$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/941a96f8-a316-39b6-a890-04ab7a60873f.roa File: 941a96f8-a316-39b6-a890-04ab7a60873f.roa (raw, json) Hash identifier: 7ceQ4jYLZ06suV52uom1OnQ6/ykxIwMKHqufZgnwLtY= Subject key identifier: AE:71:68:42:13:F4:AD:6E:FD:C1:0F:EA:6E:EF:79:20:61:EF:15:31 Certificate issuer: /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Certificate serial: 010D0C9F4328584D44FA2EEF5AEF79AB88F41B00 Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/941a96f8-a316-39b6-a890-04ab7a60873f.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396982 IP address blocks: 67.199.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:2e:ef:5a:ef:79:ab:88:f4:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=bfa1f01b-8386-468f-8403-dcab4600d2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:36:e1:17:05:7b:5e:f7:65:31:45:96:e6: be:e4:7d:74:ee:bd:e1:3f:6c:e6:ba:b3:c5:e8:f7: 3e:80:8e:0c:c8:63:8e:8d:9f:2f:05:17:0e:23:c4: 98:0e:a4:4b:c6:08:3b:0e:21:ef:9b:a9:16:44:2b: 3f:9b:57:d5:75:d9:cd:a2:d3:33:35:e8:cb:7e:39: c7:fb:4b:4f:c3:a7:5b:41:e6:15:64:ef:6b:db:d0: 46:1d:25:6b:5c:1a:2f:0e:f7:1a:ac:df:7b:aa:f6: 30:49:9b:3d:73:d5:85:2a:07:22:f2:cb:7c:ee:2d: ac:2f:ed:30:ff:5c:71:f9:56:38:d0:35:f1:b4:70: 8b:65:b3:d9:6f:0d:65:21:c7:3f:c5:7f:11:59:dd: 9f:b6:98:05:8c:43:ec:61:09:d2:78:0e:be:74:4e: ad:16:38:86:85:47:ca:72:88:1c:74:50:96:e3:da: 0f:03:e3:82:7d:e0:02:a8:5d:1d:80:c8:1a:dc:f8: c4:07:3a:73:3a:b2:fa:fe:98:74:64:78:7d:5d:5e: 3a:9c:6c:10:6e:6f:4f:c5:cd:09:7e:05:f7:eb:4d: 4b:26:d8:b8:d2:7d:79:15:27:54:0f:e9:91:4d:6c: 12:f9:42:b1:b4:f3:16:8c:bc:71:f8:1a:87:b2:ac: 34:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:71:68:42:13:F4:AD:6E:FD:C1:0F:EA:6E:EF:79:20:61:EF:15:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/941a96f8-a316-39b6-a890-04ab7a60873f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl X509v3 Authority Key Identifier: keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer sbgp-ipAddrBlock: critical IPv4: 67.199.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:2e:04:58:b4:f9:df:42:fa:74:0d:ef:dd:35:64:53:78:dd: 5a:81:a6:b5:34:46:45:96:44:e0:56:a0:b2:2f:89:ed:5a:72: 2c:15:bf:a3:92:8a:2b:14:76:b6:9f:11:09:ff:1d:3d:74:a9: fd:e1:ef:73:7c:12:20:73:ca:34:8b:ef:5b:f8:48:b1:d9:5b: 9d:76:78:cc:93:9f:67:db:52:6b:85:58:31:59:50:d8:b9:3e: 9e:3e:9d:0f:ce:c7:3c:aa:a7:59:00:01:6c:c2:eb:cc:b9:a8: ee:2d:5a:f9:b8:8e:92:ba:0a:ba:8b:60:a6:25:24:d0:bd:f8: 01:f4:86:44:96:6e:37:0b:dc:05:e5:a4:bc:14:a6:b4:9f:b6: d0:4e:2b:0f:2d:3a:67:39:81:94:b3:56:e0:b6:50:f6:25:69: 9a:95:f2:a8:48:6d:fd:63:ab:0f:5c:38:b2:7c:73:90:a0:25: 32:99:18:ab:18:34:64:ad:32:b0:83:4b:8e:95:f2:17:71:73: 7d:76:1e:a3:de:28:51:b9:6f:aa:60:18:46:aa:c1:43:5f:4d: 54:07:67:97:cf:0b:77:7f:04:aa:7f:6b:db:24:8f:77:19:46: 5c:bc:cf:a4:50:26:00:ec:fe:b3:fa:f3:2c:c7:1c:57:6c:de: 5f:00:a8:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+i7vWu95q4j0GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZjZjE2MDYtYzExYy00OGU5LWI4ZWUtYzVlN2FiOWU1 M2JkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YmZhMWYwMWItODM4Ni00NjhmLTg0MDMtZGNhYjQ2MDBkMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5k24RcFe173ZTFFlua+5H107r3hP2zmurPF 6Pc+gI4MyGOOjZ8vBRcOI8SYDqRLxgg7DiHvm6kWRCs/m1fVddnNotMzNejLfjnH +0tPw6dbQeYVZO9r29BGHSVrXBovDvcarN97qvYwSZs9c9WFKgci8st87i2sL+0w /1xx+VY40DXxtHCLZbPZbw1lIcc/xX8RWd2ftpgFjEPsYQnSeA6+dE6tFjiGhUfK cogcdFCW49oPA+OCfeACqF0dgMga3PjEBzpzOrL6/ph0ZHh9XV46nGwQbm9Pxc0J fgX3601LJti40n15FSdUD+mRTWwS+UKxtPMWjLxx+BqHsqw0pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5xaEIT9K1u/cEP6m7veSBh7xUxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNm MTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3YWI5ZTUzYmQvOTQxYTk2ZjgtYTMxNi0z OWI2LWE4OTAtMDRhYjdhNjA4NzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZjZjE2MDYtYzExYy00OGU5LWI4 ZWUtYzVlN2FiOWU1M2JkL2NmY2YxNjA2LWMxMWMtNDhlOS1iOGVlLWM1ZTdhYjll NTNiZC5jcmwwHwYDVR0jBBgwFoAUfO8iqAJFGnAVzpkedn06U2E2SmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNmMTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3 YWI5ZTUzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8f4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8uBFi0+d9C+nQN7901ZFN43VqBprU0RkWWROBWoLIvie1aciwVv6OS iisUdrafEQn/HT10qf3h73N8EiBzyjSL71v4SLHZW512eMyTn2fbUmuFWDFZUNi5 Pp4+nQ/Oxzyqp1kAAWzC68y5qO4tWvm4jpK6CrqLYKYlJNC9+AH0hkSWbjcL3AXl pLwUprSfttBOKw8tOmc5gZSzVuC2UPYlaZqV8qhIbf1jqw9cOLJ8c5CgJTKZGKsY NGStMrCDS46V8hdxc312HqPeKFG5b6pgGEaqwUNfTVQHZ5fPC3d/BKp/a9skj3cZ Rly8z6RQJgDs/rP68yzHHFds3l8AqLc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:15 2026 by rpki-client