$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa File: bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa (raw, json) Hash identifier: BrPxUmqeyCIJcUQ48Lq1l6kB8Q5aS4A19loBqlT0RcA= Subject key identifier: B7:23:B3:E6:3F:25:03:D6:B4:AC:58:18:B8:10:E0:E3:3E:86:60:C2 Certificate issuer: /CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Certificate serial: 010D0C9F4328584A90A0BFB2FFAF2F6292C2F1C0 Authority key identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 55076 IP address blocks: 198.37.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:bf:b2:ff:af:2f:62:92:c2:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=06aed771-160f-4c2a-b985-b5f21dbb4cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:98:50:48:dc:e1:7d:63:86:b1:79:d2:e2:9e: 18:8c:1b:ed:cb:27:a5:63:4d:8d:f2:ac:00:d3:0e: f9:cc:25:e0:1c:37:b0:99:d8:81:b2:04:05:b3:b2: 6c:ae:54:19:89:73:2d:25:a0:d3:a4:92:50:26:11: 97:e0:b5:08:0c:3b:a5:7b:df:96:28:51:1d:1a:c0: 14:7d:60:1b:3a:5a:86:67:ba:ae:9f:f9:5a:c5:99: 93:7b:80:f7:4f:d2:f0:ed:56:65:09:2c:3d:0a:dd: fd:d4:ea:fb:e8:6d:d6:70:cf:4d:64:1f:eb:06:b5: 51:78:2a:16:26:43:29:44:71:3b:07:8f:17:ed:7e: b3:b2:7e:06:43:3f:6d:df:bd:2f:a1:e6:8e:24:b6: b2:4d:45:45:55:3b:c9:3c:23:d0:25:74:36:9d:b3: df:a0:2f:3f:e0:31:c0:d2:62:33:ea:0e:ed:56:a7: 7e:83:0c:fa:48:13:4e:05:4e:0a:ca:4c:6b:65:bf: b7:bb:1f:10:6b:70:e7:70:6a:a8:99:86:1b:b9:3b: 8d:31:e9:34:ab:f2:0b:30:c7:c8:bf:dd:9a:48:35: 5f:a6:65:3b:00:96:39:ec:99:79:a4:9b:e8:9b:a5: 42:87:52:00:26:e4:4f:6f:34:c1:6b:02:99:9a:10: 0a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:23:B3:E6:3F:25:03:D6:B4:AC:58:18:B8:10:E0:E3:3E:86:60:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl X509v3 Authority Key Identifier: keyid:D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer sbgp-ipAddrBlock: critical IPv4: 198.37.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:52:59:33:a4:34:f2:22:7a:d7:8e:76:85:b8:b5:1a:7d:c1: cb:4e:2d:e1:e6:55:3d:95:46:d4:eb:88:6f:09:24:cf:cf:11: 67:70:f6:88:60:73:01:db:43:40:34:8b:d0:db:31:45:09:80: ce:3f:f5:54:5c:00:12:27:16:0e:d8:90:f6:d0:c4:ac:74:c5: 77:50:17:70:1e:fb:98:f3:1f:14:c9:e9:21:de:98:e6:a1:36: 05:cc:a0:77:4d:ee:85:18:b8:d2:65:e4:97:07:90:1a:3f:61: 4e:8d:30:df:68:71:50:32:e5:89:7e:40:05:6a:54:19:85:ad: 81:58:10:b2:a8:66:0f:4e:6f:29:04:39:c6:91:99:08:24:cc: da:70:e8:e6:5d:5b:11:b1:d2:4c:89:40:90:78:a3:e5:a1:ca: 75:22:20:ea:a8:fe:01:f1:50:cd:d7:20:ba:32:fb:f5:f0:35: 15:1e:d5:01:09:16:22:1a:0c:4b:4a:b1:1c:8c:1f:4f:77:d6: 85:af:20:02:e6:d1:0b:9e:12:f8:34:4c:75:1c:82:d0:10:ef: 1b:bd:3a:a2:13:90:e9:f1:15:f3:7f:39:56:bc:e5:75:5a:97: 4a:2c:49:86:43:90:3d:9c:ed:f1:76:80:ea:f6:78:2f:d8:dd: f7:40:a0:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoL+y/68vYpLC8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2ZjctYjY1NmUyZmI5 ZTdlMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MDZhZWQ3NzEtMTYwZi00YzJhLWI5ODUtYjVmMjFkYmI0Y2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhphQSNzhfWOGsXnS4p4YjBvtyyelY02N8qwA 0w75zCXgHDewmdiBsgQFs7JsrlQZiXMtJaDTpJJQJhGX4LUIDDule9+WKFEdGsAU fWAbOlqGZ7qun/laxZmTe4D3T9Lw7VZlCSw9Ct391Or76G3WcM9NZB/rBrVReCoW JkMpRHE7B48X7X6zsn4GQz9t370voeaOJLayTUVFVTvJPCPQJXQ2nbPfoC8/4DHA 0mIz6g7tVqd+gwz6SBNOBU4KykxrZb+3ux8Qa3DncGqomYYbuTuNMek0q/ILMMfI v92aSDVfpmU7AJY57Jl5pJvom6VCh1IAJuRPbzTBawKZmhAK0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcjs+Y/JQPWtKxYGLgQ4OM+hmDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRj NjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJmYjllN2UvYmY2NTk0ZjctMWMxNi0z NmI4LWJjYzYtNmY4MTViMmVjNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2 ZjctYjY1NmUyZmI5ZTdlLzM0NGM2NzA0LWIzYmItNGVkOC1iNmY3LWI2NTZlMmZi OWU3ZS5jcmwwHwYDVR0jBBgwFoAU0kXFVdEiCOosnhaU12kn39YnPlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2 ZTJmYjllN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxiWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNSWTOkNPIieteOdoW4tRp9wctOLeHmVT2VRtTriG8JJM/PEWdw9ohg cwHbQ0A0i9DbMUUJgM4/9VRcABInFg7YkPbQxKx0xXdQF3Ae+5jzHxTJ6SHemOah NgXMoHdN7oUYuNJl5JcHkBo/YU6NMN9ocVAy5Yl+QAVqVBmFrYFYELKoZg9ObykE OcaRmQgkzNpw6OZdWxGx0kyJQJB4o+WhynUiIOqo/gHxUM3XILoy+/XwNRUe1QEJ FiIaDEtKsRyMH0931oWvIALm0QueEvg0THUcgtAQ7xu9OqITkOnxFfN/OVa85XVa l0osSYZDkD2c7fF2gOr2eC/Y3fdAoCk= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:28 2025 by rpki-client