$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/2054b58a-4054-3f0a-90d2-d724e1f1da7a.roa File: 2054b58a-4054-3f0a-90d2-d724e1f1da7a.roa (raw, json) Hash identifier: 1mObHVqYjh5+xDC/PvUVbO+GZsJj44m2olkEkwlPbeA= Subject key identifier: E6:D1:26:30:27:6B:40:79:30:0A:8E:C4:CA:08:AE:86:BD:63:5F:A1 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584AF256A1DD45A0812AE7F19980 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/2054b58a-4054-3f0a-90d2-d724e1f1da7a.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 32806 IP address blocks: 2604:9900:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a1:dd:45:a0:81:2a:e7:f1:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=d663d8f8-121a-4e7f-acb8-0d4d985d0627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:07:b3:4a:a9:be:7e:68:17:af:45:37:bf:98: e3:94:75:84:f4:b7:28:4c:2b:8f:28:75:b8:22:fa: 31:fe:29:e2:00:8a:98:57:d4:39:1b:40:94:f6:be: 06:fe:0c:a5:ae:60:a0:4c:e7:58:33:8b:a6:82:3f: 9a:67:71:3f:99:5e:19:13:48:97:f6:48:98:e4:18: 06:d6:54:b6:6a:c6:10:c1:b3:ed:95:78:e1:ff:83: 3a:9d:c7:db:53:67:46:64:d5:af:d6:6f:62:e4:b9: 39:58:37:02:12:d8:7e:83:a2:61:c9:4a:92:7b:51: 74:ed:9f:28:b0:13:47:01:5d:99:e5:d6:b8:20:ee: 1c:bd:96:f4:d1:03:49:c8:0f:1c:ed:bd:1e:99:24: 5a:20:06:cd:3b:c3:42:c4:96:2d:b5:65:99:6a:15: a2:9b:a5:a4:d1:07:7a:3b:c1:2c:8e:52:85:5f:d1: d1:5b:7f:ba:4e:87:d0:8b:34:ca:79:c7:24:69:7c: 46:ab:5b:62:f1:c4:8c:a4:7a:8a:83:a3:91:de:81: 90:dc:e0:d4:df:c8:1a:f1:70:f2:45:5e:80:36:f1: 9d:0a:8b:04:7e:04:20:fd:74:26:f2:59:ba:35:ab: fa:05:07:04:e8:60:84:5e:8b:56:dc:1d:b1:5c:91: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D1:26:30:27:6B:40:79:30:0A:8E:C4:CA:08:AE:86:BD:63:5F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/2054b58a-4054-3f0a-90d2-d724e1f1da7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:5b:01:fd:10:b7:87:44:e1:05:32:4e:8a:fc:8e:a4:56:71: 33:df:b2:45:22:54:00:ed:bc:73:52:92:e6:80:3e:76:c7:8c: 69:b1:38:a8:86:7a:71:ed:be:73:ae:64:58:9c:b1:bc:a9:ed: 52:9c:f9:36:c6:81:7b:bc:ab:d2:1e:c7:28:58:b5:84:5e:f2: a7:d2:94:f3:e1:f5:e2:41:c4:07:f8:76:c5:39:35:16:95:a9: 08:bc:87:25:7b:bd:c9:f2:04:35:fb:f3:f8:6f:71:44:86:03: eb:89:7a:a8:12:6a:b7:c5:09:df:06:23:b1:d7:fd:3c:6b:1c: 99:e3:88:0e:63:55:9e:79:89:3d:83:bf:f7:6b:ae:f0:95:22: 1f:34:ea:f9:1c:d2:0a:b2:a6:18:82:a7:07:b5:b6:a6:b9:33: a2:2b:db:29:ac:45:dc:8e:3f:c5:05:c9:5d:12:dc:d4:c2:54: 47:6d:ce:a2:af:9a:f5:73:62:64:f3:99:a4:f0:23:66:6e:0a: 57:03:64:a4:fd:1d:c6:54:c1:58:16:65:d5:09:34:ef:8f:62: 53:dd:7a:1a:9c:f1:74:97:d6:6e:7a:fb:1c:2f:af:ec:63:e3: ca:09:d4:2d:a9:d0:a4:6e:97:bc:e0:72:52:35:5d:68:03:35: f9:05:5f:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEryVqHdRaCBKufxmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZDY2M2Q4ZjgtMTIxYS00ZTdmLWFjYjgtMGQ0ZDk4NWQwNjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQezSqm+fmgXr0U3v5jjlHWE9LcoTCuPKHW4 Ivox/iniAIqYV9Q5G0CU9r4G/gylrmCgTOdYM4umgj+aZ3E/mV4ZE0iX9kiY5BgG 1lS2asYQwbPtlXjh/4M6ncfbU2dGZNWv1m9i5Lk5WDcCEth+g6JhyUqSe1F07Z8o sBNHAV2Z5da4IO4cvZb00QNJyA8c7b0emSRaIAbNO8NCxJYttWWZahWim6Wk0Qd6 O8EsjlKFX9HRW3+6TofQizTKecckaXxGq1ti8cSMpHqKg6OR3oGQ3ODU38ga8XDy RV6ANvGdCosEfgQg/XQm8lm6Nav6BQcE6GCEXotW3B2xXJFtjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFObRJjAna0B5MAqOxMoIroa9Y1+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvMjA1NGI1OGEtNDA1NC0z ZjBhLTkwZDItZDcyNGUxZjFkYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFBbAf0Qt4dE4QUyTor8jqRWcTPfskUiVADtvHNSkuaAPnbHjGmx OKiGenHtvnOuZFicsbyp7VKc+TbGgXu8q9IexyhYtYRe8qfSlPPh9eJBxAf4dsU5 NRaVqQi8hyV7vcnyBDX78/hvcUSGA+uJeqgSarfFCd8GI7HX/TxrHJnjiA5jVZ55 iT2Dv/drrvCVIh806vkc0gqyphiCpwe1tqa5M6Ir2ymsRdyOP8UFyV0S3NTCVEdt zqKvmvVzYmTzmaTwI2ZuClcDZKT9HcZUwVgWZdUJNO+PYlPdehqc8XSX1m56+xwv r+xj48oJ1C2p0KRul7zgclI1XWgDNfkFX/8= -----END CERTIFICATE-----Generated at Sat Aug 23 22:11:52 2025 by rpki-client