$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa File: df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa (raw, json) Hash identifier: ncUhiL1ybvDQhhOba1o9Vw/oUfsx1R3nXzpm19794Go= Subject key identifier: 05:4E:BA:B1:99:80:BE:AC:9F:D9:4F:5C:08:0D:7D:5D:BF:CE:59:EE Certificate issuer: /CN=c32788e6-7ab0-4a32-8ff1-3c82690ffaa9 Certificate serial: 010D0C9F4328584E11B4394E3E8456ABBB08DD80 Authority key identifier: C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa Signing time: Fri 05 Jun 2026 09:00:12 +0000 ROA not before: Fri 05 Jun 2026 09:00:12 +0000 ROA not after: Thu 03 Sep 2026 09:00:12 +0000 asID: 402062 IP address blocks: 2604:2420::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:b4:39:4e:3e:84:56:ab:bb:08:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32788e6-7ab0-4a32-8ff1-3c82690ffaa9 Validity Not Before: Jun 5 09:00:12 2026 GMT Not After : Sep 3 09:00:12 2026 GMT Subject: CN=5abab510-e103-4edd-a898-75813460e6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:49:52:bd:05:7b:70:44:df:35:90:4a:4b:24: 46:e1:a2:de:39:60:be:06:0d:0f:80:35:0b:a0:34: ae:76:fa:e5:03:28:e0:53:c2:1c:53:26:8e:12:68: 6b:17:4c:56:b4:55:0c:09:c9:0b:8d:f4:88:e2:e6: ce:b0:8e:9e:a0:6a:5b:1b:44:3d:3e:c4:be:30:70: 32:72:bc:bf:3a:ae:83:51:c2:a3:23:dc:b0:42:6f: 48:57:d9:9f:e4:b7:49:04:b0:7f:1f:ed:d7:a8:fd: 62:48:46:5a:b7:03:d2:c2:f2:59:3f:ec:17:f9:5a: 6a:0a:02:f1:c2:54:f4:52:d7:5e:0a:1b:4d:44:79: c8:c6:bd:fa:bf:c4:96:c3:2c:24:b5:65:2e:5f:53: b1:a6:06:2b:55:78:9d:e4:84:8c:7b:b6:85:bd:1e: 74:c8:98:62:4a:fc:da:44:c0:e8:da:2d:4e:1f:eb: 79:eb:cf:64:5e:45:e9:e9:21:09:4b:8e:b1:95:2a: 36:94:40:f1:d1:98:67:7d:1e:4a:3b:5f:ae:f0:fd: 0f:c1:3c:f7:c8:97:f3:0e:10:61:9e:aa:bd:1e:f2: 5b:0b:4d:ed:b6:28:4e:86:68:4c:7f:be:11:09:df: 4b:71:e5:df:ca:1b:e2:78:ff:bc:c9:a8:da:4d:e6: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4E:BA:B1:99:80:BE:AC:9F:D9:4F:5C:08:0D:7D:5D:BF:CE:59:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl X509v3 Authority Key Identifier: keyid:C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer sbgp-ipAddrBlock: critical IPv6: 2604:2420::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:87:b4:f9:df:a7:0d:5a:1f:53:ce:88:06:0d:1d:d6:49:2e: ea:b1:8a:bf:0c:23:82:d3:2d:38:b7:15:a2:e6:cf:c4:84:ed: d5:c8:fe:6e:80:2d:3b:6d:17:69:11:f4:f8:54:38:14:00:ad: 6a:fd:6d:75:33:49:2e:40:7d:0f:a5:9f:b4:1a:5f:d7:2a:ea: 27:d0:b1:47:b1:83:3f:ef:59:07:47:02:c6:2e:24:74:0f:91: 12:f0:a1:f9:a0:b2:23:99:bc:a6:31:a1:eb:12:c2:79:be:a6: 14:67:fc:98:04:33:4b:bf:e0:5f:06:8c:19:9b:94:b5:23:92: ce:d3:7d:35:ca:cb:6a:be:d1:b4:29:8a:ae:ef:f0:3f:93:46: 92:9d:dd:8a:08:55:1d:bb:d7:15:51:63:75:42:df:06:c3:9f: 1d:4f:25:10:af:5c:39:d1:3d:c8:be:87:0f:fe:32:86:85:38: be:f1:f2:63:a2:cf:41:33:f1:9f:bb:cb:31:d4:c6:cd:32:86: b7:b8:89:5c:d6:67:af:ab:a3:4a:ec:ab:f4:d3:0d:0e:b5:99: 8e:b5:eb:f8:ee:ad:57:0e:76:6d:dd:9d:74:4e:6f:c6:0f:d4: ec:f5:7c:ff:14:d6:3f:d3:e3:34:b6:98:ce:7e:19:4f:cf:c0: aa:80:ed:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4RtDlOPoRWq7sI3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyNzg4ZTYtN2FiMC00YTMyLThmZjEtM2M4MjY5MGZm YWE5MB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk NWFiYWI1MTAtZTEwMy00ZWRkLWE4OTgtNzU4MTM0NjBlNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApElSvQV7cETfNZBKSyRG4aLeOWC+Bg0PgDUL oDSudvrlAyjgU8IcUyaOEmhrF0xWtFUMCckLjfSI4ubOsI6eoGpbG0Q9PsS+MHAy cry/Oq6DUcKjI9ywQm9IV9mf5LdJBLB/H+3XqP1iSEZatwPSwvJZP+wX+VpqCgLx wlT0UtdeChtNRHnIxr36v8SWwywktWUuX1OxpgYrVXid5ISMe7aFvR50yJhiSvza RMDo2i1OH+t5689kXkXp6SEJS46xlSo2lEDx0ZhnfR5KO1+u8P0PwTz3yJfzDhBh nqq9HvJbC03ttihOhmhMf74RCd9LceXfyhvieP+8yajaTeamWQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAVOurGZgL6sn9lPXAgNfV2/zlnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMzI3 ODhlNi03YWIwLTRhMzItOGZmMS0zYzgyNjkwZmZhYTkvZGYwZDNkYTQtZDY2My0z YTFlLTljN2EtYjY5MTVhNzQzYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzMyNzg4ZTYtN2FiMC00YTMyLThm ZjEtM2M4MjY5MGZmYWE5L2MzMjc4OGU2LTdhYjAtNGEzMi04ZmYxLTNjODI2OTBm ZmFhOS5jcmwwHwYDVR0jBBgwFoAUxxHw61JDgmWZrfefzPBexANp2wwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMzI3ODhlNi03YWIwLTRhMzItOGZmMS0zYzgy NjkwZmZhYTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQkIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3h7T536cNWh9TzogGDR3WSS7qsYq/DCOC0y04txWi5s/EhO3VyP5u gC07bRdpEfT4VDgUAK1q/W11M0kuQH0PpZ+0Gl/XKuon0LFHsYM/71kHRwLGLiR0 D5ES8KH5oLIjmbymMaHrEsJ5vqYUZ/yYBDNLv+BfBowZm5S1I5LO0301ystqvtG0 KYqu7/A/k0aSnd2KCFUdu9cVUWN1Qt8Gw58dTyUQr1w50T3IvocP/jKGhTi+8fJj os9BM/Gfu8sx1MbNMoa3uIlc1mevq6NK7Kv00w0OtZmOtev47q1XDnZt3Z10Tm/G D9Ts9Xz/FNY/0+M0tpjOfhlPz8CqgO1m -----END CERTIFICATE-----Generated at Wed Jun 10 03:38:23 2026 by rpki-client