$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa File: 3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa (raw, json) Hash identifier: yXM0HbxunZ5uSsEY1ZYnuI+DTeclsnCmSvAih7vEpk4= Subject key identifier: 3C:8E:37:B3:65:28:23:39:33:2C:5B:05:22:FC:35:C0:61:7E:59:9D Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F4328584D3DFFB55A4668BFED5341B600 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 398191 IP address blocks: 2607:c7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b5:5a:46:68:bf:ed:53:41:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7f90fc48-ca35-42fc-9190-438d9e1a7123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7f:26:3d:0b:e0:7c:c0:de:06:d0:c1:19:1c: 86:45:4f:5d:0c:19:42:97:7b:59:9a:bc:da:68:26: 4f:d3:25:4d:a9:bd:91:30:b1:ce:b7:0e:09:a3:45: 88:b4:35:cb:7a:cf:b5:20:a9:1e:aa:f4:13:85:85: c7:bf:22:cd:f3:ec:ba:09:34:5e:b0:53:4f:07:93: ee:1b:9a:ac:eb:d6:a6:91:80:99:1e:dd:fd:02:4f: a2:71:21:49:00:d6:a9:03:6d:04:4b:71:c3:9a:e0: 66:ac:4e:6c:08:79:d5:b2:f4:b4:33:7b:c0:2d:98: 40:b0:4a:c4:32:5f:9f:29:7c:63:e4:92:d2:5d:07: 15:17:f1:31:8c:a2:e5:5c:f1:39:c1:54:f8:38:07: 8b:e6:e4:b4:14:60:a6:c5:b3:f6:50:05:4f:39:4a: c1:05:f8:25:28:77:18:e3:0b:ef:2c:57:f1:13:c3: cc:17:f2:9c:0a:c0:6f:89:f9:32:4d:bd:0c:12:7d: dc:d1:ed:80:db:06:e6:cc:18:72:fa:81:bc:da:f7: e2:4c:78:d3:07:d9:db:a5:42:8d:f1:c1:70:fa:5a: d4:4b:50:16:62:d0:3b:bb:f9:cc:d9:96:bb:0d:41: 75:35:73:b8:be:bf:ec:e9:47:67:9c:86:68:81:89: d4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8E:37:B3:65:28:23:39:33:2C:5B:05:22:FC:35:C0:61:7E:59:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv6: 2607:c7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c4:58:c8:2d:60:80:85:e7:d5:9e:13:f9:f1:0f:84:29:c7: 6b:d7:d0:90:83:e9:f1:ef:7a:91:3f:d0:4c:18:43:39:b9:13: 90:50:08:1e:ff:68:ea:62:e7:b1:2a:9d:04:94:dc:8a:2e:cb: 5b:0c:5a:4a:82:6f:f7:b4:75:0f:19:6c:5f:f7:92:fa:c1:54: 35:20:e4:8b:df:5e:1c:3a:79:8c:84:9b:0b:c7:dc:18:f1:92: 7e:e4:4e:dc:12:95:e6:92:a0:3a:66:c1:8f:75:8f:11:b2:0e: 45:fc:88:14:78:eb:35:b2:b0:fd:06:dd:7b:54:c6:db:5c:0c: b0:b0:61:b2:7e:fe:eb:64:ee:53:c8:15:bc:0b:5a:5a:a6:b3: ce:01:46:60:da:8e:e6:3e:9b:37:a4:72:8b:7e:65:2a:be:68: 86:ad:75:cb:8c:d8:5b:d0:aa:b5:5b:2b:ed:44:a2:54:1d:fd: 13:8f:a5:98:bf:66:0e:e7:b3:b7:10:db:24:9e:54:8c:02:cb: a2:24:36:68:13:1a:c4:2d:80:d0:d6:ef:bd:1b:3f:31:8a:e7: 3a:7c:cb:68:9d:b2:81:12:a9:42:89:13:96:49:89:12:f9:7e: 6c:74:38:02:b8:4c:e3:a8:3a:e9:3a:3d:44:29:f0:d9:bb:52: 7e:bc:c3:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/7VaRmi/7VNBtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk N2Y5MGZjNDgtY2EzNS00MmZjLTkxOTAtNDM4ZDllMWE3MTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo38mPQvgfMDeBtDBGRyGRU9dDBlCl3tZmrza aCZP0yVNqb2RMLHOtw4Jo0WItDXLes+1IKkeqvQThYXHvyLN8+y6CTResFNPB5Pu G5qs69amkYCZHt39Ak+icSFJANapA20ES3HDmuBmrE5sCHnVsvS0M3vALZhAsErE Ml+fKXxj5JLSXQcVF/ExjKLlXPE5wVT4OAeL5uS0FGCmxbP2UAVPOUrBBfglKHcY 4wvvLFfxE8PMF/KcCsBvifkyTb0MEn3c0e2A2wbmzBhy+oG82vfiTHjTB9nbpUKN 8cFw+lrUS1AWYtA7u/nM2Za7DUF1NXO4vr/s6UdnnIZogYnUgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDyON7NlKCM5MyxbBSL8NcBhflmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvM2E2ZTc1YTEtYzljMS0z Y2U4LTg3MDktNjc1OGNmYTFlYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnxFjILWCAhefVnhP58Q+EKcdr19CQg+nx73qRP9BMGEM5uROQUAge /2jqYuexKp0ElNyKLstbDFpKgm/3tHUPGWxf95L6wVQ1IOSL314cOnmMhJsLx9wY 8ZJ+5E7cEpXmkqA6ZsGPdY8Rsg5F/IgUeOs1srD9Bt17VMbbXAywsGGyfv7rZO5T yBW8C1paprPOAUZg2o7mPps3pHKLfmUqvmiGrXXLjNhb0Kq1WyvtRKJUHf0Tj6WY v2YO57O3ENsknlSMAsuiJDZoExrELYDQ1u+9Gz8xiuc6fMtonbKBEqlCiROWSYkS +X5sdDgCuEzjqDrpOj1EKfDZu1J+vMNj -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:35 2026 by rpki-client