$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa File: c4def65c-3694-3645-bf50-43caec096461.roa (raw, json) Hash identifier: /VciRGd4aK3s51abNbR1U+oRdDZXAfW7BeGN8jT+Ky4= Subject key identifier: D9:C0:0A:E0:D7:E6:93:E3:A6:ED:54:36:49:E3:7C:DE:A4:20:D4:42 Certificate issuer: /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Certificate serial: 010D0C9F4328584B5141B5F04D744504EE1ABE60 Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 67.221.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:b5:f0:4d:74:45:04:ee:1a:be:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=e76fe027-857b-4ca3-aa8b-2a2ccfee5647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:bf:da:20:e1:4e:87:5a:5d:f8:da:84:77: 25:fc:0e:73:3c:1d:7f:7e:92:0b:74:2e:b5:ef:07: 92:8f:80:14:b9:20:5f:73:b7:ea:b6:e7:48:cd:c6: 5f:57:a0:54:25:d0:8c:48:6b:22:d6:bb:ab:75:55: 4d:4f:ae:b4:ea:a5:b0:8b:70:99:d3:16:ca:86:a1: ce:c9:8d:91:40:12:72:75:62:cc:20:43:5e:12:55: 4b:0e:4b:7e:dc:90:ce:1c:74:28:93:25:39:c3:a6: 63:63:1a:62:2b:6a:93:6d:e5:bd:14:96:07:8a:a1: 60:49:d4:7f:bf:0b:f3:2c:20:5c:01:1d:08:4b:7b: 44:48:4e:94:4a:d3:48:7b:b7:c1:97:a5:33:4c:d7: f1:c8:85:8e:79:51:0a:ce:4a:4f:04:82:cd:5e:be: 8b:ae:d4:18:1f:73:23:60:54:7f:3e:9e:f8:28:42: 4b:44:53:4e:ad:99:60:68:25:0f:da:b0:d2:9d:fd: 5a:33:d0:2b:c0:5b:7c:d8:90:51:b1:9f:d6:79:d1: 31:d0:fb:b7:56:08:40:e0:c2:89:4c:5b:5f:37:65: 49:f7:b1:42:da:fb:c6:1b:26:32:b8:cd:72:2e:3c: 69:bb:7f:ce:a7:9b:cb:42:35:3a:a8:11:70:24:8e: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C0:0A:E0:D7:E6:93:E3:A6:ED:54:36:49:E3:7C:DE:A4:20:D4:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl X509v3 Authority Key Identifier: keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer sbgp-ipAddrBlock: critical IPv4: 67.221.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:8a:f8:15:13:56:03:80:25:d0:1c:65:30:e0:65:a1:c3:e0: a8:ee:cc:85:5b:d5:8e:64:52:86:f9:bd:0b:8c:10:1b:d9:4e: ae:85:a3:f4:49:12:f7:da:6d:bd:36:79:c0:fd:0e:3b:79:57: ab:57:21:3f:94:6f:54:d6:63:c9:ff:f5:4f:ba:ee:40:0a:53: b4:f3:3e:c4:c8:c2:f8:8d:0a:5f:52:bb:35:2f:1c:97:43:01: ee:d1:b3:40:59:81:60:a8:e4:74:fb:e6:ed:96:65:d3:a5:ef: b9:da:d1:0e:27:cf:8a:23:71:36:45:d1:4e:35:74:7c:b0:ab: 95:78:af:43:1f:82:46:8a:24:ef:eb:67:c7:49:89:0e:87:96: ce:e4:a2:22:f5:41:e3:10:4d:9e:a4:52:72:d0:e6:78:ef:33: e1:ad:fd:e1:77:69:1b:c7:b6:27:00:0b:4a:3d:31:bf:a6:7f: 8d:eb:b2:dd:6f:8e:f9:74:c7:80:ae:19:79:78:72:46:71:b5: 85:05:c5:67:f6:d6:93:ea:59:ed:43:5c:6b:47:db:3c:b3:d6: 6b:21:7a:35:bc:26:bc:88:a3:43:5a:15:b1:21:2f:a8:9a:01: be:f6:26:73:1b:73:99:36:07:28:bd:fc:53:06:45:1f:26:d4: 84:88:1b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQbXwTXRFBO4avmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZjYTgxYzMtZTViZi00OGFjLThhZjktMGQ3ODljMzVh MmFkMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTc2ZmUwMjctODU3Yi00Y2EzLWFhOGItMmEyY2NmZWU1NjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotm/2iDhTodaXfjahHcl/A5zPB1/fpILdC61 7weSj4AUuSBfc7fqtudIzcZfV6BUJdCMSGsi1rurdVVNT6606qWwi3CZ0xbKhqHO yY2RQBJydWLMIENeElVLDkt+3JDOHHQokyU5w6ZjYxpiK2qTbeW9FJYHiqFgSdR/ vwvzLCBcAR0IS3tESE6UStNIe7fBl6UzTNfxyIWOeVEKzkpPBILNXr6LrtQYH3Mj YFR/Pp74KEJLRFNOrZlgaCUP2rDSnf1aM9ArwFt82JBRsZ/WedEx0Pu3VghA4MKJ TFtfN2VJ97FC2vvGGyYyuM1yLjxpu3/Op5vLQjU6qBFwJI4HHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnACuDX5pPjpu1UNknjfN6kINRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNh ODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4OWMzNWEyYWQvYzRkZWY2NWMtMzY5NC0z NjQ1LWJmNTAtNDNjYWVjMDk2NDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTZjYTgxYzMtZTViZi00OGFjLThh ZjktMGQ3ODljMzVhMmFkLzE2Y2E4MWMzLWU1YmYtNDhhYy04YWY5LTBkNzg5YzM1 YTJhZC5jcmwwHwYDVR0jBBgwFoAUOpt3WcS0K+2JuuBO0tmA1rhWa4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNhODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4 OWMzNWEyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ90nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyK+BUTVgOAJdAcZTDgZaHD4KjuzIVb1Y5kUob5vQuMEBvZTq6Fo/RJ Evfabb02ecD9Djt5V6tXIT+Ub1TWY8n/9U+67kAKU7TzPsTIwviNCl9SuzUvHJdD Ae7Rs0BZgWCo5HT75u2WZdOl77na0Q4nz4ojcTZF0U41dHywq5V4r0MfgkaKJO/r Z8dJiQ6Hls7koiL1QeMQTZ6kUnLQ5njvM+Gt/eF3aRvHticAC0o9Mb+mf43rst1v jvl0x4CuGXl4ckZxtYUFxWf21pPqWe1DXGtH2zyz1mshejW8JryIo0NaFbEhL6ia Ab72JnMbc5k2Byi9/FMGRR8m1ISIG6I= -----END CERTIFICATE-----Generated at Thu Oct 9 01:19:43 2025 by rpki-client