$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/3c5bec82-2ad3-3d58-b0a8-72139bfcd6d0.roa File: 3c5bec82-2ad3-3d58-b0a8-72139bfcd6d0.roa (raw, json) Hash identifier: 4p+RElkb5N1mNS9lQheJpC2y5bDirJRo+127gPTSG3g= Subject key identifier: 3F:40:2E:A3:20:7A:DE:1C:A2:C4:93:A8:83:A9:7A:75:9F:09:D9:D1 Certificate issuer: /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Certificate serial: 010D0C9F4328584D40CA4A6994F1ECCA9424F580 Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/3c5bec82-2ad3-3d58-b0a8-72139bfcd6d0.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 395224 IP address blocks: 67.199.248.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4a:69:94:f1:ec:ca:94:24:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=68e730a7-0e11-434b-8201-3653e8846c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:d4:01:f3:58:34:f1:e3:6e:7b:9c:92:e9: 89:e8:0a:dd:d9:13:fc:27:0a:c8:c5:28:94:ac:c2: 75:dd:23:65:fa:89:a2:80:6e:af:6b:8b:ec:71:20: cc:35:48:a0:ee:da:07:57:4c:9c:2a:fa:0f:77:bc: 9b:63:a8:29:60:ab:e5:b8:c6:50:03:fd:b4:77:d4: d1:d0:78:28:a1:e6:24:ac:01:c0:ab:9e:82:2d:21: 8d:46:a6:18:3f:e4:d6:f1:c5:64:01:bc:d0:be:14: f2:83:f0:32:9b:7b:4a:04:ee:06:cc:c4:f3:03:35: 36:3a:d2:d6:98:ec:ce:97:e4:9a:5d:f6:38:78:fd: 68:63:78:d0:e5:c8:05:7e:c3:84:60:a5:a6:09:53: d6:ea:65:77:af:9c:e9:d8:f7:97:5a:6b:5a:c7:fe: de:2e:ec:0a:8f:de:a6:01:9d:46:f5:f5:25:22:c5: 72:93:de:63:ab:34:71:ea:e8:c2:6e:d7:fd:11:b2: 30:ae:6d:e7:8d:60:cf:b9:40:9a:57:04:5d:af:e9: 54:4f:a5:7c:9e:d8:a6:9b:01:f3:34:7f:4a:5c:c4: fe:db:d4:8d:83:96:29:f7:bb:82:7b:6a:c5:c3:fc: 65:88:8a:43:3b:a2:07:20:d6:95:9f:f3:ba:17:03: 9e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:40:2E:A3:20:7A:DE:1C:A2:C4:93:A8:83:A9:7A:75:9F:09:D9:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/3c5bec82-2ad3-3d58-b0a8-72139bfcd6d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl X509v3 Authority Key Identifier: keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer sbgp-ipAddrBlock: critical IPv4: 67.199.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:a6:42:86:23:7d:e1:8c:07:9a:ff:18:6a:58:f1:da:e3:21: 6d:f0:a0:81:3b:55:74:ca:39:c4:11:a5:81:01:63:d1:2c:77: 02:8b:1b:ca:f3:5c:d0:83:8c:67:e2:d5:86:78:61:37:cc:01: da:43:14:56:5e:80:94:a3:c5:31:df:e3:a2:fb:fb:17:66:35: 03:20:67:2d:f4:32:ec:7c:f3:75:d4:ef:ac:8c:fd:fc:aa:ba: 6c:f9:3f:52:64:77:02:46:58:78:78:a7:bf:d4:0f:65:4b:7c: 78:cb:29:0b:0d:8b:b6:ed:57:ab:f1:38:4a:c1:f7:95:50:b6: 2c:30:92:43:69:1b:16:a7:c2:5e:ca:bd:c5:13:0b:d0:2e:52: 65:a1:99:d8:45:d7:12:53:68:5c:ee:55:fd:dd:a4:2d:74:3b: 32:e9:2c:99:45:69:14:11:2f:96:5c:a7:1b:36:07:65:72:53: 96:3b:4d:e8:7a:30:d5:af:25:ad:cf:f1:77:0d:9f:a6:36:5a: a3:ba:bf:a9:45:a7:05:65:82:b8:e8:04:0b:3f:99:70:86:6e: 59:37:45:14:97:5c:c2:30:78:eb:dc:7e:95:93:a7:e7:f1:c0: a9:10:52:fa:0f:ff:46:e1:2b:7d:07:42:35:d0:a1:cb:c5:2e: 31:05:95:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AykpplPHsypQk9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZjZjE2MDYtYzExYy00OGU5LWI4ZWUtYzVlN2FiOWU1 M2JkMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NjhlNzMwYTctMGUxMS00MzRiLTgyMDEtMzY1M2U4ODQ2YzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXfUAfNYNPHjbnuckumJ6Ard2RP8JwrIxSiU rMJ13SNl+omigG6va4vscSDMNUig7toHV0ycKvoPd7ybY6gpYKvluMZQA/20d9TR 0HgooeYkrAHAq56CLSGNRqYYP+TW8cVkAbzQvhTyg/Aym3tKBO4GzMTzAzU2OtLW mOzOl+SaXfY4eP1oY3jQ5cgFfsOEYKWmCVPW6mV3r5zp2PeXWmtax/7eLuwKj96m AZ1G9fUlIsVyk95jqzRx6ujCbtf9EbIwrm3njWDPuUCaVwRdr+lUT6V8ntimmwHz NH9KXMT+29SNg5Yp97uCe2rFw/xliIpDO6IHINaVn/O6FwOeZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9ALqMget4cosSTqIOpenWfCdnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNm MTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3YWI5ZTUzYmQvM2M1YmVjODItMmFkMy0z ZDU4LWIwYTgtNzIxMzliZmNkNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZjZjE2MDYtYzExYy00OGU5LWI4 ZWUtYzVlN2FiOWU1M2JkL2NmY2YxNjA2LWMxMWMtNDhlOS1iOGVlLWM1ZTdhYjll NTNiZC5jcmwwHwYDVR0jBBgwFoAUfO8iqAJFGnAVzpkedn06U2E2SmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNmMTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3 YWI5ZTUzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8f4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+mQoYjfeGMB5r/GGpY8drjIW3woIE7VXTKOcQRpYEBY9EsdwKLG8rz XNCDjGfi1YZ4YTfMAdpDFFZegJSjxTHf46L7+xdmNQMgZy30Mux883XU76yM/fyq umz5P1JkdwJGWHh4p7/UD2VLfHjLKQsNi7btV6vxOErB95VQtiwwkkNpGxanwl7K vcUTC9AuUmWhmdhF1xJTaFzuVf3dpC10OzLpLJlFaRQRL5Zcpxs2B2VyU5Y7Teh6 MNWvJa3P8XcNn6Y2WqO6v6lFpwVlgrjoBAs/mXCGblk3RRSXXMIweOvcfpWTp+fx wKkQUvoP/0bhK30HQjXQocvFLjEFlVY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:26:34 2026 by rpki-client