$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa File: c4def65c-3694-3645-bf50-43caec096461.roa (raw, json) Hash identifier: ClHFKu01PLHRC0DLCYdVpjWSjIn6lPUhv2fp+rEi1z8= Subject key identifier: 5D:49:7E:55:9A:60:65:3E:60:A5:83:E3:06:12:58:C3:91:DE:C8:29 Certificate issuer: /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Certificate serial: 010D0C9F43285849912F2658279C59E45BCB59C0 Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 16509 IP address blocks: 67.221.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:26:58:27:9c:59:e4:5b:cb:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=3b40cab4-7915-4267-972e-b4dbaa95270a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c4:bc:87:ae:5d:ef:ee:b4:6c:0a:7f:fe:15: f0:a7:d8:93:2a:d6:9a:03:fa:ee:fe:93:ec:40:fd: bf:58:4e:4f:5f:7d:c1:46:db:cb:4b:51:19:9d:50: 65:0f:2c:68:4e:c4:6a:2e:87:5a:f5:dc:dd:e9:1c: 73:b9:36:be:64:aa:40:39:bd:4c:d9:d2:24:dd:c9: f5:14:65:2a:8b:3d:d4:0d:bd:41:96:20:74:55:cb: 89:39:8d:c8:2f:13:d3:3d:42:d0:81:69:fc:09:b0: 04:e4:9e:81:4b:09:35:e6:f2:80:96:ee:7c:8e:18: 30:c5:42:79:cf:b8:4c:cf:a7:a4:0d:bb:46:11:30: 74:93:6d:2b:1c:4d:8e:d7:e8:9c:d2:d0:e5:08:e5: bf:18:31:b9:19:d1:2a:57:fd:e9:6a:8d:2d:5f:eb: 34:32:a9:c8:30:12:1f:50:e4:79:c5:fd:c1:6e:66: 49:a7:5d:ff:47:58:88:c6:e6:bd:7c:76:ff:45:c4: 9e:1d:94:ea:fc:d0:d0:28:e7:ad:5b:e7:90:2e:cb: ad:e5:f1:77:5d:56:f7:42:c7:65:80:90:1a:b3:08: 3b:96:da:5f:6b:1d:56:60:bc:60:46:eb:26:51:bb: 9d:de:95:a4:ea:b2:0b:0f:58:bc:d4:15:82:ac:89: fb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:49:7E:55:9A:60:65:3E:60:A5:83:E3:06:12:58:C3:91:DE:C8:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl X509v3 Authority Key Identifier: keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer sbgp-ipAddrBlock: critical IPv4: 67.221.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:33:97:9e:9c:e6:7b:67:3b:f1:5f:65:3b:58:25:dc:60:ce: 51:9f:e2:b3:d8:75:ac:6a:df:7b:93:0c:db:91:67:b9:14:90: a7:3e:9b:0a:b0:1f:3c:b8:5b:4b:44:59:bb:3a:eb:98:67:4b: 60:fc:cc:07:bf:b1:de:4f:07:b8:37:4c:81:9b:b2:da:98:2d: d6:b8:e8:92:f3:01:fb:03:04:dd:f1:ce:2e:11:e7:5b:6d:3a: 18:d1:30:92:b8:2e:bb:f7:46:95:e6:40:41:6d:2d:a4:b1:0d: 05:22:ba:d8:4a:e4:6f:6f:d2:52:dc:ee:92:76:f6:2b:07:7a: a4:a0:ba:b1:59:b6:57:32:98:55:60:82:1b:b5:d7:45:d8:86: ce:2d:fb:42:0b:4d:c0:e5:c8:cf:8d:c8:93:d0:ed:40:9c:74: 45:95:78:4b:06:38:db:37:98:fa:e9:de:f2:16:7f:f0:e1:e2: c2:4b:b9:f3:5b:08:cf:e0:de:3b:65:4d:92:d9:83:1c:37:f2: 68:b6:29:61:09:d6:10:f3:84:6b:23:a2:02:16:95:7e:1a:c7: 73:06:d4:e2:17:f5:40:a6:a1:80:5e:db:f2:0c:3b:85:b9:15: 4e:4d:84:74:51:43:02:77:8a:da:de:4d:df:7f:d0:8e:b4:5c: f2:ee:ff:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLyZYJ5xZ5FvLWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZjYTgxYzMtZTViZi00OGFjLThhZjktMGQ3ODljMzVh MmFkMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk M2I0MGNhYjQtNzkxNS00MjY3LTk3MmUtYjRkYmFhOTUyNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MS8h65d7+60bAp//hXwp9iTKtaaA/ru/pPs QP2/WE5PX33BRtvLS1EZnVBlDyxoTsRqLoda9dzd6RxzuTa+ZKpAOb1M2dIk3cn1 FGUqiz3UDb1BliB0VcuJOY3ILxPTPULQgWn8CbAE5J6BSwk15vKAlu58jhgwxUJ5 z7hMz6ekDbtGETB0k20rHE2O1+ic0tDlCOW/GDG5GdEqV/3pao0tX+s0MqnIMBIf UOR5xf3BbmZJp13/R1iIxua9fHb/RcSeHZTq/NDQKOetW+eQLsut5fF3XVb3Qsdl gJAaswg7ltpfax1WYLxgRusmUbud3pWk6rILD1i81BWCrIn7kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1JflWaYGU+YKWD4wYSWMOR3sgpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNh ODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4OWMzNWEyYWQvYzRkZWY2NWMtMzY5NC0z NjQ1LWJmNTAtNDNjYWVjMDk2NDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTZjYTgxYzMtZTViZi00OGFjLThh ZjktMGQ3ODljMzVhMmFkLzE2Y2E4MWMzLWU1YmYtNDhhYy04YWY5LTBkNzg5YzM1 YTJhZC5jcmwwHwYDVR0jBBgwFoAUOpt3WcS0K+2JuuBO0tmA1rhWa4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNhODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4 OWMzNWEyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ90nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8zl56c5ntnO/FfZTtYJdxgzlGf4rPYdaxq33uTDNuRZ7kUkKc+mwqw Hzy4W0tEWbs665hnS2D8zAe/sd5PB7g3TIGbstqYLda46JLzAfsDBN3xzi4R51tt OhjRMJK4Lrv3RpXmQEFtLaSxDQUiuthK5G9v0lLc7pJ29isHeqSgurFZtlcymFVg ghu110XYhs4t+0ILTcDlyM+NyJPQ7UCcdEWVeEsGONs3mPrp3vIWf/Dh4sJLufNb CM/g3jtlTZLZgxw38mi2KWEJ1hDzhGsjogIWlX4ax3MG1OIX9UCmoYBe2/IMO4W5 FU5NhHRRQwJ3itreTd9/0I60XPLu/1E= -----END CERTIFICATE-----Generated at Sat Jun 14 06:28:19 2025 by rpki-client