$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa File: 2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa (raw, json) Hash identifier: LQeImGRLOIEtuamuEuX7+RFtU0whGfdeXK/kMj6jrCk= Subject key identifier: 8B:E1:E6:CB:14:CB:5F:41:10:30:99:43:98:13:A7:1E:40:B6:55:0F Certificate issuer: /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Certificate serial: 010D0C9F4328584B84E76C64C1AB303CAE844E60 Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396982 IP address blocks: 199.91.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6c:64:c1:ab:30:3c:ae:84:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=de89b968-f97d-4a7c-80fe-296180413c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:28:b1:48:59:56:a7:21:50:b8:3b:fa:98:a1: 32:b0:12:7c:bb:40:5e:45:dd:c6:ea:de:06:f0:18: cd:95:e8:f7:78:20:0f:27:07:c6:1b:79:6c:91:64: f1:32:ca:99:56:c1:4c:15:de:bc:a6:a7:60:13:dc: 56:13:28:e6:07:99:ab:5c:1a:55:58:48:c3:1b:4a: 62:e7:bf:18:28:2c:10:8a:fe:7d:30:8a:05:2d:7c: 02:9f:89:59:d3:e5:04:41:a4:79:ed:f8:71:2a:57: 23:ab:a2:30:b3:64:f9:59:3c:d1:ac:cd:59:70:89: 33:14:84:6c:7c:c9:f4:84:13:76:bc:56:e7:e6:0e: da:6c:59:8e:51:0a:ec:2f:f5:ea:ee:6d:5e:f2:fe: 60:de:ce:da:99:5c:dc:f6:db:5b:c4:fb:0e:93:9a: 02:ab:e5:6e:e9:5d:ee:bf:11:a2:59:b1:23:5a:de: 79:f7:38:32:dd:c7:d0:af:89:39:c7:c0:29:57:ba: fa:f9:c1:58:af:ae:62:8c:b9:39:cb:e1:c5:42:4b: 6e:5b:33:6e:60:d6:d0:1d:2d:6a:c8:c9:bb:14:26: 83:49:65:bb:e8:65:48:a9:57:8b:c1:60:f4:63:0d: de:12:72:58:26:b5:93:fd:35:a2:ff:2a:43:22:ed: e6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E1:E6:CB:14:CB:5F:41:10:30:99:43:98:13:A7:1E:40:B6:55:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl X509v3 Authority Key Identifier: keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer sbgp-ipAddrBlock: critical IPv4: 199.91.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:43:0f:bb:5b:03:ca:9b:ce:65:c8:5d:d7:a2:fe:d8:8b:3d: 3b:ea:55:44:8a:ad:3e:34:87:0f:9a:66:58:59:6f:e7:7b:8e: bd:d7:39:dd:cc:02:7e:38:77:1b:d7:31:2c:2a:4b:b9:9e:9e: c3:09:64:4d:2e:fb:72:5f:cf:ed:c5:d4:61:fd:6b:55:20:6b: 9f:d8:cc:37:d4:cb:77:07:d2:db:ef:03:07:6e:e8:1d:22:7f: d8:5c:c3:75:4f:d0:13:49:dc:50:84:ed:cc:aa:a7:76:be:f3: 44:39:a7:96:cb:17:62:9d:e6:7a:df:b8:cc:31:3e:42:d6:34: 2e:4f:24:fc:ad:ad:f4:b6:4e:26:12:db:dc:1d:0f:14:13:ae: 5b:88:c0:da:dc:c3:b1:58:89:f3:cc:46:c9:1d:24:e9:6c:fa: 30:ef:99:75:13:46:a6:a5:19:7f:9f:4d:da:8a:29:e4:f1:3e: 7f:de:a9:0b:f2:93:bb:fe:5b:7c:7c:6c:f8:f0:17:0a:b3:3c: 51:12:9d:36:e4:c5:9c:44:6a:f4:81:33:e6:19:cd:20:74:a5: 62:0e:58:2c:22:05:0f:08:5e:92:62:f2:cd:bf:9e:ae:04:13: 6f:19:fe:90:a7:36:71:72:03:14:fc:b4:18:fd:47:45:4f:ca: 02:7f:e2:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52xkwaswPK6ETmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZjZjE2MDYtYzExYy00OGU5LWI4ZWUtYzVlN2FiOWU1 M2JkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZGU4OWI5NjgtZjk3ZC00YTdjLTgwZmUtMjk2MTgwNDEzYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSixSFlWpyFQuDv6mKEysBJ8u0BeRd3G6t4G 8BjNlej3eCAPJwfGG3lskWTxMsqZVsFMFd68pqdgE9xWEyjmB5mrXBpVWEjDG0pi 578YKCwQiv59MIoFLXwCn4lZ0+UEQaR57fhxKlcjq6Iws2T5WTzRrM1ZcIkzFIRs fMn0hBN2vFbn5g7abFmOUQrsL/Xq7m1e8v5g3s7amVzc9ttbxPsOk5oCq+Vu6V3u vxGiWbEjWt559zgy3cfQr4k5x8ApV7r6+cFYr65ijLk5y+HFQktuWzNuYNbQHS1q yMm7FCaDSWW76GVIqVeLwWD0Yw3eEnJYJrWT/TWi/ypDIu3mqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvh5ssUy19BEDCZQ5gTpx5AtlUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNm MTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3YWI5ZTUzYmQvMmZkYThiYjEtN2RlMi0z NzE3LWIyNmItOTE5Y2ZkMGU5ODZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZjZjE2MDYtYzExYy00OGU5LWI4 ZWUtYzVlN2FiOWU1M2JkL2NmY2YxNjA2LWMxMWMtNDhlOS1iOGVlLWM1ZTdhYjll NTNiZC5jcmwwHwYDVR0jBBgwFoAUfO8iqAJFGnAVzpkedn06U2E2SmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNmMTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3 YWI5ZTUzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhDD7tbA8qbzmXIXdei/tiLPTvqVUSKrT40hw+aZlhZb+d7jr3XOd3M An44dxvXMSwqS7mensMJZE0u+3Jfz+3F1GH9a1Uga5/YzDfUy3cH0tvvAwdu6B0i f9hcw3VP0BNJ3FCE7cyqp3a+80Q5p5bLF2Kd5nrfuMwxPkLWNC5PJPytrfS2TiYS 29wdDxQTrluIwNrcw7FYifPMRskdJOls+jDvmXUTRqalGX+fTdqKKeTxPn/eqQvy k7v+W3x8bPjwFwqzPFESnTbkxZxEavSBM+YZzSB0pWIOWCwiBQ8IXpJi8s2/nq4E E28Z/pCnNnFyAxT8tBj9R0VPygJ/4uY= -----END CERTIFICATE-----Generated at Mon Oct 20 04:31:09 2025 by rpki-client