$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa File: c4d49987-7b4b-3be2-8e42-497758e9897c.roa (raw, json) Hash identifier: e3LgxQxHGeGKd/uOgWD0ZnxYglniTJQgwC/HhEPKPd8= Subject key identifier: 2F:E7:0F:17:01:BA:D9:A6:A1:42:4A:88:F6:CD:17:60:1A:07:F3:70 Certificate issuer: /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Certificate serial: 010D0C9F4328584D40CA41373587E1FCFCF22990 Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 395224 IP address blocks: 199.91.151.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:41:37:35:87:e1:fc:fc:f2:29:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=091b75fa-2a4d-47e2-aa6d-82f525146692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:02:97:88:0d:53:27:4c:eb:8b:67:f7:82: f4:47:e8:fc:69:6c:cf:a1:ad:e8:67:2f:5c:8f:2a: 02:e3:46:89:86:08:2d:f2:e2:5d:c4:90:37:8a:49: 21:0a:a5:ab:c5:41:ac:53:03:c3:6d:a4:da:1b:d6: 87:55:e7:b2:1c:c7:54:37:12:c5:c8:8a:df:b1:57: cd:5f:ae:c1:c3:e8:e8:4a:8a:84:f0:ad:67:de:41: f6:f2:8d:32:79:9c:2a:cb:2c:5f:8c:64:bf:f0:c4: 21:7a:12:3d:68:7b:82:33:ec:79:f7:20:c2:cb:05: f0:80:7f:16:62:0e:78:2f:fc:3c:54:c1:15:9e:bc: 45:66:3d:39:b8:bf:60:3c:52:f0:89:d9:58:cc:8e: 56:61:e6:e8:b1:2b:50:69:9d:84:11:8a:33:57:c0: e2:a9:2b:b3:04:09:6e:14:82:bf:f8:74:2a:6e:1f: 78:38:0d:7a:d2:51:88:95:ec:81:79:ae:7f:a8:30: 92:81:9a:fc:98:dd:72:93:ed:ad:c3:3a:70:d9:2c: 44:a7:e9:4b:d6:77:f5:ad:c9:b4:0b:bf:c3:e7:7d: 38:5b:f1:39:93:d4:a1:dd:02:d1:b6:b2:67:81:71: 8e:9d:f1:4d:9d:63:06:61:b5:28:ca:65:7c:1c:7f: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E7:0F:17:01:BA:D9:A6:A1:42:4A:88:F6:CD:17:60:1A:07:F3:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl X509v3 Authority Key Identifier: keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer sbgp-ipAddrBlock: critical IPv4: 199.91.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:8e:30:db:21:a4:7d:42:c4:4e:2b:9c:de:fe:73:4c:51:f3: d7:f4:8f:2b:62:4f:c7:0e:aa:e0:7d:6c:35:b5:ed:08:96:1d: e8:a4:14:04:25:85:56:b3:d6:ed:db:32:08:c6:11:b9:8e:80: 42:7a:b2:aa:01:6f:71:3d:30:25:51:0e:93:f1:68:ac:32:df: ea:af:24:9e:79:3c:52:cb:21:dc:5b:17:05:4b:f6:9f:7d:63: 56:29:ca:0d:04:6f:e5:bc:a0:d7:38:5a:b9:2f:32:71:d7:45: 64:a2:6a:0e:68:ff:0b:67:11:9c:65:46:e8:99:12:55:ce:bd: 47:3b:59:3b:f5:ab:27:09:54:8e:c3:5a:fc:fd:ba:8c:52:0a: f3:6d:50:9e:14:e7:61:bb:19:01:ee:b5:90:2a:69:aa:b5:a8: d7:64:52:c1:41:9d:ca:3e:37:53:4a:42:08:cf:9d:fe:4e:be: aa:9a:0d:f4:58:66:dd:d3:de:49:44:a2:13:26:eb:37:50:2f: 86:9e:55:b0:a4:7d:b4:00:47:0d:8b:29:16:43:e6:d1:f0:db: 1a:e7:ef:bd:78:c4:39:8f:3b:ab:72:40:8e:e5:76:dd:d3:71: ae:45:e8:41:df:84:50:33:12:5d:e9:c7:9a:5c:02:67:b5:4f: 85:30:55:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AykE3NYfh/PzyKZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZjZjE2MDYtYzExYy00OGU5LWI4ZWUtYzVlN2FiOWU1 M2JkMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MDkxYjc1ZmEtMmE0ZC00N2UyLWFhNmQtODJmNTI1MTQ2NjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbYCl4gNUydM64tn94L0R+j8aWzPoa3oZy9c jyoC40aJhggt8uJdxJA3ikkhCqWrxUGsUwPDbaTaG9aHVeeyHMdUNxLFyIrfsVfN X67Bw+joSoqE8K1n3kH28o0yeZwqyyxfjGS/8MQhehI9aHuCM+x59yDCywXwgH8W Yg54L/w8VMEVnrxFZj05uL9gPFLwidlYzI5WYebosStQaZ2EEYozV8DiqSuzBAlu FIK/+HQqbh94OA160lGIleyBea5/qDCSgZr8mN1yk+2twzpw2SxEp+lL1nf1rcm0 C7/D5304W/E5k9Sh3QLRtrJngXGOnfFNnWMGYbUoymV8HH9Z4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/nDxcButmmoUJKiPbNF2AaB/NwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNm MTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3YWI5ZTUzYmQvYzRkNDk5ODctN2I0Yi0z YmUyLThlNDItNDk3NzU4ZTk4OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZjZjE2MDYtYzExYy00OGU5LWI4 ZWUtYzVlN2FiOWU1M2JkL2NmY2YxNjA2LWMxMWMtNDhlOS1iOGVlLWM1ZTdhYjll NTNiZC5jcmwwHwYDVR0jBBgwFoAUfO8iqAJFGnAVzpkedn06U2E2SmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNmMTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3 YWI5ZTUzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCOMNshpH1CxE4rnN7+c0xR89f0jytiT8cOquB9bDW17QiWHeikFAQl hVaz1u3bMgjGEbmOgEJ6sqoBb3E9MCVRDpPxaKwy3+qvJJ55PFLLIdxbFwVL9p99 Y1Ypyg0Eb+W8oNc4WrkvMnHXRWSiag5o/wtnEZxlRuiZElXOvUc7WTv1qycJVI7D Wvz9uoxSCvNtUJ4U52G7GQHutZAqaaq1qNdkUsFBnco+N1NKQgjPnf5OvqqaDfRY Zt3T3klEohMm6zdQL4aeVbCkfbQARw2LKRZD5tHw2xrn7714xDmPO6tyQI7ldt3T ca5F6EHfhFAzEl3px5pcAme1T4UwVd8= -----END CERTIFICATE-----Generated at Thu Mar 26 07:38:29 2026 by rpki-client