$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa File: c4d49987-7b4b-3be2-8e42-497758e9897c.roa (raw, json) Hash identifier: Q/3MMvAYpKxIi8HSkMb412H89YEODlv0fgeIPMx0NJ8= Subject key identifier: AD:8C:5C:F5:A1:6C:6B:71:6E:F9:39:54:C1:0B:06:F0:EB:4B:DB:45 Certificate issuer: /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Certificate serial: 010D0C9F43285849C20A0B80B6E336557BF33200 Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 395224 IP address blocks: 199.91.151.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:0b:80:b6:e3:36:55:7b:f3:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=8c0d8d0b-824b-45b0-8583-00e3ed151939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:54:60:1b:18:f8:f3:9c:ca:0c:02:a7:a8:08: 5d:f4:b8:91:55:90:49:e2:47:9b:9e:ae:85:21:1b: ef:57:fa:ae:dc:4d:c2:04:06:31:bf:0d:45:6f:93: 5d:0b:99:23:df:30:3f:14:1b:b8:0e:fa:88:27:42: f3:a8:b6:66:6d:cb:38:d1:af:90:fb:87:92:5b:65: ed:0a:96:df:a3:54:45:9e:b3:eb:5a:e2:76:97:f6: e9:20:5d:62:2f:c0:12:4b:6d:9d:d8:f1:2b:91:0d: 39:4d:45:10:ab:99:a2:1f:bb:bf:ac:93:b7:94:35: c8:40:10:c9:1a:f4:99:46:97:ac:b7:c2:39:c1:9c: 9d:78:13:ca:1f:73:02:a4:25:11:44:cb:5a:75:21: 40:48:ad:5c:c0:69:d0:9b:5a:03:23:6d:24:05:ce: ad:1f:03:fa:37:f4:d7:4c:7c:ed:2c:e1:3a:a8:80: 93:bd:db:5a:e2:3e:c2:37:ff:c7:e4:08:46:f0:a6: a3:cc:01:0d:a8:f9:0b:7d:49:6e:40:00:ac:18:a5: 05:14:e6:46:35:c3:ee:e1:61:07:5a:4e:32:28:2b: 3b:97:4a:29:68:c8:ac:4b:6f:6c:02:9a:7d:c9:5c: 6b:d5:ef:a2:61:e9:45:d4:07:60:cc:94:c6:89:04: 59:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8C:5C:F5:A1:6C:6B:71:6E:F9:39:54:C1:0B:06:F0:EB:4B:DB:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl X509v3 Authority Key Identifier: keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer sbgp-ipAddrBlock: critical IPv4: 199.91.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:48:51:fb:8c:e2:f8:d2:f0:15:5e:25:bc:4d:aa:ff:92:74: da:9d:ee:4c:a7:c8:68:30:cf:1a:40:26:87:fb:ca:b2:55:37: 3c:0a:8b:83:32:53:1b:69:b5:a8:d5:1a:85:08:38:94:52:ad: 6d:a6:4a:bb:67:14:30:43:50:8f:56:3c:44:27:30:98:84:c5: 8b:d9:bf:16:f7:42:f3:e6:a2:98:5f:45:57:80:97:d9:39:e6: b4:3c:ad:55:73:8c:37:5a:cc:0a:3e:4f:9c:17:29:29:6c:75: 1d:f3:09:6b:8e:8d:4d:7f:c9:0e:8a:a2:31:10:83:a9:a1:72: e5:26:53:d6:d6:57:61:2b:7d:00:c1:35:32:87:ce:d5:23:de: 00:ac:5a:6a:6e:76:dd:79:ca:c1:db:af:6d:6c:97:02:d7:8d: 4a:94:bf:95:af:65:45:bc:f3:d9:05:fe:3f:f5:a1:40:c9:0c: ef:c0:f8:00:7b:b9:a0:d5:61:5a:bc:0e:50:0e:5c:ba:f8:f4: cd:db:de:a3:1b:00:76:92:01:46:2a:6e:d0:fb:51:2b:55:3e: 50:2c:50:81:26:ca:cb:13:de:6a:ad:b7:39:dc:59:ff:cd:aa: d5:14:37:9b:67:29:c8:4e:5a:27:eb:09:b3:d4:9e:52:da:81: 3c:2f:9c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCguAtuM2VXvzMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZjZjE2MDYtYzExYy00OGU5LWI4ZWUtYzVlN2FiOWU1 M2JkMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk OGMwZDhkMGItODI0Yi00NWIwLTg1ODMtMDBlM2VkMTUxOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVRgGxj485zKDAKnqAhd9LiRVZBJ4kebnq6F IRvvV/qu3E3CBAYxvw1Fb5NdC5kj3zA/FBu4DvqIJ0LzqLZmbcs40a+Q+4eSW2Xt Cpbfo1RFnrPrWuJ2l/bpIF1iL8ASS22d2PErkQ05TUUQq5miH7u/rJO3lDXIQBDJ GvSZRpest8I5wZydeBPKH3MCpCURRMtadSFASK1cwGnQm1oDI20kBc6tHwP6N/TX THztLOE6qICTvdta4j7CN//H5AhG8KajzAENqPkLfUluQACsGKUFFOZGNcPu4WEH Wk4yKCs7l0opaMisS29sApp9yVxr1e+iYelF1AdgzJTGiQRZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2MXPWhbGtxbvk5VMELBvDrS9tFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNm MTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3YWI5ZTUzYmQvYzRkNDk5ODctN2I0Yi0z YmUyLThlNDItNDk3NzU4ZTk4OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZjZjE2MDYtYzExYy00OGU5LWI4 ZWUtYzVlN2FiOWU1M2JkL2NmY2YxNjA2LWMxMWMtNDhlOS1iOGVlLWM1ZTdhYjll NTNiZC5jcmwwHwYDVR0jBBgwFoAUfO8iqAJFGnAVzpkedn06U2E2SmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNmMTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3 YWI5ZTUzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdIUfuM4vjS8BVeJbxNqv+SdNqd7kynyGgwzxpAJof7yrJVNzwKi4My UxtptajVGoUIOJRSrW2mSrtnFDBDUI9WPEQnMJiExYvZvxb3QvPmophfRVeAl9k5 5rQ8rVVzjDdazAo+T5wXKSlsdR3zCWuOjU1/yQ6KojEQg6mhcuUmU9bWV2ErfQDB NTKHztUj3gCsWmpudt15ysHbr21slwLXjUqUv5WvZUW889kF/j/1oUDJDO/A+AB7 uaDVYVq8DlAOXLr49M3b3qMbAHaSAUYqbtD7UStVPlAsUIEmyssT3mqttzncWf/N qtUUN5tnKchOWifrCbPUnlLagTwvnJ0= -----END CERTIFICATE-----Generated at Wed May 7 11:46:39 2025 by rpki-client