$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa File: c4def65c-3694-3645-bf50-43caec096461.roa (raw, json) Hash identifier: aWXry96Ixa/jDbX9UpNNHOPaWMVmKZP+0SYe6dO/9C4= Subject key identifier: 89:56:BB:07:CB:44:A0:03:FF:7C:2A:87:56:79:FA:82:BE:72:BE:C9 Certificate issuer: /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Certificate serial: 010D0C9F4328584A7085EBD131D9BEAB17A96C08 Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 16509 IP address blocks: 67.221.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:eb:d1:31:d9:be:ab:17:a9:6c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=e0fe0511-d8d3-4ef2-b4f3-e6ed0c50129d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8e:99:14:26:83:b5:b7:1a:11:d0:06:2c:19: 4f:c6:8e:fa:52:78:09:07:ce:45:ac:84:40:67:3f: 2d:b7:d0:55:78:11:4b:c5:bc:b7:7b:6d:2a:55:9f: 65:fe:ad:4b:df:ca:23:d2:e7:5a:c1:46:d4:de:3f: e9:3b:17:e4:b4:95:6b:a3:28:1b:18:45:5d:87:b3: 1f:2d:5d:64:d5:54:fd:a4:2d:f1:f9:c2:1f:a7:d0: e9:46:8e:98:e2:09:80:24:b2:ce:0e:94:89:98:d4: f9:5a:76:f0:ca:56:95:b4:4f:5b:66:ac:52:a1:ff: 5b:37:3c:16:72:7d:39:b7:6e:ff:40:1b:69:0b:bf: ab:aa:e5:e1:85:9c:04:9a:a6:3d:77:fb:4f:50:b7: d7:0c:15:38:d1:71:d6:a7:9e:64:29:42:81:fb:28: a3:ce:04:cb:64:c5:1b:a6:a2:f2:c1:b3:e0:16:8c: 07:24:5e:1d:77:87:84:cb:8f:44:73:5d:2d:d5:a2: e5:b2:9c:4e:e7:08:f5:c3:89:01:97:03:cb:2b:05: e2:57:df:67:e0:bd:e5:fe:d4:4a:32:47:ae:94:d7: 20:a3:ae:71:11:33:53:99:59:8f:23:87:36:fe:96: 35:bb:09:dd:f9:89:bb:a6:e7:64:e0:42:fd:0d:af: 25:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:56:BB:07:CB:44:A0:03:FF:7C:2A:87:56:79:FA:82:BE:72:BE:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl X509v3 Authority Key Identifier: keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer sbgp-ipAddrBlock: critical IPv4: 67.221.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f9:99:a6:de:69:5d:2a:84:3d:13:f8:03:d0:13:dd:c2:18: 06:68:03:c8:c1:41:e3:37:c3:90:1e:16:58:a0:fd:d2:f9:9f: a7:ed:ef:fe:bb:89:f8:36:51:16:c3:a4:e6:1b:64:69:b8:e6: 60:3b:4c:e2:d1:c8:25:1a:21:13:6f:e0:02:38:df:d1:ac:8d: 1e:56:67:78:fb:85:1b:79:e1:ff:8c:87:a4:38:eb:d5:5c:6e: d3:e8:d1:85:fd:2c:a5:50:57:44:bc:af:cc:90:00:df:1f:bf: c0:59:42:95:50:a4:23:54:db:a3:10:39:ce:5b:f0:96:c4:b1: 8a:9d:15:9d:39:61:70:c3:4b:21:b9:1e:19:94:75:78:f4:2c: b9:62:a4:fc:08:df:7e:24:45:de:6c:49:85:36:7f:78:c0:b4: a0:70:d4:f5:e6:c3:b6:9f:81:30:ef:df:6e:d8:6b:13:e4:7a: f8:66:7e:26:7c:1b:ab:a2:07:6d:3c:e5:c1:d5:2c:7f:83:f8: b3:3f:aa:55:58:61:64:2f:a2:e6:f0:15:8e:c2:90:31:f8:e4: 17:9e:e5:30:b1:ed:65:5f:80:1a:c2:57:06:6c:be:0d:64:5a: cd:9a:e0:61:34:e1:28:72:c0:f5:19:73:b2:b4:8b:d6:12:50: 1d:48:6c:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhevRMdm+qxepbAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZjYTgxYzMtZTViZi00OGFjLThhZjktMGQ3ODljMzVh MmFkMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk ZTBmZTA1MTEtZDhkMy00ZWYyLWI0ZjMtZTZlZDBjNTAxMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko6ZFCaDtbcaEdAGLBlPxo76UngJB85FrIRA Zz8tt9BVeBFLxby3e20qVZ9l/q1L38oj0udawUbU3j/pOxfktJVroygbGEVdh7Mf LV1k1VT9pC3x+cIfp9DpRo6Y4gmAJLLODpSJmNT5WnbwylaVtE9bZqxSof9bNzwW cn05t27/QBtpC7+rquXhhZwEmqY9d/tPULfXDBU40XHWp55kKUKB+yijzgTLZMUb pqLywbPgFowHJF4dd4eEy49Ec10t1aLlspxO5wj1w4kBlwPLKwXiV99n4L3l/tRK MkeulNcgo65xETNTmVmPI4c2/pY1uwnd+Ym7pudk4EL9Da8lFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlWuwfLRKAD/3wqh1Z5+oK+cr7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNh ODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4OWMzNWEyYWQvYzRkZWY2NWMtMzY5NC0z NjQ1LWJmNTAtNDNjYWVjMDk2NDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTZjYTgxYzMtZTViZi00OGFjLThh ZjktMGQ3ODljMzVhMmFkLzE2Y2E4MWMzLWU1YmYtNDhhYy04YWY5LTBkNzg5YzM1 YTJhZC5jcmwwHwYDVR0jBBgwFoAUOpt3WcS0K+2JuuBO0tmA1rhWa4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNhODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4 OWMzNWEyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ90nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI75mabeaV0qhD0T+APQE93CGAZoA8jBQeM3w5AeFlig/dL5n6ft7/67 ifg2URbDpOYbZGm45mA7TOLRyCUaIRNv4AI439GsjR5WZ3j7hRt54f+Mh6Q469Vc btPo0YX9LKVQV0S8r8yQAN8fv8BZQpVQpCNU26MQOc5b8JbEsYqdFZ05YXDDSyG5 HhmUdXj0LLlipPwI334kRd5sSYU2f3jAtKBw1PXmw7afgTDv327YaxPkevhmfiZ8 G6uiB2085cHVLH+D+LM/qlVYYWQvoubwFY7CkDH45Bee5TCx7WVfgBrCVwZsvg1k Ws2a4GE04ShywPUZc7K0i9YSUB1IbAg= -----END CERTIFICATE-----Generated at Tue Aug 5 17:12:28 2025 by rpki-client