$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/25488ff3-b1c6-327b-9281-366543f1e4e9.roa File: 25488ff3-b1c6-327b-9281-366543f1e4e9.roa (raw, json) Hash identifier: 3+MkiM8FX2ssK/cCw5adEhyxy5Puu5uAJT/0ZkXzlWY= Subject key identifier: 68:AE:FD:01:52:5A:BD:9B:37:64:E8:FD:84:D9:11:90:92:4C:56:ED Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584F03A7849DF9E0E0A0758476B0 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/25488ff3-b1c6-327b-9281-366543f1e4e9.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 6363 IP address blocks: 2606:9fc0:d00c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:84:9d:f9:e0:e0:a0:75:84:76:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=87e4bb0b-d77c-41eb-b5dc-ccfb1b91a85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:d6:2d:ee:40:ab:2a:87:6a:2d:7d:e4:b7: 6c:65:89:f5:79:59:e8:0d:56:b2:4f:a5:aa:db:a9: 9d:6b:e3:8a:59:03:d5:8d:67:da:c3:6d:cf:6e:70: c3:5b:c8:c1:6c:a5:83:eb:86:dc:e0:d6:79:55:fe: c6:ac:60:9c:9a:e8:87:83:dc:51:ca:f7:39:ea:bd: 5f:f2:cc:62:9f:05:cc:98:e7:81:9c:a8:2f:96:b9: f1:fa:fb:97:45:a0:9b:91:e8:59:76:34:73:95:ac: 1f:7b:25:df:73:a0:b3:bf:d4:00:ba:18:c0:e4:1a: 9b:59:b5:e9:7a:2d:a0:82:e0:60:e7:6d:e2:68:9f: 37:73:f9:37:d3:c1:07:45:9b:28:7b:31:39:12:3f: de:42:8b:a0:53:79:d5:95:bb:59:49:b8:e1:2d:91: e1:0d:f6:c0:f4:93:ab:26:91:ac:f2:03:ba:74:34: 3a:a5:2b:e2:79:79:74:2a:be:0f:83:3c:80:98:c2: 46:e7:ef:1f:6e:1a:d4:17:11:4e:9e:47:8c:80:72: bc:aa:2d:5f:db:f7:a2:d2:ed:da:97:33:f6:8d:36: f8:ef:0f:92:ab:3b:2b:ab:36:5b:d6:60:65:66:fd: d9:14:23:fe:39:dd:48:6f:1d:8c:91:0f:5f:9a:51: d5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AE:FD:01:52:5A:BD:9B:37:64:E8:FD:84:D9:11:90:92:4C:56:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/25488ff3-b1c6-327b-9281-366543f1e4e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:d00c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f5:96:aa:99:98:43:39:ae:e7:40:1b:a9:c8:1f:f8:90:5c: 4c:86:be:c2:31:a2:74:e7:11:01:c4:11:1a:e3:c9:25:0f:2c: 5f:75:62:8d:4f:9a:93:d4:61:ba:fd:a4:9a:96:f8:1a:ad:88: b0:a4:94:4e:1e:3a:77:ec:61:59:66:6a:b1:55:cc:f3:9c:fc: 29:3b:d9:86:08:4e:aa:89:cf:9e:08:60:f9:ed:c5:c7:83:bb: ad:14:75:af:8d:a1:8d:f1:08:8f:9a:35:cd:e0:af:f2:19:be: 0c:04:8d:43:c6:1f:b1:80:c8:96:97:2b:35:f0:68:7c:da:01: 55:dc:d9:7b:ac:6b:f9:58:21:ce:e6:b6:92:74:89:d0:65:a6: 4f:ef:78:f3:ef:9a:a4:1b:6e:89:ae:b0:dd:83:3d:08:e2:63: 64:d8:7b:82:bf:31:c6:b8:4a:9f:3e:9a:92:76:13:a2:24:80: 98:83:6f:b3:0c:90:b9:b8:cb:60:16:a7:54:3d:06:62:69:5a: 37:12:36:6d:23:1a:ed:50:e5:f6:13:4c:17:fb:2f:1f:2c:d4: 4a:25:2c:e9:09:1e:a4:70:49:ac:4d:93:68:3b:d4:2f:5a:aa: a7:f0:d1:2d:c2:5f:e0:01:2e:51:f3:b6:89:6c:e3:fc:8a:20: cc:65:24:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Dp4Sd+eDgoHWEdrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ODdlNGJiMGItZDc3Yy00MWViLWI1ZGMtY2NmYjFiOTFhODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYnWLe5AqyqHai195LdsZYn1eVnoDVayT6Wq 26mda+OKWQPVjWfaw23PbnDDW8jBbKWD64bc4NZ5Vf7GrGCcmuiHg9xRyvc56r1f 8sxinwXMmOeBnKgvlrnx+vuXRaCbkehZdjRzlawfeyXfc6Czv9QAuhjA5BqbWbXp ei2gguBg523iaJ83c/k308EHRZsoezE5Ej/eQougU3nVlbtZSbjhLZHhDfbA9JOr JpGs8gO6dDQ6pSvieXl0Kr4PgzyAmMJG5+8fbhrUFxFOnkeMgHK8qi1f2/ei0u3a lzP2jTb47w+SqzsrqzZb1mBlZv3ZFCP+Od1Ibx2MkQ9fmlHVpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGiu/QFSWr2bN2To/YTZEZCSTFbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvMjU0ODhmZjMtYjFjNi0z MjdiLTkyODEtMzY2NTQzZjFlNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwNAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJr1lqqZmEM5rudAG6nIH/iQXEyGvsIxonTnEQHEERrjySUPLF91 Yo1PmpPUYbr9pJqW+BqtiLCklE4eOnfsYVlmarFVzPOc/Ck72YYITqqJz54IYPnt xceDu60Uda+NoY3xCI+aNc3gr/IZvgwEjUPGH7GAyJaXKzXwaHzaAVXc2Xusa/lY Ic7mtpJ0idBlpk/vePPvmqQbbomusN2DPQjiY2TYe4K/Mca4Sp8+mpJ2E6IkgJiD b7MMkLm4y2AWp1Q9BmJpWjcSNm0jGu1Q5fYTTBf7Lx8s1EolLOkJHqRwSaxNk2g7 1C9aqqfw0S3CX+ABLlHztols4/yKIMxlJEY= -----END CERTIFICATE-----Generated at Sat Sep 26 15:08:03 2026 by rpki-client