$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/508c355b-ad34-3de1-9823-5e99282d5584.roa File: 508c355b-ad34-3de1-9823-5e99282d5584.roa (raw, json) Hash identifier: KOyR7hg/SZkjYXwb5H3Pngup8jC1uErRQczvuXyqDeU= Subject key identifier: B1:B7:75:94:1F:DD:99:BF:BE:15:2F:34:F4:F8:16:DA:A9:48:CE:BC Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584BAA97B7D87E60F96DC5D00E60 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/508c355b-ad34-3de1-9823-5e99282d5584.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 32806 IP address blocks: 2604:9900:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b7:d8:7e:60:f9:6d:c5:d0:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=c254f2f0-ed03-4ab2-bee2-e654793f9d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:62:0f:e6:8a:a6:b8:17:ef:3e:a6:2a:27:33: 45:66:56:a7:01:4a:1c:03:f4:67:4d:9f:c7:b4:d3: f7:d4:81:ab:81:0a:90:d1:31:88:eb:3e:13:46:dd: c7:5d:ad:44:48:28:e6:8a:e1:39:0c:08:6c:f7:7b: 55:e4:8d:a9:2d:8f:6d:1e:01:a7:69:fa:23:cf:7b: 38:2f:1f:4b:8f:30:4f:d9:73:4a:75:95:b0:55:39: 0a:2b:ab:42:bf:0b:8e:b1:f6:53:24:72:b8:d8:b9: 71:f4:d0:76:32:db:84:e9:da:17:35:c7:12:21:3f: ee:e0:84:16:7d:7d:a8:1a:19:1f:2d:34:1e:76:60: 5c:db:3c:06:ec:3b:b6:97:53:06:01:9a:7e:96:f7: c6:45:c1:c1:cb:cc:e3:f8:d8:b4:92:32:f8:11:56: a0:94:db:32:07:78:84:88:19:f7:6e:2a:8e:3d:97: b6:cf:47:39:c1:ed:19:b8:ef:2a:d9:82:7d:a8:c6: 3c:62:17:51:3d:db:e2:d0:2f:f2:05:c0:7d:64:6e: ce:9e:3b:57:23:ae:2e:56:aa:d4:df:42:d6:b2:26: 7d:ad:34:41:bc:e3:ee:62:1f:bd:76:54:00:b2:ea: a2:40:9e:c2:5e:dd:61:84:98:07:be:ed:0c:23:33: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B7:75:94:1F:DD:99:BF:BE:15:2F:34:F4:F8:16:DA:A9:48:CE:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/508c355b-ad34-3de1-9823-5e99282d5584.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:10:07:06:a5:57:6c:f8:89:c5:9c:28:61:b3:51:9d:a4:f1: 16:07:b1:74:73:1e:78:4d:ae:43:01:9b:a8:85:9e:09:51:e5: 7b:32:c8:84:73:dd:a4:41:5e:92:6b:4e:7d:8c:7a:ba:17:b9: aa:f6:4f:96:74:e9:bf:e2:e0:af:61:d8:d2:1a:11:d6:c0:91: 71:e3:79:63:e1:f6:c5:23:0e:df:a8:ab:eb:8d:2c:8b:77:9a: e3:a7:22:14:d9:75:39:3b:69:a7:d4:31:02:0d:41:09:22:9a: 76:0e:11:81:75:6b:60:08:b2:9c:a8:16:f3:c5:21:d5:c9:1c: f4:c2:3a:17:6b:6f:20:49:ca:2f:91:1b:bf:b7:8c:fb:8d:87: 27:cc:90:a9:89:a1:3d:16:6c:0b:21:1e:c5:c8:6d:6e:ee:41: 75:e8:8d:46:13:31:33:7f:9e:19:25:a4:11:15:a4:c6:aa:a0: 20:53:9a:71:7a:39:d3:4b:c2:19:96:21:ba:2e:eb:9e:16:7c: 0d:5f:85:94:e0:8e:67:1d:47:41:00:b5:08:5d:8c:b6:dc:77: 79:a5:ad:da:84:85:e3:56:b4:40:37:9d:17:3b:e8:b2:af:ef: b4:33:03:7e:8f:cd:9c:da:d4:39:cc:e4:36:ef:12:18:f5:4f: 29:7a:fc:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuql7fYfmD5bcXQDmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YzI1NGYyZjAtZWQwMy00YWIyLWJlZTItZTY1NDc5M2Y5ZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GIP5oqmuBfvPqYqJzNFZlanAUocA/RnTZ/H tNP31IGrgQqQ0TGI6z4TRt3HXa1ESCjmiuE5DAhs93tV5I2pLY9tHgGnafojz3s4 Lx9LjzBP2XNKdZWwVTkKK6tCvwuOsfZTJHK42Llx9NB2MtuE6doXNccSIT/u4IQW fX2oGhkfLTQedmBc2zwG7Du2l1MGAZp+lvfGRcHBy8zj+Ni0kjL4EVaglNsyB3iE iBn3biqOPZe2z0c5we0ZuO8q2YJ9qMY8YhdRPdvi0C/yBcB9ZG7OnjtXI64uVqrU 30LWsiZ9rTRBvOPuYh+9dlQAsuqiQJ7CXt1hhJgHvu0MIzMTmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLG3dZQf3Zm/vhUvNPT4FtqpSM68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvNTA4YzM1NWItYWQzNC0z ZGUxLTk4MjMtNWU5OTI4MmQ1NTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKgQBwalV2z4icWcKGGzUZ2k8RYHsXRzHnhNrkMBm6iFnglR5Xsy yIRz3aRBXpJrTn2MeroXuar2T5Z06b/i4K9h2NIaEdbAkXHjeWPh9sUjDt+oq+uN LIt3muOnIhTZdTk7aafUMQINQQkimnYOEYF1a2AIspyoFvPFIdXJHPTCOhdrbyBJ yi+RG7+3jPuNhyfMkKmJoT0WbAshHsXIbW7uQXXojUYTMTN/nhklpBEVpMaqoCBT mnF6OdNLwhmWIbou654WfA1fhZTgjmcdR0EAtQhdjLbcd3mlrdqEheNWtEA3nRc7 6LKv77QzA36PzZza1DnM5DbvEhj1Tyl6/M4= -----END CERTIFICATE-----Generated at Tue Oct 28 13:16:40 2025 by rpki-client