$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa File: 2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa (raw, json) Hash identifier: k1jbH4Q/HAh8QnBr9RTopTbRgbAMFam8s3c5h5ENj5o= Subject key identifier: CF:60:FB:9B:C5:87:DE:1F:18:E6:47:38:5A:A0:AA:52:B2:A0:5A:48 Certificate issuer: /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Certificate serial: 010D0C9F4328584AA42B761633C14BF8E44F3A00 Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396982 IP address blocks: 199.91.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:76:16:33:c1:4b:f8:e4:4f:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=e95382ba-c971-4db3-b182-475beff49bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ba:24:ba:7a:8b:e5:b7:85:8b:81:6a:a8:0f: 32:4f:89:2d:c7:5b:96:f1:c9:d3:1e:59:f4:23:b1: 13:97:7f:19:63:00:c8:40:05:23:03:29:cb:eb:f1: 8b:71:7d:95:cd:a1:ac:41:0c:f0:64:be:db:4f:96: ec:e2:15:86:da:38:4a:e9:a2:75:c6:03:1a:3e:df: 2d:ab:f6:9a:1a:d9:a0:a5:4c:21:dc:a9:a4:b3:45: 67:d6:4d:b4:bf:ff:50:8a:e3:44:a0:7c:df:21:cd: 4f:26:4b:ec:38:70:ac:14:21:a6:8f:2f:70:4a:02: 99:d8:33:90:a2:25:7c:a3:dc:70:f5:b4:2f:ad:55: f5:c5:c2:98:85:b2:84:83:62:00:95:e3:9d:34:87: 4c:85:af:89:e5:58:48:80:48:c8:51:fb:fc:4f:31: 4e:86:22:2b:98:2b:9e:5f:d0:2f:8b:8c:41:a7:bb: a4:89:93:ff:71:b7:2f:6d:46:a7:64:6d:81:99:c3: 32:6b:74:48:44:61:db:2b:84:0b:0a:45:94:cf:36: cb:cc:be:11:b3:db:97:5b:9b:8c:4d:a6:f2:c9:3b: e4:49:63:b8:07:c9:43:67:c8:7f:2a:45:6e:ea:06: e2:0a:24:b4:b0:80:81:cd:38:cd:61:80:4e:43:1b: f7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:60:FB:9B:C5:87:DE:1F:18:E6:47:38:5A:A0:AA:52:B2:A0:5A:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl X509v3 Authority Key Identifier: keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer sbgp-ipAddrBlock: critical IPv4: 199.91.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:f9:52:cd:10:77:7f:cc:61:7b:3d:03:95:bd:51:f1:b4:c5: 55:f7:96:85:ab:36:bb:76:2f:c3:ba:16:46:fb:00:8a:e3:23: b0:46:56:d6:fa:24:d3:aa:ca:fb:3d:43:69:70:d9:bd:7a:cd: 11:36:cd:a6:37:67:01:43:57:d7:f4:a7:1f:2a:2c:89:4f:58: a0:25:de:83:8f:73:77:7d:d9:be:b5:ee:01:f1:fe:9a:25:83: 68:46:aa:46:56:1d:f0:7f:6b:91:5f:c1:db:53:55:3f:81:c0: b5:b5:8f:1a:28:64:42:b6:c9:1b:98:af:a8:25:4c:8e:77:53: d0:85:da:34:f1:aa:2c:92:b6:f2:69:e2:72:bf:5e:af:bf:98: 66:a3:1f:60:5d:66:7f:3f:94:16:e8:36:b6:c6:f9:6c:10:42: d8:f9:d5:11:31:94:f7:e8:db:84:d1:e5:c5:d2:10:b8:34:b8: 6e:6b:6c:8e:f6:15:42:da:88:ca:25:17:ca:15:e1:3a:cc:a2: a1:24:d2:5c:e2:24:2b:73:e9:7a:70:ef:84:4c:ab:00:14:a7: 4b:63:6d:fa:7e:80:11:5b:09:dd:a6:37:67:29:54:fd:bd:1e: 6a:f6:81:50:60:c2:7d:0d:10:60:51:b3:18:e2:cc:1f:12:c2: 91:36:49:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3YWM8FL+ORPOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZjZjE2MDYtYzExYy00OGU5LWI4ZWUtYzVlN2FiOWU1 M2JkMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZTk1MzgyYmEtYzk3MS00ZGIzLWIxODItNDc1YmVmZjQ5YmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbokunqL5beFi4FqqA8yT4ktx1uW8cnTHln0 I7ETl38ZYwDIQAUjAynL6/GLcX2VzaGsQQzwZL7bT5bs4hWG2jhK6aJ1xgMaPt8t q/aaGtmgpUwh3Kmks0Vn1k20v/9QiuNEoHzfIc1PJkvsOHCsFCGmjy9wSgKZ2DOQ oiV8o9xw9bQvrVX1xcKYhbKEg2IAleOdNIdMha+J5VhIgEjIUfv8TzFOhiIrmCue X9Avi4xBp7ukiZP/cbcvbUanZG2BmcMya3RIRGHbK4QLCkWUzzbLzL4Rs9uXW5uM TabyyTvkSWO4B8lDZ8h/KkVu6gbiCiS0sICBzTjNYYBOQxv3BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9g+5vFh94fGOZHOFqgqlKyoFpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNm MTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3YWI5ZTUzYmQvMmZkYThiYjEtN2RlMi0z NzE3LWIyNmItOTE5Y2ZkMGU5ODZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZjZjE2MDYtYzExYy00OGU5LWI4 ZWUtYzVlN2FiOWU1M2JkL2NmY2YxNjA2LWMxMWMtNDhlOS1iOGVlLWM1ZTdhYjll NTNiZC5jcmwwHwYDVR0jBBgwFoAUfO8iqAJFGnAVzpkedn06U2E2SmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNmMTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3 YWI5ZTUzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEb5Us0Qd3/MYXs9A5W9UfG0xVX3loWrNrt2L8O6Fkb7AIrjI7BGVtb6 JNOqyvs9Q2lw2b16zRE2zaY3ZwFDV9f0px8qLIlPWKAl3oOPc3d92b617gHx/pol g2hGqkZWHfB/a5FfwdtTVT+BwLW1jxooZEK2yRuYr6glTI53U9CF2jTxqiyStvJp 4nK/Xq+/mGajH2BdZn8/lBboNrbG+WwQQtj51RExlPfo24TR5cXSELg0uG5rbI72 FULaiMolF8oV4TrMoqEk0lziJCtz6Xpw74RMqwAUp0tjbfp+gBFbCd2mN2cpVP29 Hmr2gVBgwn0NEGBRsxjizB8SwpE2Sek= -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:52 2025 by rpki-client