$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa File: 2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa (raw, json) Hash identifier: mp1Gb1PwkVSp+AowBDMViMyFrw5MwKKC4N/0w3RhixU= Subject key identifier: DC:C9:AA:37:24:8B:01:35:DA:93:4C:12:66:3A:3A:42:48:EE:D9:A7 Certificate issuer: /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Certificate serial: 010D0C9F43285849C4D4B1E14F7E701DC9E30900 Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396982 IP address blocks: 199.91.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:b1:e1:4f:7e:70:1d:c9:e3:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=f30c1fd4-f071-4047-80d4-bcfc2beaa48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5d:2b:10:3e:3f:23:0d:52:90:43:8f:01:55: 10:ad:ce:70:7c:b9:28:0d:6e:ce:b2:37:d4:a7:ca: 72:19:40:27:80:14:d5:b1:4b:4d:15:ef:05:1a:4e: 25:09:11:df:3f:5c:db:c9:4e:5d:4b:2a:1d:36:9c: df:8c:f2:10:c3:58:66:61:39:7c:11:75:c5:37:d1: 6a:3d:f9:76:72:97:c2:6b:20:48:95:df:a9:ac:94: 1e:53:89:d3:ec:82:ab:88:9c:08:8e:d8:3e:4a:33: fe:c1:ad:2b:0b:1e:a8:97:34:f3:a2:9b:5f:3b:07: aa:f5:30:d5:99:59:b4:06:73:80:9b:68:3f:4d:17: a0:21:0a:ff:a2:c0:82:ff:8e:81:5f:a1:d5:f6:18: 98:1f:66:06:4a:12:5e:9a:9a:a4:c4:7e:68:e6:8d: 82:e9:3c:21:a5:88:be:5a:85:80:2b:11:44:90:70: 32:f8:f2:77:59:b5:df:c8:c1:c0:53:dc:54:63:0b: c0:25:d0:6c:15:2f:89:2f:78:42:b4:c5:cc:05:a0: 80:f0:3e:c8:63:77:db:1a:35:69:58:ad:a6:84:46: 36:f4:d1:9f:ca:46:e6:bf:46:40:ca:75:52:81:fa: 67:bc:6a:e8:76:8f:ab:1c:0a:7f:bf:13:c5:5f:a5: d0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C9:AA:37:24:8B:01:35:DA:93:4C:12:66:3A:3A:42:48:EE:D9:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl X509v3 Authority Key Identifier: keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer sbgp-ipAddrBlock: critical IPv4: 199.91.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:86:cd:99:95:75:c4:f0:b7:c2:0e:f2:e2:cd:9d:02:ab:40: 95:a2:bc:1e:4d:30:59:a6:58:b4:d9:99:fe:4c:bc:9d:d7:a1: c8:35:41:6b:d2:b2:de:a3:7d:bf:c3:df:5b:18:a4:20:79:09: 92:1d:56:ef:89:39:08:72:88:67:35:df:3b:5e:a3:f8:23:2f: ae:1d:32:8a:a4:29:64:d1:74:78:4b:58:27:03:3d:7f:33:40: 93:56:36:5b:6e:bf:49:5d:77:b7:ca:ac:01:1c:b5:42:1b:3b: 81:e3:a5:ff:64:28:74:b0:22:f9:57:5b:c9:35:a1:2a:ce:fd: 03:74:d2:fb:89:89:78:0d:5c:ac:a8:9a:4b:2e:0a:19:90:29: 70:80:a7:26:30:ed:3f:05:95:93:6a:cd:78:81:7c:ed:69:f9: c4:d9:25:cb:fd:d6:00:cb:fb:91:a7:63:54:25:c8:f1:18:0b: 6f:68:03:3c:89:fa:5d:9d:f3:8f:6d:0a:d6:32:bc:09:4d:f1: 33:d1:8a:ec:14:09:b0:68:c9:4a:25:6a:8e:27:64:f1:00:93: 31:c5:be:0f:35:d5:55:b7:5a:e7:90:fc:2a:ac:c1:0c:57:f7: da:63:e7:9d:b8:c7:74:a0:bc:e6:9c:04:7a:01:10:7b:3f:ea: f3:e5:54:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1LHhT35wHcnjCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZjZjE2MDYtYzExYy00OGU5LWI4ZWUtYzVlN2FiOWU1 M2JkMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZjMwYzFmZDQtZjA3MS00MDQ3LTgwZDQtYmNmYzJiZWFhNDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV0rED4/Iw1SkEOPAVUQrc5wfLkoDW7OsjfU p8pyGUAngBTVsUtNFe8FGk4lCRHfP1zbyU5dSyodNpzfjPIQw1hmYTl8EXXFN9Fq Pfl2cpfCayBIld+prJQeU4nT7IKriJwIjtg+SjP+wa0rCx6olzTzoptfOweq9TDV mVm0BnOAm2g/TRegIQr/osCC/46BX6HV9hiYH2YGShJempqkxH5o5o2C6TwhpYi+ WoWAKxFEkHAy+PJ3WbXfyMHAU9xUYwvAJdBsFS+JL3hCtMXMBaCA8D7IY3fbGjVp WK2mhEY29NGfykbmv0ZAynVSgfpnvGrodo+rHAp/vxPFX6XQPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzJqjckiwE12pNMEmY6OkJI7tmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNm MTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3YWI5ZTUzYmQvMmZkYThiYjEtN2RlMi0z NzE3LWIyNmItOTE5Y2ZkMGU5ODZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZjZjE2MDYtYzExYy00OGU5LWI4 ZWUtYzVlN2FiOWU1M2JkL2NmY2YxNjA2LWMxMWMtNDhlOS1iOGVlLWM1ZTdhYjll NTNiZC5jcmwwHwYDVR0jBBgwFoAUfO8iqAJFGnAVzpkedn06U2E2SmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNmMTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3 YWI5ZTUzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2GzZmVdcTwt8IO8uLNnQKrQJWivB5NMFmmWLTZmf5MvJ3Xocg1QWvS st6jfb/D31sYpCB5CZIdVu+JOQhyiGc13zteo/gjL64dMoqkKWTRdHhLWCcDPX8z QJNWNltuv0ldd7fKrAEctUIbO4Hjpf9kKHSwIvlXW8k1oSrO/QN00vuJiXgNXKyo mksuChmQKXCApyYw7T8FlZNqzXiBfO1p+cTZJcv91gDL+5GnY1QlyPEYC29oAzyJ +l2d849tCtYyvAlN8TPRiuwUCbBoyUolao4nZPEAkzHFvg811VW3WueQ/CqswQxX 99pj5524x3SgvOacBHoBEHs/6vPlVKQ= -----END CERTIFICATE-----Generated at Wed May 7 13:45:48 2025 by rpki-client