$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa File: 598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa (raw, json) Hash identifier: lwcbKF/jbwFLm+35pGyYODbGsBKcb7+M0g/8t7vxCEk= Subject key identifier: F1:B2:35:F7:C9:65:7A:1A:E2:23:D5:01:B5:44:D6:40:5D:05:31:63 Certificate issuer: /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Certificate serial: 010D0C9F4328584E253F01B62BFFAD1D45C97D80 Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 16509 IP address blocks: 67.221.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:01:b6:2b:ff:ad:1d:45:c9:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=73033f39-9b4f-45ab-9634-087d9e09e39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8f:93:f3:00:cc:df:c8:bb:5e:f0:cb:19:a5: 3c:ca:87:03:9b:b4:24:4c:04:b7:92:a7:5b:68:56: ad:71:73:b2:b2:9f:16:3a:ea:75:55:a4:9e:81:aa: e4:f6:ee:02:76:36:8f:d3:d2:b7:bb:be:5c:91:ee: e5:7c:69:b6:45:e4:a0:32:92:f0:2b:04:48:43:7c: 5c:5e:47:92:94:ea:29:a5:fa:13:4a:22:00:08:3f: 76:0d:91:e3:b1:29:15:bd:a8:a5:af:4d:86:23:d4: ba:fa:77:a7:65:8c:a2:70:a5:7e:1c:e6:91:c6:6b: 62:9f:e8:7a:25:f1:20:4e:b4:4a:5f:74:dd:86:39: f8:98:ec:16:e2:3d:fa:02:62:aa:1d:35:d2:dc:32: 44:27:d9:79:80:ba:9c:8c:36:40:f2:30:4b:8d:6a: 7f:f2:1d:d3:9c:2e:31:b1:16:0a:c0:ab:51:ea:e1: 4a:fb:fd:05:f6:71:b0:14:a4:74:24:99:5c:4b:73: 4b:d8:05:68:30:85:e5:22:80:fa:7d:68:a2:a9:80: 15:08:55:3d:42:07:cc:58:60:08:0a:a3:d6:e0:f3: 05:29:14:9f:1a:e2:85:48:3f:02:5a:4b:2c:d5:1d: 15:c4:f2:35:33:0d:03:08:04:fd:6a:a9:62:50:11: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B2:35:F7:C9:65:7A:1A:E2:23:D5:01:B5:44:D6:40:5D:05:31:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl X509v3 Authority Key Identifier: keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer sbgp-ipAddrBlock: critical IPv4: 67.221.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:bc:f4:0b:25:95:a4:52:9c:63:d5:82:42:61:20:48:64:a0: 0e:ec:cb:29:43:72:ec:c6:79:de:cf:f8:45:74:ee:96:01:1d: fd:c5:07:92:cd:4f:55:6f:2e:ba:6e:a2:a3:2f:d7:12:88:d6: 0c:3a:2a:22:8d:06:77:6a:a1:82:51:80:b1:07:6a:e8:56:a7: 74:2c:9a:f8:e5:5e:16:fc:ad:ca:16:96:e0:89:32:b6:61:2b: f8:65:35:3f:f1:69:b9:3b:79:e0:9e:ff:18:4b:05:ca:41:d9: 9f:80:1c:98:dc:ed:f0:5d:67:59:7c:79:8e:91:04:de:0e:2f: c4:d4:b5:ff:06:c8:e3:63:55:d5:ce:66:d1:b0:62:25:e9:5a: fa:e1:96:79:c9:83:2b:ac:c7:d2:02:3c:99:51:c4:07:2a:87: c6:5a:38:19:15:d4:2c:a9:31:a9:43:12:85:84:67:4e:43:4c: 90:79:b7:98:ec:c4:6d:96:ae:04:5b:d0:48:ce:86:b4:5d:2e: 45:3b:fb:bd:96:b7:1f:ae:5a:2a:97:ed:99:73:af:34:54:29: 3c:f1:00:69:05:8b:9c:e8:1e:bb:e8:1f:99:ad:1e:40:17:d7: a2:c2:76:2c:a8:be:80:c6:15:72:af:87:15:81:e1:9d:e2:3d: 9e:72:03:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwG2K/+tHUXJfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZjYTgxYzMtZTViZi00OGFjLThhZjktMGQ3ODljMzVh MmFkMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk NzMwMzNmMzktOWI0Zi00NWFiLTk2MzQtMDg3ZDllMDllMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY+T8wDM38i7XvDLGaU8yocDm7QkTAS3kqdb aFatcXOysp8WOup1VaSegark9u4CdjaP09K3u75cke7lfGm2ReSgMpLwKwRIQ3xc XkeSlOoppfoTSiIACD92DZHjsSkVvailr02GI9S6+nenZYyicKV+HOaRxmtin+h6 JfEgTrRKX3Tdhjn4mOwW4j36AmKqHTXS3DJEJ9l5gLqcjDZA8jBLjWp/8h3TnC4x sRYKwKtR6uFK+/0F9nGwFKR0JJlcS3NL2AVoMIXlIoD6fWiiqYAVCFU9QgfMWGAI CqPW4PMFKRSfGuKFSD8CWkss1R0VxPI1Mw0DCAT9aqliUBE4QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGyNffJZXoa4iPVAbVE1kBdBTFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNh ODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4OWMzNWEyYWQvNTk4ZmE5YWItM2FmMS0z NGQ1LTkwYjUtODBiOWU3NGIxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTZjYTgxYzMtZTViZi00OGFjLThh ZjktMGQ3ODljMzVhMmFkLzE2Y2E4MWMzLWU1YmYtNDhhYy04YWY5LTBkNzg5YzM1 YTJhZC5jcmwwHwYDVR0jBBgwFoAUOpt3WcS0K+2JuuBO0tmA1rhWa4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNhODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4 OWMzNWEyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ90mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi89AsllaRSnGPVgkJhIEhkoA7syylDcuzGed7P+EV07pYBHf3FB5LN T1VvLrpuoqMv1xKI1gw6KiKNBndqoYJRgLEHauhWp3QsmvjlXhb8rcoWluCJMrZh K/hlNT/xabk7eeCe/xhLBcpB2Z+AHJjc7fBdZ1l8eY6RBN4OL8TUtf8GyONjVdXO ZtGwYiXpWvrhlnnJgyusx9ICPJlRxAcqh8ZaOBkV1CypMalDEoWEZ05DTJB5t5js xG2WrgRb0EjOhrRdLkU7+72Wtx+uWiqX7ZlzrzRUKTzxAGkFi5zoHrvoH5mtHkAX 16LCdiyovoDGFXKvhxWB4Z3iPZ5yA4g= -----END CERTIFICATE-----Generated at Sat Jun 13 18:44:20 2026 by rpki-client