$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa File: c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa (raw, json) Hash identifier: bmoXddjA2BtDu0l+pTBmdKItAkqHbGO7i40d23J0uJI= Subject key identifier: 4A:4A:5E:37:64:81:5C:2E:00:1E:05:34:75:63:D4:0B:71:15:BD:6B Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584929E3CBFC9CAC42CABECBF280 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 35908 IP address blocks: 100.43.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:cb:fc:9c:ac:42:ca:be:cb:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=8e5f45e7-9500-4ac5-9ed1-8c6f91c9a2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9a:f0:5d:08:4b:c8:98:6e:5d:d3:df:bf:a0: 06:e1:13:bc:ff:fc:5a:30:d6:04:14:77:66:9d:af: 21:c8:8a:af:12:04:38:ac:cf:d0:36:ae:1c:c3:8a: 04:5b:f5:7f:0d:34:17:72:fa:d5:43:fc:ec:26:b0: e9:3f:43:27:56:7a:a2:52:a6:4c:0e:3b:14:1b:f7: 98:0a:e0:c3:7c:ee:93:21:26:25:84:49:fb:7a:fb: 4b:b5:90:3e:85:93:a8:2f:7f:5e:dc:e0:cf:2d:38: 4d:56:aa:a0:6f:30:f0:7c:83:d7:ee:ff:f6:84:ed: a4:e3:20:13:4d:04:8f:bb:be:34:4b:04:3d:98:49: 10:75:6e:b7:63:57:8c:ae:40:a9:b6:6c:13:d8:5f: ef:80:9b:53:52:7b:31:a1:a3:0f:96:4c:76:39:61: 3c:10:a6:75:2a:a2:a5:45:86:df:f9:a1:8d:ef:3f: d4:d7:47:5c:21:21:c5:f5:90:83:b3:f2:82:c2:fe: 11:e1:cb:74:b8:7f:d2:9d:0f:7a:5b:ff:cf:89:29: ca:98:dd:88:5b:0c:e7:bd:28:d8:c8:2f:92:d8:c8: ee:b3:d7:1c:b0:38:c1:a8:d6:17:93:e6:0d:03:df: 4e:31:90:df:b9:ee:58:b6:e8:b3:1e:8e:2e:b8:7a: c7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4A:5E:37:64:81:5C:2E:00:1E:05:34:75:63:D4:0B:71:15:BD:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 100.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2c:ba:4a:56:18:a6:a2:95:4b:39:4f:94:ed:60:f0:66:b7: 10:f0:8d:bc:e0:c4:c2:42:f7:15:ba:42:a4:b1:9a:c3:4e:99: 7a:4e:25:ce:37:82:43:09:62:55:52:56:97:34:f7:b0:dc:02: 15:aa:62:ee:db:2a:65:3c:71:2e:e7:a1:9f:5a:91:25:ec:c5: 63:76:8f:ee:16:fc:ed:52:ec:ff:9a:b4:10:24:3b:bd:9b:fe: 1c:c5:a7:75:8e:c4:2e:1a:ea:76:a8:f7:90:7f:d0:af:ab:78: 45:b5:6f:4e:cd:24:1c:3a:c6:4d:9f:41:87:46:d5:33:6c:ac: 78:7c:df:05:ee:bc:a3:68:81:4c:2b:5a:6b:6a:f3:45:18:6b: ea:1d:58:20:d4:28:f9:d4:9d:6a:f6:33:ed:be:9b:3c:4f:5b: fb:ec:2d:c3:56:af:5f:76:c2:7e:2d:3c:05:69:a5:95:11:8a: 2c:98:df:9c:71:b7:e3:3a:ea:07:60:f3:45:d8:97:d1:95:6c: 41:31:a8:8f:ef:ec:87:da:82:fe:f4:fd:e8:59:e8:40:95:a6: 18:8a:01:f1:68:e9:e4:20:8c:cc:5a:c7:cc:e0:cb:4d:7c:e2: db:fc:3e:cf:22:bd:c6:dc:d0:2f:4e:b4:8b:e0:c1:66:72:a5: 19:5f:c4:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp48v8nKxCyr7L8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk OGU1ZjQ1ZTctOTUwMC00YWM1LTllZDEtOGM2ZjkxYzlhMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJrwXQhLyJhuXdPfv6AG4RO8//xaMNYEFHdm na8hyIqvEgQ4rM/QNq4cw4oEW/V/DTQXcvrVQ/zsJrDpP0MnVnqiUqZMDjsUG/eY CuDDfO6TISYlhEn7evtLtZA+hZOoL39e3ODPLThNVqqgbzDwfIPX7v/2hO2k4yAT TQSPu740SwQ9mEkQdW63Y1eMrkCptmwT2F/vgJtTUnsxoaMPlkx2OWE8EKZ1KqKl RYbf+aGN7z/U10dcISHF9ZCDs/KCwv4R4ct0uH/SnQ96W//PiSnKmN2IWwznvSjY yC+S2Mjus9ccsDjBqNYXk+YNA99OMZDfue5YtuizHo4uuHrH6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpKXjdkgVwuAB4FNHVj1AtxFb1rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYzRkODA0MTctMTE3Ny0z MTkwLWEyZjEtNDcyYTViZDRjM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGZCuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMsukpWGKailUs5T5TtYPBmtxDwjbzgxMJC9xW6QqSxmsNOmXpOJc43 gkMJYlVSVpc097DcAhWqYu7bKmU8cS7noZ9akSXsxWN2j+4W/O1S7P+atBAkO72b /hzFp3WOxC4a6nao95B/0K+reEW1b07NJBw6xk2fQYdG1TNsrHh83wXuvKNogUwr Wmtq80UYa+odWCDUKPnUnWr2M+2+mzxPW/vsLcNWr192wn4tPAVppZURiiyY35xx t+M66gdg80XYl9GVbEExqI/v7Ifagv70/ehZ6ECVphiKAfFo6eQgjMxax8zgy018 4tv8Ps8ivcbc0C9OtIvgwWZypRlfxCE= -----END CERTIFICATE-----Generated at Fri Apr 4 19:18:43 2025 by rpki-client