$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/25488ff3-b1c6-327b-9281-366543f1e4e9.roa File: 25488ff3-b1c6-327b-9281-366543f1e4e9.roa (raw, json) Hash identifier: jxXnstRRo4MUHxMAU2D0ydbUmUtPQUvo0D6FWmvFKeo= Subject key identifier: 74:7C:F2:CC:A3:C9:7C:28:A8:F4:D4:6D:A8:DC:57:5B:12:98:2C:0B Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584CA061A39366B8E3F98B756720 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/25488ff3-b1c6-327b-9281-366543f1e4e9.roa Signing time: Sat 24 Jan 2026 02:00:31 +0000 ROA not before: Sat 24 Jan 2026 02:00:31 +0000 ROA not after: Fri 24 Apr 2026 01:00:31 +0000 asID: 6363 IP address blocks: 2606:9fc0:d00c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a0:61:a3:93:66:b8:e3:f9:8b:75:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Jan 24 02:00:31 2026 GMT Not After : Apr 24 01:00:31 2026 GMT Subject: CN=8db3f4bb-5b6f-436a-a183-75e7724f182c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:98:f2:7e:1d:df:35:c1:23:28:40:a0:81: 16:af:16:69:4f:28:fc:d1:5c:de:65:f2:f0:c2:41: 70:ec:c9:43:5b:6d:e8:21:1c:a3:8d:1b:61:ff:f5: 6c:20:ed:73:3f:15:3a:f3:68:c8:6b:c7:d4:eb:20: 38:ae:14:96:1d:f4:e2:3c:79:de:0b:ff:81:9f:34: 66:56:d7:f3:5b:5e:93:76:eb:d7:79:be:cc:ed:dd: 49:d6:50:41:20:2f:e6:65:c5:90:23:21:d9:25:01: 46:ab:93:25:f6:30:83:e7:d9:27:7f:2e:09:2d:b4: 93:43:c6:a7:6d:09:51:88:a6:d0:fb:0e:c4:b2:f5: cc:23:8d:21:13:12:16:1d:18:85:d5:41:2d:b3:53: bf:45:cd:69:82:c7:d7:ba:66:e4:a9:c0:c2:87:2b: bc:2d:5d:d0:85:65:fc:7d:1a:f7:41:b8:76:5b:29: 5e:f3:7c:95:54:59:9a:e2:d1:cf:50:f4:95:75:6a: 46:a8:c0:21:27:f2:a9:42:8d:3a:1e:37:2e:53:ca: 9c:32:f8:ff:8f:13:5c:70:29:c6:41:4c:d3:7c:25: cf:1d:68:49:92:c2:be:60:e2:76:5d:85:95:d5:3b: 57:ab:68:4a:ec:65:a0:1e:45:ee:65:db:4d:52:99: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7C:F2:CC:A3:C9:7C:28:A8:F4:D4:6D:A8:DC:57:5B:12:98:2C:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/25488ff3-b1c6-327b-9281-366543f1e4e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:d00c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:10:bd:a9:01:68:b7:37:e8:31:c9:80:a3:e3:71:5b:45:c8: 75:64:83:0a:54:ab:f3:0b:f7:08:a9:f4:06:8c:c5:12:0d:6a: b8:ce:39:aa:16:22:c3:5c:e7:94:ae:51:e2:32:a1:8f:f9:bd: 55:a9:ce:f7:92:b4:b7:3f:9e:61:e2:8f:1e:3a:e5:a3:72:aa: 5e:4c:74:35:bf:08:70:96:8d:81:54:dd:ec:28:1d:07:19:93: c9:d0:58:87:73:d5:e9:31:33:3f:7d:bf:e8:22:f4:a3:cb:9e: b3:dc:bc:29:13:a6:3f:f8:40:bf:bd:ac:2e:e7:df:cf:bd:c4: 26:75:b4:f0:35:fd:07:fe:e6:50:bf:1e:89:91:d0:23:42:22: 4f:6c:40:f0:cb:90:6c:1d:1e:6d:bd:3c:51:d9:bf:28:a7:9e: c1:83:49:bc:58:fc:10:a5:23:27:f7:76:fb:c3:4e:c6:69:e4: d6:84:21:04:19:f7:2e:25:3b:63:53:13:e8:f1:ce:3c:56:56: 31:61:6e:e7:0d:ff:6c:97:b8:70:3e:7e:ed:ca:41:8b:00:a4: 69:0e:4c:7c:87:4c:f0:92:6b:ac:71:7f:e3:b4:a1:8c:c1:db: f6:57:f5:f0:90:a9:a6:79:bf:af:a1:16:f2:c8:93:55:ed:73: c4:82:8f:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEygYaOTZrjj+Yt1ZyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI2MDEyNDAyMDAzMVoXDTI2MDQyNDAxMDAzMVowLzEtMCsGA1UEAxMk OGRiM2Y0YmItNWI2Zi00MzZhLWExODMtNzVlNzcyNGYxODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+SY8n4d3zXBIyhAoIEWrxZpTyj80VzeZfLw wkFw7MlDW23oIRyjjRth//VsIO1zPxU682jIa8fU6yA4rhSWHfTiPHneC/+BnzRm VtfzW16TduvXeb7M7d1J1lBBIC/mZcWQIyHZJQFGq5Ml9jCD59knfy4JLbSTQ8an bQlRiKbQ+w7EsvXMI40hExIWHRiF1UEts1O/Rc1pgsfXumbkqcDChyu8LV3QhWX8 fRr3Qbh2Wyle83yVVFma4tHPUPSVdWpGqMAhJ/KpQo06HjcuU8qcMvj/jxNccCnG QUzTfCXPHWhJksK+YOJ2XYWV1TtXq2hK7GWgHkXuZdtNUpkIxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHR88syjyXwoqPTUbajcV1sSmCwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvMjU0ODhmZjMtYjFjNi0z MjdiLTkyODEtMzY2NTQzZjFlNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwNAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADYQvakBaLc36DHJgKPjcVtFyHVkgwpUq/ML9wip9AaMxRINarjO OaoWIsNc55SuUeIyoY/5vVWpzveStLc/nmHijx465aNyql5MdDW/CHCWjYFU3ewo HQcZk8nQWIdz1ekxMz99v+gi9KPLnrPcvCkTpj/4QL+9rC7n38+9xCZ1tPA1/Qf+ 5lC/HomR0CNCIk9sQPDLkGwdHm29PFHZvyinnsGDSbxY/BClIyf3dvvDTsZp5NaE IQQZ9y4lO2NTE+jxzjxWVjFhbucN/2yXuHA+fu3KQYsApGkOTHyHTPCSa6xxf+O0 oYzB2/ZX9fCQqaZ5v6+hFvLIk1Xtc8SCj2A= -----END CERTIFICATE-----Generated at Mon Mar 2 00:46:16 2026 by rpki-client