$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa File: c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa (raw, json) Hash identifier: SHL63PenQG4dcJaFK+mKJu5lRynNGAtFAdGM0LGBK6w= Subject key identifier: DD:ED:DA:EE:6E:C1:FF:E3:47:57:B0:64:C6:88:8A:98:14:B4:D4:0A Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584E6C6F691AF7521F98B1E10980 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 35908 IP address blocks: 100.43.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:69:1a:f7:52:1f:98:b1:e1:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=f8a2b32c-e387-47f8-8f4c-427cd0126ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:e6:05:58:7d:0d:cb:0e:47:99:a0:d9:37: a1:32:b3:96:65:64:5c:06:ab:0a:c6:20:ee:46:64: 77:29:df:b0:0b:5f:3e:f4:1d:84:5b:ee:0c:3d:1c: 15:8a:c8:51:87:48:b8:cd:d7:40:03:c9:be:af:0b: 84:58:9e:a6:20:49:58:13:1a:ee:e0:ae:a5:6c:09: 92:d6:f3:4f:98:6a:13:6c:f9:7d:c5:12:44:ab:49: 02:88:f5:c7:e0:b2:16:1c:cf:ec:f2:3a:94:e6:30: 25:51:3d:4d:83:c5:37:cd:f4:22:45:8b:52:aa:e5: 79:3a:3f:51:4e:4b:40:29:0c:9d:24:7b:fd:15:28: c4:c4:39:c5:28:a8:a7:58:16:2a:55:86:bc:e7:ea: f5:1a:bd:12:f2:87:27:35:bb:b2:9b:ad:f9:95:91: 9d:9c:80:33:23:24:46:c7:48:4b:e8:2e:af:8e:d7: 6e:03:26:f6:25:4c:11:3b:0f:04:38:9b:9e:10:85: dc:5b:0b:af:4c:8e:92:53:34:a3:69:28:8e:f2:3f: 2c:02:7c:a4:f5:7f:fd:a9:fa:e0:eb:18:b4:42:02: 9d:c3:90:6a:8e:13:f5:03:a8:89:57:27:e4:f8:54: 8a:c8:b8:d3:7c:2d:ba:f4:7c:49:98:26:4c:3c:6d: 32:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:ED:DA:EE:6E:C1:FF:E3:47:57:B0:64:C6:88:8A:98:14:B4:D4:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 100.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c0:4b:1e:f9:57:c3:fe:2c:ee:80:8f:98:a4:e7:f1:78:ed: 65:e4:b6:15:8b:c7:97:cc:dc:16:bb:4b:5b:91:a4:db:79:37: 19:b9:ed:cb:c0:bc:fa:b6:37:22:0a:8c:90:8b:4f:a9:f0:2e: be:e6:d1:ca:b1:ec:1b:38:93:81:0f:10:ad:ed:4a:b5:6d:c1: 83:d9:cc:85:48:c4:8f:81:96:ba:a6:f9:fe:55:e2:6e:63:9d: 08:74:37:84:23:09:41:e6:a7:22:31:12:32:ba:c4:93:aa:42: c7:43:8a:30:48:66:b3:f3:3f:4c:d2:55:cc:b3:02:1f:1a:59: 4c:dc:4d:ad:bc:96:14:73:67:34:43:d2:b8:6f:b7:db:a1:57: b4:d0:ed:6e:20:c2:f9:80:34:b5:55:6f:db:93:08:eb:cd:fd: 7c:5c:41:72:84:44:e8:c2:30:03:6a:7b:cb:4c:47:00:80:94: 48:17:12:40:3d:f6:cc:39:2e:9f:66:c2:75:d3:a2:cc:d7:c2: 7d:0e:16:a5:82:43:79:8f:fd:c9:97:7a:03:14:3b:05:d8:5c: dd:a7:6d:23:91:a3:4f:4b:2d:b3:65:ff:bf:b8:22:79:31:f3: 22:7c:7d:27:84:26:1e:d4:ea:35:66:bb:66:0b:79:c4:d2:94: 3a:34:be:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2ka91IfmLHhCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk ZjhhMmIzMmMtZTM4Ny00N2Y4LThmNGMtNDI3Y2QwMTI2ZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZjmBVh9DcsOR5mg2TehMrOWZWRcBqsKxiDu RmR3Kd+wC18+9B2EW+4MPRwVishRh0i4zddAA8m+rwuEWJ6mIElYExru4K6lbAmS 1vNPmGoTbPl9xRJEq0kCiPXH4LIWHM/s8jqU5jAlUT1Ng8U3zfQiRYtSquV5Oj9R TktAKQydJHv9FSjExDnFKKinWBYqVYa85+r1Gr0S8ocnNbuym635lZGdnIAzIyRG x0hL6C6vjtduAyb2JUwROw8EOJueEIXcWwuvTI6SUzSjaSiO8j8sAnyk9X/9qfrg 6xi0QgKdw5BqjhP1A6iJVyfk+FSKyLjTfC269HxJmCZMPG0yLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3t2u5uwf/jR1ewZMaIipgUtNQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYzRkODA0MTctMTE3Ny0z MTkwLWEyZjEtNDcyYTViZDRjM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGZCuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDASx75V8P+LO6Aj5ik5/F47WXkthWLx5fM3Ba7S1uRpNt5Nxm57cvA vPq2NyIKjJCLT6nwLr7m0cqx7Bs4k4EPEK3tSrVtwYPZzIVIxI+Blrqm+f5V4m5j nQh0N4QjCUHmpyIxEjK6xJOqQsdDijBIZrPzP0zSVcyzAh8aWUzcTa28lhRzZzRD 0rhvt9uhV7TQ7W4gwvmANLVVb9uTCOvN/XxcQXKEROjCMANqe8tMRwCAlEgXEkA9 9sw5Lp9mwnXToszXwn0OFqWCQ3mP/cmXegMUOwXYXN2nbSORo09LLbNl/7+4Inkx 8yJ8fSeEJh7U6jVmu2YLecTSlDo0vsM= -----END CERTIFICATE-----Generated at Fri Jul 24 10:47:40 2026 by rpki-client