$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/5899c0e5-6bb2-3aba-ad25-07062dcc6f6a.roa File: 5899c0e5-6bb2-3aba-ad25-07062dcc6f6a.roa (raw, json) Hash identifier: tzRaZwrZEaf0Ow4c37kdMc1mPWxLR2+2h0t6IBM7Fo0= Subject key identifier: 9A:E8:5E:D0:A7:D6:93:A9:E2:50:E4:6B:BD:42:5E:18:56:75:16:7D Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584BBFA5A0B62818E6C840E48C40 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/5899c0e5-6bb2-3aba-ad25-07062dcc6f6a.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 6363 IP address blocks: 2606:9fc0:d012::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a0:b6:28:18:e6:c8:40:e4:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=0b6a542d-f6aa-489f-a8a6-7fcf6251e47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:25:a4:20:25:4a:a1:e9:0d:be:8e:4e:bb:df: f3:42:31:a0:c4:16:a5:7f:38:34:05:eb:39:0d:9c: 5a:8e:ad:2b:e3:1e:6d:01:f8:21:e6:3d:2c:d8:f4: 8f:dc:0a:b5:0c:10:a1:5a:b0:78:03:04:16:2c:e5: 1f:83:de:72:02:ac:fe:3c:4a:f9:5e:02:61:07:f3: ab:1a:4e:2a:44:2f:c8:f5:ed:9e:4a:08:1e:94:71: 13:ee:66:72:d9:0a:ea:bc:a8:d1:8b:c5:31:67:cf: 8a:66:70:b9:42:df:95:fa:53:85:5f:cf:0d:aa:5a: ae:e0:c0:ad:a3:e4:67:be:2b:b3:77:42:50:82:db: 87:3d:a5:59:7a:61:a6:81:0a:f0:b5:85:58:98:32: 58:83:10:bf:d8:20:6a:66:70:6d:0e:76:17:6d:f4: 22:cd:ed:ad:8e:8a:4d:17:f6:76:12:fd:6f:da:2c: 7f:29:35:90:ac:8d:a2:32:23:e1:c2:21:b7:51:bd: 22:9a:7c:1a:b1:5e:a9:6d:82:49:de:b3:26:53:d2: 3d:ba:05:72:fc:d2:cd:88:ee:22:eb:d5:39:43:86: 3e:4f:e5:3e:12:2f:2c:0a:90:1b:1e:de:10:58:da: 05:a6:13:23:96:a7:00:1f:20:a1:e3:01:bf:51:1e: a6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E8:5E:D0:A7:D6:93:A9:E2:50:E4:6B:BD:42:5E:18:56:75:16:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/5899c0e5-6bb2-3aba-ad25-07062dcc6f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:d012::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:48:35:ec:c6:35:92:2e:a8:3e:2c:62:07:89:6c:d6:0b:11: 62:c2:68:29:d7:4c:21:da:77:70:97:b2:4f:66:76:56:f8:c2: a7:41:0a:06:94:6f:00:c4:b6:6a:47:0a:28:45:19:91:23:78: ca:bf:24:49:3e:a0:27:22:f9:a0:72:c3:50:01:72:92:86:bf: 6b:41:4d:89:1f:db:b4:ef:a4:ec:9d:45:72:c4:58:51:45:11: 73:58:df:1f:de:39:b3:c7:c9:74:66:a9:21:d0:59:26:40:64: 95:86:39:ad:f0:2f:c1:18:bf:d3:b2:ce:0c:82:64:14:bf:12: ca:56:03:9d:90:4f:11:cb:98:24:82:ed:96:6b:b3:d4:42:d7: 48:28:86:e5:f4:4f:73:f8:9b:86:3a:2e:a0:28:b4:e8:0b:93: 3c:0f:91:85:29:40:86:16:c0:73:53:e8:f6:3b:a0:6f:a3:8a: 93:80:dd:38:08:5f:a1:f8:01:6f:b9:4a:9e:df:34:f1:6a:85: af:25:43:db:09:43:40:be:ec:47:dc:4e:c7:5d:b9:82:ee:14: bf:60:5f:43:30:8f:35:e7:d6:7c:fd:d8:52:6d:ac:a2:f5:5e: fe:14:f1:d1:35:3d:c0:90:5f:77:42:55:d6:93:0b:8f:06:49: f6:3e:9a:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/paC2KBjmyEDkjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MGI2YTU0MmQtZjZhYS00ODlmLWE4YTYtN2ZjZjYyNTFlNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyWkICVKoekNvo5Ou9/zQjGgxBalfzg0Bes5 DZxajq0r4x5tAfgh5j0s2PSP3Aq1DBChWrB4AwQWLOUfg95yAqz+PEr5XgJhB/Or Gk4qRC/I9e2eSggelHET7mZy2QrqvKjRi8UxZ8+KZnC5Qt+V+lOFX88Nqlqu4MCt o+Rnviuzd0JQgtuHPaVZemGmgQrwtYVYmDJYgxC/2CBqZnBtDnYXbfQize2tjopN F/Z2Ev1v2ix/KTWQrI2iMiPhwiG3Ub0imnwasV6pbYJJ3rMmU9I9ugVy/NLNiO4i 69U5Q4Y+T+U+Ei8sCpAbHt4QWNoFphMjlqcAHyCh4wG/UR6mrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJroXtCn1pOp4lDka71CXhhWdRZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvNTg5OWMwZTUtNmJiMi0z YWJhLWFkMjUtMDcwNjJkY2M2ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwNAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAhINezGNZIuqD4sYgeJbNYLEWLCaCnXTCHad3CXsk9mdlb4wqdB CgaUbwDEtmpHCihFGZEjeMq/JEk+oCci+aByw1ABcpKGv2tBTYkf27TvpOydRXLE WFFFEXNY3x/eObPHyXRmqSHQWSZAZJWGOa3wL8EYv9OyzgyCZBS/EspWA52QTxHL mCSC7ZZrs9RC10gohuX0T3P4m4Y6LqAotOgLkzwPkYUpQIYWwHNT6PY7oG+jipOA 3TgIX6H4AW+5Sp7fNPFqha8lQ9sJQ0C+7EfcTsdduYLuFL9gX0MwjzXn1nz92FJt rKL1Xv4U8dE1PcCQX3dCVdaTC48GSfY+mj0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:00:54 2025 by rpki-client