$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/9cea23b8-fe07-33f8-88ee-380667682eef.roa File: 9cea23b8-fe07-33f8-88ee-380667682eef.roa (raw, json) Hash identifier: dMiKx6Uag3TLfCZeNgfsu4TNaMY+fKzc9R8+zKOfXKY= Subject key identifier: 14:45:E9:EA:71:77:38:9A:F0:CE:03:A5:00:49:A8:80:5C:C3:A5:25 Certificate issuer: /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Certificate serial: 010D0C9F4328584B84E778FC1CFB2784B9DBFA00 Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/9cea23b8-fe07-33f8-88ee-380667682eef.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 67.221.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:78:fc:1c:fb:27:84:b9:db:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=f7d1e94b-71a7-4096-86d1-2043823746f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:57:a6:df:b2:3b:e9:84:30:c7:f9:21:4d:66: 14:53:8d:ff:07:1b:49:67:ee:af:35:3b:3c:c7:69: c8:2e:39:ea:21:ca:84:f9:1a:2a:bc:ab:03:87:ed: e3:9b:b9:5d:7a:c7:37:6c:4c:01:80:ec:d8:3e:6d: bf:ce:5f:81:ba:7a:0a:b4:e8:1a:e4:a5:74:cf:c5: f8:1e:0d:d5:0b:8f:5e:cc:c7:8d:51:10:39:1d:5a: a9:c8:08:92:9c:4e:ff:cf:a5:fa:27:ed:3f:33:cd: d1:08:4e:3b:d9:dd:6b:74:3b:96:a7:aa:d8:55:c8: 31:ad:0d:26:ac:91:50:84:12:9c:4c:c6:38:03:1c: c3:c9:bf:0c:65:c1:54:11:48:fd:96:c8:91:5b:5a: dd:31:d9:b3:ba:31:2d:79:07:ff:0c:88:db:89:27: 85:cd:a7:f3:4b:33:7f:21:70:f6:a9:38:12:06:29: a0:9c:b1:73:9e:5b:3b:fb:68:ab:df:cd:23:cd:a6: 98:42:22:a8:cc:f6:fe:d0:4c:85:7e:2a:38:b2:cf: c1:43:1b:76:ec:c5:cc:b9:d0:78:39:fd:f1:88:7c: 2f:23:61:79:9d:18:29:9b:ce:05:df:ed:ed:42:fd: d0:1f:71:64:2e:c1:c6:92:eb:83:81:87:66:5c:7c: ba:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:45:E9:EA:71:77:38:9A:F0:CE:03:A5:00:49:A8:80:5C:C3:A5:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/9cea23b8-fe07-33f8-88ee-380667682eef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl X509v3 Authority Key Identifier: keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer sbgp-ipAddrBlock: critical IPv4: 67.221.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:dc:61:f4:c9:f6:fd:c2:be:c9:2d:92:47:13:7a:0e:ac:75: 65:3c:80:bc:cf:0a:a8:b0:6e:91:49:82:0a:7b:6e:f7:2c:a9: b0:7b:2c:5d:68:9e:0c:42:fd:1c:03:cb:52:1c:90:05:a4:3a: a4:0d:c3:fa:85:d4:0a:45:19:5f:01:95:37:49:9d:7a:70:06: 72:b0:ed:a7:9b:d7:a3:27:54:24:df:f4:4c:04:6e:9c:36:fe: 65:ee:3f:ec:4f:53:96:03:c1:2b:be:73:c0:c7:1b:19:64:99: 4f:53:9b:e9:02:a2:ad:6e:5b:c4:9b:3e:86:9e:f8:52:47:8d: 85:44:ca:71:94:f1:2d:b5:b5:52:9c:d9:1a:df:03:54:6c:e4: 4f:15:af:b7:87:e0:32:d6:94:09:b1:27:69:52:97:e3:3c:ec: 5d:ad:cc:88:68:3e:15:65:16:27:ee:4a:2a:7b:55:a0:2c:3b: b1:bb:c7:b2:4c:f3:82:af:e8:06:f3:b9:4b:c9:cb:c0:d8:97: 38:20:8a:c9:12:c2:e2:40:37:ba:53:cd:8a:26:19:6d:0c:67: 61:73:bf:46:16:de:f8:ec:5c:65:f5:74:bd:ca:eb:ab:92:01: 6d:de:ea:8b:a9:d6:e1:9a:b2:32:23:04:27:34:cc:d2:03:a9: c3:4f:ee:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53j8HPsnhLnb+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZjYTgxYzMtZTViZi00OGFjLThhZjktMGQ3ODljMzVh MmFkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZjdkMWU5NGItNzFhNy00MDk2LTg2ZDEtMjA0MzgyMzc0NmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vem37I76YQwx/khTWYUU43/BxtJZ+6vNTs8 x2nILjnqIcqE+RoqvKsDh+3jm7ldesc3bEwBgOzYPm2/zl+BunoKtOga5KV0z8X4 Hg3VC49ezMeNURA5HVqpyAiSnE7/z6X6J+0/M83RCE472d1rdDuWp6rYVcgxrQ0m rJFQhBKcTMY4AxzDyb8MZcFUEUj9lsiRW1rdMdmzujEteQf/DIjbiSeFzafzSzN/ IXD2qTgSBimgnLFznls7+2ir380jzaaYQiKozPb+0EyFfio4ss/BQxt27MXMudB4 Of3xiHwvI2F5nRgpm84F3+3tQv3QH3FkLsHGkuuDgYdmXHy6awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRF6epxdzia8M4DpQBJqIBcw6UlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNh ODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4OWMzNWEyYWQvOWNlYTIzYjgtZmUwNy0z M2Y4LTg4ZWUtMzgwNjY3NjgyZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTZjYTgxYzMtZTViZi00OGFjLThh ZjktMGQ3ODljMzVhMmFkLzE2Y2E4MWMzLWU1YmYtNDhhYy04YWY5LTBkNzg5YzM1 YTJhZC5jcmwwHwYDVR0jBBgwFoAUOpt3WcS0K+2JuuBO0tmA1rhWa4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNhODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4 OWMzNWEyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ90mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrcYfTJ9v3CvsktkkcTeg6sdWU8gLzPCqiwbpFJggp7bvcsqbB7LF1o ngxC/RwDy1IckAWkOqQNw/qF1ApFGV8BlTdJnXpwBnKw7aeb16MnVCTf9EwEbpw2 /mXuP+xPU5YDwSu+c8DHGxlkmU9Tm+kCoq1uW8SbPoae+FJHjYVEynGU8S21tVKc 2RrfA1Rs5E8Vr7eH4DLWlAmxJ2lSl+M87F2tzIhoPhVlFifuSip7VaAsO7G7x7JM 84Kv6AbzuUvJy8DYlzggiskSwuJAN7pTzYomGW0MZ2Fzv0YW3vjsXGX1dL3K66uS AW3e6oup1uGasjIjBCc0zNIDqcNP7rA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:07:43 2025 by rpki-client