$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa File: bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa (raw, json) Hash identifier: dBZuhKtz+/S1R8/1WY0U7lKlAsZeiyJGP3G2yQmHplc= Subject key identifier: 27:4B:07:4F:86:F9:10:25:B0:66:AA:08:83:3D:49:52:0A:E9:50:8D Certificate issuer: /CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Certificate serial: 010D0C9F4328584B715CB652E248DFB190E789B0 Authority key identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 55076 IP address blocks: 198.37.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b6:52:e2:48:df:b1:90:e7:89:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=f17e63aa-6660-4025-a5eb-d075f197e5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:94:19:70:22:e8:c5:11:b3:d0:9f:bd:bc: a0:76:0b:7e:02:fa:ce:3d:5b:f9:f9:e2:54:c5:18: da:ee:46:88:02:51:b0:4e:5e:c9:64:6f:8b:62:83: e5:b0:c9:5f:96:38:7c:5b:5d:5c:57:ef:99:aa:cd: 8b:3e:f0:b4:c7:1b:cf:78:99:06:41:8a:8e:f5:43: 17:fa:21:1d:d7:4f:20:17:e2:85:f1:e1:97:6b:b7: a8:5e:87:92:3f:57:52:00:b3:6f:b2:72:e3:37:fa: 30:5c:66:df:ce:f6:71:ab:05:c5:dc:46:89:95:89: 18:c6:2d:0c:f4:bc:af:51:b5:94:df:14:e0:30:8c: 76:9f:5f:2a:8c:88:2b:f0:41:77:90:39:2b:71:81: 10:53:66:97:66:b0:45:b6:42:56:aa:03:da:77:a8: 0f:ea:3a:14:f6:e7:75:d5:f1:61:6c:ce:f2:33:c6: 3a:a8:55:3a:5f:e8:0c:5e:5a:38:fb:2e:7b:a3:aa: e6:5e:da:21:0d:08:cd:da:dc:c4:3c:10:2f:c1:bc: 2b:21:59:19:51:06:ad:31:69:f9:51:3f:63:0f:2b: b7:7a:48:1e:fd:6a:22:fd:0a:f9:23:a6:e8:41:f0: 91:e6:b0:e4:97:7f:59:23:29:9b:d6:58:5c:97:21: b1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4B:07:4F:86:F9:10:25:B0:66:AA:08:83:3D:49:52:0A:E9:50:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl X509v3 Authority Key Identifier: keyid:D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer sbgp-ipAddrBlock: critical IPv4: 198.37.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:fd:06:00:ea:27:8b:7f:ac:bb:a5:5f:58:b1:f1:01:cb:75: 3c:4e:7b:ce:73:6f:f9:6a:32:9a:43:ab:9e:cb:a4:81:4a:e5: e8:18:29:0c:3e:b7:da:91:cb:3b:ad:fb:8d:ca:1f:f4:81:b5: 6e:76:11:a3:b1:f2:e0:d2:c6:f3:d7:12:f4:e2:e9:f9:48:2a: c3:4c:6a:67:20:a9:5a:40:86:0b:17:e1:f8:d6:76:6b:cf:fd: c3:d3:96:90:55:c9:5c:58:d9:a7:b8:68:28:fc:dd:67:b3:a3: b1:dc:6b:36:1b:f7:a1:39:61:6f:78:29:25:4c:ab:d8:37:a8: 36:84:1b:d5:f5:34:b5:18:bb:9b:cf:ad:c9:58:e0:1e:65:20: 95:8e:30:cd:c0:97:b9:71:11:a4:8c:13:a7:61:f9:55:25:e7: 52:14:9f:19:40:3e:34:75:82:e4:ae:7c:cd:b1:2f:89:f3:4b: e8:13:fb:ca:62:0d:0f:04:95:40:21:84:b2:68:48:62:d5:c4: 07:6d:5b:09:67:46:fe:43:30:a8:40:60:64:e0:79:da:ca:74: ad:c2:a0:2b:e3:d5:e0:01:3d:74:7a:6d:69:8a:09:aa:b7:ed: 05:f3:85:75:f5:58:bb:f2:7b:03:ab:aa:e2:b0:d0:84:1d:bf: a5:2c:79:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLZS4kjfsZDnibAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2ZjctYjY1NmUyZmI5 ZTdlMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZjE3ZTYzYWEtNjY2MC00MDI1LWE1ZWItZDA3NWYxOTdlNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXmUGXAi6MURs9Cfvbygdgt+AvrOPVv5+eJU xRja7kaIAlGwTl7JZG+LYoPlsMlfljh8W11cV++Zqs2LPvC0xxvPeJkGQYqO9UMX +iEd108gF+KF8eGXa7eoXoeSP1dSALNvsnLjN/owXGbfzvZxqwXF3EaJlYkYxi0M 9LyvUbWU3xTgMIx2n18qjIgr8EF3kDkrcYEQU2aXZrBFtkJWqgPad6gP6joU9ud1 1fFhbM7yM8Y6qFU6X+gMXlo4+y57o6rmXtohDQjN2tzEPBAvwbwrIVkZUQatMWn5 UT9jDyu3ekge/Woi/Qr5I6boQfCR5rDkl39ZIymb1lhclyGxHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdLB0+G+RAlsGaqCIM9SVIK6VCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRj NjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJmYjllN2UvYmY2NTk0ZjctMWMxNi0z NmI4LWJjYzYtNmY4MTViMmVjNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2 ZjctYjY1NmUyZmI5ZTdlLzM0NGM2NzA0LWIzYmItNGVkOC1iNmY3LWI2NTZlMmZi OWU3ZS5jcmwwHwYDVR0jBBgwFoAU0kXFVdEiCOosnhaU12kn39YnPlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2 ZTJmYjllN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxiWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI79BgDqJ4t/rLulX1ix8QHLdTxOe85zb/lqMppDq57LpIFK5egYKQw+ t9qRyzut+43KH/SBtW52EaOx8uDSxvPXEvTi6flIKsNMamcgqVpAhgsX4fjWdmvP /cPTlpBVyVxY2ae4aCj83Wezo7HcazYb96E5YW94KSVMq9g3qDaEG9X1NLUYu5vP rclY4B5lIJWOMM3Al7lxEaSME6dh+VUl51IUnxlAPjR1guSufM2xL4nzS+gT+8pi DQ8ElUAhhLJoSGLVxAdtWwlnRv5DMKhAYGTgedrKdK3CoCvj1eABPXR6bWmKCaq3 7QXzhXX1WLvyewOrquKw0IQdv6UsedE= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:26 2025 by rpki-client