$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa File: 3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa (raw, json) Hash identifier: mEsWwvXibjM/QKsFDm1ZTKKXw+pIpCjuZD7tJ8QLUMw= Subject key identifier: 2B:E6:86:DE:A9:24:50:C4:9C:22:B6:36:44:81:AB:24:B1:28:75:7E Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F4328584E1E4456F2C5655F901BBE55A0 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 398191 IP address blocks: 2607:c7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:56:f2:c5:65:5f:90:1b:be:55:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=5a03a5db-3c07-450a-80fc-f7e4564ba37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:27:58:62:28:d6:21:01:2f:33:95:63:28:ad: 42:3f:5b:da:e6:17:b9:21:75:9e:46:29:94:50:f4: 4d:d2:b1:1b:62:ab:51:af:0b:ee:17:66:07:e1:b6: 8a:00:b2:6d:8b:ad:a5:a9:5d:55:43:52:59:56:1d: f3:83:7b:b4:45:06:f9:16:3e:44:3e:3d:0c:9e:92: 3a:e9:00:39:d8:dc:c8:28:85:4d:63:45:47:82:4b: 67:86:cb:02:ce:72:41:b7:df:80:fa:2b:5d:52:fe: 6a:cf:07:de:7a:6f:9b:bb:56:70:93:9a:39:a9:51: fa:ce:2c:be:51:3f:54:85:ca:75:f7:1d:5f:ca:9e: 02:97:2c:13:59:50:0d:e5:8d:57:16:67:0e:22:cc: d6:d1:77:94:ea:45:30:a0:11:cc:16:1f:97:57:84: 5b:59:50:1e:5a:8a:94:8c:f8:34:49:9b:84:af:12: 92:36:b2:25:ad:56:99:3d:3e:0e:df:5b:02:28:74: ac:cb:a3:32:d2:3d:af:5f:73:96:58:41:47:61:c6: 4c:5d:20:49:fb:d6:09:36:7d:96:25:7e:4d:9c:02: a2:80:f1:c5:cb:08:1d:c1:02:cf:98:5c:2c:db:7f: 83:3d:42:ed:39:87:f8:06:7e:83:7b:f9:41:74:a5: 46:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E6:86:DE:A9:24:50:C4:9C:22:B6:36:44:81:AB:24:B1:28:75:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv6: 2607:c7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:be:cc:94:dc:dd:d5:17:f0:6a:82:db:4d:73:25:7e:96:37: 9e:04:f2:81:e9:d3:5b:11:da:0e:5e:dd:30:63:0a:8e:02:f0: 30:f4:b2:24:52:c9:01:c2:ef:43:a0:fc:3d:4f:1f:a8:46:e4: fe:5b:c9:d8:db:b3:43:ff:8b:9c:30:da:3d:5c:aa:94:9e:17: 37:7f:7e:79:14:7d:d5:6b:bf:ee:a9:f2:fe:71:9b:29:44:87: 81:01:0c:e8:d5:98:0b:9e:23:8d:f0:f9:72:e6:13:e9:8f:79: 33:1a:d5:1b:c9:9e:ea:48:97:9a:4e:d1:45:06:09:34:19:12: ee:0f:e2:25:15:98:a5:15:aa:7f:d1:df:dd:4e:dd:62:69:a0: 54:e6:23:6e:83:f8:43:18:a7:a4:d7:ac:64:8f:f3:79:b2:9e: 1b:48:03:7a:77:10:dd:cd:6e:05:ac:81:05:0b:48:66:74:10: 50:0f:fd:83:60:98:37:aa:67:0b:aa:16:01:e7:fa:3e:4a:85: e1:c7:b6:f7:80:9d:18:3b:57:17:56:e1:3c:24:a1:6f:42:20: 2f:ef:3a:83:7a:a5:4e:86:a4:a3:55:de:b6:61:ce:79:45:31: 38:70:c9:4b:d2:e0:05:9a:31:01:b3:f6:4a:95:d2:8a:71:a3: cd:e2:e7:c4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRFbyxWVfkBu+VaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk NWEwM2E1ZGItM2MwNy00NTBhLTgwZmMtZjdlNDU2NGJhMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjydYYijWIQEvM5VjKK1CP1va5he5IXWeRimU UPRN0rEbYqtRrwvuF2YH4baKALJti62lqV1VQ1JZVh3zg3u0RQb5Fj5EPj0MnpI6 6QA52NzIKIVNY0VHgktnhssCznJBt9+A+itdUv5qzwfeem+bu1Zwk5o5qVH6ziy+ UT9Uhcp19x1fyp4ClywTWVAN5Y1XFmcOIszW0XeU6kUwoBHMFh+XV4RbWVAeWoqU jPg0SZuErxKSNrIlrVaZPT4O31sCKHSsy6My0j2vX3OWWEFHYcZMXSBJ+9YJNn2W JX5NnAKigPHFywgdwQLPmFws23+DPULtOYf4Bn6De/lBdKVGHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCvmht6pJFDEnCK2NkSBqySxKHV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvM2E2ZTc1YTEtYzljMS0z Y2U4LTg3MDktNjc1OGNmYTFlYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBLvsyU3N3VF/BqgttNcyV+ljeeBPKB6dNbEdoOXt0wYwqOAvAw9LIk UskBwu9DoPw9Tx+oRuT+W8nY27ND/4ucMNo9XKqUnhc3f355FH3Va7/uqfL+cZsp RIeBAQzo1ZgLniON8Ply5hPpj3kzGtUbyZ7qSJeaTtFFBgk0GRLuD+IlFZilFap/ 0d/dTt1iaaBU5iNug/hDGKek16xkj/N5sp4bSAN6dxDdzW4FrIEFC0hmdBBQD/2D YJg3qmcLqhYB5/o+SoXhx7b3gJ0YO1cXVuE8JKFvQiAv7zqDeqVOhqSjVd62Yc55 RTE4cMlL0uAFmjEBs/ZKldKKcaPN4ufE -----END CERTIFICATE-----Generated at Sat Jun 13 14:50:18 2026 by rpki-client