$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/5f43710f-dd9d-31cf-bc08-f8419f216386.roa File: 5f43710f-dd9d-31cf-bc08-f8419f216386.roa (raw, json) Hash identifier: F+bSs9E2iIbxUIDkIIRy3TQdBw079L2+o1cQD3LnFh0= Subject key identifier: 78:9D:C9:AB:48:77:E4:3E:89:A0:B3:B1:B0:CE:42:BB:44:29:5C:C4 Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584BBFA5BB6F8192308208913280 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/5f43710f-dd9d-31cf-bc08-f8419f216386.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 6363 IP address blocks: 2606:9fc0:e000::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:bb:6f:81:92:30:82:08:91:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=352f1ef9-a800-45c0-94ff-42b054c4524e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b1:ea:e4:07:02:e5:44:54:14:70:f4:1e:ec: 15:69:dc:f6:5f:e1:a7:3c:70:1c:e6:bd:37:95:4e: 56:5c:f6:1c:5a:06:81:a0:24:68:5b:16:cf:a8:fd: 81:f2:a1:d9:78:a5:34:42:3a:5c:fd:e1:80:0a:17: 70:8c:84:45:f0:f0:6b:ad:e1:3d:d2:09:67:bd:e3: f4:86:0f:95:5f:ac:89:5d:57:7c:71:47:f9:7b:4c: ba:5e:2d:19:7b:45:11:de:19:5f:d1:11:4d:d1:60: 77:0c:34:52:58:f1:da:d9:98:d2:3c:2a:ca:1f:2a: bb:44:2c:40:99:43:33:7b:7f:0c:cc:da:7d:ff:bb: c0:b7:10:db:c7:ab:ea:ee:cf:33:88:2a:5d:79:f4: 55:45:c3:02:b4:25:17:68:04:ce:19:37:fc:3b:b1: cb:ee:1b:5c:e2:0b:a3:98:c8:20:ac:a9:43:ce:7c: 98:6b:14:9b:06:37:bc:48:39:75:f8:e2:94:b0:f8: 41:4d:e9:2f:b5:fc:b0:63:58:a1:6c:a1:55:6c:3e: 69:a6:99:bd:8a:64:a2:f8:f7:87:a9:17:46:13:5c: 4f:b7:c0:14:20:86:b8:ab:a4:0e:e5:fe:a1:bc:cd: 0a:e9:66:3f:db:58:30:a5:bd:de:91:77:0e:19:42: ab:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9D:C9:AB:48:77:E4:3E:89:A0:B3:B1:B0:CE:42:BB:44:29:5C:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/5f43710f-dd9d-31cf-bc08-f8419f216386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:e000::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:2d:a1:88:68:2c:93:ab:32:0b:53:8a:13:a1:46:74:3b:e1: 4f:8e:1f:0c:61:42:ee:63:df:8a:0c:f5:8c:10:d5:c6:d6:43: cc:e0:3f:e3:37:53:1e:48:21:09:f6:cd:1e:af:33:fe:02:81: 91:74:e9:12:53:6d:03:69:c2:da:20:57:98:37:36:a9:94:9d: a5:89:b5:3c:1a:3c:e8:b7:bd:5b:4f:26:c2:5a:07:b1:f1:dc: eb:4b:a5:48:61:3d:3a:59:11:a6:7f:25:ed:0d:71:48:06:14: ca:fd:26:ef:c5:30:7d:21:06:04:7e:f4:5e:5c:3c:76:ef:68: bf:d3:a1:42:ba:4b:98:87:c3:3f:64:34:fc:5d:3d:57:e0:e8: 71:91:1c:6d:e2:59:f8:49:09:c6:f1:77:8e:5f:e1:3e:e8:9b: fe:cc:02:f6:6b:01:64:44:fd:65:1c:39:c4:0c:4c:dd:06:3e: 1d:6b:5d:47:66:d2:f8:51:69:63:97:81:3b:8d:d1:30:79:8e: d6:b3:ce:fc:18:f9:6f:97:5a:8d:2d:00:57:22:51:34:15:e5: 85:74:77:90:21:6d:56:c0:c1:46:ca:3b:37:b8:9c:e6:0d:00: 30:eb:e2:c7:b1:94:32:a5:e7:20:c8:17:8b:fc:1d:39:d9:69: 3d:b0:fb:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/pbtvgZIwggiRMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MzUyZjFlZjktYTgwMC00NWMwLTk0ZmYtNDJiMDU0YzQ1MjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7Hq5AcC5URUFHD0HuwVadz2X+GnPHAc5r03 lU5WXPYcWgaBoCRoWxbPqP2B8qHZeKU0Qjpc/eGAChdwjIRF8PBrreE90glnveP0 hg+VX6yJXVd8cUf5e0y6Xi0Ze0UR3hlf0RFN0WB3DDRSWPHa2ZjSPCrKHyq7RCxA mUMze38MzNp9/7vAtxDbx6vq7s8ziCpdefRVRcMCtCUXaATOGTf8O7HL7htc4guj mMggrKlDznyYaxSbBje8SDl1+OKUsPhBTekvtfywY1ihbKFVbD5pppm9imSi+PeH qRdGE1xPt8AUIIa4q6QO5f6hvM0K6WY/21gwpb3ekXcOGUKrBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHidyatId+Q+iaCzsbDOQrtEKVzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvNWY0MzcxMGYtZGQ5ZC0z MWNmLWJjMDgtZjg0MTlmMjE2Mzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwOAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGotoYhoLJOrMgtTihOhRnQ74U+OHwxhQu5j34oM9YwQ1cbWQ8zg P+M3Ux5IIQn2zR6vM/4CgZF06RJTbQNpwtogV5g3NqmUnaWJtTwaPOi3vVtPJsJa B7Hx3OtLpUhhPTpZEaZ/Je0NcUgGFMr9Ju/FMH0hBgR+9F5cPHbvaL/ToUK6S5iH wz9kNPxdPVfg6HGRHG3iWfhJCcbxd45f4T7om/7MAvZrAWRE/WUcOcQMTN0GPh1r XUdm0vhRaWOXgTuN0TB5jtazzvwY+W+XWo0tAFciUTQV5YV0d5AhbVbAwUbKOze4 nOYNADDr4sexlDKl5yDIF4v8HTnZaT2w+4s= -----END CERTIFICATE-----Generated at Wed Nov 5 03:31:24 2025 by rpki-client