$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/624ef82d-1620-301b-8b81-05f5db9f4162.roa File: 624ef82d-1620-301b-8b81-05f5db9f4162.roa (raw, json) Hash identifier: ZAxYarafbV4yOQPqnWb/xT0AxuYUv155Jq+DTT6qDgs= Subject key identifier: D8:5D:56:03:70:2E:7D:B0:21:92:E1:48:5E:93:14:6C:B1:79:5D:0B Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584F03A7721721073FFDD90F2E18 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/624ef82d-1620-301b-8b81-05f5db9f4162.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 6363 IP address blocks: 2606:9fc0:d010::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:72:17:21:07:3f:fd:d9:0f:2e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=1c018eca-4f70-4d10-acd2-3b05233bfca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:88:3f:81:d6:1d:58:40:46:31:a1:7c:e6:b1: 9d:ca:e1:1a:cf:50:c8:66:2c:66:63:5f:51:ab:82: 59:68:67:63:f9:92:1d:ab:b8:90:95:39:56:12:63: 04:19:65:0a:b8:82:fc:48:65:c3:1b:ec:60:e9:5a: 4f:3f:3a:f3:4b:7c:a3:4b:20:66:f7:90:a5:db:59: a7:f1:38:b5:a6:6e:0e:18:63:3b:96:c1:a4:23:9b: 12:05:a6:c3:d7:da:3d:bf:9f:7c:90:df:4e:0a:db: d4:26:67:66:fe:e7:90:eb:d1:84:29:48:69:f8:9d: 21:bf:b5:32:39:93:ae:bf:b4:00:36:c2:8d:dd:61: 73:61:55:03:a6:8c:54:33:af:88:c2:c7:e1:2e:a9: 04:cd:f6:89:fc:4c:80:9d:cc:d6:e0:ce:a7:ed:95: c8:d9:e1:1e:b7:53:60:44:1f:e8:8c:1f:bf:b2:16: 9f:b6:fd:07:9a:a7:bc:16:23:75:b7:ae:85:cc:5f: 49:2d:18:41:c8:56:82:52:9f:7c:bb:b9:e1:81:d9: 38:b9:86:db:6a:1d:2a:ee:92:85:48:b5:81:67:1e: 43:ae:7a:6b:d4:b6:79:6b:1b:64:a4:37:06:57:a7: a0:9c:0c:ca:f1:a8:47:53:3d:f8:5e:20:65:0a:34: 6e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5D:56:03:70:2E:7D:B0:21:92:E1:48:5E:93:14:6C:B1:79:5D:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/624ef82d-1620-301b-8b81-05f5db9f4162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:d010::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:17:ad:8c:db:6d:bb:5d:7f:df:dd:f8:01:33:6b:af:f9:0a: e9:fb:f9:fe:ba:ee:c3:2d:dd:b6:47:c6:73:38:97:4a:2d:16: 7f:03:78:b1:c8:4b:09:0c:7d:fa:42:30:ff:c8:a0:b4:72:90: af:a7:01:77:01:2c:ff:92:f0:74:b9:1c:36:3f:ec:14:1a:ac: ed:5f:e9:2e:9b:2f:09:3d:21:59:83:a2:6e:84:58:df:70:49: 2a:53:0d:85:46:1e:9e:9e:45:33:c9:58:73:00:75:a2:0b:07: 88:09:97:ff:5c:54:c6:6c:b8:07:ce:a8:2f:1d:f4:cf:40:ab: ee:f6:d0:87:c9:b0:a4:3f:c6:76:6e:53:7a:06:1d:e9:96:02: 07:f8:6f:64:24:cb:86:8c:0f:2a:5e:3e:b4:02:08:a7:04:79: e5:ee:03:39:5d:c0:74:6d:2f:49:f6:cc:e2:4e:0e:4c:e3:bb: 5e:67:68:e7:57:72:c0:48:6b:97:17:04:15:ac:37:43:a4:32: 82:42:f6:5c:7f:46:bc:cb:ed:f4:0b:81:dd:fa:c2:47:35:4f: 34:c5:7e:f1:c1:a4:67:77:58:da:67:cb:0d:9d:b8:0e:6e:a5: c7:21:b7:6a:3a:67:ac:27:88:da:19:d4:3b:f2:76:52:a0:56: e8:0e:99:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Dp3IXIQc//dkPLhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MWMwMThlY2EtNGY3MC00ZDEwLWFjZDItM2IwNTIzM2JmY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkog/gdYdWEBGMaF85rGdyuEaz1DIZixmY19R q4JZaGdj+ZIdq7iQlTlWEmMEGWUKuIL8SGXDG+xg6VpPPzrzS3yjSyBm95Cl21mn 8Ti1pm4OGGM7lsGkI5sSBabD19o9v598kN9OCtvUJmdm/ueQ69GEKUhp+J0hv7Uy OZOuv7QANsKN3WFzYVUDpoxUM6+IwsfhLqkEzfaJ/EyAnczW4M6n7ZXI2eEet1Ng RB/ojB+/shaftv0Hmqe8FiN1t66FzF9JLRhByFaCUp98u7nhgdk4uYbbah0q7pKF SLWBZx5Drnpr1LZ5axtkpDcGV6egnAzK8ahHUz34XiBlCjRudwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNhdVgNwLn2wIZLhSF6TFGyxeV0LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvNjI0ZWY4MmQtMTYyMC0z MDFiLThiODEtMDVmNWRiOWY0MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwNAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQXrYzbbbtdf9/d+AEza6/5Cun7+f667sMt3bZHxnM4l0otFn8D eLHISwkMffpCMP/IoLRykK+nAXcBLP+S8HS5HDY/7BQarO1f6S6bLwk9IVmDom6E WN9wSSpTDYVGHp6eRTPJWHMAdaILB4gJl/9cVMZsuAfOqC8d9M9Aq+720IfJsKQ/ xnZuU3oGHemWAgf4b2Qky4aMDypePrQCCKcEeeXuAzldwHRtL0n2zOJODkzju15n aOdXcsBIa5cXBBWsN0OkMoJC9lx/RrzL7fQLgd36wkc1TzTFfvHBpGd3WNpnyw2d uA5upccht2o6Z6wniNoZ1DvydlKgVugOmQA= -----END CERTIFICATE-----Generated at Sat Sep 26 20:46:50 2026 by rpki-client