$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa File: bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa (raw, json) Hash identifier: TFOu+gkAg6dq7aTALSJkbgscpz+qHEH9uCHPV4XhPjo= Subject key identifier: 23:E2:5A:92:A7:F2:EA:04:B8:AD:CE:BB:34:33:B7:43:BD:F7:19:4B Certificate issuer: /CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Certificate serial: 010D0C9F4328584E104EEDB3796096D92D159800 Authority key identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 55076 IP address blocks: 198.37.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:ed:b3:79:60:96:d9:2d:15:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=04ecf9c7-5a27-4aa2-8179-936d6737241c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c6:82:89:f3:1e:5e:03:20:c2:24:42:a1:33: 87:1e:d8:93:46:65:c9:4e:b2:32:24:8f:e3:95:95: 9c:d9:a8:2d:61:24:f9:c6:80:9f:98:6b:bb:68:95: a5:88:3f:85:35:67:6e:8f:32:ad:2e:e9:4b:4d:11: 2f:f9:90:37:08:95:1e:c8:70:c7:dd:62:a5:f9:ea: d4:60:ba:95:54:ca:fd:f8:30:ea:cd:54:72:36:0c: 60:a1:1c:cf:4d:cd:ff:54:d2:63:cd:ee:6b:a9:c3: 78:7e:c7:1b:88:aa:1c:26:af:1e:b9:be:2c:77:4d: 1b:c9:e9:56:9c:04:ad:45:ed:bf:30:5b:61:81:d6: ad:08:f5:b7:bc:f6:ab:27:ce:bf:95:a7:52:4c:2e: 70:9e:eb:ca:06:86:74:b5:78:7f:14:11:18:d3:b9: 83:7f:c9:9a:70:ab:0d:d2:fc:9d:f1:5b:cd:b4:7c: fc:ea:32:09:82:e8:22:49:1a:b9:50:0a:0b:94:d0: 5b:b8:a9:bb:67:d1:56:62:ad:1e:83:f0:8b:92:8f: 60:d3:94:7d:2c:4a:05:81:ee:c6:49:96:8d:d4:2b: 2d:0a:6b:f1:cb:e4:6b:a0:76:aa:1f:61:af:e1:f1: 1b:54:ca:95:84:59:ea:6b:9b:f5:29:fc:3e:2b:d6: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E2:5A:92:A7:F2:EA:04:B8:AD:CE:BB:34:33:B7:43:BD:F7:19:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl X509v3 Authority Key Identifier: keyid:D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer sbgp-ipAddrBlock: critical IPv4: 198.37.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:41:ce:65:dc:7d:f2:ce:91:a6:a8:b3:23:be:7d:90:b1:7d: f0:52:6c:6a:fc:7b:5c:b6:82:bd:66:17:29:60:dd:55:18:a9: 00:6f:10:3d:21:12:a4:e4:51:93:2f:58:37:ef:b6:5c:19:ed: 80:ba:fb:36:07:1a:9f:3e:d3:4d:e4:1b:6f:7a:37:b2:35:0d: 32:97:b3:84:41:c4:d6:ae:c0:9f:21:17:0e:53:75:b5:e4:19: 7d:1f:94:bc:4c:1c:30:3b:1a:96:1a:41:da:35:41:d6:62:63: 8c:fa:2d:3f:31:fb:bc:c5:16:e7:31:eb:d0:7e:f9:fa:96:8b: 32:6c:74:77:fb:64:85:71:24:35:e9:c6:f5:7a:5e:83:74:3a: 90:a9:59:fe:f4:6c:70:cd:e0:13:71:02:a1:b4:2a:70:14:2f: 8c:76:e2:72:8c:08:40:ea:b9:19:8d:35:05:08:c3:1d:fc:a2: 70:fa:dd:16:10:6c:d9:a1:e1:38:6a:b8:a9:84:e9:e2:5c:bf: ec:09:24:25:4d:5a:17:f5:44:c6:79:7b:10:85:74:ff:13:99: 56:c7:a1:d1:2b:3c:78:ac:d7:ef:71:91:da:73:34:d6:dd:23: 07:5c:6a:26:68:52:00:05:46:d3:25:8c:e2:33:ba:2d:cd:3d: 30:dd:a7:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTu2zeWCW2S0VmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2ZjctYjY1NmUyZmI5 ZTdlMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MDRlY2Y5YzctNWEyNy00YWEyLTgxNzktOTM2ZDY3MzcyNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMaCifMeXgMgwiRCoTOHHtiTRmXJTrIyJI/j lZWc2agtYST5xoCfmGu7aJWliD+FNWdujzKtLulLTREv+ZA3CJUeyHDH3WKl+erU YLqVVMr9+DDqzVRyNgxgoRzPTc3/VNJjze5rqcN4fscbiKocJq8eub4sd00byelW nAStRe2/MFthgdatCPW3vParJ86/ladSTC5wnuvKBoZ0tXh/FBEY07mDf8macKsN 0vyd8VvNtHz86jIJgugiSRq5UAoLlNBbuKm7Z9FWYq0eg/CLko9g05R9LEoFge7G SZaN1CstCmvxy+RroHaqH2Gv4fEbVMqVhFnqa5v1Kfw+K9ZGpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPiWpKn8uoEuK3OuzQzt0O99xlLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRj NjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJmYjllN2UvYmY2NTk0ZjctMWMxNi0z NmI4LWJjYzYtNmY4MTViMmVjNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2 ZjctYjY1NmUyZmI5ZTdlLzM0NGM2NzA0LWIzYmItNGVkOC1iNmY3LWI2NTZlMmZi OWU3ZS5jcmwwHwYDVR0jBBgwFoAU0kXFVdEiCOosnhaU12kn39YnPlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2 ZTJmYjllN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxiWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFBzmXcffLOkaaosyO+fZCxffBSbGr8e1y2gr1mFylg3VUYqQBvED0h EqTkUZMvWDfvtlwZ7YC6+zYHGp8+003kG296N7I1DTKXs4RBxNauwJ8hFw5TdbXk GX0flLxMHDA7GpYaQdo1QdZiY4z6LT8x+7zFFucx69B++fqWizJsdHf7ZIVxJDXp xvV6XoN0OpCpWf70bHDN4BNxAqG0KnAUL4x24nKMCEDquRmNNQUIwx38onD63RYQ bNmh4ThquKmE6eJcv+wJJCVNWhf1RMZ5exCFdP8TmVbHodErPHis1+9xkdpzNNbd IwdcaiZoUgAFRtMljOIzui3NPTDdp/w= -----END CERTIFICATE-----Generated at Sat Jun 13 14:22:10 2026 by rpki-client