUSx0NWhsmFoGpVr+DiU4ZNGVmv1hvNgFPEGzS1ndpQ/mpRjc/Jsw Hmx8K5+Zj5Mhf/P5jQsP0/KiSD/8kc5BV6kSIGM1roGnqf7DLyiYNMUPo4sXpcFs wH4a3OiOkBKlStZz3nBmdhzUudep/Z0xBdnKmfNsAezoCTea72QBkx6EGy40zoa7 08i+noeFPLJSk12gXxbuWjyIrQSQvDrHXhhVrSvwuv4wqnBNV0LrchXyCgeRsKou lUxcB31NXM9kbY5n0fV4EopbYpPe65gausQLCk7wHu7uTdIRwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDfKAYqXDsqwLAdFhsqQQRrxt/JbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvZmZhZjE3MWItYWNjZi0z MzU3LTgwYmUtMWNjM2E5NDk0NTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEKiKHV9Hv4wjnLaxWC20Mmm7d0BDwLoFqhZR3xDo80TgnOHi3SW gmHcHySe+I8YjUhcqzwW8XZmdoX9olAKHmTPzMf+tAjgqhc+LXRcVSLQALZRauy7 hTE7cqlnlr/YUZ3RZL/kcA14gXh1/ZVwIX3cKnZfCr2H/mMF/YL7PhUzVJJz3mLP 2RLXde+cgvv8Cuon/U2YRr8SybcEe5wMoVO5sAmvQo/PPwxPLsfDQUKjwlKkwp47 Kk5j98ubqhnghRFcQTq4rHTD0HX8/fxdbdFZaaakhViY4GptgzuXhEc9sqyhhfzo ChW7Y6x0Z0QlBtcok/WOhnPN9LEruD8ozcs= -----END CERTIFICATE-----Generated at Fri Jul 24 13:10:35 2026 by rpki-client