$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/cf28d96d-39da-39e5-aade-7826c420cf3f.roa File: cf28d96d-39da-39e5-aade-7826c420cf3f.roa (raw, json) Hash identifier: QwRD4kAMFz/YUbhpj+u3q8MkgsKfyUYGAXLSOqsmSR4= Subject key identifier: 0F:FD:59:59:10:26:D9:5C:D4:F9:79:95:1F:4F:6F:A8:E9:9B:AB:AD Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584F03A845A30A4E68E9588B33A0 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/cf28d96d-39da-39e5-aade-7826c420cf3f.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 6363 IP address blocks: 2606:9fc0:d000::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:45:a3:0a:4e:68:e9:58:8b:33:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=3b8a53e7-0eca-4485-9ac0-ba9c6189d30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:15:bd:a4:ab:a5:ac:6f:d1:c5:a3:c8:8e:14: e6:1f:8b:ce:4c:cd:f7:17:58:ce:f5:e7:01:79:97: d1:95:39:e6:95:eb:d3:d9:71:d3:9d:13:d2:86:e0: dc:bd:6d:17:65:bd:70:5a:fc:25:93:dd:71:b2:3b: 49:02:b9:e2:b1:f3:41:77:14:b4:94:c3:8f:33:e8: 99:bd:2a:8b:62:b5:7f:ed:24:07:97:5f:7f:91:5c: 41:70:93:f8:2c:56:80:e5:af:f6:6e:94:21:88:a9: a2:08:a0:f3:c9:66:c4:ff:24:a5:c4:2e:9b:fa:dd: 45:df:e0:d9:ad:ba:03:5d:24:bb:7e:e3:a6:79:73: 7f:7c:7e:68:58:42:ad:42:db:7f:14:9e:b3:41:88: 10:5e:09:8e:45:48:7a:7e:97:90:72:bf:71:4d:23: c6:8d:18:6d:27:ac:a9:90:29:49:88:b1:7a:70:67: 35:d0:83:13:b5:db:dd:bd:e9:8c:c2:53:b1:df:27: f2:cf:9b:05:c7:4a:7f:30:c7:99:16:2d:fc:47:d2: 09:c3:a5:7b:45:72:1f:80:25:11:30:a9:5b:bf:74: 53:f1:31:a1:93:01:86:93:01:89:b7:14:bc:3a:21: 49:b3:6e:ec:10:f4:e2:bf:56:ba:ec:36:6f:f1:84: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FD:59:59:10:26:D9:5C:D4:F9:79:95:1F:4F:6F:A8:E9:9B:AB:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/cf28d96d-39da-39e5-aade-7826c420cf3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:d000::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:70:c1:cd:aa:36:7f:74:f7:95:69:fe:c5:a7:59:8a:ac:07: 06:88:39:33:36:87:c5:7f:49:2d:08:32:67:a1:c5:be:ad:7c: 8c:f8:96:40:97:e5:3e:81:eb:68:1a:f6:0b:e6:c8:22:43:6a: 33:27:b1:f1:4d:96:22:80:cb:41:2a:02:b6:d5:dc:38:f2:7b: e3:28:38:47:70:9c:4d:c7:f3:86:47:6f:bc:0f:b5:47:97:14: de:f7:70:fc:5c:cb:ae:a9:e5:1d:f3:7c:71:2d:26:99:bc:13: 41:20:d9:93:14:d5:a7:9c:b4:f1:6c:3e:8e:a1:96:b3:49:f0: 52:b9:4c:d1:1e:8f:c4:ad:6c:c6:f3:e1:cf:50:df:17:cb:79: 7c:cf:f6:e3:ea:68:49:80:44:0b:b9:30:06:aa:0a:be:a2:9a: 04:ac:43:be:72:90:6f:ab:f0:e4:11:fd:f7:0d:82:ae:04:c5: f4:73:f7:b3:ec:bc:e7:0a:65:ab:8d:1c:43:2e:fc:cc:22:24: d9:a0:26:ef:31:4f:00:ed:39:a1:1b:8d:94:4f:c1:df:f0:ff: 39:8d:0c:20:3f:0a:d9:05:f3:a7:c8:88:80:76:47:be:b5:31: 5e:e9:e4:c6:20:ab:cc:59:c1:54:12:cd:09:97:2f:41:1d:74: 8b:04:26:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8DqEWjCk5o6ViLM6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk M2I4YTUzZTctMGVjYS00NDg1LTlhYzAtYmE5YzYxODlkMzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxW9pKulrG/RxaPIjhTmH4vOTM33F1jO9ecB eZfRlTnmlevT2XHTnRPShuDcvW0XZb1wWvwlk91xsjtJArnisfNBdxS0lMOPM+iZ vSqLYrV/7SQHl19/kVxBcJP4LFaA5a/2bpQhiKmiCKDzyWbE/ySlxC6b+t1F3+DZ rboDXSS7fuOmeXN/fH5oWEKtQtt/FJ6zQYgQXgmORUh6fpeQcr9xTSPGjRhtJ6yp kClJiLF6cGc10IMTtdvdvemMwlOx3yfyz5sFx0p/MMeZFi38R9IJw6V7RXIfgCUR MKlbv3RT8TGhkwGGkwGJtxS8OiFJs27sEPTiv1a67DZv8YS5eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA/9WVkQJtlc1Pl5lR9Pb6jpm6utMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvY2YyOGQ5NmQtMzlkYS0z OWU1LWFhZGUtNzgyNmM0MjBjZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwNAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZwwc2qNn9095Vp/sWnWYqsBwaIOTM2h8V/SS0IMmehxb6tfIz4 lkCX5T6B62ga9gvmyCJDajMnsfFNliKAy0EqArbV3Djye+MoOEdwnE3H84ZHb7wP tUeXFN73cPxcy66p5R3zfHEtJpm8E0Eg2ZMU1aectPFsPo6hlrNJ8FK5TNEej8St bMbz4c9Q3xfLeXzP9uPqaEmARAu5MAaqCr6imgSsQ75ykG+r8OQR/fcNgq4ExfRz 97PsvOcKZauNHEMu/MwiJNmgJu8xTwDtOaEbjZRPwd/w/zmNDCA/CtkF86fIiIB2 R761MV7p5MYgq8xZwVQSzQmXL0EddIsEJns= -----END CERTIFICATE-----Generated at Sat Sep 26 12:45:44 2026 by rpki-client