$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa File: 598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa (raw, json) Hash identifier: upuW2SahRWM3eUmUbWqezlCM7pfiebc7ZlIeeqJ5MGM= Subject key identifier: 55:AF:A5:F3:85:40:36:C9:69:80:75:2D:13:BB:6B:D9:1A:80:E6:AB Certificate issuer: /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Certificate serial: 010D0C9F43285849C4D4BE4FF6080B7CC59501E0 Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 16509 IP address blocks: 67.221.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:be:4f:f6:08:0b:7c:c5:95:01:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=a8efbb9c-65fa-45b8-a82d-d7a2fc5854ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:98:94:d4:a4:89:39:6c:ec:4d:31:c8:bd:00: c8:ca:8d:d0:8b:8f:9e:db:c7:cc:93:45:74:38:03: 30:54:7c:f5:00:ff:d9:8b:44:fd:8c:16:98:34:f9: 6f:70:23:07:70:ee:b1:ea:1b:4e:0a:e3:8c:cc:bc: dd:44:d2:55:27:11:7e:7d:5e:b6:da:09:6e:13:30: e5:b7:f2:fe:95:20:a8:99:48:c2:7e:2c:13:55:ea: 40:a7:78:45:4e:54:46:72:c6:84:be:a1:f9:9c:1f: 07:c3:ed:3c:de:85:4d:69:33:e7:b5:59:4a:de:0f: 0a:86:12:f5:1f:8c:1d:7d:ff:9a:39:7e:d4:8c:bf: 1a:28:f0:80:ff:cf:0f:5d:50:63:87:92:a5:d4:1c: 78:16:3f:8b:cb:9d:6b:9c:b2:24:40:f3:ae:c2:3b: 05:ca:e2:02:30:cf:41:37:4c:16:ed:63:bb:6b:14: 99:e1:ac:e8:6c:96:62:48:2f:00:8c:7e:78:75:ba: a5:80:35:25:bc:ab:bc:00:ea:2a:bc:74:f1:7c:f8: c8:85:36:27:74:14:af:bb:d2:15:67:83:3b:3e:f4: 3c:75:92:ce:98:83:2e:d4:d9:98:67:58:a8:89:42: ed:05:5d:75:cd:4c:5a:83:42:b5:0d:2e:21:2d:b4: 83:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AF:A5:F3:85:40:36:C9:69:80:75:2D:13:BB:6B:D9:1A:80:E6:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl X509v3 Authority Key Identifier: keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer sbgp-ipAddrBlock: critical IPv4: 67.221.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:59:9e:c2:ef:c1:5d:02:4f:cd:51:dc:65:ab:4d:19:11:62: 01:96:51:45:82:26:f3:10:f2:9f:3c:4a:df:6d:22:a9:71:08: 9d:66:2e:42:0d:57:5d:ca:2b:07:11:4b:92:7e:6b:2b:85:51: fb:eb:19:1c:12:c2:75:12:de:2d:06:47:9c:c5:9c:26:79:6a: 51:c3:75:be:11:bc:fe:90:7c:b9:11:d1:58:97:ce:15:bf:2d: 5b:c8:b2:39:78:0b:85:2e:bd:30:82:dd:ce:c4:4b:92:96:25: 79:68:c5:eb:98:83:83:43:e4:b9:c4:ec:ac:44:18:2f:9b:c3: 2f:3f:a8:ab:e3:78:24:f9:05:eb:63:ad:44:00:72:be:4e:45: fa:84:1c:27:ce:a7:0f:44:c0:a5:99:22:52:e5:c3:7e:6f:15: a3:24:d9:c7:2d:d3:b4:4a:8a:b0:fe:68:c5:32:0b:c7:01:df: dd:d0:27:cd:b3:44:ac:1b:f4:76:c2:38:9f:09:a8:3a:6e:09: 03:49:db:20:37:5a:aa:3f:fa:22:57:0a:b7:a4:02:1c:b5:b7: 6f:ea:81:89:89:95:41:02:80:58:ee:2e:08:44:15:21:4b:f3: a5:79:23:07:b4:9c:85:e9:58:64:70:0d:bf:62:e0:a4:12:e5: de:84:19:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1L5P9ggLfMWVAeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZjYTgxYzMtZTViZi00OGFjLThhZjktMGQ3ODljMzVh MmFkMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk YThlZmJiOWMtNjVmYS00NWI4LWE4MmQtZDdhMmZjNTg1NGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZiU1KSJOWzsTTHIvQDIyo3Qi4+e28fMk0V0 OAMwVHz1AP/Zi0T9jBaYNPlvcCMHcO6x6htOCuOMzLzdRNJVJxF+fV622gluEzDl t/L+lSComUjCfiwTVepAp3hFTlRGcsaEvqH5nB8Hw+083oVNaTPntVlK3g8KhhL1 H4wdff+aOX7UjL8aKPCA/88PXVBjh5Kl1Bx4Fj+Ly51rnLIkQPOuwjsFyuICMM9B N0wW7WO7axSZ4azobJZiSC8AjH54dbqlgDUlvKu8AOoqvHTxfPjIhTYndBSvu9IV Z4M7PvQ8dZLOmIMu1NmYZ1ioiULtBV11zUxag0K1DS4hLbSDGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWvpfOFQDbJaYB1LRO7a9kagOarMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNh ODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4OWMzNWEyYWQvNTk4ZmE5YWItM2FmMS0z NGQ1LTkwYjUtODBiOWU3NGIxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTZjYTgxYzMtZTViZi00OGFjLThh ZjktMGQ3ODljMzVhMmFkLzE2Y2E4MWMzLWU1YmYtNDhhYy04YWY5LTBkNzg5YzM1 YTJhZC5jcmwwHwYDVR0jBBgwFoAUOpt3WcS0K+2JuuBO0tmA1rhWa4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNhODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4 OWMzNWEyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ90mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5ZnsLvwV0CT81R3GWrTRkRYgGWUUWCJvMQ8p88St9tIqlxCJ1mLkIN V13KKwcRS5J+ayuFUfvrGRwSwnUS3i0GR5zFnCZ5alHDdb4RvP6QfLkR0ViXzhW/ LVvIsjl4C4UuvTCC3c7ES5KWJXloxeuYg4ND5LnE7KxEGC+bwy8/qKvjeCT5Betj rUQAcr5ORfqEHCfOpw9EwKWZIlLlw35vFaMk2cct07RKirD+aMUyC8cB393QJ82z RKwb9HbCOJ8JqDpuCQNJ2yA3Wqo/+iJXCrekAhy1t2/qgYmJlUECgFjuLghEFSFL 86V5Iwe0nIXpWGRwDb9i4KQS5d6EGZs= -----END CERTIFICATE-----Generated at Sat Jun 14 06:07:28 2025 by rpki-client