$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa File: bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa (raw, json) Hash identifier: N3n1ZDXGIAykpkeLu8JT/2f9BQ/5iRzgNBUH7+aRmlE= Subject key identifier: 08:63:DB:54:42:66:13:C6:72:7A:51:E6:6C:2B:4D:AE:97:D0:F3:FD Certificate issuer: /CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Certificate serial: 010D0C9F4328584D300A5EC50D0318DA3663FA80 Authority key identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 55076 IP address blocks: 198.37.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:5e:c5:0d:03:18:da:36:63:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=82942e01-a4f2-4b71-a903-a911171c83ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:66:4c:97:d0:3e:de:fc:72:f7:c7:cf:b9: 8a:5f:8e:e7:5a:7a:1b:45:5e:49:f8:21:a1:d8:4c: d2:84:a0:a4:7a:f4:78:19:a0:a4:c6:4d:96:cf:b7: 82:96:82:75:3b:ee:90:42:2a:a0:00:ac:16:54:c1: ef:28:7f:72:05:7a:7c:b5:89:65:ef:80:7f:86:3b: 3d:11:78:68:52:d4:52:0b:05:f7:d3:50:d3:46:14: c3:2e:73:54:af:46:b1:ca:c0:fc:95:8c:07:64:54: 89:8f:35:d8:f3:16:2e:75:9b:de:57:9e:2c:94:1e: 84:23:8a:b3:80:08:62:1e:4a:90:f2:14:d1:1d:64: 2a:a1:3f:ff:43:05:9b:a8:3b:17:2d:86:48:24:50: 68:42:5c:6c:4c:7b:27:6d:4e:18:c9:50:da:8c:a4: 35:9c:bc:d7:fa:c1:7e:0f:1a:52:5f:c3:e8:f5:b5: b9:5c:46:b4:49:6a:15:4d:b5:3f:bc:35:0c:0e:f9: d5:90:4b:6a:ba:f6:14:96:fa:23:25:a8:e0:14:dc: 33:64:76:13:38:fc:e0:d4:5b:a6:cf:d0:61:f8:0d: 14:8b:c1:04:0c:24:0d:db:d4:4f:c6:9d:d0:c8:6c: f6:fe:95:cd:cf:31:1f:ee:a0:f3:1f:77:0b:fa:36: 59:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:63:DB:54:42:66:13:C6:72:7A:51:E6:6C:2B:4D:AE:97:D0:F3:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl X509v3 Authority Key Identifier: keyid:D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer sbgp-ipAddrBlock: critical IPv4: 198.37.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4f:3b:c4:d4:08:26:a5:05:3a:9b:04:f6:4a:76:68:df:b1: 3a:34:d3:12:9e:0d:63:fc:cd:54:fc:51:81:25:95:ac:c2:ef: d6:0d:05:4f:0c:4e:73:ea:61:d8:5c:78:fa:7b:96:bd:d9:61: 43:0f:3a:a4:0a:ce:4b:0e:86:be:f7:df:67:c4:8d:47:fb:13: 48:40:6a:66:e5:47:5c:61:ac:71:94:7a:fd:84:a4:c6:94:27: d7:2a:03:cb:b7:e1:bf:bd:ba:0c:90:60:9e:8f:1a:e7:8a:ef: 8b:3a:21:8e:d8:42:40:a8:c7:de:0b:13:12:7e:de:a8:7b:bc: 8b:16:42:48:b5:66:5f:e0:b3:cd:05:3c:f9:eb:3c:79:c9:32: eb:bd:64:86:18:b5:8a:d2:38:bf:d7:ea:8a:f3:d9:fd:c4:ce: 74:46:ca:c4:ab:fc:c1:8e:ff:7b:34:81:f0:9d:3c:46:fc:90: de:e2:62:1f:38:28:8e:4d:a3:ba:1c:9e:6f:aa:17:77:20:4c: cd:72:73:90:7d:c0:d6:43:ec:52:4a:6a:4d:cf:91:b0:70:41: e4:5f:50:48:97:ee:dc:68:1c:6d:e3:55:c8:06:93:8f:52:82: 80:a0:fd:de:c0:c5:4a:4d:9d:02:04:f0:84:9f:60:e2:1d:ba: 9c:7d:41:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCl7FDQMY2jZj+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2ZjctYjY1NmUyZmI5 ZTdlMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ODI5NDJlMDEtYTRmMi00YjcxLWE5MDMtYTkxMTE3MWM4M2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE9mTJfQPt78cvfHz7mKX47nWnobRV5J+CGh 2EzShKCkevR4GaCkxk2Wz7eCloJ1O+6QQiqgAKwWVMHvKH9yBXp8tYll74B/hjs9 EXhoUtRSCwX301DTRhTDLnNUr0axysD8lYwHZFSJjzXY8xYudZveV54slB6EI4qz gAhiHkqQ8hTRHWQqoT//QwWbqDsXLYZIJFBoQlxsTHsnbU4YyVDajKQ1nLzX+sF+ DxpSX8Po9bW5XEa0SWoVTbU/vDUMDvnVkEtquvYUlvojJajgFNwzZHYTOPzg1Fum z9Bh+A0Ui8EEDCQN29RPxp3QyGz2/pXNzzEf7qDzH3cL+jZZgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhj21RCZhPGcnpR5mwrTa6X0PP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRj NjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJmYjllN2UvYmY2NTk0ZjctMWMxNi0z NmI4LWJjYzYtNmY4MTViMmVjNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2 ZjctYjY1NmUyZmI5ZTdlLzM0NGM2NzA0LWIzYmItNGVkOC1iNmY3LWI2NTZlMmZi OWU3ZS5jcmwwHwYDVR0jBBgwFoAU0kXFVdEiCOosnhaU12kn39YnPlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2 ZTJmYjllN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxiWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1PO8TUCCalBTqbBPZKdmjfsTo00xKeDWP8zVT8UYEllazC79YNBU8M TnPqYdhcePp7lr3ZYUMPOqQKzksOhr7332fEjUf7E0hAamblR1xhrHGUev2EpMaU J9cqA8u34b+9ugyQYJ6PGueK74s6IY7YQkCox94LExJ+3qh7vIsWQki1Zl/gs80F PPnrPHnJMuu9ZIYYtYrSOL/X6orz2f3EznRGysSr/MGO/3s0gfCdPEb8kN7iYh84 KI5No7ocnm+qF3cgTM1yc5B9wNZD7FJKak3PkbBwQeRfUEiX7txoHG3jVcgGk49S goCg/d7AxUpNnQIE8ISfYOIdupx9QWI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:53 2026 by rpki-client