$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa File: c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa (raw, json) Hash identifier: st/sYck8Rb6leYNyt4yQZVeLdRGOEfeuq6c69GfIacw= Subject key identifier: 0C:DB:7F:0A:30:ED:40:13:47:A0:3A:7D:98:58:29:01:44:3A:F2:E4 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AE9F66C273CF82FE401FF5E80 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 35908 IP address blocks: 100.43.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6c:27:3c:f8:2f:e4:01:ff:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=4828c231-6761-4fb3-bfa0-8dab0bf51bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:07:22:90:98:83:53:4e:20:e1:60:f0:72: c3:de:f6:f8:09:01:e8:63:b1:00:6f:c0:8c:3a:17: 3d:9f:86:7f:69:a2:56:34:31:87:6c:8e:9a:fe:e3: 4b:dd:53:6d:b8:df:89:63:c2:8d:16:ce:fe:1f:59: 4e:53:dd:10:ec:9b:33:bb:e4:9b:4f:66:fd:a3:cf: a6:63:2a:ee:8d:3d:f3:e1:7d:b0:a5:79:00:82:17: 30:eb:cf:91:55:d7:6c:db:c3:ed:d1:1f:e9:e5:65: 8e:9c:b0:ea:ff:d9:41:c6:4b:05:a1:85:26:b9:fa: c1:01:3e:c5:35:af:28:c0:81:c6:e1:12:55:f3:2b: 06:cf:4b:e0:7f:fd:88:2f:61:f7:98:4a:44:48:61: 99:5c:17:1e:69:22:b8:ee:fb:7b:9b:0f:70:d1:f6: 44:0b:6d:a5:15:60:c4:8e:f2:c3:0c:5a:b3:c6:6c: b4:d3:a6:36:9e:4b:84:d2:10:89:d4:75:fd:ce:2f: 1c:a5:d2:b5:3d:c2:01:6f:3c:26:38:07:67:ce:ef: 72:1e:4c:13:28:3a:38:7f:4c:04:ab:5a:9f:d7:64: d7:ce:e0:b5:a8:b6:bd:50:1c:33:e2:8b:2d:f1:e3: 5c:38:26:ab:21:0b:de:9f:ba:b1:63:77:4a:2f:7b: 9c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DB:7F:0A:30:ED:40:13:47:A0:3A:7D:98:58:29:01:44:3A:F2:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 100.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:99:e0:0c:94:ac:27:c0:7c:12:9d:d6:32:49:2e:6b:84:2f: 77:c6:cd:a6:de:54:47:78:7c:e7:81:f3:8e:77:ab:f6:0c:77: 51:a3:16:85:4b:62:e5:06:4c:90:30:cf:7b:00:cf:c1:e2:2f: b9:04:45:15:20:a9:a4:c9:38:f5:dd:70:c7:95:0b:60:26:f1: d3:22:93:8d:13:09:5c:b2:4f:32:a6:72:58:f4:66:f8:a1:8f: 62:6c:cb:7d:9f:18:d4:92:54:86:e2:98:13:de:45:42:0f:b5: 70:d8:bf:97:2b:35:77:af:4b:74:6a:98:7f:84:83:40:fa:9f: 53:81:57:85:18:33:64:7a:17:e3:a0:0e:58:44:8c:56:68:f2: d1:e2:a5:64:27:e6:c4:8a:4d:12:2e:17:68:33:f8:9e:fa:69: c6:87:ae:54:24:88:e9:c9:e1:74:4b:fb:66:ca:39:fc:17:45: 05:57:88:08:1b:69:55:f4:ab:5d:f1:39:79:2c:90:42:4e:4c: 74:1f:ce:37:7c:71:46:7d:bf:2b:6f:f9:26:60:21:a6:2d:6d: bd:35:eb:d1:bb:82:5c:44:f1:b5:48:12:94:61:f6:af:03:14: 99:d4:54:62:65:c3:7f:86:e8:13:17:81:44:06:37:89:b2:db: 4c:76:50:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9mwnPPgv5AH/XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NDgyOGMyMzEtNjc2MS00ZmIzLWJmYTAtOGRhYjBiZjUxYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21EHIpCYg1NOIOFg8HLD3vb4CQHoY7EAb8CM Ohc9n4Z/aaJWNDGHbI6a/uNL3VNtuN+JY8KNFs7+H1lOU90Q7Jszu+SbT2b9o8+m YyrujT3z4X2wpXkAghcw68+RVdds28Pt0R/p5WWOnLDq/9lBxksFoYUmufrBAT7F Na8owIHG4RJV8ysGz0vgf/2IL2H3mEpESGGZXBceaSK47vt7mw9w0fZEC22lFWDE jvLDDFqzxmy006Y2nkuE0hCJ1HX9zi8cpdK1PcIBbzwmOAdnzu9yHkwTKDo4f0wE q1qf12TXzuC1qLa9UBwz4ost8eNcOCarIQven7qxY3dKL3ucnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzbfwow7UATR6A6fZhYKQFEOvLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYzRkODA0MTctMTE3Ny0z MTkwLWEyZjEtNDcyYTViZDRjM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGZCuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALaZ4AyUrCfAfBKd1jJJLmuEL3fGzabeVEd4fOeB8453q/YMd1GjFoVL YuUGTJAwz3sAz8HiL7kERRUgqaTJOPXdcMeVC2Am8dMik40TCVyyTzKmclj0Zvih j2Jsy32fGNSSVIbimBPeRUIPtXDYv5crNXevS3RqmH+Eg0D6n1OBV4UYM2R6F+Og DlhEjFZo8tHipWQn5sSKTRIuF2gz+J76acaHrlQkiOnJ4XRL+2bKOfwXRQVXiAgb aVX0q13xOXkskEJOTHQfzjd8cUZ9vytv+SZgIaYtbb0169G7glxE8bVIEpRh9q8D FJnUVGJlw3+G6BMXgUQGN4my20x2UBw= -----END CERTIFICATE-----Generated at Sun Aug 24 01:12:34 2025 by rpki-client