$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa File: c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa (raw, json) Hash identifier: 8bPE/JWc9YzoiuwHnizv2zuDbvZecnOpIN2JOcO6z4s= Subject key identifier: 99:93:29:74:31:AE:12:61:23:E8:7A:51:25:AA:B7:C0:6A:56:A6:ED Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584A093AA00300B7CB4B42718B00 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 35908 IP address blocks: 100.43.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a0:03:00:b7:cb:4b:42:71:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=bd7deb6e-e068-42ff-b63b-5b07c1cbc1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:8f:a2:11:c4:fd:d5:66:64:bd:c2:b4:36: 74:c4:3f:78:39:b3:0e:e1:48:a9:87:40:df:3b:0f: f5:b0:c9:06:13:da:5a:c5:a7:c6:7a:db:5a:6c:e8: 79:3b:a5:82:fe:c4:f5:cd:34:c2:e5:8f:7f:bd:21: d2:28:6a:45:2f:ea:24:8e:76:ab:57:14:e0:8a:d4: b4:c0:56:7f:31:8f:95:cb:21:66:05:50:b9:12:93: 75:bf:a0:8f:4a:db:b9:24:db:80:e9:b8:f3:1d:16: 84:31:dc:f9:d5:58:83:f0:4d:f4:ed:2c:3d:de:c7: ed:22:5b:69:6b:f2:bd:a2:bb:c6:0e:94:1d:16:84: 58:3f:20:5c:4d:29:c4:3e:be:31:1f:64:10:83:a3: 95:08:53:e0:2b:9a:26:33:18:8a:a0:0b:37:34:09: 9d:14:a8:6c:9c:05:32:bb:df:08:28:5a:dd:19:99: 3d:73:db:32:3b:d8:03:b4:f3:06:2b:36:a2:7f:a0: 07:f2:c4:59:d4:f8:4f:f7:d1:b0:64:b4:16:ef:ef: bc:a3:a8:44:08:fa:5d:46:fd:50:bc:0d:22:fe:52: f6:50:43:66:19:61:d5:96:04:8a:b6:c4:e7:2e:89: 33:92:de:82:67:25:1f:71:41:1d:e4:5b:db:06:5f: 6d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:93:29:74:31:AE:12:61:23:E8:7A:51:25:AA:B7:C0:6A:56:A6:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 100.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:a4:cb:2e:f3:2a:22:e1:d7:02:61:30:ce:cb:e5:9b:04:02: 4e:54:1a:68:d4:1f:86:50:c3:8b:ff:d8:71:e8:59:e3:c4:23: e3:4b:14:1b:aa:84:be:26:6c:ad:ef:a4:63:47:89:35:da:a2: 05:7e:20:9a:8d:0e:f7:39:47:b7:4e:e4:74:07:fd:3b:2e:eb: 3d:80:f6:3d:86:bc:66:d9:6e:8a:2b:f1:c8:4d:b4:e2:64:c2: e6:90:48:60:05:35:cd:48:ca:97:ee:6f:68:5a:fe:18:cc:7f: 01:f3:2d:68:30:ac:9d:45:12:bb:19:6b:ae:df:42:16:86:01: b6:c6:78:54:0d:d5:de:71:62:8e:04:be:0c:1c:e4:b4:12:7f: f9:7e:7b:c2:b8:6a:cf:4c:04:32:40:94:e4:ac:da:f9:80:24: 5c:96:67:b4:f9:af:d4:1c:d3:88:88:bc:8d:48:db:60:85:dd: 87:5c:15:5c:4e:45:2f:d2:fe:10:05:75:97:b9:cd:2b:cd:6f: 58:db:79:e9:b5:c6:ef:38:4c:b3:9f:5d:cd:58:ce:92:55:92: 9b:51:e5:2e:63:32:41:dd:63:eb:49:93:02:25:e2:e3:40:94: 9c:c8:ce:f3:4b:67:13:a7:2b:33:d3:cb:d2:5d:fb:c3:b1:80: 42:76:60:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqADALfLS0JxiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk YmQ3ZGViNmUtZTA2OC00MmZmLWI2M2ItNWIwN2MxY2JjMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjSPohHE/dVmZL3CtDZ0xD94ObMO4Uiph0Df Ow/1sMkGE9paxafGettabOh5O6WC/sT1zTTC5Y9/vSHSKGpFL+okjnarVxTgitS0 wFZ/MY+VyyFmBVC5EpN1v6CPStu5JNuA6bjzHRaEMdz51ViD8E307Sw93sftIltp a/K9orvGDpQdFoRYPyBcTSnEPr4xH2QQg6OVCFPgK5omMxiKoAs3NAmdFKhsnAUy u98IKFrdGZk9c9syO9gDtPMGKzaif6AH8sRZ1PhP99GwZLQW7++8o6hECPpdRv1Q vA0i/lL2UENmGWHVlgSKtsTnLokzkt6CZyUfcUEd5FvbBl9tlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmTKXQxrhJhI+h6USWqt8BqVqbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYzRkODA0MTctMTE3Ny0z MTkwLWEyZjEtNDcyYTViZDRjM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGZCuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKakyy7zKiLh1wJhMM7L5ZsEAk5UGmjUH4ZQw4v/2HHoWePEI+NLFBuq hL4mbK3vpGNHiTXaogV+IJqNDvc5R7dO5HQH/Tsu6z2A9j2GvGbZboor8chNtOJk wuaQSGAFNc1Iypfub2ha/hjMfwHzLWgwrJ1FErsZa67fQhaGAbbGeFQN1d5xYo4E vgwc5LQSf/l+e8K4as9MBDJAlOSs2vmAJFyWZ7T5r9Qc04iIvI1I22CF3YdcFVxO RS/S/hAFdZe5zSvNb1jbeem1xu84TLOfXc1YzpJVkptR5S5jMkHdY+tJkwIl4uNA lJzIzvNLZxOnKzPTy9Jd+8OxgEJ2YPs= -----END CERTIFICATE-----Generated at Sun Jun 15 17:14:46 2025 by rpki-client