$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/35ee2a92-a666-338c-a2a2-d4862bf0db9a.roa File: 35ee2a92-a666-338c-a2a2-d4862bf0db9a.roa (raw, json) Hash identifier: XIdcCF7/y2eTHZzC7JXf3rOub5ARmg8tjOj5JCXLpuI= Subject key identifier: 3E:C2:D7:EF:8A:4A:6F:6E:2A:4A:35:BB:B5:59:B0:8B:58:F4:58:DF Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584B2B91941C1B44549AF2DF71C0 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/35ee2a92-a666-338c-a2a2-d4862bf0db9a.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 14618 IP address blocks: 2606:9fc0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:94:1c:1b:44:54:9a:f2:df:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=9150d3b5-bf8a-4ac1-9b47-80133ac98149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e6:ec:8a:71:1b:17:6d:46:42:d8:1a:d2:4b: 0d:23:e9:73:8f:11:e3:0d:c3:66:b6:98:6f:37:4e: 14:7b:17:9a:81:8a:d3:82:34:90:ae:e3:9a:72:41: e4:a8:00:ce:b4:00:6e:b8:8d:41:00:7e:be:b5:23: 3a:75:95:90:74:f5:74:4a:f9:15:b2:e4:43:bc:07: 0c:38:5d:6b:17:13:89:1e:5b:ad:41:c9:a6:f5:33: 35:ed:f2:4a:d8:a8:af:85:36:d8:c4:30:04:94:ba: cf:b0:fe:29:7d:f6:f6:4a:0d:a2:f2:be:08:9b:85: 97:20:9a:de:12:e8:b7:31:ce:1a:96:d5:6c:2e:4c: f6:a0:bb:c1:d5:b0:16:c1:43:1a:83:f4:3c:c2:9e: 9e:de:f0:d2:68:fe:75:55:1a:15:25:28:5f:90:c4: d1:47:f3:09:16:0d:fc:dd:2c:26:67:58:b1:fd:cd: e9:a1:eb:c6:5c:0d:d4:51:91:ec:2c:2b:0d:30:9d: c0:e5:8f:55:dd:73:08:3a:35:f2:99:a5:44:32:ea: 82:8d:8f:f1:d0:a4:c6:41:8b:fa:35:cd:e3:8e:db: 6b:40:b1:6c:23:15:72:2e:d1:42:c4:36:d0:21:7a: 17:7a:4e:23:67:20:9f:f4:ef:11:06:de:68:d8:bc: 41:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C2:D7:EF:8A:4A:6F:6E:2A:4A:35:BB:B5:59:B0:8B:58:F4:58:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/35ee2a92-a666-338c-a2a2-d4862bf0db9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0a:4f:c1:8f:1b:a5:4f:8c:a2:71:f9:d6:d4:01:e1:2f:0a: 91:b7:fa:ff:16:ac:82:dd:16:c0:50:7a:4b:e9:fb:43:7f:5b: 2e:cf:a3:53:ad:fc:03:b7:ec:de:5e:12:f1:d3:f1:54:d5:c1: 9f:62:a3:48:08:8a:f4:7c:60:d6:b7:06:03:fe:fb:44:9d:88: ec:b0:fa:1d:7c:58:0d:15:77:8d:53:76:c2:d7:dc:6e:77:78: a2:ea:5d:e8:aa:a6:b9:29:90:be:71:72:26:91:9e:19:a4:2e: 6f:16:8f:04:05:c6:7d:6b:3c:a6:6c:8d:d9:dc:ec:80:10:a8: 44:b3:0a:ee:9a:f0:28:5c:0f:e7:7d:76:65:1c:49:fc:d9:32: da:fc:07:9a:9c:28:3e:13:44:45:44:ce:a6:20:d5:75:be:ed: 81:ed:9b:d6:47:c4:13:3b:82:15:69:6f:44:ed:c7:c5:19:16: db:96:84:92:33:86:b9:ed:f4:83:1b:06:8e:0f:7a:c6:86:7c: 78:3e:30:26:20:83:38:d5:d2:1f:36:a4:aa:49:cd:90:90:41: c7:dd:65:99:7f:19:b6:05:9f:57:d3:e0:fb:ae:f6:5f:31:0d: 56:8c:10:69:49:c7:ac:b9:3d:45:0f:ca:9b:f5:f1:0b:74:a2: d6:c4:05:d1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsrkZQcG0RUmvLfccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk OTE1MGQzYjUtYmY4YS00YWMxLTliNDctODAxMzNhYzk4MTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmObsinEbF21GQtga0ksNI+lzjxHjDcNmtphv N04UexeagYrTgjSQruOackHkqADOtABuuI1BAH6+tSM6dZWQdPV0SvkVsuRDvAcM OF1rFxOJHlutQcmm9TM17fJK2KivhTbYxDAElLrPsP4pffb2Sg2i8r4Im4WXIJre Eui3Mc4altVsLkz2oLvB1bAWwUMag/Q8wp6e3vDSaP51VRoVJShfkMTRR/MJFg38 3SwmZ1ix/c3poevGXA3UUZHsLCsNMJ3A5Y9V3XMIOjXymaVEMuqCjY/x0KTGQYv6 Nc3jjttrQLFsIxVyLtFCxDbQIXoXek4jZyCf9O8RBt5o2LxBywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD7C1++KSm9uKko1u7VZsItY9FjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvMzVlZTJhOTItYTY2Ni0z MzhjLWEyYTItZDQ4NjJiZjBkYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgafwAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIApPwY8bpU+MonH51tQB4S8Kkbf6/xasgt0WwFB6S+n7Q39bLs+j U638A7fs3l4S8dPxVNXBn2KjSAiK9Hxg1rcGA/77RJ2I7LD6HXxYDRV3jVN2wtfc bnd4oupd6KqmuSmQvnFyJpGeGaQubxaPBAXGfWs8pmyN2dzsgBCoRLMK7prwKFwP 5312ZRxJ/Nky2vwHmpwoPhNERUTOpiDVdb7tge2b1kfEEzuCFWlvRO3HxRkW25aE kjOGue30gxsGjg96xoZ8eD4wJiCDONXSHzakqknNkJBBx91lmX8ZtgWfV9Pg+672 XzENVowQaUnHrLk9RQ/Km/XxC3Si1sQF0Q== -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:07 2025 by rpki-client