$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa File: 598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa (raw, json) Hash identifier: PvqvW1K242pvvEpxMS7ZHvwB00ICw2hUoUQ84djez9o= Subject key identifier: B8:9D:B3:01:F8:7A:0E:FB:88:51:7D:04:E2:57:E1:33:56:14:F7:0A Certificate issuer: /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Certificate serial: 010D0C9F4328584D44FA3B026D6406F574E8C480 Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 67.221.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3b:02:6d:64:06:f5:74:e8:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=9ec16c81-253e-4f26-9eb4-0cacc7d02bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cc:48:fc:44:f1:32:45:c1:26:37:98:9a:28: 35:d7:45:51:b6:31:cc:97:ea:59:2c:fe:3f:2b:42: b3:f8:ed:46:5e:91:b0:0c:95:25:6d:00:ee:76:c7: 33:14:b8:94:e7:45:3b:86:84:9b:34:dd:a5:76:e2: 16:ce:19:50:5f:3e:ab:d0:63:51:cc:56:49:5c:d8: b2:38:6e:85:91:51:e8:6b:fd:67:44:dc:29:34:85: ce:ec:94:78:c3:38:23:e5:b8:d6:69:44:ac:23:41: ca:ea:b9:73:69:87:c0:55:00:fd:ad:4d:06:5e:6c: ec:a0:17:5c:f3:c7:9c:e2:6d:24:b6:1c:f5:14:c2: d1:51:4a:8b:1d:d1:23:05:bd:7f:72:dc:f6:6c:dd: 32:c0:7a:6c:05:44:b0:57:23:88:77:7a:3f:3c:ef: dc:a0:b3:4d:c3:58:b1:55:3f:02:d6:9f:17:dc:15: 16:25:6d:11:da:b9:35:0d:b4:48:85:ac:07:5f:0d: f3:da:f1:7b:c4:d1:a9:2d:83:99:95:a3:be:2b:0b: 2d:4d:11:1d:4a:bc:12:95:fd:f9:8e:aa:4b:80:52: 54:57:63:f6:57:9d:68:a4:3a:63:39:1b:55:00:e4: 3d:11:70:ba:6f:30:0a:11:13:60:1b:d6:09:d5:40: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9D:B3:01:F8:7A:0E:FB:88:51:7D:04:E2:57:E1:33:56:14:F7:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl X509v3 Authority Key Identifier: keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer sbgp-ipAddrBlock: critical IPv4: 67.221.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:08:ea:dc:7a:e6:bb:9d:dd:49:bc:2e:29:2e:a7:a8:59:b3: 53:f1:4e:fb:6f:0a:bf:9b:c7:0f:93:f1:70:87:8b:bf:88:87: e4:5e:9f:af:c4:c1:da:90:ed:dd:30:32:f0:b9:c7:90:cf:8a: 56:e6:63:60:68:f4:41:01:2f:36:1c:32:f2:27:5d:80:d8:35: c1:32:23:4d:99:29:8f:39:f2:7e:19:ac:e5:ac:fa:2e:03:13: b6:21:bb:5d:08:3c:ee:03:1a:b1:cb:ca:ad:31:5e:77:a3:a3: 4c:52:29:ac:e9:4e:ef:98:d2:71:ea:1f:e4:86:59:f8:ed:5d: 8f:71:77:ec:d0:72:e9:2b:9f:0d:35:f9:55:14:95:b6:d6:32: 98:8b:f2:94:7a:f4:69:d8:64:67:ea:d6:cb:ac:eb:a0:d8:c5: 8b:07:2e:f9:13:d4:ab:ed:0e:c4:7e:9d:8b:72:fc:c2:a2:73: 29:ca:55:93:e4:9c:72:21:4c:73:69:f1:9a:eb:1d:a3:76:95: 04:d4:79:d3:0d:d9:bc:84:fa:83:41:e5:47:85:8a:03:12:ae: 79:ac:92:78:3c:fe:c1:00:98:36:88:fb:c6:37:50:74:ef:1b: ba:d4:11:5d:fd:b7:23:6b:a1:2b:da:bb:ca:3a:45:a8:58:a6: d1:d7:a1:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jsCbWQG9XToxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZjYTgxYzMtZTViZi00OGFjLThhZjktMGQ3ODljMzVh MmFkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OWVjMTZjODEtMjUzZS00ZjI2LTllYjQtMGNhY2M3ZDAyYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8xI/ETxMkXBJjeYmig110VRtjHMl+pZLP4/ K0Kz+O1GXpGwDJUlbQDudsczFLiU50U7hoSbNN2lduIWzhlQXz6r0GNRzFZJXNiy OG6FkVHoa/1nRNwpNIXO7JR4wzgj5bjWaUSsI0HK6rlzaYfAVQD9rU0GXmzsoBdc 88ec4m0kthz1FMLRUUqLHdEjBb1/ctz2bN0ywHpsBUSwVyOId3o/PO/coLNNw1ix VT8C1p8X3BUWJW0R2rk1DbRIhawHXw3z2vF7xNGpLYOZlaO+KwstTREdSrwSlf35 jqpLgFJUV2P2V51opDpjORtVAOQ9EXC6bzAKERNgG9YJ1UDrEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLidswH4eg77iFF9BOJX4TNWFPcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNh ODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4OWMzNWEyYWQvNTk4ZmE5YWItM2FmMS0z NGQ1LTkwYjUtODBiOWU3NGIxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTZjYTgxYzMtZTViZi00OGFjLThh ZjktMGQ3ODljMzVhMmFkLzE2Y2E4MWMzLWU1YmYtNDhhYy04YWY5LTBkNzg5YzM1 YTJhZC5jcmwwHwYDVR0jBBgwFoAUOpt3WcS0K+2JuuBO0tmA1rhWa4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNhODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4 OWMzNWEyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ90mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcI6tx65rud3Um8Likup6hZs1PxTvtvCr+bxw+T8XCHi7+Ih+Ren6/E wdqQ7d0wMvC5x5DPilbmY2Bo9EEBLzYcMvInXYDYNcEyI02ZKY858n4ZrOWs+i4D E7Yhu10IPO4DGrHLyq0xXnejo0xSKazpTu+Y0nHqH+SGWfjtXY9xd+zQcukrnw01 +VUUlbbWMpiL8pR69GnYZGfq1sus66DYxYsHLvkT1KvtDsR+nYty/MKicynKVZPk nHIhTHNp8ZrrHaN2lQTUedMN2byE+oNB5UeFigMSrnmskng8/sEAmDaI+8Y3UHTv G7rUEV39tyNroSvau8o6RahYptHXoXU= -----END CERTIFICATE-----Generated at Thu Mar 26 02:05:14 2026 by rpki-client