$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa File: 8cf20e1d-1e93-3fbd-909b-734f61934be6.roa (raw, json) Hash identifier: uq17G06F+SRGrkhz6NGmr9J7zxz89nj7P2s161dAZss= Subject key identifier: 66:40:B9:6F:C0:9B:BC:F1:CA:2E:41:AC:EC:57:0A:13:DB:D6:E0:3B Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584EA78757E32C17A79DCE52AA00 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 2606:9fc0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:57:e3:2c:17:a7:9d:ce:52:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9ef5bec7-e68f-4423-90ff-dbaf9a1d6c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e6:9f:97:6a:c9:0c:22:1b:dc:ad:61:04:ca: 6a:c2:9d:0d:e3:11:08:c0:91:25:4f:aa:e8:f8:e4: 2b:af:7d:50:5d:64:91:95:56:1d:98:e6:14:6f:5e: f7:e5:3b:81:df:78:61:83:6b:cf:e9:62:6d:c1:7f: 54:6c:ae:a3:cf:ec:14:f4:9d:7d:61:fc:64:79:f1: 19:c1:b7:af:0c:39:a5:ea:8e:dc:e6:88:a4:0d:75: a8:22:98:af:17:54:03:71:c8:1e:02:ee:ff:76:94: e2:53:0b:de:08:56:71:87:c7:85:79:70:f0:c5:3d: 8b:e0:a1:b7:0d:0b:73:44:2a:02:9b:43:a8:db:ca: e3:eb:3f:ee:48:54:15:61:2d:b7:b6:86:e6:1f:2f: 3c:87:53:83:39:2e:13:e4:f1:3f:f1:42:fa:20:bb: 5c:e1:79:92:9a:c8:f6:76:35:11:ce:90:15:84:7f: a4:8a:cd:b1:59:0c:d7:e1:25:c3:94:76:05:b5:95: 85:8a:bb:f1:27:1d:14:da:6d:95:a4:b5:7b:38:ce: 33:94:83:2b:a9:aa:a1:3b:b7:f6:a2:5e:45:f6:bb: 65:f4:fb:a3:78:a4:02:f3:b9:8d:a4:e4:45:48:ab: e0:e1:e3:ef:ff:43:8a:84:d5:1c:8b:99:f5:9c:4b: fa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:40:B9:6F:C0:9B:BC:F1:CA:2E:41:AC:EC:57:0A:13:DB:D6:E0:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:bf:b6:34:ab:7a:0e:3b:da:53:f5:02:e6:22:b6:fd:29:41: 3a:f1:64:24:15:8b:a7:fc:72:fc:6c:71:81:64:dc:ee:b1:c9: 28:09:4c:ac:4f:50:a6:da:7d:e1:26:6f:c3:e5:63:2f:39:bd: c1:02:6f:91:dc:24:81:83:b0:e1:cf:b9:0f:1f:5c:c4:99:92: 44:db:63:ae:ab:11:20:71:a9:a6:77:ac:65:fb:45:06:b0:e7: 8f:04:37:77:6c:f7:b9:4f:b3:31:24:55:96:4d:48:62:2a:9c: 45:2e:e5:fa:1e:95:68:3b:84:cc:dd:3f:c4:82:37:0f:2e:dd: 79:1b:6d:d2:51:64:15:95:84:d4:63:e1:ee:e7:df:6d:29:f9: 4a:0a:74:8b:9b:51:52:03:12:d5:a0:5e:ad:58:01:3c:49:7f: 37:65:64:a8:9d:1f:8b:94:7f:6b:9d:6c:cb:ba:84:cf:d7:cd: f7:cf:bd:37:a6:43:94:3f:3e:0a:6a:4e:5a:18:dd:9a:ea:bb: 0d:bc:e7:67:03:8b:0e:bd:c8:28:24:c2:69:96:49:10:c2:29: d2:ec:87:d8:c1:0e:d0:fe:be:66:8d:fb:ad:e2:94:a4:ad:b3: c4:07:c2:ea:e9:9b:82:f2:e3:b1:0e:37:83:7e:86:51:95:a4: 7c:0d:6e:ae -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nh1fjLBennc5SqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWVmNWJlYzctZTY4Zi00NDIzLTkwZmYtZGJhZjlhMWQ2YzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uafl2rJDCIb3K1hBMpqwp0N4xEIwJElT6ro +OQrr31QXWSRlVYdmOYUb1735TuB33hhg2vP6WJtwX9UbK6jz+wU9J19YfxkefEZ wbevDDml6o7c5oikDXWoIpivF1QDccgeAu7/dpTiUwveCFZxh8eFeXDwxT2L4KG3 DQtzRCoCm0Oo28rj6z/uSFQVYS23tobmHy88h1ODOS4T5PE/8UL6ILtc4XmSmsj2 djURzpAVhH+kis2xWQzX4SXDlHYFtZWFirvxJx0U2m2VpLV7OM4zlIMrqaqhO7f2 ol5F9rtl9PujeKQC87mNpORFSKvg4ePv/0OKhNUci5n1nEv6bwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGZAuW/Am7zxyi5BrOxXChPb1uA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvOGNmMjBlMWQtMWU5My0z ZmJkLTkwOWItNzM0ZjYxOTM0YmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgafwAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEArr+2NKt6DjvaU/UC5iK2/SlBOvFkJBWLp/xy/GxxgWTc7rHJKAlM rE9Qptp94SZvw+VjLzm9wQJvkdwkgYOw4c+5Dx9cxJmSRNtjrqsRIHGppnesZftF BrDnjwQ3d2z3uU+zMSRVlk1IYiqcRS7l+h6VaDuEzN0/xII3Dy7deRtt0lFkFZWE 1GPh7uffbSn5Sgp0i5tRUgMS1aBerVgBPEl/N2VkqJ0fi5R/a51sy7qEz9fN98+9 N6ZDlD8+CmpOWhjdmuq7DbznZwOLDr3IKCTCaZZJEMIp0uyH2MEO0P6+Zo37reKU pK2zxAfC6umbgvLjsQ43g36GUZWkfA1urg== -----END CERTIFICATE-----Generated at Mon Aug 10 09:58:35 2026 by rpki-client