$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa File: 598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa (raw, json) Hash identifier: 5JbXMabCsD6mm28BqbHpU6Z3X5XkI00wTalv90QLV7A= Subject key identifier: 8B:05:D7:C0:E4:3A:8E:B5:92:40:FE:78:75:FA:EB:01:57:41:A1:C4 Certificate issuer: /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Certificate serial: 010D0C9F4328584B84E778ECED184EFC47CC7740 Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 67.221.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:78:ec:ed:18:4e:fc:47:cc:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=eae92199-77e2-4ced-9d9e-bdbd08b20c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:6e:1a:e2:dc:29:f3:0f:e8:ce:09:31:55: 49:81:34:02:39:9b:c1:4b:a2:2c:5c:68:2e:e6:1b: 7b:42:fb:4d:8d:f2:0e:83:8f:bf:49:42:19:b7:77: af:2f:cc:42:31:a4:2a:f9:a5:7b:a1:20:79:1b:ff: b9:77:32:a9:79:d2:74:77:f1:69:83:db:9b:0b:bf: 2b:16:c7:76:f6:8a:36:7a:ea:f7:c1:24:c7:8e:28: 95:bf:dd:29:82:cc:f7:c7:d9:2e:ce:e3:68:37:8b: f5:8b:f2:7b:6f:bb:fe:5a:7e:3b:b8:f8:b4:7e:c6: 4c:74:90:46:06:c3:5d:f3:56:f5:24:fb:df:78:75: e6:2c:56:d1:4b:70:63:1b:37:7b:d5:c7:e0:e6:25: a0:c3:54:a0:e9:94:62:49:1f:67:1a:d8:9c:4e:bb: 23:88:18:16:c0:bd:05:fe:a6:f3:50:9f:57:2b:9c: 43:6c:04:9b:5a:1f:c4:89:46:c4:73:46:15:00:b6: fe:28:12:0b:a5:60:c6:bf:9b:b2:bd:9e:6d:c9:54: 8e:23:25:b8:b1:af:db:65:81:2c:99:28:19:94:08: 16:22:47:8c:33:ac:61:48:d7:25:b2:ec:56:c6:82: 57:6e:e9:1d:80:0e:51:b7:91:55:36:45:35:3d:db: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:05:D7:C0:E4:3A:8E:B5:92:40:FE:78:75:FA:EB:01:57:41:A1:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl X509v3 Authority Key Identifier: keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer sbgp-ipAddrBlock: critical IPv4: 67.221.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:13:5a:1a:94:57:6f:5b:b1:95:10:8b:d2:0b:00:12:57:b3: 2f:92:f8:e2:59:e1:f1:37:d6:3e:25:5b:29:a7:27:82:47:23: a9:43:f5:6b:70:43:e1:bb:af:93:5b:a1:e0:fa:47:87:fb:62: 17:d9:c0:88:42:46:cf:21:38:27:18:29:d1:e8:5e:87:1f:49: d1:0e:0a:f3:38:cb:8e:fc:b0:3e:b4:3b:e5:60:17:ff:e2:9d: c5:3a:85:a8:11:62:c1:4a:8a:7e:12:b0:ec:82:b0:10:81:34: a9:21:61:37:80:41:67:09:8e:7d:ba:0d:cf:1c:ee:8e:98:15: 24:84:0b:7a:9b:e8:88:7d:1b:9d:38:8d:0e:6f:c0:e8:1c:eb: db:99:d7:a8:f8:7b:ee:33:a7:f9:61:28:8e:74:a6:93:9f:4a: 7a:84:05:66:c2:a8:23:de:c4:2f:0f:d2:da:bb:f3:90:5d:44: 8a:17:83:9f:09:11:61:f0:a1:4c:2d:3a:90:08:ff:84:50:9f: d1:aa:5e:bf:62:20:a8:3c:af:53:79:08:13:5f:bf:9f:11:b3: 4e:db:c1:b1:fa:ab:2b:e9:b2:1c:ad:79:66:20:13:76:e3:18: db:64:14:f6:5f:55:1e:b4:7e:52:f0:23:1c:3f:2c:79:da:cc: 12:6a:ae:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53js7RhO/EfMd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZjYTgxYzMtZTViZi00OGFjLThhZjktMGQ3ODljMzVh MmFkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZWFlOTIxOTktNzdlMi00Y2VkLTlkOWUtYmRiZDA4YjIwYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYNuGuLcKfMP6M4JMVVJgTQCOZvBS6IsXGgu 5ht7QvtNjfIOg4+/SUIZt3evL8xCMaQq+aV7oSB5G/+5dzKpedJ0d/Fpg9ubC78r Fsd29oo2eur3wSTHjiiVv90pgsz3x9kuzuNoN4v1i/J7b7v+Wn47uPi0fsZMdJBG BsNd81b1JPvfeHXmLFbRS3BjGzd71cfg5iWgw1Sg6ZRiSR9nGticTrsjiBgWwL0F /qbzUJ9XK5xDbASbWh/EiUbEc0YVALb+KBILpWDGv5uyvZ5tyVSOIyW4sa/bZYEs mSgZlAgWIkeMM6xhSNclsuxWxoJXbukdgA5Rt5FVNkU1PduYCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsF18DkOo61kkD+eHX66wFXQaHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNh ODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4OWMzNWEyYWQvNTk4ZmE5YWItM2FmMS0z NGQ1LTkwYjUtODBiOWU3NGIxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTZjYTgxYzMtZTViZi00OGFjLThh ZjktMGQ3ODljMzVhMmFkLzE2Y2E4MWMzLWU1YmYtNDhhYy04YWY5LTBkNzg5YzM1 YTJhZC5jcmwwHwYDVR0jBBgwFoAUOpt3WcS0K+2JuuBO0tmA1rhWa4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNhODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4 OWMzNWEyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ90mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkTWhqUV29bsZUQi9ILABJXsy+S+OJZ4fE31j4lWymnJ4JHI6lD9Wtw Q+G7r5NboeD6R4f7YhfZwIhCRs8hOCcYKdHoXocfSdEOCvM4y478sD60O+VgF//i ncU6hagRYsFKin4SsOyCsBCBNKkhYTeAQWcJjn26Dc8c7o6YFSSEC3qb6Ih9G504 jQ5vwOgc69uZ16j4e+4zp/lhKI50ppOfSnqEBWbCqCPexC8P0tq785BdRIoXg58J EWHwoUwtOpAI/4RQn9GqXr9iIKg8r1N5CBNfv58Rs07bwbH6qyvpshyteWYgE3bj GNtkFPZfVR60flLwIxw/LHnazBJqriI= -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:18 2025 by rpki-client