$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa File: b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa (raw, json) Hash identifier: hoWkkg8YdL7yIlzLEgYyUEIHV7DWGA1oRmiPBgMme88= Subject key identifier: 96:89:E0:F1:EB:70:C7:73:59:0D:A3:BE:E0:AC:26:81:A1:44:4A:81 Certificate issuer: /CN=15164b64-0a30-43c7-b7d1-dda370c303f8 Certificate serial: 010D0C9F4328584B153C22C431A291A57814C580 Authority key identifier: 60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 11135 IP address blocks: 199.102.136.0/21 maxlen: 24 2607:d9c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:22:c4:31:a2:91:a5:78:14:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15164b64-0a30-43c7-b7d1-dda370c303f8 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=3b85612b-2105-4895-a2ef-e3ad26e3606d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:50:d8:4b:ed:bc:df:27:07:14:b2:ab:91:33: 17:13:b6:03:60:54:f0:9e:5e:c7:36:fb:7b:77:35: bb:3f:b6:9c:f0:b8:8e:f7:fa:5a:cf:74:14:33:72: 39:38:c3:13:b4:14:d9:81:d5:d5:e2:af:6e:cb:33: eb:c5:91:19:f0:74:1c:e4:7f:b3:07:26:53:1c:6b: 2e:08:6d:a3:b6:fe:7a:3e:87:fa:7b:7d:5b:e9:91: ef:10:71:c4:d8:34:64:90:c6:4b:c7:99:a7:14:72: 27:b7:0b:93:bf:9b:33:b3:86:c0:86:8f:99:71:ac: f8:41:e9:86:ef:53:d4:ef:ec:e6:11:a0:86:aa:74: e4:b0:11:b4:af:8e:1c:8a:0c:f9:30:61:fe:bd:48: 09:5d:41:9d:d0:db:59:ad:2f:cb:86:01:ee:fb:0e: 12:60:cd:17:d5:77:23:04:e7:47:08:6d:9b:39:b5: b5:d0:10:d9:a9:ca:7e:94:63:6c:f5:ab:d6:4d:ac: a7:6b:d2:2e:e7:46:ea:61:76:c8:1d:93:02:6b:25: 47:f1:4c:1c:f6:56:6b:f2:3c:13:db:f3:6c:15:da: 97:d0:11:c7:e5:55:7d:5d:ac:f2:b3:67:60:14:f2: 3c:85:ed:81:39:b0:11:61:e1:b2:98:91:ea:c5:8d: 70:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:89:E0:F1:EB:70:C7:73:59:0D:A3:BE:E0:AC:26:81:A1:44:4A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.crl X509v3 Authority Key Identifier: keyid:60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer sbgp-ipAddrBlock: critical IPv4: 199.102.136.0/21 IPv6: 2607:d9c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:98:75:18:79:51:98:15:66:f9:b6:37:a3:63:5f:a7:03:d6: cf:b1:11:4a:a4:4f:18:49:3f:ef:67:41:32:66:6c:e5:15:27: 28:b8:bd:a4:c6:ba:00:dd:7a:81:f5:d3:00:11:8d:a5:71:14: 3b:c5:1e:4e:06:24:1b:f0:a0:03:bc:32:84:cc:b5:f0:9b:a6: 7b:48:63:76:a7:5b:84:d2:85:12:78:cf:9d:03:f4:9e:3a:75: 06:1f:fa:18:b0:1a:77:84:64:d3:1d:86:05:aa:36:dd:1a:f1: 73:25:aa:a3:67:52:4f:1c:f6:45:3b:0a:6b:74:47:05:9c:c9: da:28:78:a1:f7:98:11:49:77:fc:f7:fd:9a:2a:8e:ce:6f:59: a2:b2:bc:f3:25:41:ba:b2:b1:02:c1:86:f7:e7:ad:07:38:42: 3a:d9:46:16:2d:97:0d:11:3c:36:1d:0a:55:1c:c2:b7:9b:17: 07:17:eb:67:4c:04:58:bc:f8:9c:be:01:85:ed:e9:70:e7:19: 51:8c:f7:d2:42:3b:1c:21:b6:6b:44:43:0a:83:ea:0c:5d:b7: 91:e2:89:d3:f5:25:41:c7:fc:23:c1:af:4a:30:af:0d:2e:f5: da:d4:4c:3d:32:79:1c:60:01:4a:36:f9:a1:aa:ca:cc:d4:41: a5:04:eb:8c -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEsVPCLEMaKRpXgUxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUxNjRiNjQtMGEzMC00M2M3LWI3ZDEtZGRhMzcwYzMw M2Y4MB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk M2I4NTYxMmItMjEwNS00ODk1LWEyZWYtZTNhZDI2ZTM2MDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lDYS+283ycHFLKrkTMXE7YDYFTwnl7HNvt7 dzW7P7ac8LiO9/paz3QUM3I5OMMTtBTZgdXV4q9uyzPrxZEZ8HQc5H+zByZTHGsu CG2jtv56Pof6e31b6ZHvEHHE2DRkkMZLx5mnFHIntwuTv5szs4bAho+Zcaz4QemG 71PU7+zmEaCGqnTksBG0r44cigz5MGH+vUgJXUGd0NtZrS/LhgHu+w4SYM0X1Xcj BOdHCG2bObW10BDZqcp+lGNs9avWTayna9Iu50bqYXbIHZMCayVH8Uwc9lZr8jwT 2/NsFdqX0BHH5VV9Xazys2dgFPI8he2BObARYeGymJHqxY1wpwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJaJ4PHrcMdzWQ2jvuCsJoGhREqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNTE2 NGI2NC0wYTMwLTQzYzctYjdkMS1kZGEzNzBjMzAzZjgvYjFkY2FlZTYtM2E2NC0z ZWI5LTgwOTYtMDllNTQyZTBmYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTUxNjRiNjQtMGEzMC00M2M3LWI3 ZDEtZGRhMzcwYzMwM2Y4LzE1MTY0YjY0LTBhMzAtNDNjNy1iN2QxLWRkYTM3MGMz MDNmOC5jcmwwHwYDVR0jBBgwFoAUYPwtO/J7G2dsD8Mphf6yuQVDswEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNTE2NGI2NC0wYTMwLTQzYzctYjdkMS1kZGEz NzBjMzAzZjguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDx2aIMA0E AgACMAcDBQAmB9nAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFOYdRh5UZgVZvm2N6NjX6cD1s+xEUqkTxhJ P+9nQTJmbOUVJyi4vaTGugDdeoH10wARjaVxFDvFHk4GJBvwoAO8MoTMtfCbpntI Y3anW4TShRJ4z50D9J46dQYf+hiwGneEZNMdhgWqNt0a8XMlqqNnUk8c9kU7Cmt0 RwWcydooeKH3mBFJd/z3/Zoqjs5vWaKyvPMlQbqysQLBhvfnrQc4QjrZRhYtlw0R PDYdClUcwrebFwcX62dMBFi8+Jy+AYXt6XDnGVGM99JCOxwhtmtEQwqD6gxdt5Hi idP1JUHH/CPBr0owrw0u9drUTD0yeRxgAUo2+aGqyszUQaUE64w= -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:39 2025 by rpki-client