$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/1efcf219-961c-32ab-b8e4-ef4be4833a1e.roa File: 1efcf219-961c-32ab-b8e4-ef4be4833a1e.roa (raw, json) Hash identifier: T2H9O8eoeu1OBWjQCq/INadpHUMd/QddO41Eg6TtUXQ= Subject key identifier: CA:B2:DF:80:CB:F6:92:E6:64:F2:A5:41:04:CC:F2:A6:7C:24:AA:E5 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584E4AEF70821347C25296ACE4A0 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/1efcf219-961c-32ab-b8e4-ef4be4833a1e.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 32806 IP address blocks: 2604:9900:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:70:82:13:47:c2:52:96:ac:e4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=3d2bcf1e-4876-4b5f-b65d-9197a50474b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:68:a7:28:e8:57:7a:77:11:1b:3a:37:81:1b: 78:29:9c:9f:b8:69:bb:9e:dc:a2:2a:26:90:00:8a: 06:8d:7f:e6:ec:a7:6e:f7:d3:68:77:c0:46:f5:01: cf:64:ce:4a:73:d3:27:4c:e9:77:5d:c6:ff:c0:91: 6e:b1:0a:2c:cf:bf:17:81:71:44:53:0f:b5:9c:b7: bb:98:72:ec:48:62:8c:3f:1c:f3:27:87:71:34:ae: 2b:95:7d:ae:7f:91:ec:66:27:ac:e5:f4:75:56:b8: 62:81:99:86:9b:91:4e:9d:a7:10:d4:a8:85:d2:e8: 55:64:3f:88:44:54:29:29:ed:38:05:ba:07:87:18: 2d:0b:55:a7:22:40:78:9c:a9:01:a3:a2:ac:6d:5e: c0:40:f7:0f:91:3b:1e:3a:d2:cb:55:92:f8:cc:e1: 6f:d3:ce:6a:2b:5f:25:29:52:72:0c:64:69:53:f0: 91:1e:66:95:fb:3c:fb:85:bc:b9:82:77:77:36:26: 79:af:00:63:80:53:4d:db:67:33:1f:bb:22:64:48: ce:c2:a8:64:51:5b:51:00:86:5b:3d:f0:07:6e:e3: 0d:ff:b6:9b:63:bc:1e:a0:41:0d:36:2a:37:c4:ca: b6:eb:a8:a3:3d:fc:e3:e1:fa:96:9f:18:61:99:48: 8c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B2:DF:80:CB:F6:92:E6:64:F2:A5:41:04:CC:F2:A6:7C:24:AA:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/1efcf219-961c-32ab-b8e4-ef4be4833a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:53:04:60:5d:bc:68:36:f7:20:0a:08:74:4b:d3:ce:f7:2b: 73:b3:3c:84:fe:6f:46:a8:ec:84:f9:67:b4:4e:75:5c:bb:b8: bf:2c:b5:7c:38:a6:cc:99:53:75:71:8d:6d:e8:d4:2d:ff:a5: a0:83:7f:3c:ec:da:b0:e5:d8:30:ca:e3:eb:b3:ae:b7:12:9d: f3:3c:68:8f:9c:af:e6:7f:8e:df:fb:5c:4f:58:28:82:5f:03: b5:c2:49:5d:3a:dd:d3:03:56:c1:b6:df:dc:0a:89:63:6c:5e: e2:26:7b:bd:49:8b:b4:3b:b9:f6:1e:a2:75:aa:7e:2d:ad:39: 72:ad:22:e8:50:05:16:2b:d3:55:a2:cf:4a:8b:29:ae:ca:42: 09:0a:80:0c:94:3c:e0:d7:00:cc:64:3b:94:54:ce:bf:ec:99: 6e:73:57:88:ea:69:b1:e5:ca:41:68:2e:71:05:f9:10:35:7e: e9:91:4d:cd:15:89:eb:5e:28:27:54:80:64:1d:fa:90:ae:46: 13:30:2b:62:ab:08:46:43:13:73:ae:b3:bd:66:b3:92:05:a1: 9b:72:05:36:b2:fc:cd:87:e7:e2:b3:b7:8f:37:de:2e:7e:86: 3b:0b:8a:cc:6d:e5:12:b7:d2:83:7d:67:60:33:db:60:ff:72: 19:7a:62:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5K73CCE0fCUpas5KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk M2QyYmNmMWUtNDg3Ni00YjVmLWI2NWQtOTE5N2E1MDQ3NGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgminKOhXencRGzo3gRt4KZyfuGm7ntyiKiaQ AIoGjX/m7Kdu99Nod8BG9QHPZM5Kc9MnTOl3Xcb/wJFusQosz78XgXFEUw+1nLe7 mHLsSGKMPxzzJ4dxNK4rlX2uf5HsZies5fR1VrhigZmGm5FOnacQ1KiF0uhVZD+I RFQpKe04BboHhxgtC1WnIkB4nKkBo6KsbV7AQPcPkTseOtLLVZL4zOFv085qK18l KVJyDGRpU/CRHmaV+zz7hby5gnd3NiZ5rwBjgFNN22czH7siZEjOwqhkUVtRAIZb PfAHbuMN/7abY7weoEENNio3xMq266ijPfzj4fqWnxhhmUiM8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMqy34DL9pLmZPKlQQTM8qZ8JKrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvMWVmY2YyMTktOTYxYy0z MmFiLWI4ZTQtZWY0YmU0ODMzYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtTBGBdvGg29yAKCHRL0873K3OzPIT+b0ao7IT5Z7ROdVy7uL8s tXw4psyZU3VxjW3o1C3/paCDfzzs2rDl2DDK4+uzrrcSnfM8aI+cr+Z/jt/7XE9Y KIJfA7XCSV063dMDVsG239wKiWNsXuIme71Ji7Q7ufYeonWqfi2tOXKtIuhQBRYr 01Wiz0qLKa7KQgkKgAyUPODXAMxkO5RUzr/smW5zV4jqabHlykFoLnEF+RA1fumR Tc0VieteKCdUgGQd+pCuRhMwK2KrCEZDE3Ous71ms5IFoZtyBTay/M2H5+Kzt483 3i5+hjsLisxt5RK30oN9Z2Az22D/chl6Yog= -----END CERTIFICATE-----Generated at Mon Jun 29 15:46:34 2026 by rpki-client