$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa File: baf7f460-f90c-35af-abcf-66f43a931e52.roa (raw, json) Hash identifier: kzrX/hU8/tL9cqNyO0yn67BUPVeEcQPSFZyxT1gBLJQ= Subject key identifier: 4D:1B:88:37:E9:99:82:10:D4:54:73:B2:A2:F5:55:0C:1B:FF:D9:DE Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584A11FCC87B396E2140D9C61880 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa Signing time: Tue 03 Jun 2025 16:18:50 +0000 ROA not before: Tue 03 Jun 2025 16:18:50 +0000 ROA not after: Mon 01 Sep 2025 16:18:50 +0000 asID: 32806 IP address blocks: 2604:9900:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:fc:c8:7b:39:6e:21:40:d9:c6:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Jun 3 16:18:50 2025 GMT Not After : Sep 1 16:18:50 2025 GMT Subject: CN=d2f9d719-0668-4423-b628-65eb6fe7e226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9c:50:6a:35:89:2f:9a:fc:82:0d:2f:af:41: c3:be:83:c3:29:54:c1:d7:bd:63:01:57:25:34:46: 84:09:95:e7:fc:a7:12:d2:05:15:5d:79:be:32:36: 28:4f:14:dc:3c:01:1c:bd:2d:f1:be:d6:5c:50:a5: a9:8e:22:0f:43:a9:5a:f0:28:1c:81:0c:b7:6e:59: 13:db:16:d8:ac:d0:8e:c9:4f:33:80:09:0a:25:e9: 17:f9:de:c3:17:30:51:a1:37:ef:a3:26:07:71:a8: b5:a5:7c:44:30:e8:9f:df:f8:ff:cd:b7:a3:10:03: 23:01:16:2f:fc:fd:31:85:41:5f:f6:a1:46:5b:31: e6:92:d2:b4:ed:90:9d:3e:93:55:24:fa:46:ce:6a: 53:20:f3:a1:57:6f:d6:55:9b:51:fb:07:8f:97:cf: 75:8b:6c:7c:d4:ff:90:5f:14:e0:f9:85:b5:36:af: 86:b8:a0:24:97:ed:eb:15:22:db:6d:7c:65:a8:3b: eb:9e:a6:a2:83:4f:a9:0f:34:33:f8:2f:3d:95:86: 26:6d:ec:ca:c4:98:30:49:ee:b1:9f:05:c8:50:0e: 59:bc:5e:75:a5:0c:fe:09:11:c1:c4:db:5b:ba:b2: c4:85:fd:78:9e:56:72:f8:0a:5c:61:41:6d:f8:62: 90:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1B:88:37:E9:99:82:10:D4:54:73:B2:A2:F5:55:0C:1B:FF:D9:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:7c:af:e8:fc:cf:56:aa:6b:73:97:5d:c9:22:bb:d9:3d:ce: 55:62:bb:fa:5d:45:d9:56:70:ae:ad:ea:83:ef:a6:5f:ca:93: a5:4d:70:58:58:4f:2f:13:d0:a0:40:3e:11:f7:c6:89:bf:d9: c2:99:31:e5:51:93:cd:32:22:51:46:37:c2:b5:95:f9:df:2c: 9e:fb:a2:71:8e:8b:b5:8d:da:b6:32:af:30:e1:a4:01:42:5c: b6:b1:04:4a:0f:f3:a4:5b:f2:e4:8c:de:31:86:45:9e:ee:9a: 77:9d:8a:9b:99:3b:95:77:51:dd:e3:85:a9:12:e9:6f:c7:f8: 40:10:5e:0a:91:cd:d5:eb:c7:dd:15:83:b7:50:36:77:35:84: 9c:79:67:22:c8:66:96:db:98:4c:a4:ea:fc:a7:5d:19:07:54: 27:a5:d8:09:29:c1:e0:a3:ae:90:35:1d:a7:94:d2:5f:c8:90: ad:91:9a:00:45:32:aa:d1:dc:c0:f0:6e:6f:62:55:18:bc:5e: 45:42:42:bb:a5:ce:92:b5:fd:c8:58:2f:6a:7f:50:b2:73:e7: ba:b2:d9:44:38:c3:0c:0f:c9:2e:0e:ac:e0:12:14:05:e5:1f: 31:17:53:d7:4f:b1:58:91:d6:2b:33:53:e5:21:11:5c:35:76: f8:a4:26:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoR/Mh7OW4hQNnGGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MDYwMzE2MTg1MFoXDTI1MDkwMTE2MTg1MFowLzEtMCsGA1UEAxMk ZDJmOWQ3MTktMDY2OC00NDIzLWI2MjgtNjVlYjZmZTdlMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpxQajWJL5r8gg0vr0HDvoPDKVTB171jAVcl NEaECZXn/KcS0gUVXXm+MjYoTxTcPAEcvS3xvtZcUKWpjiIPQ6la8CgcgQy3blkT 2xbYrNCOyU8zgAkKJekX+d7DFzBRoTfvoyYHcai1pXxEMOif3/j/zbejEAMjARYv /P0xhUFf9qFGWzHmktK07ZCdPpNVJPpGzmpTIPOhV2/WVZtR+wePl891i2x81P+Q XxTg+YW1Nq+GuKAkl+3rFSLbbXxlqDvrnqaig0+pDzQz+C89lYYmbezKxJgwSe6x nwXIUA5ZvF51pQz+CRHBxNtburLEhf14nlZy+ApcYUFt+GKQOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE0biDfpmYIQ1FRzsqL1VQwb/9neMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvYmFmN2Y0NjAtZjkwYy0z NWFmLWFiY2YtNjZmNDNhOTMxZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHZ8r+j8z1aqa3OXXckiu9k9zlViu/pdRdlWcK6t6oPvpl/Kk6VN cFhYTy8T0KBAPhH3xom/2cKZMeVRk80yIlFGN8K1lfnfLJ77onGOi7WN2rYyrzDh pAFCXLaxBEoP86Rb8uSM3jGGRZ7umnedipuZO5V3Ud3jhakS6W/H+EAQXgqRzdXr x90Vg7dQNnc1hJx5ZyLIZpbbmEyk6vynXRkHVCel2AkpweCjrpA1HaeU0l/IkK2R mgBFMqrR3MDwbm9iVRi8XkVCQrulzpK1/chYL2p/ULJz57qy2UQ4wwwPyS4OrOAS FAXlHzEXU9dPsViR1iszU+UhEVw1dvikJnY= -----END CERTIFICATE-----Generated at Fri Jun 6 23:57:14 2025 by rpki-client