$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/059285c4-cea8-3035-ad1f-42a1d6635145.roa File: 059285c4-cea8-3035-ad1f-42a1d6635145.roa (raw, json) Hash identifier: Tqa85tQIhU/VTLj4KKHTxfMv7c83/d4rLZJ+betGq0s= Subject key identifier: 6A:A8:82:0E:06:92:AF:B9:74:9D:E8:0C:21:74:01:BC:D7:5A:0D:A8 Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584BBFA58EBCD3A64740B224BB00 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/059285c4-cea8-3035-ad1f-42a1d6635145.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 6363 IP address blocks: 2606:9fc0:d00a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:8e:bc:d3:a6:47:40:b2:24:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=ca21ada1-d1cd-43f1-b0fe-e18c4bc3d256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:e3:64:80:93:da:f2:0f:a1:be:80:39:e0: 37:21:fa:26:ef:6e:fc:35:92:a3:1f:7f:9f:07:2f: 07:97:94:52:f6:9c:dd:fd:b4:39:57:7e:26:b0:da: 64:d7:02:5e:2b:3b:ea:a2:40:70:8c:61:72:11:d4: 41:4a:2f:87:4a:02:9a:d5:05:66:39:0a:8e:98:b5: 11:c1:51:ec:2c:ba:d1:5c:19:33:ca:59:90:51:04: f2:22:90:cf:b1:7f:59:6f:51:b0:ff:1d:d6:c2:8e: 31:ac:ff:89:90:c0:06:1f:cd:a0:49:5c:46:17:d3: de:bf:bd:6f:aa:86:f1:4f:d9:7f:4a:82:02:0e:82: 7a:a3:2e:fa:61:54:c1:6d:5e:80:20:a4:97:3a:8e: 35:fd:d5:21:bf:0b:d5:fb:8a:5a:14:c8:27:0d:fd: 2a:3b:b8:12:7e:c2:a0:3f:9d:57:e3:b1:82:04:7f: d3:45:9b:ea:62:54:45:86:e1:ae:00:9b:47:7b:75: e1:e2:a1:6b:1e:25:95:ca:64:55:b2:05:b7:3e:47: 47:55:1c:ca:3d:8d:ab:b3:c4:65:e2:5b:26:c4:e4: 54:af:cf:2e:ce:64:4a:40:51:27:60:e6:5e:a2:ac: 0d:5a:6c:47:b5:82:cf:56:a0:ee:f0:51:12:bd:8d: ff:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A8:82:0E:06:92:AF:B9:74:9D:E8:0C:21:74:01:BC:D7:5A:0D:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/059285c4-cea8-3035-ad1f-42a1d6635145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:d00a::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:56:cb:3f:fb:32:a9:b8:86:b6:6f:19:1a:39:65:de:2a:55: 1a:c0:10:09:8a:12:9e:cb:16:0f:4b:a3:84:76:31:d2:aa:2f: e4:fb:d2:6c:ea:7f:37:30:8a:4c:5f:61:40:c8:2d:30:a0:59: 06:49:74:3e:35:00:7c:e9:6c:36:48:5a:df:1d:01:ae:08:a1: 01:92:ec:ec:55:69:0a:e4:08:a4:da:31:d1:30:e3:fb:a0:b3: b0:1f:fe:3b:3f:50:d3:2d:86:78:ac:f5:d4:c0:b2:11:be:1a: 7b:b5:e7:68:ad:47:81:dd:70:5f:d1:f8:87:ad:d0:75:d7:0d: 23:95:9d:75:f4:b1:d0:2e:6f:4f:c1:73:9f:e9:88:d9:e7:f7: 17:eb:2b:09:59:4a:9f:2d:f5:70:c6:38:70:83:68:4c:1f:22: 64:d7:a0:c7:b1:97:a7:33:9d:68:37:fb:d7:e0:bc:5c:94:58: 0b:a2:e1:5c:be:9c:60:ca:cf:8f:a9:64:41:95:28:2a:8c:d0: 7b:81:f4:49:e5:5a:93:5a:ff:87:f3:ed:f2:31:b1:62:80:81: 91:b7:9e:8f:cf:f4:ef:fa:32:47:2c:75:25:d6:3d:90:b6:aa: dc:b4:b4:94:3c:0d:f4:69:a0:1b:dc:6b:db:fc:ab:db:fb:d9: 41:16:68:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/pY6806ZHQLIkuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk Y2EyMWFkYTEtZDFjZC00M2YxLWIwZmUtZTE4YzRiYzNkMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQvjZICT2vIPob6AOeA3Ifom7278NZKjH3+f By8Hl5RS9pzd/bQ5V34msNpk1wJeKzvqokBwjGFyEdRBSi+HSgKa1QVmOQqOmLUR wVHsLLrRXBkzylmQUQTyIpDPsX9Zb1Gw/x3Wwo4xrP+JkMAGH82gSVxGF9Pev71v qobxT9l/SoICDoJ6oy76YVTBbV6AIKSXOo41/dUhvwvV+4paFMgnDf0qO7gSfsKg P51X47GCBH/TRZvqYlRFhuGuAJtHe3Xh4qFrHiWVymRVsgW3PkdHVRzKPY2rs8Rl 4lsmxORUr88uzmRKQFEnYOZeoqwNWmxHtYLPVqDu8FESvY3/1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGqogg4Gkq+5dJ3oDCF0AbzXWg2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvMDU5Mjg1YzQtY2VhOC0z MDM1LWFkMWYtNDJhMWQ2NjM1MTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwNAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK9Wyz/7Mqm4hrZvGRo5Zd4qVRrAEAmKEp7LFg9Lo4R2MdKqL+T7 0mzqfzcwikxfYUDILTCgWQZJdD41AHzpbDZIWt8dAa4IoQGS7OxVaQrkCKTaMdEw 4/ugs7Af/js/UNMthnis9dTAshG+Gnu152itR4HdcF/R+Iet0HXXDSOVnXX0sdAu b0/Bc5/piNnn9xfrKwlZSp8t9XDGOHCDaEwfImTXoMexl6cznWg3+9fgvFyUWAui 4Vy+nGDKz4+pZEGVKCqM0HuB9EnlWpNa/4fz7fIxsWKAgZG3no/P9O/6MkcsdSXW PZC2qty0tJQ8DfRpoBvca9v8q9v72UEWaPE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:31:54 2025 by rpki-client