$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa File: c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa (raw, json) Hash identifier: nuOq/E6aGz+lSXxiui1sBeJDbob+RXQzY5bqB46Jplo= Subject key identifier: E4:58:BA:35:62:F1:84:FE:49:4E:C5:42:68:A0:88:E2:F9:C8:55:9D Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584D8C2A9F80037B239C36EE6E80 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 35908 IP address blocks: 100.43.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:9f:80:03:7b:23:9c:36:ee:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=89e84b01-aedd-4c17-84ec-eaddb22476eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:04:df:09:d8:13:cc:e4:e4:e4:65:64:be:40: 3b:1d:d9:fe:f8:e4:3a:7b:cd:fb:f8:1e:63:2a:62: 66:66:ba:c3:f2:74:68:27:2b:85:a5:6c:fd:71:fe: de:6c:56:10:fd:9c:35:20:ec:13:40:ce:51:54:54: 56:f8:15:8f:4e:df:26:a7:32:ed:e1:d3:cd:34:f1: 62:e8:0a:c1:52:49:95:48:0f:f5:bf:58:c8:cc:7c: 92:ff:7c:d6:e0:32:4d:31:28:55:4c:65:cb:b2:6e: 8b:61:9a:9d:51:0c:43:3c:6d:62:0a:cd:ee:c3:ba: 8b:78:8e:1f:13:1d:6d:25:fa:20:98:5b:c2:87:48: f8:77:eb:c6:64:df:97:79:3d:aa:1a:3e:8c:56:c6: 04:b9:e0:71:4c:81:3f:d9:36:d4:8c:da:29:b4:0a: 07:20:47:22:03:88:c4:f4:87:d3:75:6a:49:ae:a0: 1f:dd:37:6a:50:95:e2:47:0b:1d:71:83:7f:b4:a4: 5d:0c:3b:b9:03:14:bd:12:e1:ff:42:f4:87:6c:bd: 3c:a2:e8:7f:da:cc:78:0a:25:07:80:1b:5d:3e:1a: fe:6c:df:3e:eb:12:4f:3d:d7:3d:f4:06:b2:18:3a: 1c:5c:91:6d:10:b3:84:bf:9a:5a:99:4b:77:f5:86: d0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:58:BA:35:62:F1:84:FE:49:4E:C5:42:68:A0:88:E2:F9:C8:55:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 100.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d0:20:f8:d9:6a:3e:4c:b3:ed:4e:7e:b2:3f:d5:c1:92:5a: 9c:67:25:46:da:7e:35:40:3b:40:0e:88:2b:f1:c5:f2:27:28: 05:6d:07:97:d6:c4:d7:9b:da:74:7e:e6:f2:43:90:bc:92:56: 4d:8a:ab:45:01:79:ec:ca:35:c1:95:53:c7:0b:14:c8:c4:a2: 8f:eb:7c:70:ff:ae:77:2a:78:61:0b:ed:df:b0:25:c4:16:84: 6a:10:68:b6:37:da:be:1c:c9:64:11:83:e6:e7:43:28:58:a2: d3:ef:67:85:31:e4:3b:be:ab:c7:4d:58:24:7c:cb:66:ab:13: 1b:c7:e9:8a:ea:85:61:ad:a1:13:df:ee:dd:38:ec:02:03:66: d0:6f:5a:00:ee:d2:c6:66:1c:62:5c:c7:61:4f:bb:65:65:af: 30:af:e5:75:18:94:f1:60:f2:34:5b:72:18:46:08:ba:5b:fc: 5e:d1:61:bd:34:72:95:8b:e5:2f:78:20:ce:28:5a:15:6c:01: 84:15:96:fa:2b:28:a5:ee:f4:bd:cb:d6:f9:a6:e2:ae:a7:d3: 31:c9:29:31:98:f5:24:99:40:c6:31:44:29:64:67:d9:71:15: 49:07:61:c1:94:ce:94:2b:3d:c0:6a:49:dc:6e:d0:b4:c0:05: f1:43:46:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKp+AA3sjnDbuboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk ODllODRiMDEtYWVkZC00YzE3LTg0ZWMtZWFkZGIyMjQ3NmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ATfCdgTzOTk5GVkvkA7Hdn++OQ6e837+B5j KmJmZrrD8nRoJyuFpWz9cf7ebFYQ/Zw1IOwTQM5RVFRW+BWPTt8mpzLt4dPNNPFi 6ArBUkmVSA/1v1jIzHyS/3zW4DJNMShVTGXLsm6LYZqdUQxDPG1iCs3uw7qLeI4f Ex1tJfogmFvCh0j4d+vGZN+XeT2qGj6MVsYEueBxTIE/2TbUjNoptAoHIEciA4jE 9IfTdWpJrqAf3TdqUJXiRwsdcYN/tKRdDDu5AxS9EuH/QvSHbL08ouh/2sx4CiUH gBtdPhr+bN8+6xJPPdc99AayGDocXJFtELOEv5pamUt39YbQOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORYujVi8YT+SU7FQmigiOL5yFWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYzRkODA0MTctMTE3Ny0z MTkwLWEyZjEtNDcyYTViZDRjM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGZCuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjQIPjZaj5Ms+1OfrI/1cGSWpxnJUbafjVAO0AOiCvxxfInKAVtB5fW xNeb2nR+5vJDkLySVk2Kq0UBeezKNcGVU8cLFMjEoo/rfHD/rncqeGEL7d+wJcQW hGoQaLY32r4cyWQRg+bnQyhYotPvZ4Ux5Du+q8dNWCR8y2arExvH6YrqhWGtoRPf 7t047AIDZtBvWgDu0sZmHGJcx2FPu2VlrzCv5XUYlPFg8jRbchhGCLpb/F7RYb00 cpWL5S94IM4oWhVsAYQVlvorKKXu9L3L1vmm4q6n0zHJKTGY9SSZQMYxRClkZ9lx FUkHYcGUzpQrPcBqSdxu0LTABfFDRsk= -----END CERTIFICATE-----Generated at Wed May 13 05:44:45 2026 by rpki-client