$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa File: bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa (raw, json) Hash identifier: UTegCEbwp0UHsGXEeQqiVBDmWI93XH9/yOMX85EYErk= Subject key identifier: 18:32:F0:0B:FC:C5:2E:5E:D3:8F:BF:48:EC:FA:1B:F0:21:26:2B:0C Certificate issuer: /CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Certificate serial: 010D0C9F43285849B149F434BF269857AC0D2400 Authority key identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 55076 IP address blocks: 198.37.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f4:34:bf:26:98:57:ac:0d:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=bae1dd4d-8498-423f-bf3b-78b5f731723e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:17:03:1f:28:f3:3e:83:42:0b:40:80:f2: 83:ad:ce:a4:d5:83:e8:3a:b2:41:e9:4c:4e:05:fd: a8:91:e2:a3:4e:9f:b4:38:a3:c8:60:1e:61:e8:85: 60:b3:b5:5e:81:92:64:38:50:0b:7e:81:82:4e:38: 56:b2:04:c2:cc:b6:1f:56:69:79:8e:ca:2f:bf:0e: 27:47:0b:6a:f7:74:ff:a1:81:3a:f3:e9:a5:a8:ae: 34:d6:dd:dd:2a:1f:3a:01:e8:e3:e8:00:f0:da:83: e1:11:55:cd:62:31:4d:e0:2d:06:2b:20:c0:04:e3: e8:3f:fa:b6:fb:0a:be:d0:04:a5:66:51:a0:bf:bc: 44:98:77:06:6b:82:7b:1d:54:50:ab:80:36:0d:9d: 62:ab:9b:c6:4a:bf:0d:d9:ce:86:fb:0d:60:3a:d7: 91:f2:04:0c:8c:55:4b:8b:1f:b5:40:4d:38:25:a0: be:e8:46:b7:86:8a:2e:ed:59:e3:e8:aa:90:a4:37: 6a:4d:50:d4:58:4a:a9:14:57:b2:af:c9:89:a7:2b: 5a:bf:ee:0c:8e:2a:66:4a:30:42:58:78:bc:3a:eb: c4:74:f6:5e:0c:11:cf:6d:ab:a0:54:d4:5b:7a:c6: 88:91:97:53:c5:64:c5:d1:67:12:2e:ad:b0:c6:6a: 62:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:32:F0:0B:FC:C5:2E:5E:D3:8F:BF:48:EC:FA:1B:F0:21:26:2B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl X509v3 Authority Key Identifier: keyid:D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer sbgp-ipAddrBlock: critical IPv4: 198.37.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c4:f3:7c:26:28:25:cf:d1:74:0d:8e:ea:f8:f0:63:17:4b: 63:82:a0:d3:be:92:0f:f7:68:47:a3:1c:23:64:c9:29:46:48: 04:3a:6d:8c:3d:c7:5c:57:fb:eb:22:3c:ec:3a:16:52:3c:ee: 3a:7f:86:38:1f:55:30:06:2b:94:91:9f:a3:8c:1d:4b:89:ea: c5:da:48:cf:eb:c3:8f:4b:58:68:72:03:60:11:d7:d0:8a:97: ef:da:33:26:f2:57:37:92:41:d6:05:90:a6:0f:ba:4d:40:20: 24:bd:ef:c9:ba:41:84:1b:c8:95:76:fd:df:a9:e8:1b:f0:12: c6:4c:cb:fe:9e:f2:9c:30:cb:00:ef:9d:84:f8:a3:06:35:56: 02:88:15:34:44:a3:47:04:4f:51:36:1f:38:f5:f5:9c:11:74: 18:21:2c:6f:71:4c:13:37:ed:3b:6b:10:c9:98:5d:86:48:dd: 9d:1a:91:f9:85:da:04:4e:da:ec:d1:60:24:22:01:a3:80:a2: 62:51:00:f6:74:d4:e7:f4:b1:95:97:c3:c1:c0:43:61:7b:37: fd:b7:25:f3:81:a3:4c:c4:3b:b5:87:a9:54:40:28:87:d9:22: 87:a8:54:c8:3c:de:b3:b7:44:78:4c:49:cb:48:8a:bf:2f:eb: 1a:83:8e:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfQ0vyaYV6wNJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2ZjctYjY1NmUyZmI5 ZTdlMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmFlMWRkNGQtODQ5OC00MjNmLWJmM2ItNzhiNWY3MzE3MjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsgXAx8o8z6DQgtAgPKDrc6k1YPoOrJB6UxO Bf2okeKjTp+0OKPIYB5h6IVgs7VegZJkOFALfoGCTjhWsgTCzLYfVml5jsovvw4n Rwtq93T/oYE68+mlqK401t3dKh86Aejj6ADw2oPhEVXNYjFN4C0GKyDABOPoP/q2 +wq+0ASlZlGgv7xEmHcGa4J7HVRQq4A2DZ1iq5vGSr8N2c6G+w1gOteR8gQMjFVL ix+1QE04JaC+6Ea3hoou7Vnj6KqQpDdqTVDUWEqpFFeyr8mJpytav+4MjipmSjBC WHi8OuvEdPZeDBHPbaugVNRbesaIkZdTxWTF0WcSLq2wxmpinwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgy8Av8xS5e04+/SOz6G/AhJisMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRj NjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJmYjllN2UvYmY2NTk0ZjctMWMxNi0z NmI4LWJjYzYtNmY4MTViMmVjNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2 ZjctYjY1NmUyZmI5ZTdlLzM0NGM2NzA0LWIzYmItNGVkOC1iNmY3LWI2NTZlMmZi OWU3ZS5jcmwwHwYDVR0jBBgwFoAU0kXFVdEiCOosnhaU12kn39YnPlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2 ZTJmYjllN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxiWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjE83wmKCXP0XQNjur48GMXS2OCoNO+kg/3aEejHCNkySlGSAQ6bYw9 x1xX++siPOw6FlI87jp/hjgfVTAGK5SRn6OMHUuJ6sXaSM/rw49LWGhyA2AR19CK l+/aMybyVzeSQdYFkKYPuk1AICS978m6QYQbyJV2/d+p6BvwEsZMy/6e8pwwywDv nYT4owY1VgKIFTREo0cET1E2Hzj19ZwRdBghLG9xTBM37TtrEMmYXYZI3Z0akfmF 2gRO2uzRYCQiAaOAomJRAPZ01Of0sZWXw8HAQ2F7N/23JfOBo0zEO7WHqVRAKIfZ IoeoVMg83rO3RHhMSctIir8v6xqDjlg= -----END CERTIFICATE-----Generated at Wed May 7 13:12:46 2025 by rpki-client