$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d874ca63-4897-3805-abe8-c26742646e9a.roa File: d874ca63-4897-3805-abe8-c26742646e9a.roa (raw, json) Hash identifier: w3VIxI/AtfhQW9NuiARo0wBoPSUmAQ6Poeq2HqOvL/U= Subject key identifier: 64:65:09:BE:96:38:B6:B2:D5:16:77:B4:B8:E2:9E:10:14:EF:70:34 Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584BBFA58FFCA8BC53A01ED8B080 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d874ca63-4897-3805-abe8-c26742646e9a.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 6363 IP address blocks: 2606:9fc0:e00a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:8f:fc:a8:bc:53:a0:1e:d8:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=1f479422-5548-49f1-89da-23fe8a7f0375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:72:6e:5b:d7:ad:ba:8e:74:12:63:27:aa: 4c:2a:61:7b:65:dc:2e:95:0f:49:39:d6:f0:d3:ff: 62:0f:a2:5d:bb:53:c6:4d:71:39:c0:82:0c:ac:db: 79:d1:2e:9a:60:bf:ec:7d:e5:57:b9:83:62:4a:57: 44:46:f2:cd:50:c3:1d:dd:55:37:cd:e7:25:51:6a: 7d:c9:da:f4:d3:ee:e1:ea:21:fa:6a:8b:9c:57:ec: 88:55:87:0f:c0:ad:aa:e8:00:fb:76:79:ef:f7:04: 8e:28:9e:b3:c6:30:97:59:c1:4c:76:81:f8:14:16: cc:2e:4b:01:66:be:b7:f8:79:34:22:6c:95:6f:fb: bc:4c:a0:3d:c4:14:ca:32:d2:cd:62:91:ad:04:b6: 7a:2c:81:62:45:97:de:30:d7:e1:d8:73:62:f1:94: 49:2c:26:93:d5:3c:99:79:08:b9:25:75:8e:05:23: 5a:ef:d7:3f:3d:fb:8d:5a:86:1a:02:85:96:93:43: a1:68:77:a6:28:0e:83:a1:f8:40:6b:56:ca:5a:56: bd:f0:e6:8a:55:a7:ad:a3:e0:ba:ab:64:bd:0b:46: c0:5e:47:3c:31:f1:6d:08:61:f3:4d:e3:7e:0b:c6: 69:c6:e5:92:3d:e9:4f:e3:80:36:07:ad:d3:d2:48: 18:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:65:09:BE:96:38:B6:B2:D5:16:77:B4:B8:E2:9E:10:14:EF:70:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d874ca63-4897-3805-abe8-c26742646e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:e00a::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:16:a8:fb:13:ea:d9:45:26:be:1e:d2:56:48:7a:70:82:a0: 90:0b:c7:9f:6f:da:6e:8a:26:5c:3b:77:26:f6:eb:14:62:a9: d0:3b:d9:2a:7f:3b:de:4e:3e:88:e4:15:10:da:b5:80:ba:a6: 62:4a:21:ff:7c:a9:8a:41:c0:1b:a0:44:39:e8:90:3b:ed:9c: 11:2a:7e:1e:b5:b3:17:af:34:e4:94:66:20:52:f7:4c:74:8c: 72:f6:53:e5:89:a0:72:20:bc:60:1e:0b:44:20:98:1f:2c:3e: f2:34:de:32:3f:8a:08:7c:bd:c0:54:e6:45:cc:e2:5c:8f:36: 97:81:e8:3c:21:2e:04:5a:b7:5a:be:60:cd:25:a5:d2:a6:9d: 3b:61:e1:f9:dd:8b:cf:c9:0f:32:d6:cb:93:50:e2:98:ce:3a: 48:66:4f:1c:93:26:cc:5c:05:85:e8:d0:95:d3:86:ed:87:e3: 14:b1:04:f8:6c:d3:6e:44:96:af:2b:b7:f5:4a:e5:6f:a2:8d: a9:91:f4:41:85:ff:41:cf:b8:e4:06:b3:16:c4:1b:f5:5b:41: 66:d5:1d:16:04:8d:b2:8c:ce:17:27:43:b4:61:94:e4:53:31: ae:24:55:2c:4f:b6:05:24:4d:e9:f9:31:49:7b:28:9a:19:5e: e7:8a:69:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/pY/8qLxToB7YsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MWY0Nzk0MjItNTU0OC00OWYxLTg5ZGEtMjNmZThhN2YwMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQRyblvXrbqOdBJjJ6pMKmF7ZdwulQ9JOdbw 0/9iD6Jdu1PGTXE5wIIMrNt50S6aYL/sfeVXuYNiSldERvLNUMMd3VU3zeclUWp9 ydr00+7h6iH6aoucV+yIVYcPwK2q6AD7dnnv9wSOKJ6zxjCXWcFMdoH4FBbMLksB Zr63+Hk0ImyVb/u8TKA9xBTKMtLNYpGtBLZ6LIFiRZfeMNfh2HNi8ZRJLCaT1TyZ eQi5JXWOBSNa79c/PfuNWoYaAoWWk0OhaHemKA6DofhAa1bKWla98OaKVaeto+C6 q2S9C0bAXkc8MfFtCGHzTeN+C8ZpxuWSPelP44A2B63T0kgYIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGRlCb6WOLay1RZ3tLjinhAU73A0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvZDg3NGNhNjMtNDg5Ny0z ODA1LWFiZTgtYzI2NzQyNjQ2ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwOAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFwWqPsT6tlFJr4e0lZIenCCoJALx59v2m6KJlw7dyb26xRiqdA7 2Sp/O95OPojkFRDatYC6pmJKIf98qYpBwBugRDnokDvtnBEqfh61sxevNOSUZiBS 90x0jHL2U+WJoHIgvGAeC0QgmB8sPvI03jI/igh8vcBU5kXM4lyPNpeB6DwhLgRa t1q+YM0lpdKmnTth4fndi8/JDzLWy5NQ4pjOOkhmTxyTJsxcBYXo0JXThu2H4xSx BPhs025Elq8rt/VK5W+ijamR9EGF/0HPuOQGsxbEG/VbQWbVHRYEjbKMzhcnQ7Rh lORTMa4kVSxPtgUkTen5MUl7KJoZXueKaSw= -----END CERTIFICATE-----Generated at Wed Nov 5 03:59:10 2025 by rpki-client