$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa File: baf7f460-f90c-35af-abcf-66f43a931e52.roa (raw, json) Hash identifier: X4lGw3KWdNNQ4TeUT6lQHvb+Y234Yir6m6X7wLc6MSk= Subject key identifier: 17:6B:DC:0A:6A:E9:1C:61:3A:23:0A:5B:AB:7C:04:67:2C:19:0F:5D Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584AF256A1EE949DB52CE00A85C0 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 32806 IP address blocks: 2604:9900:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a1:ee:94:9d:b5:2c:e0:0a:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=dd39a83f-9fa9-4226-ad9c-a6ab43b075a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e0:bf:4a:ca:6d:ef:8a:6e:74:5d:a0:17:a5: 2b:83:62:ca:5c:71:93:4f:7b:cd:88:7c:5d:d8:d9: 80:62:5f:c9:04:2b:ff:39:12:dd:5b:b4:36:37:e1: e6:fe:6a:cd:7f:cc:29:b8:b3:3a:02:4c:96:47:20: 1b:e3:39:c2:b7:69:80:a4:48:a8:f7:b6:5a:68:a7: f9:57:be:cd:d6:0e:1a:ed:83:24:69:bc:a7:2b:bb: 5e:2a:93:c2:6e:f2:fc:dc:78:31:b5:e1:8c:62:1f: fa:35:5c:3b:63:f0:29:82:32:9b:cd:33:73:bb:a2: 03:af:8a:d0:05:52:76:71:c0:27:76:2a:83:f9:50: 06:d1:d7:e1:38:e8:e8:d5:fb:ac:eb:66:fe:12:35: 0f:8e:d8:d4:61:8c:79:b2:c2:cf:26:05:69:bf:d0: fe:ba:a2:a8:85:d1:e3:dd:ca:86:8b:a3:6c:2d:52: 76:bb:eb:26:01:2b:1d:5e:d3:8e:a5:36:d9:95:0f: 61:8d:e1:cf:8f:88:77:b3:55:63:c3:cd:66:c0:a8: b9:4e:8e:6b:c4:82:15:76:f1:a3:ee:a8:ff:9a:8f: 08:d6:23:7b:c2:37:88:f6:7e:b3:47:48:1c:ea:8e: 6f:14:80:f8:17:dd:c5:60:0d:35:b0:7f:06:c1:03: be:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6B:DC:0A:6A:E9:1C:61:3A:23:0A:5B:AB:7C:04:67:2C:19:0F:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:57:09:79:ef:5b:99:fe:ae:9d:6c:14:1e:d7:cc:c4:3d:0a: 5c:28:9c:39:14:85:fc:67:c7:af:ee:1b:25:8a:f8:77:04:32: fb:b7:1d:d7:83:a6:a2:9b:fb:37:e8:96:b4:ca:39:f7:23:13: c2:67:6a:84:dc:93:42:5e:1f:27:88:1e:5e:a3:12:4a:3b:02: f6:c0:5f:18:3e:03:34:ae:91:c9:15:b3:1e:a5:f9:04:1f:fc: 65:9f:97:9d:25:2c:39:58:d4:14:c9:88:47:10:91:b1:d5:31: fc:84:28:5f:f6:57:d7:ce:f3:1d:5b:ba:a8:ab:43:e1:1a:1e: be:8a:71:fe:09:0a:c6:3a:1b:82:3d:1a:51:67:db:8e:77:89: 69:aa:44:33:06:48:e2:88:21:4b:40:b1:d0:c9:14:6c:4e:d9: 4e:19:f8:ac:39:f0:55:e0:29:ff:3f:d4:a4:ff:86:35:1c:86: 56:02:36:81:f7:e2:ec:3b:e8:8b:28:a7:9e:97:b9:c5:9d:67: 3d:cc:19:09:b6:62:5a:86:a7:36:03:4d:19:18:4d:9b:2e:f9: 60:42:69:02:11:11:ab:eb:b5:a2:34:dd:9b:86:52:4a:41:1f: 7a:64:be:29:96:49:fd:6a:c4:4a:8a:d8:b4:48:7c:be:77:65: a3:6a:a2:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEryVqHulJ21LOAKhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZGQzOWE4M2YtOWZhOS00MjI2LWFkOWMtYTZhYjQzYjA3NWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuC/Sspt74pudF2gF6Urg2LKXHGTT3vNiHxd 2NmAYl/JBCv/ORLdW7Q2N+Hm/mrNf8wpuLM6AkyWRyAb4znCt2mApEio97ZaaKf5 V77N1g4a7YMkabynK7teKpPCbvL83HgxteGMYh/6NVw7Y/ApgjKbzTNzu6IDr4rQ BVJ2ccAndiqD+VAG0dfhOOjo1fus62b+EjUPjtjUYYx5ssLPJgVpv9D+uqKohdHj 3cqGi6NsLVJ2u+smASsdXtOOpTbZlQ9hjeHPj4h3s1Vjw81mwKi5To5rxIIVdvGj 7qj/mo8I1iN7wjeI9n6zR0gc6o5vFID4F93FYA01sH8GwQO+8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBdr3Apq6RxhOiMKW6t8BGcsGQ9dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvYmFmN2Y0NjAtZjkwYy0z NWFmLWFiY2YtNjZmNDNhOTMxZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1XCXnvW5n+rp1sFB7XzMQ9ClwonDkUhfxnx6/uGyWK+HcEMvu3 HdeDpqKb+zfolrTKOfcjE8JnaoTck0JeHyeIHl6jEko7AvbAXxg+AzSukckVsx6l +QQf/GWfl50lLDlY1BTJiEcQkbHVMfyEKF/2V9fO8x1buqirQ+EaHr6Kcf4JCsY6 G4I9GlFn2453iWmqRDMGSOKIIUtAsdDJFGxO2U4Z+Kw58FXgKf8/1KT/hjUchlYC NoH34uw76Isop56XucWdZz3MGQm2YlqGpzYDTRkYTZsu+WBCaQIREavrtaI03ZuG UkpBH3pkvimWSf1qxEqK2LRIfL53ZaNqomo= -----END CERTIFICATE-----Generated at Sat Aug 23 21:58:45 2025 by rpki-client