$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d785e9a0-591b-365f-82a1-937ac3110e69.roa File: d785e9a0-591b-365f-82a1-937ac3110e69.roa (raw, json) Hash identifier: Odf4Ly+zFZuMX8cGGbvVh4ftkIN13w234rft0YMzOxU= Subject key identifier: 6A:46:EF:E0:B1:3B:9C:70:6E:33:81:C8:4B:D4:8A:1D:61:66:42:C7 Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584F03A788167B4BA0EB39DDC420 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d785e9a0-591b-365f-82a1-937ac3110e69.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 6363 IP address blocks: 2606:9fc0:e010::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:88:16:7b:4b:a0:eb:39:dd:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=e884781d-ceb4-4e33-809e-529e48b774db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ac:80:11:d6:92:03:01:ab:ec:b0:09:a5:83: 4c:a0:68:63:28:8b:9b:da:2a:bf:5f:02:1e:90:79: f8:43:52:6c:46:84:2f:87:c1:b4:ff:49:df:ac:b5: f9:8b:26:2f:1d:68:92:9e:17:f3:9e:1f:e9:44:f8: af:91:a4:91:25:2b:ac:0c:a5:ec:af:ff:70:41:b9: ee:3a:ed:a4:36:c5:00:84:d7:37:e9:78:3d:52:5a: c1:bc:3c:97:e4:00:47:de:ca:9b:30:f9:1b:cc:46: 22:64:65:85:b9:f7:fd:2d:c3:2c:a9:60:bd:8e:fd: 61:8e:c4:46:e6:6c:f9:59:ea:48:0e:bc:1e:79:7b: f1:19:be:26:c1:40:7e:63:3a:fd:71:73:9b:0a:64: 59:43:b7:88:ec:96:cf:e6:33:42:e4:3c:2a:5c:93: 88:64:1b:db:b8:24:1e:d7:6b:88:75:b9:1a:c4:7d: 36:e7:8b:4a:24:cb:98:5c:cc:4a:93:f6:c2:66:2d: 6e:be:22:a4:af:95:57:b8:7e:e6:e5:cd:d5:4e:a8: ce:72:c4:1d:1b:8f:fb:8b:16:ca:00:b9:63:b5:3f: 4b:3f:17:e6:04:f2:fd:87:fb:bc:67:50:ab:1d:c4: bc:49:7d:5e:56:70:48:b6:c3:c0:2f:0f:49:07:07: 04:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:46:EF:E0:B1:3B:9C:70:6E:33:81:C8:4B:D4:8A:1D:61:66:42:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d785e9a0-591b-365f-82a1-937ac3110e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:e010::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ae:32:23:58:39:9d:eb:eb:ec:58:a1:66:8c:43:e0:46:88: ef:ae:9e:0c:18:40:9f:72:6b:d1:73:a2:59:d8:ab:a4:c6:a3: 33:3b:c1:83:78:85:9f:48:5d:f6:a4:ba:c1:9f:ae:f5:85:31: 8b:6c:03:67:52:c8:7d:28:a2:3b:89:9d:f3:84:e2:69:32:e7: a1:62:26:7d:38:95:33:40:25:18:58:d6:b9:a4:0d:a2:6b:f4: 6b:c6:ef:8d:15:e3:bb:88:9d:24:3a:c3:f8:ee:2b:d4:97:a8: b5:2d:06:4b:83:74:06:7c:66:77:e7:01:fd:19:46:6e:24:b9: cb:30:71:84:a4:e9:a6:d2:c8:f3:8d:61:22:06:aa:41:4a:b4: 70:a8:b6:f0:dc:7c:12:ae:a8:22:4b:e4:ce:26:53:20:70:4f: cb:25:47:12:26:a7:53:de:dc:80:14:04:6b:81:d7:92:d8:9d: 6f:a8:db:76:52:39:ee:d9:a9:8c:f2:b7:c9:43:3c:04:3b:8d: f4:4e:e5:e2:7b:b7:47:18:e8:c1:d9:09:d7:3e:3e:34:04:58: d5:98:41:e4:90:3b:68:42:ee:8d:1d:d4:9e:cc:95:d1:85:a8: 06:25:63:71:c8:00:cb:0e:8d:5b:5f:c9:e9:5d:bb:8d:fc:09: 51:f5:2c:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Dp4gWe0ug6zndxCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZTg4NDc4MWQtY2ViNC00ZTMzLTgwOWUtNTI5ZTQ4Yjc3NGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6yAEdaSAwGr7LAJpYNMoGhjKIub2iq/XwIe kHn4Q1JsRoQvh8G0/0nfrLX5iyYvHWiSnhfznh/pRPivkaSRJSusDKXsr/9wQbnu Ou2kNsUAhNc36Xg9UlrBvDyX5ABH3sqbMPkbzEYiZGWFuff9LcMsqWC9jv1hjsRG 5mz5WepIDrweeXvxGb4mwUB+Yzr9cXObCmRZQ7eI7JbP5jNC5DwqXJOIZBvbuCQe 12uIdbkaxH0254tKJMuYXMxKk/bCZi1uviKkr5VXuH7m5c3VTqjOcsQdG4/7ixbK ALljtT9LPxfmBPL9h/u8Z1CrHcS8SX1eVnBItsPALw9JBwcEWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGpG7+CxO5xwbjOByEvUih1hZkLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvZDc4NWU5YTAtNTkxYi0z NjVmLTgyYTEtOTM3YWMzMTEwZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwOAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK2uMiNYOZ3r6+xYoWaMQ+BGiO+ungwYQJ9ya9FzolnYq6TGozM7 wYN4hZ9IXfakusGfrvWFMYtsA2dSyH0oojuJnfOE4mky56FiJn04lTNAJRhY1rmk DaJr9GvG740V47uInSQ6w/juK9SXqLUtBkuDdAZ8ZnfnAf0ZRm4kucswcYSk6abS yPONYSIGqkFKtHCotvDcfBKuqCJL5M4mUyBwT8slRxImp1Pe3IAUBGuB15LYnW+o 23ZSOe7ZqYzyt8lDPAQ7jfRO5eJ7t0cY6MHZCdc+PjQEWNWYQeSQO2hC7o0d1J7M ldGFqAYlY3HIAMsOjVtfyeldu438CVH1LMs= -----END CERTIFICATE-----Generated at Sat Sep 26 15:19:17 2026 by rpki-client