$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa File: baf7f460-f90c-35af-abcf-66f43a931e52.roa (raw, json) Hash identifier: 3Kc59nshTpuMxRgSRMgDokYMDJwXyiLhORu3OsvxIJc= Subject key identifier: 88:21:26:D7:FE:55:14:44:1A:46:58:7F:E4:6F:26:8A:3A:62:37:7E Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584F15CD0815210FA3F425D8AF40 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 32806 IP address blocks: 2604:9900:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:08:15:21:0f:a3:f4:25:d8:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=e0312e09-5e85-4c29-b261-93e97ef6c11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:e6:65:87:03:ec:c1:1a:50:4c:eb:53:88: dc:87:91:00:95:45:7d:ed:e4:10:95:6f:8d:b4:d3: ad:30:fa:cb:9d:15:a3:9d:63:54:a4:b9:4f:6d:72: 38:fb:1a:a9:68:eb:f5:53:da:68:db:40:e1:08:35: 22:43:f5:f4:cd:9f:65:de:d9:ad:1d:66:b9:5d:7b: 58:78:2f:33:e7:da:66:ef:d8:7b:18:c2:99:ed:92: 25:6b:79:2e:1e:62:ff:c7:62:ec:4f:30:34:a4:50: f6:b9:ac:22:8c:84:47:ac:5f:d6:b2:87:c9:a2:31: 81:ab:db:00:09:f9:da:ab:48:b8:18:b2:16:29:4c: e1:57:f1:d8:f9:d4:02:52:85:59:e8:e6:e9:11:fc: b7:d1:61:91:79:06:df:9d:1f:da:df:1d:d3:be:b8: 3b:cb:54:de:9f:49:95:00:a1:47:36:9c:49:2a:b7: 4b:40:ce:d5:88:30:d5:08:01:c2:02:a9:77:dd:08: 15:0e:1e:ab:96:cc:31:9a:2e:2f:b6:80:0c:d5:e2: 5f:28:2a:0a:c9:e6:3f:38:4e:bf:6a:15:7c:6e:bc: fd:74:08:41:d3:87:2a:bc:e8:25:f0:cf:9c:40:1f: c8:45:8a:7d:b6:96:61:0b:1d:dc:84:d1:b3:91:3e: de:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:21:26:D7:FE:55:14:44:1A:46:58:7F:E4:6F:26:8A:3A:62:37:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:fb:76:6f:f1:15:e3:0b:b9:e9:6f:47:3d:d9:03:15:7c:7c: 0e:fb:9f:4d:17:f3:2e:80:a9:f8:30:34:48:1c:1f:7c:03:03: e2:0d:f0:76:a3:ac:d5:3e:ce:3a:8b:2c:fc:f7:44:0e:74:db: 06:9c:a2:c7:2a:76:8b:c8:e2:6f:34:44:b8:69:a5:b8:3a:7d: 74:9a:49:0f:5b:d5:8d:64:d2:71:ed:7d:71:cc:fd:c0:ee:1e: c2:60:d6:4d:0d:20:b8:56:6e:61:fe:7b:ed:c1:6c:15:37:25: d8:2f:91:3c:1b:54:9e:24:a5:f3:5e:3d:98:b3:c3:ec:39:bb: 0e:df:64:58:ea:bb:50:3a:0d:c0:73:6e:54:34:e9:a0:8c:cb: f2:8b:d1:38:ea:36:93:01:33:1a:0e:c6:aa:6b:aa:fd:e5:ac: fb:81:3c:68:6b:e0:d0:d8:dd:51:3c:69:9f:2e:67:c5:ba:ac: e2:37:51:d7:35:85:c0:58:11:44:46:1c:32:3d:93:df:e2:33: c0:43:f3:43:81:d6:6c:7d:0d:f6:8c:e4:5c:d3:f1:50:36:ad: d6:bc:bb:42:f1:37:a0:7c:be:ee:4a:da:d5:14:5c:5c:e0:39: f5:9a:ac:2b:73:c8:d5:b9:a3:18:5e:91:3f:f1:6d:fd:5e:e6: a9:15:62:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8VzQgVIQ+j9CXYr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk ZTAzMTJlMDktNWU4NS00YzI5LWIyNjEtOTNlOTdlZjZjMTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgzmZYcD7MEaUEzrU4jch5EAlUV97eQQlW+N tNOtMPrLnRWjnWNUpLlPbXI4+xqpaOv1U9po20DhCDUiQ/X0zZ9l3tmtHWa5XXtY eC8z59pm79h7GMKZ7ZIla3kuHmL/x2LsTzA0pFD2uawijIRHrF/WsofJojGBq9sA Cfnaq0i4GLIWKUzhV/HY+dQCUoVZ6ObpEfy30WGReQbfnR/a3x3Tvrg7y1Ten0mV AKFHNpxJKrdLQM7ViDDVCAHCAql33QgVDh6rlswxmi4vtoAM1eJfKCoKyeY/OE6/ ahV8brz9dAhB04cqvOgl8M+cQB/IRYp9tpZhCx3chNGzkT7eCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIghJtf+VRREGkZYf+RvJoo6Yjd+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvYmFmN2Y0NjAtZjkwYy0z NWFmLWFiY2YtNjZmNDNhOTMxZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGz7dm/xFeMLuelvRz3ZAxV8fA77n00X8y6AqfgwNEgcH3wDA+IN 8HajrNU+zjqLLPz3RA502wacoscqdovI4m80RLhppbg6fXSaSQ9b1Y1k0nHtfXHM /cDuHsJg1k0NILhWbmH+e+3BbBU3JdgvkTwbVJ4kpfNePZizw+w5uw7fZFjqu1A6 DcBzblQ06aCMy/KL0TjqNpMBMxoOxqprqv3lrPuBPGhr4NDY3VE8aZ8uZ8W6rOI3 Udc1hcBYEURGHDI9k9/iM8BD80OB1mx9DfaM5FzT8VA2rda8u0LxN6B8vu5K2tUU XFzgOfWarCtzyNW5oxhekT/xbf1e5qkVYjk= -----END CERTIFICATE-----Generated at Sun Oct 4 21:19:23 2026 by rpki-client