$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/5899c0e5-6bb2-3aba-ad25-07062dcc6f6a.roa File: 5899c0e5-6bb2-3aba-ad25-07062dcc6f6a.roa (raw, json) Hash identifier: 640Nbuq2Loqii8LXwNlgFVEMNzgZC6jJdRU+8m3Z6VI= Subject key identifier: 36:50:D4:18:1A:71:D1:6D:7F:C5:3C:03:64:4F:7B:B0:C3:BA:04:70 Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584ADECBD4379BEB1379EBA13C40 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/5899c0e5-6bb2-3aba-ad25-07062dcc6f6a.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 6363 IP address blocks: 2606:9fc0:d012::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:d4:37:9b:eb:13:79:eb:a1:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=a44bfafc-b1e3-48cb-8457-3c95c5f3a574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:42:69:23:c4:76:1a:12:27:cb:4d:25:6d:63: 16:b7:86:14:39:53:c2:81:0b:b8:92:e0:6f:9f:41: 30:97:36:83:23:b6:85:2b:52:91:79:5f:ad:ec:40: 85:54:14:56:a3:09:04:f8:28:f3:ec:e4:89:66:a9: 24:16:95:ad:17:16:cb:ba:a1:57:89:94:8f:20:ae: d6:2c:22:00:f5:14:b8:79:34:47:05:63:70:b7:a5: 40:a7:a6:59:67:57:06:a8:a5:31:fa:1b:79:eb:46: f1:91:51:96:9c:82:a8:bc:c5:ed:b0:44:68:6c:39: 6f:bc:6e:b5:39:0e:74:f8:ac:e5:d2:5b:ff:b1:93: 46:8e:97:af:94:5e:fd:ad:43:35:37:8c:d1:9d:01: cb:5e:25:d9:68:1b:55:41:c9:ad:da:25:49:f7:78: b0:c7:1f:55:69:95:db:97:70:8f:2c:97:57:86:74: 77:14:70:42:f3:1d:a2:16:68:8e:20:6a:05:e7:27: ce:55:84:e1:ef:43:38:15:4a:06:89:ef:b8:b6:6a: 26:78:b7:ef:7b:ce:6c:e6:05:11:65:65:17:1f:4a: 85:85:45:58:3c:0a:73:ed:1e:7d:8f:22:8a:4e:a5: 1a:87:7c:04:99:79:e1:6f:52:ba:5d:b3:e2:f2:3e: 27:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:50:D4:18:1A:71:D1:6D:7F:C5:3C:03:64:4F:7B:B0:C3:BA:04:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/5899c0e5-6bb2-3aba-ad25-07062dcc6f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:d012::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:41:db:2f:cf:3c:3c:0d:e9:2d:5b:51:9e:f5:f9:cd:bb:37: 1e:b3:04:6b:ea:c8:0f:33:36:70:fd:8e:69:e7:1c:a7:6d:fd: 4a:49:5a:92:7b:64:f4:cf:94:42:50:54:71:79:b3:b0:d2:96: 23:cc:a9:ec:f7:94:6e:e9:a0:93:a0:63:7c:39:a8:41:72:d8: dc:ae:74:53:61:68:37:df:f3:77:d4:e7:9c:cb:85:ba:aa:db: 35:28:2a:81:da:60:f9:66:4f:42:b8:0a:af:e1:88:43:a7:b5: 13:9b:96:30:ff:7b:3d:67:28:a7:31:84:b8:53:e5:bd:d2:43: 3f:4b:f3:2a:93:67:9c:8a:56:5b:fc:c8:7c:02:51:4e:97:06: ff:96:91:c6:fb:3e:73:fa:f7:b8:20:1b:a3:24:6c:8d:3b:df: 2a:73:a0:ba:53:39:d5:35:61:ed:18:01:56:50:2b:a6:18:18: d0:f6:32:b1:db:f8:5a:2f:79:e0:e6:d6:45:a1:9b:2f:00:a3: 46:8a:53:f6:b0:be:4a:16:19:7b:6f:8b:78:39:4c:66:94:81: 0c:16:3b:cb:2d:9a:7b:ac:da:c6:1c:fa:a2:e7:91:45:28:01: 64:a7:0c:8e:14:bd:60:c2:f0:5c:ad:d5:8a:40:58:96:49:9e: ca:11:00:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErey9Q3m+sTeeuhPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YTQ0YmZhZmMtYjFlMy00OGNiLTg0NTctM2M5NWM1ZjNhNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EJpI8R2GhIny00lbWMWt4YUOVPCgQu4kuBv n0EwlzaDI7aFK1KReV+t7ECFVBRWowkE+Cjz7OSJZqkkFpWtFxbLuqFXiZSPIK7W LCIA9RS4eTRHBWNwt6VAp6ZZZ1cGqKUx+ht560bxkVGWnIKovMXtsERobDlvvG61 OQ50+Kzl0lv/sZNGjpevlF79rUM1N4zRnQHLXiXZaBtVQcmt2iVJ93iwxx9VaZXb l3CPLJdXhnR3FHBC8x2iFmiOIGoF5yfOVYTh70M4FUoGie+4tmomeLfve85s5gUR ZWUXH0qFhUVYPApz7R59jyKKTqUah3wEmXnhb1K6XbPi8j4nRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDZQ1BgacdFtf8U8A2RPe7DDugRwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvNTg5OWMwZTUtNmJiMi0z YWJhLWFkMjUtMDcwNjJkY2M2ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwNAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADpB2y/PPDwN6S1bUZ71+c27Nx6zBGvqyA8zNnD9jmnnHKdt/UpJ WpJ7ZPTPlEJQVHF5s7DSliPMqez3lG7poJOgY3w5qEFy2NyudFNhaDff83fU55zL hbqq2zUoKoHaYPlmT0K4Cq/hiEOntRObljD/ez1nKKcxhLhT5b3SQz9L8yqTZ5yK Vlv8yHwCUU6XBv+Wkcb7PnP697ggG6MkbI073ypzoLpTOdU1Ye0YAVZQK6YYGND2 MrHb+FoveeDm1kWhmy8Ao0aKU/awvkoWGXtvi3g5TGaUgQwWO8stmnus2sYc+qLn kUUoAWSnDI4UvWDC8Fyt1YpAWJZJnsoRAHQ= -----END CERTIFICATE-----Generated at Sat Aug 23 18:08:33 2025 by rpki-client