$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d785e9a0-591b-365f-82a1-937ac3110e69.roa File: d785e9a0-591b-365f-82a1-937ac3110e69.roa (raw, json) Hash identifier: Ur6vENPYW6w8c2HcO3IS+6NqnDG90Y847TKLtjjL2U8= Subject key identifier: AC:3B:91:11:F0:77:BC:C0:19:90:E8:94:F9:3F:D0:D2:65:12:7A:62 Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584BBFA5A0A44A00E98BB98C7D00 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d785e9a0-591b-365f-82a1-937ac3110e69.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 6363 IP address blocks: 2606:9fc0:e010::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a0:a4:4a:00:e9:8b:b9:8c:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=0c6ec44c-0dbc-4567-8da1-70f9acd1f526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:98:16:38:de:dc:bf:b6:33:23:70:ae:57: e0:6e:65:40:26:a7:40:b4:8e:c8:fa:57:f6:96:6b: ea:02:f9:34:cb:2b:f0:f4:24:be:e3:14:34:ba:30: 7b:26:eb:2f:b6:6a:29:00:bf:a9:ef:48:2a:8d:dc: 78:31:83:00:95:f7:1e:d7:15:fd:be:ae:50:cb:db: 5c:60:51:62:ac:44:27:0c:a6:89:10:99:be:bf:28: 76:14:62:1d:c4:f1:d5:d7:ef:eb:eb:ee:ee:d3:06: 94:21:a6:e8:cd:ef:57:88:22:78:31:93:fb:0d:5c: 0f:ac:1a:3c:bc:1f:7e:6c:b9:32:18:07:82:cc:d8: bb:55:9f:f6:aa:62:1c:59:2f:6a:40:fd:30:6a:72: 37:c3:91:5a:4a:c1:1c:18:15:bc:bc:e9:81:0c:55: 25:8d:20:f5:5a:5d:94:41:9e:49:7d:2c:d3:82:ef: ad:99:e8:06:1e:75:f8:2d:d8:ad:9b:70:39:25:88: c2:df:9a:16:d2:e8:d1:e5:77:a8:d7:09:ba:c7:fb: 9e:a0:07:b2:34:11:53:ac:80:b0:86:f7:f7:6c:56: bd:be:17:3b:7c:f0:42:ed:ed:bc:40:75:90:ce:03: 37:d6:89:66:13:aa:5d:d4:cb:0a:90:3d:85:15:3f: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3B:91:11:F0:77:BC:C0:19:90:E8:94:F9:3F:D0:D2:65:12:7A:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d785e9a0-591b-365f-82a1-937ac3110e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:e010::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d9:fd:6a:cb:be:ae:f8:f9:05:9c:80:ea:ef:db:e1:02:17: a2:4d:9f:17:d9:fd:86:2e:95:11:13:6b:2c:ef:96:0d:a7:95: e4:e5:cb:c2:00:13:08:e9:78:a7:b0:cd:61:f7:df:57:ec:d2: 7d:f0:e6:aa:a9:c7:d5:f7:e4:9e:96:1a:8b:af:4f:83:b5:55: c6:12:99:84:7d:a4:e2:72:67:9b:40:af:0c:78:c0:e1:ab:c5: 34:12:be:07:b5:69:fa:4b:14:a8:24:77:b1:e2:b8:7b:fd:15: ad:f4:61:32:31:ed:84:93:f5:9f:5c:54:2a:3e:c0:22:77:ef: 94:07:26:30:d8:9a:91:a8:44:45:71:55:62:7d:c8:36:2a:e4: 33:da:c6:1b:15:1f:df:9c:a9:c8:54:48:98:87:bc:16:e5:40: be:20:01:c7:07:0d:a6:08:ad:7c:d9:df:16:a7:8c:bd:09:3f: 89:5c:58:5a:8d:c2:96:43:4f:b8:29:70:ee:1a:2a:3a:73:83: 34:1b:32:4c:8f:63:27:63:a2:f2:f3:79:42:36:3e:96:44:3e: c2:9a:75:10:c5:b1:9c:d6:b5:16:07:c1:0a:15:49:1a:81:f9: 2b:cf:cb:fb:e0:55:57:99:91:13:e8:fc:25:da:0e:63:f5:59: 5b:7f:72:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/paCkSgDpi7mMfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MGM2ZWM0NGMtMGRiYy00NTY3LThkYTEtNzBmOWFjZDFmNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiqYFjje3L+2MyNwrlfgbmVAJqdAtI7I+lf2 lmvqAvk0yyvw9CS+4xQ0ujB7JusvtmopAL+p70gqjdx4MYMAlfce1xX9vq5Qy9tc YFFirEQnDKaJEJm+vyh2FGIdxPHV1+/r6+7u0waUIaboze9XiCJ4MZP7DVwPrBo8 vB9+bLkyGAeCzNi7VZ/2qmIcWS9qQP0wanI3w5FaSsEcGBW8vOmBDFUljSD1Wl2U QZ5JfSzTgu+tmegGHnX4Lditm3A5JYjC35oW0ujR5Xeo1wm6x/ueoAeyNBFTrICw hvf3bFa9vhc7fPBC7e28QHWQzgM31olmE6pd1MsKkD2FFT+yNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKw7kRHwd7zAGZDolPk/0NJlEnpiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvZDc4NWU5YTAtNTkxYi0z NjVmLTgyYTEtOTM3YWMzMTEwZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwOAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIHZ/WrLvq74+QWcgOrv2+ECF6JNnxfZ/YYulRETayzvlg2nleTl y8IAEwjpeKewzWH331fs0n3w5qqpx9X35J6WGouvT4O1VcYSmYR9pOJyZ5tArwx4 wOGrxTQSvge1afpLFKgkd7HiuHv9Fa30YTIx7YST9Z9cVCo+wCJ375QHJjDYmpGo REVxVWJ9yDYq5DPaxhsVH9+cqchUSJiHvBblQL4gAccHDaYIrXzZ3xanjL0JP4lc WFqNwpZDT7gpcO4aKjpzgzQbMkyPYydjovLzeUI2PpZEPsKadRDFsZzWtRYHwQoV SRqB+SvPy/vgVVeZkRPo/CXaDmP1WVt/cpg= -----END CERTIFICATE-----Generated at Wed Nov 5 14:40:44 2025 by rpki-client