$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa File: df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa (raw, json) Hash identifier: wQ3pmMNrLpmq6TbljzcdGqFuk4LBEXT33osE46VhNmk= Subject key identifier: B1:A4:29:60:2F:34:12:7F:05:13:85:20:74:85:27:76:E3:39:80:0E Certificate issuer: /CN=c32788e6-7ab0-4a32-8ff1-3c82690ffaa9 Certificate serial: 010D0C9F4328584D316F7D5E01A96108B9591B00 Authority key identifier: C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 402062 IP address blocks: 2604:2420::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:7d:5e:01:a9:61:08:b9:59:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32788e6-7ab0-4a32-8ff1-3c82690ffaa9 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=5a326574-39eb-460c-9170-994a07ad90e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:91:0c:44:01:da:ff:75:99:42:eb:7c:de:ce: 43:69:bf:8e:50:d4:31:13:9b:cc:59:be:a8:b7:48: 40:f0:13:66:15:8c:01:ea:3a:ba:92:ff:18:4a:cf: 5c:e6:9b:a1:ae:e7:fe:22:c1:ab:22:66:61:9c:13: 80:2d:0f:ca:1c:cc:ee:c6:52:8d:a3:c0:0b:10:33: 29:5f:3c:fa:d7:78:4c:1c:9c:41:e2:a6:19:45:04: e2:a9:b3:0b:62:bf:29:6b:c6:a0:33:2b:aa:0f:86: 5d:12:e2:bf:ef:6d:e4:7e:94:6d:2d:93:86:53:14: 5c:c2:02:df:18:e0:04:95:7b:d4:10:24:5e:21:b4: 86:95:06:e1:37:7b:ab:a0:d0:15:04:f9:0d:e8:6f: 9a:be:a8:bb:98:13:f8:0e:37:e8:12:a0:6c:0f:f7: 26:ab:97:98:75:76:3f:2a:6a:ec:69:03:59:02:ad: d5:cc:c0:89:e4:f2:5b:64:a3:b9:16:a3:54:47:a1: 09:0d:04:62:df:29:26:fc:ae:53:fd:f9:4b:67:61: 68:fd:05:c9:67:89:0e:97:91:95:cc:ec:c3:c8:80: 0e:f3:74:c6:06:e1:f6:7b:10:d6:cc:01:e3:28:04: 19:62:9a:42:76:12:c3:48:8e:76:b9:59:dd:68:01: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A4:29:60:2F:34:12:7F:05:13:85:20:74:85:27:76:E3:39:80:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl X509v3 Authority Key Identifier: keyid:C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer sbgp-ipAddrBlock: critical IPv6: 2604:2420::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:89:76:57:43:2a:df:62:cb:5e:7f:5b:67:46:be:36:75:be: 96:0d:98:55:69:c7:ed:80:60:da:37:f1:b4:63:ad:51:00:fe: d0:1e:a4:94:fe:66:c3:36:3b:90:ff:f3:08:48:6b:cd:50:87: 41:9f:e5:42:ec:fe:91:4b:30:98:5f:52:cd:84:42:29:4d:e0: ff:96:bb:d9:bd:8f:71:34:a1:04:4c:7c:21:61:02:35:34:10: 72:ad:13:05:79:82:e4:0e:9c:11:72:70:ba:f5:31:2d:dc:06: 5f:0a:8e:07:10:2d:b4:4a:b0:65:8d:0e:1d:db:54:1e:1d:e3: 93:63:8a:11:6a:5d:92:93:3f:ae:1a:ed:9e:6c:87:79:62:b1: 89:7d:d8:8e:bc:6b:8c:11:ba:e5:1c:d4:f8:6e:7c:de:64:f9: 7c:0d:20:bf:e5:aa:86:7d:e6:94:e5:76:38:89:35:89:66:b1: ac:c7:c9:7c:c4:27:bb:af:d8:e0:6a:de:2b:3f:dc:38:59:c5: 75:7f:5b:2f:06:98:b5:20:a9:a4:b7:fa:6f:60:01:a5:0d:6d: 51:98:5a:a9:52:30:6a:d1:08:32:66:d2:23:62:f1:bf:2c:ec: 79:39:b9:9b:03:fa:8a:2e:d0:26:71:8c:74:9c:23:c4:ef:94: 9a:11:01:b2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0xb31eAalhCLlZGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyNzg4ZTYtN2FiMC00YTMyLThmZjEtM2M4MjY5MGZm YWE5MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk NWEzMjY1NzQtMzllYi00NjBjLTkxNzAtOTk0YTA3YWQ5MGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5EMRAHa/3WZQut83s5Dab+OUNQxE5vMWb6o t0hA8BNmFYwB6jq6kv8YSs9c5puhruf+IsGrImZhnBOALQ/KHMzuxlKNo8ALEDMp Xzz613hMHJxB4qYZRQTiqbMLYr8pa8agMyuqD4ZdEuK/723kfpRtLZOGUxRcwgLf GOAElXvUECReIbSGlQbhN3uroNAVBPkN6G+avqi7mBP4DjfoEqBsD/cmq5eYdXY/ KmrsaQNZAq3VzMCJ5PJbZKO5FqNUR6EJDQRi3ykm/K5T/flLZ2Fo/QXJZ4kOl5GV zOzDyIAO83TGBuH2exDWzAHjKAQZYppCdhLDSI52uVndaAHuTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLGkKWAvNBJ/BROFIHSFJ3bjOYAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMzI3 ODhlNi03YWIwLTRhMzItOGZmMS0zYzgyNjkwZmZhYTkvZGYwZDNkYTQtZDY2My0z YTFlLTljN2EtYjY5MTVhNzQzYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzMyNzg4ZTYtN2FiMC00YTMyLThm ZjEtM2M4MjY5MGZmYWE5L2MzMjc4OGU2LTdhYjAtNGEzMi04ZmYxLTNjODI2OTBm ZmFhOS5jcmwwHwYDVR0jBBgwFoAUxxHw61JDgmWZrfefzPBexANp2wwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMzI3ODhlNi03YWIwLTRhMzItOGZmMS0zYzgy NjkwZmZhYTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQkIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjiXZXQyrfYstef1tnRr42db6WDZhVacftgGDaN/G0Y61RAP7QHqSU /mbDNjuQ//MISGvNUIdBn+VC7P6RSzCYX1LNhEIpTeD/lrvZvY9xNKEETHwhYQI1 NBByrRMFeYLkDpwRcnC69TEt3AZfCo4HEC20SrBljQ4d21QeHeOTY4oRal2Skz+u Gu2ebId5YrGJfdiOvGuMEbrlHNT4bnzeZPl8DSC/5aqGfeaU5XY4iTWJZrGsx8l8 xCe7r9jgat4rP9w4WcV1f1svBpi1IKmkt/pvYAGlDW1RmFqpUjBq0QgyZtIjYvG/ LOx5ObmbA/qKLtAmcYx0nCPE75SaEQGy -----END CERTIFICATE-----Generated at Thu Mar 26 06:13:19 2026 by rpki-client