$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa File: f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa (raw, json) Hash identifier: nsdIx0YExpfAphCMwu7oaLfBE1gC4anuVGCtpLxFuWk= Subject key identifier: EB:D3:23:23:94:0A:7E:CC:19:6C:57:78:12:34:8D:02:0D:43:25:87 Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584F9BCDD59C106399380B2AD780 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 8070 IP address blocks: 2606:e540:c03::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:d5:9c:10:63:99:38:0b:2a:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=d3ace1c9-2e17-4249-93be-4d5601546993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:2a:0c:80:fd:f0:47:da:19:f6:11:5d:28: 64:ba:07:86:44:45:06:e3:4d:fd:8f:1b:f3:be:56: e6:f2:88:ee:e9:71:dd:62:35:86:9e:c5:0d:18:60: 94:e0:9a:39:c2:d1:4e:83:fd:fa:c6:b6:d1:5a:b5: 3e:bb:40:1f:f9:43:40:17:0a:33:c8:ee:b8:8d:17: 4c:17:df:0d:5f:e3:9a:6c:bd:6f:59:66:6a:3d:2b: 0b:88:e6:1b:f7:45:77:0d:9a:bb:71:3e:3f:d9:41: 50:c0:a1:61:59:62:81:f1:bb:22:f0:1f:21:82:fd: d8:25:ae:89:63:4a:79:2c:8c:5c:1d:3b:4e:85:e3: 00:23:27:f3:73:a9:e6:73:e0:1f:7d:00:60:0f:e1: 30:5f:8a:08:f1:48:65:c4:14:23:56:81:c9:cc:e4: c0:88:93:d7:46:62:bc:f9:6f:b1:36:ef:96:c3:65: 91:9e:30:c6:c7:d0:6b:93:48:5e:5b:b4:07:e2:7d: 5d:6b:d0:a1:45:92:f7:88:af:3a:b4:88:c7:4b:47: 7d:b3:f9:a8:b7:09:33:c8:bf:04:14:27:b7:8c:a5: c6:59:25:8d:25:bb:a8:1a:10:d2:02:96:9d:94:ad: ec:43:06:b6:79:cd:bd:66:aa:76:41:e6:67:78:8e: 30:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D3:23:23:94:0A:7E:CC:19:6C:57:78:12:34:8D:02:0D:43:25:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540:c03::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:64:35:31:28:f3:57:64:af:8a:f0:9d:f2:b4:fa:cb:15:51: 8a:87:d2:fc:31:a2:d6:bd:47:d5:53:a5:9b:e3:be:05:ee:b9: 12:da:f5:0f:76:07:c7:0d:fa:ff:69:69:ff:c2:0b:89:7b:8f: fe:2e:67:19:ee:9b:d9:c3:47:5a:18:17:3c:dc:20:96:4d:48: 3b:23:00:84:a9:d6:96:8a:87:fe:af:35:cc:19:db:1d:1e:b0: 78:2b:81:d7:1a:9f:bf:65:a7:8d:e5:43:d0:1c:10:24:07:b7: c8:01:19:d4:9d:a4:33:c1:8b:ec:28:b4:f1:87:5e:b8:f4:80: 08:25:2c:ac:39:d8:8b:b9:cd:9b:d8:76:8f:a7:cd:5c:69:61: cc:ce:63:8d:72:56:96:e5:3c:6a:31:88:f0:ab:08:f0:13:38: 0f:8a:0f:7e:3f:4b:16:6d:85:1f:4a:67:e7:ef:b6:de:8c:f5: a6:9d:a0:04:3d:28:56:ed:e2:bd:19:ff:c5:fe:21:73:72:78: e3:29:8b:2c:9d:8a:6c:1a:5b:d4:f9:ab:cd:60:ef:30:a7:3f: 8b:a7:3e:a0:72:a3:d9:3d:db:2b:89:7a:25:41:7c:7d:a7:e2: af:bc:57:a6:d4:c7:04:cc:8f:36:7c:ed:f1:10:08:1e:bc:20: b0:7d:65:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+bzdWcEGOZOAsq14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZDNhY2UxYzktMmUxNy00MjQ5LTkzYmUtNGQ1NjAxNTQ2OTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqEqDID98EfaGfYRXShkugeGREUG4039jxvz vlbm8oju6XHdYjWGnsUNGGCU4Jo5wtFOg/36xrbRWrU+u0Af+UNAFwozyO64jRdM F98NX+OabL1vWWZqPSsLiOYb90V3DZq7cT4/2UFQwKFhWWKB8bsi8B8hgv3YJa6J Y0p5LIxcHTtOheMAIyfzc6nmc+AffQBgD+EwX4oI8UhlxBQjVoHJzOTAiJPXRmK8 +W+xNu+Ww2WRnjDGx9Brk0heW7QH4n1da9ChRZL3iK86tIjHS0d9s/motwkzyL8E FCe3jKXGWSWNJbuoGhDSApadlK3sQwa2ec29Zqp2QeZneI4wrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOvTIyOUCn7MGWxXeBI0jQINQyWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvZjUxYjU5YzItZGJkZC0z ZTM4LTlhMzYtNDA4YmRiZGQ5NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgblQAwD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF1kNTEo81dkr4rwnfK0+ssVUYqH0vwxota9R9VTpZvjvgXuuRLa 9Q92B8cN+v9paf/CC4l7j/4uZxnum9nDR1oYFzzcIJZNSDsjAISp1paKh/6vNcwZ 2x0esHgrgdcan79lp43lQ9AcECQHt8gBGdSdpDPBi+wotPGHXrj0gAglLKw52Iu5 zZvYdo+nzVxpYczOY41yVpblPGoxiPCrCPATOA+KD34/SxZthR9KZ+fvtt6M9aad oAQ9KFbt4r0Z/8X+IXNyeOMpiyydimwaW9T5q81g7zCnP4unPqByo9k92yuJeiVB fH2n4q+8V6bUxwTMjzZ87fEQCB68ILB9ZaE= -----END CERTIFICATE-----Generated at Sat Oct 31 23:57:48 2026 by rpki-client