$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa File: 2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa (raw, json) Hash identifier: E9Q5yF0aogi2x73OOOwyDeBYS/ZKKPgbT4Dw6YOSb88= Subject key identifier: 3E:31:F9:00:6D:6C:CC:6B:83:68:E1:39:A0:FA:6C:6D:15:A3:AF:40 Certificate issuer: /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Certificate serial: 010D0C9F4328584F698D770A8A937CA210D65E00 Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 396982 IP address blocks: 199.91.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:77:0a:8a:93:7c:a2:10:d6:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=dd576c18-928b-4a51-aab8-0c38a6da02b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dc:7e:09:e6:df:bd:35:c0:79:d3:8b:a8:5f: f1:b2:64:f4:5f:c8:73:ae:2e:61:1f:81:63:57:3e: 48:47:d6:3e:fa:60:71:a3:d2:62:b6:6d:21:1f:d6: bc:57:88:57:49:a3:2b:a4:77:b8:6b:60:4a:21:09: e4:c3:8d:20:95:9c:53:23:c0:72:fe:ab:5e:6a:96: 9e:4c:06:a0:20:1c:96:aa:8f:82:0e:06:31:07:6b: 1a:98:79:ee:38:6a:73:d3:76:0b:48:62:9e:33:14: 3e:8a:38:f1:bb:e4:76:53:5a:f8:d3:2d:01:ae:60: b6:5b:74:68:b3:ea:11:f9:f7:ef:08:e0:37:d9:b7: 7f:81:64:6f:94:73:bd:58:40:69:91:56:d0:5e:57: c8:f1:98:19:29:61:52:3c:b5:d3:49:f9:31:54:07: 2c:27:29:00:d7:d8:94:c6:ab:dd:b5:df:24:ea:9b: 46:1f:13:08:29:25:af:b5:92:68:ed:e2:46:2c:6f: 8c:97:a4:6c:99:f9:a5:a7:ee:23:e4:47:68:90:21: f7:04:63:b0:0d:09:33:ac:bd:71:84:bd:aa:4b:a1: 4a:6c:6f:a2:c3:08:93:e6:17:be:5e:94:da:4b:d7: 0e:57:7a:e6:6f:f7:72:46:42:cf:08:ca:19:54:3d: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:31:F9:00:6D:6C:CC:6B:83:68:E1:39:A0:FA:6C:6D:15:A3:AF:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl X509v3 Authority Key Identifier: keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer sbgp-ipAddrBlock: critical IPv4: 199.91.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:6f:66:3d:65:53:52:95:a1:c4:c0:b6:e1:c5:8e:ae:75:d0: 7b:6d:e4:5b:f5:ba:a5:44:73:b4:bd:68:03:f9:0c:d9:f5:f0: 4c:07:2f:01:3c:a3:f4:c1:09:fa:fb:48:cb:ff:51:91:43:0b: 70:65:f7:34:09:eb:c3:ad:65:a5:5d:27:61:48:72:b0:87:d2: 75:f3:bd:c5:ed:4a:4e:0e:3e:d8:d2:8d:f8:72:2c:4e:c0:eb: a1:11:a6:2e:b9:9a:e1:dd:e8:1c:c7:d8:f1:96:eb:cf:f6:3e: e6:35:30:0c:19:5b:88:d7:22:1f:fa:d4:34:e8:2c:a5:13:77: e0:e3:8c:f2:fb:e9:28:84:63:f6:40:0d:9d:4a:d6:eb:10:6d: c7:61:43:84:e1:fc:b1:68:59:22:46:e8:0a:78:6b:a3:47:00: 58:ee:c6:4a:99:25:ec:3a:ff:4f:a8:1f:e3:66:fe:18:ba:ef: 4e:b3:8f:4c:2a:16:8a:ea:44:6b:7d:35:7c:61:1f:ea:dd:bb: be:d0:76:e9:78:a5:e0:3a:f1:85:c6:50:c2:5d:4d:5c:61:a1: 16:db:e1:1c:35:f9:08:38:c9:f7:34:bf:f9:45:dd:97:22:2a: 5b:82:14:e4:97:5e:80:bf:53:4b:7b:9f:34:47:dc:da:6a:c9: 25:c2:35:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXcKipN8ohDWXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZjZjE2MDYtYzExYy00OGU5LWI4ZWUtYzVlN2FiOWU1 M2JkMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZGQ1NzZjMTgtOTI4Yi00YTUxLWFhYjgtMGMzOGE2ZGEwMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9x+CebfvTXAedOLqF/xsmT0X8hzri5hH4Fj Vz5IR9Y++mBxo9Jitm0hH9a8V4hXSaMrpHe4a2BKIQnkw40glZxTI8By/qteapae TAagIByWqo+CDgYxB2samHnuOGpz03YLSGKeMxQ+ijjxu+R2U1r40y0BrmC2W3Ro s+oR+ffvCOA32bd/gWRvlHO9WEBpkVbQXlfI8ZgZKWFSPLXTSfkxVAcsJykA19iU xqvdtd8k6ptGHxMIKSWvtZJo7eJGLG+Ml6Rsmfmlp+4j5EdokCH3BGOwDQkzrL1x hL2qS6FKbG+iwwiT5he+XpTaS9cOV3rmb/dyRkLPCMoZVD2n3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4x+QBtbMxrg2jhOaD6bG0Vo69AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNm MTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3YWI5ZTUzYmQvMmZkYThiYjEtN2RlMi0z NzE3LWIyNmItOTE5Y2ZkMGU5ODZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZjZjE2MDYtYzExYy00OGU5LWI4 ZWUtYzVlN2FiOWU1M2JkL2NmY2YxNjA2LWMxMWMtNDhlOS1iOGVlLWM1ZTdhYjll NTNiZC5jcmwwHwYDVR0jBBgwFoAUfO8iqAJFGnAVzpkedn06U2E2SmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNmMTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3 YWI5ZTUzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJvZj1lU1KVocTAtuHFjq510Htt5Fv1uqVEc7S9aAP5DNn18EwHLwE8 o/TBCfr7SMv/UZFDC3Bl9zQJ68OtZaVdJ2FIcrCH0nXzvcXtSk4OPtjSjfhyLE7A 66ERpi65muHd6BzH2PGW68/2PuY1MAwZW4jXIh/61DToLKUTd+DjjPL76SiEY/ZA DZ1K1usQbcdhQ4Th/LFoWSJG6Ap4a6NHAFjuxkqZJew6/0+oH+Nm/hi6706zj0wq ForqRGt9NXxhH+rdu77Qdul4peA68YXGUMJdTVxhoRbb4Rw1+Qg4yfc0v/lF3Zci KluCFOSXXoC/U0t7nzRH3NpqySXCNS4= -----END CERTIFICATE-----Generated at Thu Oct 8 05:28:46 2026 by rpki-client