$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa File: b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa (raw, json) Hash identifier: KwJU5cN2j9enqxiYGmbLC5zdyJ2+m0MhpMZIJKNOvgc= Subject key identifier: D3:DC:37:4D:C0:49:D7:C2:B7:47:37:36:22:8F:E5:80:DC:22:01:24 Certificate issuer: /CN=15164b64-0a30-43c7-b7d1-dda370c303f8 Certificate serial: 010D0C9F4328584F3A17D50E26F2708A83805580 Authority key identifier: 60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 11135 IP address blocks: 199.102.136.0/21 maxlen: 24 2607:d9c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d5:0e:26:f2:70:8a:83:80:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15164b64-0a30-43c7-b7d1-dda370c303f8 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=620b0d91-a478-46a7-b701-9e5c4b43371c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ba:62:f3:9e:a5:ed:c0:2b:25:28:96:07:0a: 8c:aa:ee:da:1c:27:db:dc:f7:03:19:61:02:ec:c7: 41:cf:a5:9a:f4:53:b8:3b:a4:46:43:46:20:c9:58: 63:d8:0a:1d:3d:88:82:27:f2:09:ac:5f:48:1b:ae: 55:16:9b:bf:9a:b8:f8:32:57:8a:7d:5f:93:e1:a7: 7a:a2:f9:87:b0:46:aa:2b:cc:87:c4:1a:60:24:f8: a5:94:10:71:30:01:55:2e:27:a9:8e:2c:50:31:87: b9:22:c1:fa:b3:d6:9d:67:2a:4b:81:14:bd:a8:14: d0:df:2f:29:45:b4:3e:07:b5:af:31:6f:43:62:52: ab:84:31:e1:49:ba:7b:ed:62:83:16:ce:28:d0:78: c6:b1:76:55:a1:ff:53:24:9a:bb:35:0f:d6:15:c0: 22:ed:f7:6f:bb:8b:68:2b:22:69:c1:bd:04:6e:0d: b6:50:87:bb:36:37:ed:43:d5:28:ec:b0:40:5d:34: 26:26:4f:16:fd:04:1d:e0:6c:ea:87:24:59:72:e2: b6:75:c6:e0:cd:15:47:e1:10:8e:25:22:d5:24:0a: 94:1d:16:66:da:b9:b3:57:7f:f5:a1:ce:2f:f5:04: ab:69:55:80:54:c5:8b:28:7a:21:97:b5:23:7a:dd: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DC:37:4D:C0:49:D7:C2:B7:47:37:36:22:8F:E5:80:DC:22:01:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.crl X509v3 Authority Key Identifier: keyid:60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer sbgp-ipAddrBlock: critical IPv4: 199.102.136.0/21 IPv6: 2607:d9c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ed:ff:57:8b:b2:92:dd:a3:fa:e7:65:79:99:2d:19:8c:bb: 3d:b5:8b:b0:ec:7a:28:ee:f1:46:51:1c:e2:e1:f2:2b:3e:e8: 6d:72:40:f4:ca:c6:d5:2c:ac:b5:fc:7e:e7:64:64:20:2c:00: 72:d0:93:88:66:7a:3b:72:c9:c1:d8:aa:18:74:0d:d4:b4:74: e7:83:64:7d:a1:17:89:ae:ef:30:9b:f0:6c:08:5b:4a:ae:8f: f2:00:cf:cc:71:75:c9:b6:97:54:8a:4a:40:97:be:be:2e:27: 18:f8:67:e2:57:f9:0b:99:a7:54:88:47:4a:52:0d:aa:70:a9: f0:c2:37:a2:1b:ba:c0:f0:92:eb:30:48:17:c6:94:d1:bc:0f: 5f:67:a2:6d:58:b9:f1:0b:50:e3:ac:dc:25:ca:ae:1a:ad:97: 72:b9:28:f0:28:2e:cc:62:4d:3f:ea:a8:09:88:e4:25:fe:e3: cc:78:92:c3:f6:bf:ed:ac:3c:47:4d:71:de:5b:74:41:29:22: 77:74:64:ce:87:28:ae:41:cd:e1:90:b2:45:7d:b7:4b:2b:03: be:dd:14:77:c3:7e:4c:63:1b:4a:a9:49:22:9c:ff:26:a1:e2: 81:39:a0:9a:66:6d:ea:e1:9e:39:9d:1c:50:52:1b:af:f1:a2: 09:49:1d:c4 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE86F9UOJvJwioOAVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUxNjRiNjQtMGEzMC00M2M3LWI3ZDEtZGRhMzcwYzMw M2Y4MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk NjIwYjBkOTEtYTQ3OC00NmE3LWI3MDEtOWU1YzRiNDMzNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLpi856l7cArJSiWBwqMqu7aHCfb3PcDGWEC 7MdBz6Wa9FO4O6RGQ0YgyVhj2AodPYiCJ/IJrF9IG65VFpu/mrj4MleKfV+T4ad6 ovmHsEaqK8yHxBpgJPillBBxMAFVLiepjixQMYe5IsH6s9adZypLgRS9qBTQ3y8p RbQ+B7WvMW9DYlKrhDHhSbp77WKDFs4o0HjGsXZVof9TJJq7NQ/WFcAi7fdvu4to KyJpwb0Ebg22UIe7NjftQ9Uo7LBAXTQmJk8W/QQd4GzqhyRZcuK2dcbgzRVH4RCO JSLVJAqUHRZm2rmzV3/1oc4v9QSraVWAVMWLKHohl7Ujet2mzwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFNPcN03ASdfCt0c3NiKP5YDcIgEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNTE2 NGI2NC0wYTMwLTQzYzctYjdkMS1kZGEzNzBjMzAzZjgvYjFkY2FlZTYtM2E2NC0z ZWI5LTgwOTYtMDllNTQyZTBmYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTUxNjRiNjQtMGEzMC00M2M3LWI3 ZDEtZGRhMzcwYzMwM2Y4LzE1MTY0YjY0LTBhMzAtNDNjNy1iN2QxLWRkYTM3MGMz MDNmOC5jcmwwHwYDVR0jBBgwFoAUYPwtO/J7G2dsD8Mphf6yuQVDswEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNTE2NGI2NC0wYTMwLTQzYzctYjdkMS1kZGEz NzBjMzAzZjguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDx2aIMA0E AgACMAcDBQAmB9nAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHrt/1eLspLdo/rnZXmZLRmMuz21i7Dseiju 8UZRHOLh8is+6G1yQPTKxtUsrLX8fudkZCAsAHLQk4hmejtyycHYqhh0DdS0dOeD ZH2hF4mu7zCb8GwIW0quj/IAz8xxdcm2l1SKSkCXvr4uJxj4Z+JX+QuZp1SIR0pS DapwqfDCN6IbusDwkuswSBfGlNG8D19nom1YufELUOOs3CXKrhqtl3K5KPAoLsxi TT/qqAmI5CX+48x4ksP2v+2sPEdNcd5bdEEpInd0ZM6HKK5BzeGQskV9t0srA77d FHfDfkxjG0qpSSKc/yah4oE5oJpmberhnjmdHFBSG6/xoglJHcQ= -----END CERTIFICATE-----Generated at Mon Sep 28 22:06:35 2026 by rpki-client