$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa File: c4d49987-7b4b-3be2-8e42-497758e9897c.roa (raw, json) Hash identifier: rClxjRLJGNRymjCYTH/t8hiIXr0TaTZ4WgB5r8bv9vU= Subject key identifier: BC:85:8C:30:24:E2:4B:87:89:9F:F5:3E:11:55:24:E5:90:1C:F2:8C Certificate issuer: /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Certificate serial: 010D0C9F4328584EC371BA6BDCE93C6D8180AA00 Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 395224 IP address blocks: 199.91.151.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:ba:6b:dc:e9:3c:6d:81:80:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=2a40f972-fa56-4fdc-a860-1b98f60c5659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:67:b6:fd:4f:4e:67:0d:7b:ac:06:73:1a:24: 88:f8:b8:2b:0b:e3:c9:35:d6:41:ca:40:d2:81:a2: 69:31:61:ec:d5:93:12:33:4d:0f:70:5e:f9:59:17: 95:aa:f1:f6:87:aa:40:1e:b7:50:65:95:a9:eb:b1: ee:2f:57:79:31:42:6c:6c:d6:fa:19:1d:10:c2:4e: 50:c2:4f:98:51:f3:44:76:32:c6:65:b6:bf:af:b0: a5:ec:94:4b:23:48:13:b0:66:d6:f3:8c:b5:b6:c5: 95:74:bc:d9:f3:52:c6:09:2b:43:02:ed:90:da:96: 48:a2:60:c5:91:f8:f8:1a:de:90:ba:a4:87:8f:5a: 7e:b5:7d:a3:b9:0e:14:4a:d8:2b:06:8a:cf:17:61: 6b:f2:f0:20:2b:58:75:bb:db:52:09:b1:13:c9:ab: fd:33:3f:54:fb:04:09:38:6c:46:55:1e:c8:1e:24: 53:b6:07:9a:21:b7:65:0d:38:f2:da:35:ef:e2:76: 95:18:02:7b:29:c7:dc:dc:59:1a:7c:cd:db:45:df: d9:53:86:95:0c:1d:83:08:7f:74:8c:17:88:c4:cc: 72:6f:db:8d:c5:76:70:e1:6d:23:af:4b:0f:54:7d: 25:5e:10:05:af:b9:99:23:49:a4:6a:6a:c0:06:93: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:85:8C:30:24:E2:4B:87:89:9F:F5:3E:11:55:24:E5:90:1C:F2:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl X509v3 Authority Key Identifier: keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer sbgp-ipAddrBlock: critical IPv4: 199.91.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b8:0c:21:97:d5:fd:a4:7c:51:dd:7b:50:47:ab:a5:6a:ea: 59:fa:6c:d7:d6:13:65:75:74:71:97:7c:93:b3:04:92:1d:f5: c9:40:14:1c:14:e5:e7:30:96:cf:2d:b9:66:e7:fa:50:26:48: db:31:ca:82:dd:1e:93:b4:05:d8:c9:03:8d:fc:ce:54:cb:6d: 01:bb:f5:b1:62:27:69:69:6d:25:74:77:b6:13:6e:0b:8c:ab: 66:ba:3e:79:92:71:09:bb:bf:7c:11:65:6a:1f:b6:68:3a:3b: e7:4a:c6:f5:e0:0e:b7:37:d9:87:92:05:94:6b:da:14:0e:61: 0b:b1:90:2a:4a:ad:be:f9:b3:c8:39:34:a5:d1:4c:a4:75:0d: 84:1d:0e:1e:e8:fb:ed:d5:26:bc:61:75:54:ac:f6:35:c3:ed: dc:ab:c7:23:35:ec:2f:75:ae:ad:ed:f7:55:f9:e9:12:ee:67: 6f:45:de:f1:f8:ed:a6:e0:b9:43:1a:08:a0:13:e0:91:6f:11: 19:3a:ce:b0:a1:c7:65:75:dd:86:46:bb:f0:9e:ea:51:f5:b5: 88:08:7e:44:f1:d8:4d:e0:eb:6e:49:fb:35:2a:05:cc:39:c3: 00:4b:c0:70:d1:08:ce:10:a5:ef:10:c0:47:fc:82:88:de:a5: c0:c0:19:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dcbpr3Ok8bYGAqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZjZjE2MDYtYzExYy00OGU5LWI4ZWUtYzVlN2FiOWU1 M2JkMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MmE0MGY5NzItZmE1Ni00ZmRjLWE4NjAtMWI5OGY2MGM1NjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2e2/U9OZw17rAZzGiSI+LgrC+PJNdZBykDS gaJpMWHs1ZMSM00PcF75WReVqvH2h6pAHrdQZZWp67HuL1d5MUJsbNb6GR0Qwk5Q wk+YUfNEdjLGZba/r7Cl7JRLI0gTsGbW84y1tsWVdLzZ81LGCStDAu2Q2pZIomDF kfj4Gt6QuqSHj1p+tX2juQ4UStgrBorPF2Fr8vAgK1h1u9tSCbETyav9Mz9U+wQJ OGxGVR7IHiRTtgeaIbdlDTjy2jXv4naVGAJ7Kcfc3FkafM3bRd/ZU4aVDB2DCH90 jBeIxMxyb9uNxXZw4W0jr0sPVH0lXhAFr7mZI0mkamrABpNZzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyFjDAk4kuHiZ/1PhFVJOWQHPKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNm MTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3YWI5ZTUzYmQvYzRkNDk5ODctN2I0Yi0z YmUyLThlNDItNDk3NzU4ZTk4OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZjZjE2MDYtYzExYy00OGU5LWI4 ZWUtYzVlN2FiOWU1M2JkL2NmY2YxNjA2LWMxMWMtNDhlOS1iOGVlLWM1ZTdhYjll NTNiZC5jcmwwHwYDVR0jBBgwFoAUfO8iqAJFGnAVzpkedn06U2E2SmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNmMTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3 YWI5ZTUzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEW4DCGX1f2kfFHde1BHq6Vq6ln6bNfWE2V1dHGXfJOzBJId9clAFBwU 5ecwls8tuWbn+lAmSNsxyoLdHpO0BdjJA438zlTLbQG79bFiJ2lpbSV0d7YTbguM q2a6PnmScQm7v3wRZWoftmg6O+dKxvXgDrc32YeSBZRr2hQOYQuxkCpKrb75s8g5 NKXRTKR1DYQdDh7o++3VJrxhdVSs9jXD7dyrxyM17C91rq3t91X56RLuZ29F3vH4 7abguUMaCKAT4JFvERk6zrChx2V13YZGu/Ce6lH1tYgIfkTx2E3g625J+zUqBcw5 wwBLwHDRCM4Qpe8QwEf8gojepcDAGcI= -----END CERTIFICATE-----Generated at Fri Aug 21 23:29:30 2026 by rpki-client