$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa File: c4d49987-7b4b-3be2-8e42-497758e9897c.roa (raw, json) Hash identifier: mXUX8pSPO0P3vD0WzUGvRMRKewaFQl1KGQRo/yC6PQo= Subject key identifier: 44:53:E1:DB:C1:9E:58:3C:CC:4D:CB:81:44:B3:B4:A0:C5:F6:D9:64 Certificate issuer: /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Certificate serial: 010D0C9F4328584F655D70D5900727313E5CEC40 Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395224 IP address blocks: 199.91.151.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:70:d5:90:07:27:31:3e:5c:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=76bb364c-bbf3-4435-80b5-d789372bf0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:41:d2:a9:8e:b2:a7:9c:26:3c:5f:e2:c3: b0:be:f0:2f:dc:b6:65:83:f6:93:0f:27:ad:b6:f2: 94:b0:6c:68:04:8f:62:a3:37:6c:2e:a7:2e:3b:31: 0a:a3:61:b6:5b:4e:c1:f8:0d:74:1d:fd:af:e6:e3: 28:8b:80:fd:31:8e:07:e6:e6:22:08:3a:87:7a:3f: 30:94:1c:dd:a2:1e:f1:79:44:42:10:f3:a8:80:d4: 82:03:3d:ff:f2:86:7b:46:93:6e:97:dc:a0:14:5b: 0a:a3:70:8f:05:b8:cd:1c:1a:3d:a5:62:16:76:9b: 6a:e8:50:67:5c:f7:12:f0:f4:9a:5e:3e:29:bf:7f: 96:14:32:ea:d5:d2:c6:eb:0b:ab:0e:c6:9b:15:ff: 44:90:26:f1:e2:75:9b:9c:78:bd:75:04:04:7e:be: cc:a5:8c:b3:53:af:d8:65:b5:5e:57:8c:f3:11:92: 79:94:f3:4c:1e:b8:b4:36:53:0b:e4:1e:39:4f:9f: 56:15:78:61:c2:21:97:46:1e:57:9c:71:23:fb:65: 82:20:04:a4:72:2b:db:ee:08:8f:7b:1f:c9:fb:d3: 32:14:0c:23:14:5f:55:3d:e8:66:d6:5b:75:d9:03: dd:62:f3:68:d7:ab:8b:9a:b4:18:17:71:f8:c1:31: 67:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:53:E1:DB:C1:9E:58:3C:CC:4D:CB:81:44:B3:B4:A0:C5:F6:D9:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl X509v3 Authority Key Identifier: keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer sbgp-ipAddrBlock: critical IPv4: 199.91.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:03:0d:81:40:b5:59:e1:1d:21:ae:c9:8e:f1:08:86:00:6f: f1:2e:67:6c:31:2e:9f:ea:8d:fd:35:ea:33:16:3c:57:2d:33: 87:23:1c:cb:2a:7d:0f:ba:1d:af:c2:ff:ef:8a:df:f4:5e:7c: ff:fa:9e:c2:7a:cc:5b:84:d7:95:a6:60:80:01:bc:88:08:31: 1e:28:5b:a6:39:57:ef:84:8e:62:64:cf:53:c8:00:b2:78:fb: a2:64:49:ba:05:ca:57:9f:58:eb:c9:86:c9:3e:7a:fe:87:f9: 86:3c:be:5b:bf:70:03:8f:af:a4:ee:c1:f4:c7:96:01:09:f1: 9b:87:3d:f8:7b:d4:d6:14:87:1b:e6:f0:2f:47:35:ba:72:c3: f1:91:34:c2:b6:3d:9e:36:ca:7f:ea:93:96:96:a3:fe:32:d3: 36:68:59:a2:d4:23:cf:89:8e:de:08:30:55:dd:73:c2:ff:e4: 86:b9:2c:1c:9d:9b:03:a5:ec:da:e4:99:0e:00:69:62:8d:bc: d3:08:15:40:02:23:8a:17:da:cf:30:1a:a4:99:75:3a:da:a2: 42:84:04:2b:d4:69:6d:94:d0:a9:e9:21:c2:90:6e:a9:b7:1b: 10:21:02:2b:7f:aa:dd:58:de:34:02:87:f1:1b:47:d8:03:bd: 09:0d:5c:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXXDVkAcnMT5c7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZjZjE2MDYtYzExYy00OGU5LWI4ZWUtYzVlN2FiOWU1 M2JkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NzZiYjM2NGMtYmJmMy00NDM1LTgwYjUtZDc4OTM3MmJmMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYZB0qmOsqecJjxf4sOwvvAv3LZlg/aTDyet tvKUsGxoBI9iozdsLqcuOzEKo2G2W07B+A10Hf2v5uMoi4D9MY4H5uYiCDqHej8w lBzdoh7xeURCEPOogNSCAz3/8oZ7RpNul9ygFFsKo3CPBbjNHBo9pWIWdptq6FBn XPcS8PSaXj4pv3+WFDLq1dLG6wurDsabFf9EkCbx4nWbnHi9dQQEfr7MpYyzU6/Y ZbVeV4zzEZJ5lPNMHri0NlML5B45T59WFXhhwiGXRh5XnHEj+2WCIASkcivb7giP ex/J+9MyFAwjFF9VPehm1lt12QPdYvNo16uLmrQYF3H4wTFnFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERT4dvBnlg8zE3LgUSztKDF9tlkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNm MTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3YWI5ZTUzYmQvYzRkNDk5ODctN2I0Yi0z YmUyLThlNDItNDk3NzU4ZTk4OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZjZjE2MDYtYzExYy00OGU5LWI4 ZWUtYzVlN2FiOWU1M2JkL2NmY2YxNjA2LWMxMWMtNDhlOS1iOGVlLWM1ZTdhYjll NTNiZC5jcmwwHwYDVR0jBBgwFoAUfO8iqAJFGnAVzpkedn06U2E2SmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNmMTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3 YWI5ZTUzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEDDYFAtVnhHSGuyY7xCIYAb/EuZ2wxLp/qjf016jMWPFctM4cjHMsq fQ+6Ha/C/++K3/RefP/6nsJ6zFuE15WmYIABvIgIMR4oW6Y5V++EjmJkz1PIALJ4 +6JkSboFylefWOvJhsk+ev6H+YY8vlu/cAOPr6TuwfTHlgEJ8ZuHPfh71NYUhxvm 8C9HNbpyw/GRNMK2PZ42yn/qk5aWo/4y0zZoWaLUI8+Jjt4IMFXdc8L/5Ia5LByd mwOl7NrkmQ4AaWKNvNMIFUACI4oX2s8wGqSZdTraokKEBCvUaW2U0KnpIcKQbqm3 GxAhAit/qt1Y3jQCh/EbR9gDvQkNXJ8= -----END CERTIFICATE-----Generated at Sun Oct 11 06:18:43 2026 by rpki-client