$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/470d3291-33be-34b8-9ed3-d7a03cf6996c.roa File: 470d3291-33be-34b8-9ed3-d7a03cf6996c.roa (raw, json) Hash identifier: 83I1VgiDFpqxNrsQc0DyPEjYmX+u1Nq23cS6RjdLLp0= Subject key identifier: AA:43:DE:DC:FB:38:17:C1:8E:D8:DA:CE:91:64:65:F8:68:2A:70:E3 Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584BBFA5B98939100224B7D3F480 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/470d3291-33be-34b8-9ed3-d7a03cf6996c.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 6363 IP address blocks: 2606:9fc0:f206::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b9:89:39:10:02:24:b7:d3:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=7a0b9c16-fba7-4a07-9a4c-a3ceae4d0fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6a:0c:66:ad:58:38:63:94:28:b8:2c:85:5c: e9:0d:79:78:47:29:eb:89:f7:bb:ef:7e:be:2a:9c: 74:53:8e:77:f2:36:06:d1:a4:75:5d:94:43:96:3f: ed:f9:e6:93:eb:5f:40:d9:0b:e2:8d:2c:18:71:8a: 28:b1:95:44:65:f9:8b:da:c2:50:14:28:04:c9:3d: 2e:e3:dc:7c:04:a2:14:0d:aa:df:d5:01:f9:ac:be: a9:c3:65:1e:17:75:01:fe:cc:f0:79:b9:f2:a6:a2: ed:9c:fa:c6:86:40:c3:33:d3:34:ba:31:00:ff:7b: d0:b0:ed:4d:1c:3b:fa:f3:c3:b6:d4:ba:90:25:e9: 81:bd:c3:a3:7b:36:dc:cc:92:35:23:b4:d0:19:3a: 71:96:70:15:14:ba:2c:21:12:54:da:29:c1:2b:98: ce:41:05:5c:c6:52:fa:f4:8a:3b:21:96:29:35:5b: ba:02:18:89:24:29:b2:14:a5:1f:d4:e2:fc:87:1d: e5:8d:b2:c2:50:d9:75:89:10:51:f3:3b:14:a5:3f: 93:10:5f:6d:88:7a:62:48:3d:0a:0c:72:5a:16:08: a2:17:ac:23:42:01:fb:75:d0:c8:05:23:8b:ca:91: 51:af:4b:d7:7c:fc:40:a5:3b:5f:af:5a:a9:9a:2a: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:43:DE:DC:FB:38:17:C1:8E:D8:DA:CE:91:64:65:F8:68:2A:70:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/470d3291-33be-34b8-9ed3-d7a03cf6996c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:f206::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:07:ec:5b:91:81:1e:25:06:ed:78:0e:0e:a9:13:d6:fb:3f: 58:94:29:0e:03:f5:9e:f5:45:de:f8:3c:3f:df:7e:6d:1a:8c: 79:d9:4b:2f:07:91:6b:7b:97:be:fb:3f:a7:df:fd:44:8f:dd: 49:16:42:00:c8:f9:49:3f:da:b8:ea:38:c7:57:b5:a8:77:a4: f0:b0:98:f8:f7:b7:a7:6c:0d:31:90:d6:f9:34:ef:28:31:17: 0e:c3:88:a3:a1:32:45:b8:77:ef:48:26:f9:fe:e1:19:7c:be: b8:da:4c:95:7b:6a:17:f4:b7:7a:3e:bf:be:46:98:63:98:78: 98:7e:8f:a3:0b:23:cb:d8:8a:70:5d:e6:74:96:ca:2c:62:48: e0:1d:a0:a5:e7:17:42:1c:aa:0e:c3:02:a6:92:8e:be:42:fb: df:a1:08:c0:d5:aa:db:82:bf:20:93:f8:10:73:c1:9d:07:5d: f6:cf:cd:74:5d:e0:3c:42:f4:e7:de:22:2d:c7:d4:a7:64:fb: b3:86:3a:48:14:c9:a2:4e:72:32:64:2e:39:af:0b:ca:f0:f2: 51:59:03:6a:eb:6c:58:a2:57:c1:2a:f7:bc:73:c1:6a:1c:57: e5:02:48:42:8c:85:ff:53:a7:8c:8d:51:f7:b9:af:12:11:5a: 98:7e:18:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/pbmJORACJLfT9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk N2EwYjljMTYtZmJhNy00YTA3LTlhNGMtYTNjZWFlNGQwZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGoMZq1YOGOUKLgshVzpDXl4Rynrife7736+ Kpx0U4538jYG0aR1XZRDlj/t+eaT619A2QvijSwYcYoosZVEZfmL2sJQFCgEyT0u 49x8BKIUDarf1QH5rL6pw2UeF3UB/szwebnypqLtnPrGhkDDM9M0ujEA/3vQsO1N HDv688O21LqQJemBvcOjezbczJI1I7TQGTpxlnAVFLosIRJU2inBK5jOQQVcxlL6 9Io7IZYpNVu6AhiJJCmyFKUf1OL8hx3ljbLCUNl1iRBR8zsUpT+TEF9tiHpiSD0K DHJaFgiiF6wjQgH7ddDIBSOLypFRr0vXfPxApTtfr1qpmirEqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKpD3tz7OBfBjtjazpFkZfhoKnDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvNDcwZDMyOTEtMzNiZS0z NGI4LTllZDMtZDdhMDNjZjY5OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwPIG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFsH7FuRgR4lBu14Dg6pE9b7P1iUKQ4D9Z71Rd74PD/ffm0ajHnZ Sy8HkWt7l777P6ff/USP3UkWQgDI+Uk/2rjqOMdXtah3pPCwmPj3t6dsDTGQ1vk0 7ygxFw7DiKOhMkW4d+9IJvn+4Rl8vrjaTJV7ahf0t3o+v75GmGOYeJh+j6MLI8vY inBd5nSWyixiSOAdoKXnF0Icqg7DAqaSjr5C+9+hCMDVqtuCvyCT+BBzwZ0HXfbP zXRd4DxC9OfeIi3H1Kdk+7OGOkgUyaJOcjJkLjmvC8rw8lFZA2rrbFiiV8Eq97xz wWocV+UCSEKMhf9Tp4yNUfe5rxIRWph+GH8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:54:32 2025 by rpki-client