
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa
File: bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa (raw, json)
Hash identifier: dfP+efRRuSfbAcLth0+JcerTU7pfwm2NHn9Kcn5zbOQ=
Subject key identifier: AC:35:EE:DA:93:9A:3A:56:52:DC:F4:30:85:2C:F5:87:F4:59:D6:64
Certificate issuer: /CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e
Certificate serial: 010D0C9F4328584EB2B1BECDAE00E40977FEAC28
Authority key identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 55076
IP address blocks: 198.37.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 14 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:be:cd:ae:00:e4:09:77:fe:ac:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=ca706835-5370-4a5d-b711-0618c9e39562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e8:47:7d:9b:21:cf:5d:fa:ce:53:17:c8:5a:
6d:f3:81:7d:1b:8b:cb:6b:a0:cc:86:dd:63:63:49:
b5:ba:7b:c9:33:f8:fa:b9:7b:d8:ba:24:66:71:32:
ce:b2:ac:ac:92:bd:1f:24:ee:46:56:82:52:99:54:
82:18:4a:b5:a1:3f:a4:5b:d5:24:75:9a:c9:f0:d2:
65:5d:4b:2c:e3:f2:7d:0a:9c:41:38:f1:32:0a:6c:
5f:df:87:7e:70:81:12:03:9c:ef:36:88:39:34:34:
b9:23:16:2a:22:6c:08:c4:6a:4c:08:52:b2:7a:fe:
21:aa:8e:f9:57:d4:08:15:24:d1:bf:f2:cf:aa:1c:
ee:6a:92:fb:28:9f:14:52:78:ed:e1:3d:0b:ba:d1:
72:cb:d1:9b:3e:10:6f:c0:65:60:5a:ad:ab:ec:15:
a0:91:99:d7:72:d1:19:ed:5c:21:64:5f:2d:8e:06:
d1:5a:ae:82:22:02:39:8d:5b:39:1e:7b:e2:6f:f4:
d4:04:52:04:ce:1d:26:95:cc:b9:0f:40:cd:f1:7b:
cd:4c:42:14:e5:15:cf:8e:c6:f8:29:11:c4:2a:5d:
48:90:a4:84:8a:a9:cf:00:e7:fa:aa:63:4e:79:53:
69:51:3e:14:60:5d:39:8d:a3:05:1c:b3:1c:9f:5b:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:35:EE:DA:93:9A:3A:56:52:DC:F4:30:85:2C:F5:87:F4:59:D6:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl
X509v3 Authority Key Identifier:
keyid:D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer
sbgp-ipAddrBlock: critical
IPv4:
198.37.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:91:f9:b8:ae:2f:18:68:f1:85:33:03:c1:3b:ba:f0:18:27:
0e:ad:d1:4e:81:d9:e6:37:9a:46:00:e7:76:db:9c:d8:22:75:
e9:bd:7e:b4:42:ec:34:64:2c:96:04:f5:83:59:f3:ed:62:93:
ba:2f:ed:eb:ab:11:b0:0b:43:ab:08:11:36:ef:25:98:d7:3b:
ab:db:92:38:f4:57:b1:ec:af:26:39:1a:ab:32:d0:e0:6c:40:
58:ba:bd:5e:ab:62:c2:c2:fb:c4:99:7c:6a:7c:34:dc:a9:29:
f6:48:9a:5f:48:ab:77:c2:d1:7c:48:94:f3:0d:ca:b0:0c:81:
41:25:35:98:04:2e:07:b3:bf:c1:f3:3e:25:eb:08:8a:3a:46:
62:ed:27:a4:07:51:db:ac:16:da:19:75:f5:e8:cb:30:ea:2e:
79:9f:39:38:6c:cc:7f:20:74:e6:49:3f:34:d1:57:e6:0c:bd:
72:61:06:d5:fe:6c:d9:a0:7a:7a:8b:0b:16:cb:50:42:8a:ca:
6d:df:6c:a2:ec:77:1b:2e:1d:f6:e5:53:6a:8e:30:0f:f9:4c:
45:92:97:71:07:a0:e6:34:e9:71:4e:61:85:1a:40:46:11:5b:
92:08:09:79:59:e9:41:13:24:4e:ed:42:4f:d5:8d:0a:89:85:
5c:2d:13:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysb7NrgDkCXf+rCgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2ZjctYjY1NmUyZmI5
ZTdlMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
Y2E3MDY4MzUtNTM3MC00YTVkLWI3MTEtMDYxOGM5ZTM5NTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjehHfZshz136zlMXyFpt84F9G4vLa6DMht1j
Y0m1unvJM/j6uXvYuiRmcTLOsqyskr0fJO5GVoJSmVSCGEq1oT+kW9UkdZrJ8NJl
XUss4/J9CpxBOPEyCmxf34d+cIESA5zvNog5NDS5IxYqImwIxGpMCFKyev4hqo75
V9QIFSTRv/LPqhzuapL7KJ8UUnjt4T0LutFyy9GbPhBvwGVgWq2r7BWgkZnXctEZ
7VwhZF8tjgbRWq6CIgI5jVs5Hnvib/TUBFIEzh0mlcy5D0DN8XvNTEIU5RXPjsb4
KRHEKl1IkKSEiqnPAOf6qmNOeVNpUT4UYF05jaMFHLMcn1t1vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKw17tqTmjpWUtz0MIUs9Yf0WdZkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRj
NjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJmYjllN2UvYmY2NTk0ZjctMWMxNi0z
NmI4LWJjYzYtNmY4MTViMmVjNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2
ZjctYjY1NmUyZmI5ZTdlLzM0NGM2NzA0LWIzYmItNGVkOC1iNmY3LWI2NTZlMmZi
OWU3ZS5jcmwwHwYDVR0jBBgwFoAU0kXFVdEiCOosnhaU12kn39YnPlAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2
ZTJmYjllN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxiWIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2R+biuLxho8YUzA8E7uvAYJw6t0U6B2eY3mkYA53bbnNgidem9frRC
7DRkLJYE9YNZ8+1ik7ov7eurEbALQ6sIETbvJZjXO6vbkjj0V7HsryY5Gqsy0OBs
QFi6vV6rYsLC+8SZfGp8NNypKfZIml9Iq3fC0XxIlPMNyrAMgUElNZgELgezv8Hz
PiXrCIo6RmLtJ6QHUdusFtoZdfXoyzDqLnmfOThszH8gdOZJPzTRV+YMvXJhBtX+
bNmgenqLCxbLUEKKym3fbKLsdxsuHfblU2qOMA/5TEWSl3EHoOY06XFOYYUaQEYR
W5IICXlZ6UETJE7tQk/VjQqJhVwtEzI=
-----END CERTIFICATE-----
Generated at Thu Aug 13 21:54:33 2026 by rpki-client