$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/627e2265-9cd5-3b23-92c2-779bcf2d369b.roa File: 627e2265-9cd5-3b23-92c2-779bcf2d369b.roa (raw, json) Hash identifier: uC/5+OpaQqadScLHK5sHcvCbet2cSP6RxIcy5KX0Uyw= Subject key identifier: AF:35:ED:4A:26:70:18:DD:52:16:E9:C9:C5:DC:1A:E7:88:F6:0A:7D Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584BAA97B80D9B6FB84E04B791E8 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/627e2265-9cd5-3b23-92c2-779bcf2d369b.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 32806 IP address blocks: 2604:9900:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b8:0d:9b:6f:b8:4e:04:b7:91:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=889f64ba-2f3f-421e-baa7-01aceb34df27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:fb:fa:a6:1c:e9:c7:0d:50:36:54:47:5e: 8c:fc:30:cf:b8:17:64:ad:f7:e8:d8:3b:8b:46:b2: e3:66:41:69:8e:fe:14:13:68:0f:42:ce:fa:dd:7d: 0f:d5:db:24:3a:9f:6d:f8:af:af:a6:b6:e4:12:23: 8f:f8:d8:96:65:2a:db:83:a8:53:cb:59:67:ba:29: 2d:86:0c:1c:bd:fb:90:28:d0:68:f7:53:37:86:2f: ef:64:1b:ab:5d:ac:b1:82:22:1b:a2:2b:f2:38:05: 54:8c:bb:9f:c3:a5:03:c2:ea:61:34:55:e1:8d:81: a1:8e:79:da:0a:8f:ed:e0:43:18:6a:42:44:98:0b: 6b:e6:99:be:de:f1:26:40:32:13:b6:6c:72:b4:a0: 76:23:ac:ed:55:20:7b:25:6b:39:bb:b8:be:3e:5e: 69:3e:c3:ff:91:5f:11:c8:4b:d0:e5:1d:6b:cb:a7: b5:39:58:71:de:58:d0:a4:74:de:a0:9a:3a:d4:3e: f3:2e:b1:50:2a:28:1b:bc:61:82:2c:56:40:46:fb: c1:9a:10:73:8a:b2:ee:b5:ee:a9:72:7a:15:a9:bc: c3:49:d5:09:0f:3a:90:e0:04:40:d0:0c:b4:0f:52: f9:1e:24:e4:08:80:3f:e7:a8:12:b0:12:c4:59:53: 03:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:35:ED:4A:26:70:18:DD:52:16:E9:C9:C5:DC:1A:E7:88:F6:0A:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/627e2265-9cd5-3b23-92c2-779bcf2d369b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:8f:26:a8:a2:ae:38:98:4c:80:87:d4:2d:70:95:ed:9e:31: c2:0b:b3:16:1a:02:9d:ff:08:47:f6:b6:71:3b:85:64:d8:b0: 6c:06:9d:f1:1e:e0:8f:3f:0b:6a:f3:7e:40:3c:bf:40:56:5f: dd:de:21:73:11:4c:67:ee:22:51:a5:9a:b0:ab:13:29:35:43: 79:5e:13:72:92:5b:3d:f1:72:37:0f:11:4b:9a:0e:75:d5:fa: 48:1d:44:82:be:1c:98:e8:ca:53:e5:52:0f:f2:dc:80:0c:89: 11:2e:ba:4c:a3:09:a0:f6:a8:52:91:c2:a4:b4:15:2f:ee:59: ab:1b:5e:5b:33:6e:4d:5c:40:1f:94:a7:99:b4:1a:44:c7:8d: 49:51:33:38:82:67:c9:0c:28:28:63:d4:39:58:6b:68:2d:c2: ae:c1:be:f1:05:4c:39:e3:04:60:56:7d:69:d9:0f:b4:f5:ba: a8:1c:ff:b5:fe:a2:22:46:78:47:19:c6:94:1e:50:f3:af:3a: 12:97:10:c9:05:cb:19:37:76:d6:63:14:f1:30:bf:c8:81:ca: b9:67:5f:7a:c1:16:4d:6c:35:ff:a3:22:6b:a8:f3:0e:da:f4: 46:12:3b:d2:3e:bd:0b:0d:12:d2:6c:e4:11:39:d6:f5:d0:45: a5:8f:10:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuql7gNm2+4TgS3kegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ODg5ZjY0YmEtMmYzZi00MjFlLWJhYTctMDFhY2ViMzRkZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHH7+qYc6ccNUDZUR16M/DDPuBdkrffo2DuL RrLjZkFpjv4UE2gPQs763X0P1dskOp9t+K+vprbkEiOP+NiWZSrbg6hTy1lnuikt hgwcvfuQKNBo91M3hi/vZBurXayxgiIboivyOAVUjLufw6UDwuphNFXhjYGhjnna Co/t4EMYakJEmAtr5pm+3vEmQDITtmxytKB2I6ztVSB7JWs5u7i+Pl5pPsP/kV8R yEvQ5R1ry6e1OVhx3ljQpHTeoJo61D7zLrFQKigbvGGCLFZARvvBmhBzirLute6p cnoVqbzDSdUJDzqQ4ARA0Ay0D1L5HiTkCIA/56gSsBLEWVMD7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK817UomcBjdUhbpycXcGueI9gp9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvNjI3ZTIyNjUtOWNkNS0z YjIzLTkyYzItNzc5YmNmMmQzNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL+PJqiirjiYTICH1C1wle2eMcILsxYaAp3/CEf2tnE7hWTYsGwG nfEe4I8/C2rzfkA8v0BWX93eIXMRTGfuIlGlmrCrEyk1Q3leE3KSWz3xcjcPEUua DnXV+kgdRIK+HJjoylPlUg/y3IAMiREuukyjCaD2qFKRwqS0FS/uWasbXlszbk1c QB+Up5m0GkTHjUlRMziCZ8kMKChj1DlYa2gtwq7BvvEFTDnjBGBWfWnZD7T1uqgc /7X+oiJGeEcZxpQeUPOvOhKXEMkFyxk3dtZjFPEwv8iByrlnX3rBFk1sNf+jImuo 8w7a9EYSO9I+vQsNEtJs5BE51vXQRaWPECg= -----END CERTIFICATE-----Generated at Tue Oct 28 13:15:10 2025 by rpki-client