$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/20c0875c-cb74-3d36-bcb8-3afb2785e0a0.roa File: 20c0875c-cb74-3d36-bcb8-3afb2785e0a0.roa (raw, json) Hash identifier: nGOIHpviL9SdiutgmN6bHMGpsPtT8NlernmBj9o2GTc= Subject key identifier: 21:3C:6D:BC:9F:C5:70:9B:8F:8B:E6:65:7E:99:F9:81:FB:6C:40:7D Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584BBFA5B90AE83373BB4DCF89C0 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/20c0875c-cb74-3d36-bcb8-3afb2785e0a0.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 6363 IP address blocks: 2606:9fc0:e018::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b9:0a:e8:33:73:bb:4d:cf:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=33be6b90-71bd-4d3e-8a87-e6eb1c465b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:98:d7:05:fe:33:38:ca:50:6f:d6:5e:c1: d3:f0:f5:a4:78:a6:21:14:24:50:53:d1:70:e8:e0: 7b:80:bc:52:ea:45:71:c7:84:e8:e6:49:90:88:86: 29:c6:13:90:ee:a8:d1:3d:f7:f9:32:6e:3c:84:d9: 9e:9d:7f:82:7d:5e:f8:d3:3d:1a:a0:6a:e0:6b:56: bc:8a:34:f5:fa:7b:13:06:14:ee:b6:0b:a4:b0:6c: 5f:2f:cb:94:9d:c4:fb:da:b6:dc:c8:83:65:47:06: 76:50:8e:1c:22:63:74:9d:b5:67:f7:41:57:1d:5f: 64:98:d5:b5:93:9f:0e:53:d8:3c:59:73:4f:a8:31: 25:c7:c1:f5:97:d4:7c:fb:cd:96:5d:70:33:93:2f: c6:04:4d:33:f4:71:83:85:7b:2e:ce:0f:c9:e7:6e: 76:60:50:2b:27:b7:76:3d:17:d0:d1:ac:b0:63:93: 49:a3:15:63:b1:b7:0c:88:4e:91:3c:1c:2f:10:01: 19:ee:c5:ce:6d:f2:db:b1:62:18:8a:46:9c:e8:83: 57:54:93:3a:3d:90:db:d9:24:ef:e5:17:3b:67:33: f4:a1:7c:e8:17:32:19:78:af:0b:1d:7b:a7:6e:e4: 11:6d:df:43:7b:98:75:87:29:30:1d:18:e7:34:09: 01:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3C:6D:BC:9F:C5:70:9B:8F:8B:E6:65:7E:99:F9:81:FB:6C:40:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/20c0875c-cb74-3d36-bcb8-3afb2785e0a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:e018::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b6:39:c2:6a:53:4e:06:f6:72:bd:5b:5c:4f:b3:70:12:cf: ea:45:cb:c6:8b:7c:01:81:20:89:88:e0:b6:ab:f3:c7:02:2b: e6:f1:7d:3d:94:23:1f:49:98:3a:c3:b2:6c:5c:e9:23:e1:3c: 37:9a:07:15:88:b7:a4:54:55:b7:bc:b7:f3:82:69:c8:d3:43: 71:e4:49:c7:d6:0e:5c:de:0f:8d:89:be:59:99:99:4b:d0:29: f0:87:51:de:b0:bb:4f:6c:d9:b7:9c:01:be:09:43:61:b1:a1: fc:f8:af:48:21:f7:7a:9d:cb:52:69:0d:7f:23:9c:7f:00:0e: db:c6:66:48:f2:07:95:f9:8d:26:94:53:09:65:0f:3f:08:e4: 50:d3:0f:3f:5d:6e:67:dc:1c:3f:31:45:b9:da:48:13:f2:00: 97:63:1a:e6:4b:88:d9:27:fb:04:d7:ad:9f:f2:4b:59:ad:14: 1a:15:2e:2f:6a:a8:32:f6:0b:ee:06:be:ee:63:90:10:12:0d: b8:42:26:2d:83:97:92:a1:f6:c0:e9:ba:a4:b2:31:e1:16:45: 7d:03:6e:a7:ac:e0:f7:bf:5a:ba:1f:58:ae:cf:e9:83:46:27: dc:cd:34:ef:68:df:31:bf:bf:b7:46:c9:5e:ff:8f:79:69:7b: 4e:51:4f:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/pbkK6DNzu03PicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MzNiZTZiOTAtNzFiZC00ZDNlLThhODctZTZlYjFjNDY1YjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu56Y1wX+MzjKUG/WXsHT8PWkeKYhFCRQU9Fw 6OB7gLxS6kVxx4To5kmQiIYpxhOQ7qjRPff5Mm48hNmenX+CfV740z0aoGrga1a8 ijT1+nsTBhTutguksGxfL8uUncT72rbcyINlRwZ2UI4cImN0nbVn90FXHV9kmNW1 k58OU9g8WXNPqDElx8H1l9R8+82WXXAzky/GBE0z9HGDhXsuzg/J5252YFArJ7d2 PRfQ0aywY5NJoxVjsbcMiE6RPBwvEAEZ7sXObfLbsWIYikac6INXVJM6PZDb2STv 5Rc7ZzP0oXzoFzIZeK8LHXunbuQRbd9De5h1hykwHRjnNAkBTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCE8bbyfxXCbj4vmZX6Z+YH7bEB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvMjBjMDg3NWMtY2I3NC0z ZDM2LWJjYjgtM2FmYjI3ODVlMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwOAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGW2OcJqU04G9nK9W1xPs3ASz+pFy8aLfAGBIImI4Lar88cCK+bx fT2UIx9JmDrDsmxc6SPhPDeaBxWIt6RUVbe8t/OCacjTQ3HkScfWDlzeD42JvlmZ mUvQKfCHUd6wu09s2becAb4JQ2Gxofz4r0gh93qdy1JpDX8jnH8ADtvGZkjyB5X5 jSaUUwllDz8I5FDTDz9dbmfcHD8xRbnaSBPyAJdjGuZLiNkn+wTXrZ/yS1mtFBoV Li9qqDL2C+4Gvu5jkBASDbhCJi2Dl5Kh9sDpuqSyMeEWRX0Dbqes4Pe/WrofWK7P 6YNGJ9zNNO9o3zG/v7dGyV7/j3lpe05RTx8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:08:45 2025 by rpki-client