$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/9cea23b8-fe07-33f8-88ee-380667682eef.roa File: 9cea23b8-fe07-33f8-88ee-380667682eef.roa (raw, json) Hash identifier: 50ADh3DmsYBY10MrKYaG4qW1Yrmh5C6L6wLg2vTOUf8= Subject key identifier: 0F:06:49:26:C2:07:14:E4:09:1B:B3:C5:E8:47:AA:B0:1E:57:A0:22 Certificate issuer: /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Certificate serial: 010D0C9F4328584D44FA3B12AE8E78A47DE6FA00 Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/9cea23b8-fe07-33f8-88ee-380667682eef.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 67.221.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3b:12:ae:8e:78:a4:7d:e6:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=c5d69264-82be-4307-a248-253edb0c68f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:a4:04:3c:ae:db:74:f9:2a:8b:4a:ae:cd: 66:16:67:ab:88:1a:6b:44:dc:aa:70:6f:31:c4:5a: 8a:e7:dc:bf:4e:f7:15:1f:3f:d5:8f:bd:1e:50:70: 67:7c:b0:7e:04:13:fa:dd:6a:33:0b:89:be:44:b0: 4f:e9:0a:64:48:4d:b2:ca:9b:9f:29:af:96:2a:e2: 07:33:1b:7f:b8:3d:93:0d:2e:18:fc:3e:20:53:03: 8a:f7:92:42:e5:34:d6:5c:5b:a4:aa:87:c8:85:47: 64:f2:88:af:dc:01:6e:b7:e6:b6:d3:7a:58:6f:28: fa:b3:99:57:e5:f0:04:d8:80:29:b8:58:74:a4:51: f6:61:f2:f7:42:16:6a:c3:fe:e5:d7:2b:b5:79:f1: 3e:a2:65:94:cc:36:3d:4a:24:eb:b5:cf:01:02:28: 39:8f:96:cd:fd:e8:5f:9b:44:7b:4b:7d:6a:47:1c: 12:90:20:60:5f:e3:66:43:d4:ba:0c:cb:cc:83:90: 80:b0:ac:f1:d5:11:96:a0:bf:d0:66:76:ad:3c:11: 6e:89:2b:42:d9:f2:6b:e1:0f:00:f0:c4:5d:26:bc: 92:bc:a9:ac:83:81:b6:7b:fd:ae:4d:48:47:4c:b5: e4:b0:01:e3:71:c2:50:a1:24:1d:f7:99:12:67:4b: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:06:49:26:C2:07:14:E4:09:1B:B3:C5:E8:47:AA:B0:1E:57:A0:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/9cea23b8-fe07-33f8-88ee-380667682eef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl X509v3 Authority Key Identifier: keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer sbgp-ipAddrBlock: critical IPv4: 67.221.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ba:26:5c:77:84:f7:37:54:2b:2f:a9:ce:e1:ab:26:df:9c: 98:8f:f5:0e:9e:1a:76:35:d7:be:ce:86:ab:2b:66:20:13:04: ad:47:25:6f:7a:27:72:5e:b1:75:42:37:b1:a8:00:09:08:ac: 18:73:2d:9a:1c:24:9e:19:d8:89:79:f5:cf:8f:76:b8:40:48: c5:fa:2f:51:f7:d5:eb:fe:33:cd:67:19:0b:61:8b:f7:14:af: 84:8b:34:45:3a:b5:6f:e5:0c:ad:cd:21:1f:fc:b2:ce:39:97: 65:06:53:33:30:1f:39:e9:04:90:70:99:50:07:06:16:0c:ea: 9e:f3:61:c3:7e:aa:28:9e:90:0b:28:bb:ba:d8:2b:f7:50:f0: 26:94:0f:86:f3:5e:24:5b:ce:9a:ca:a8:37:6b:cf:11:ff:14: c7:78:a5:ba:ac:11:38:c3:9c:34:1c:4b:36:00:92:1e:04:b8: f5:8f:9d:3a:7c:28:e8:69:ee:0b:20:11:ee:44:50:f7:81:d4: 83:37:cf:52:0d:ba:ba:05:aa:ad:7c:de:6f:02:6e:e7:dc:ec: f1:fa:28:30:3e:30:50:08:10:7d:bd:83:c6:3e:9c:2e:0d:80: 17:2c:80:94:65:a8:84:fa:19:2d:59:9a:c4:5f:ee:ca:af:7a: 77:71:58:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jsSro54pH3m+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZjYTgxYzMtZTViZi00OGFjLThhZjktMGQ3ODljMzVh MmFkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YzVkNjkyNjQtODJiZS00MzA3LWEyNDgtMjUzZWRiMGM2OGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7SkBDyu23T5KotKrs1mFmeriBprRNyqcG8x xFqK59y/TvcVHz/Vj70eUHBnfLB+BBP63WozC4m+RLBP6QpkSE2yypufKa+WKuIH Mxt/uD2TDS4Y/D4gUwOK95JC5TTWXFukqofIhUdk8oiv3AFut+a203pYbyj6s5lX 5fAE2IApuFh0pFH2YfL3QhZqw/7l1yu1efE+omWUzDY9SiTrtc8BAig5j5bN/ehf m0R7S31qRxwSkCBgX+NmQ9S6DMvMg5CAsKzx1RGWoL/QZnatPBFuiStC2fJr4Q8A 8MRdJrySvKmsg4G2e/2uTUhHTLXksAHjccJQoSQd95kSZ0shCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8GSSbCBxTkCRuzxehHqrAeV6AiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNh ODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4OWMzNWEyYWQvOWNlYTIzYjgtZmUwNy0z M2Y4LTg4ZWUtMzgwNjY3NjgyZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTZjYTgxYzMtZTViZi00OGFjLThh ZjktMGQ3ODljMzVhMmFkLzE2Y2E4MWMzLWU1YmYtNDhhYy04YWY5LTBkNzg5YzM1 YTJhZC5jcmwwHwYDVR0jBBgwFoAUOpt3WcS0K+2JuuBO0tmA1rhWa4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNhODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4 OWMzNWEyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ90mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJy6Jlx3hPc3VCsvqc7hqybfnJiP9Q6eGnY1177OhqsrZiATBK1HJW96 J3JesXVCN7GoAAkIrBhzLZocJJ4Z2Il59c+PdrhASMX6L1H31ev+M81nGQthi/cU r4SLNEU6tW/lDK3NIR/8ss45l2UGUzMwHznpBJBwmVAHBhYM6p7zYcN+qiiekAso u7rYK/dQ8CaUD4bzXiRbzprKqDdrzxH/FMd4pbqsETjDnDQcSzYAkh4EuPWPnTp8 KOhp7gsgEe5EUPeB1IM3z1INuroFqq183m8Cbufc7PH6KDA+MFAIEH29g8Y+nC4N gBcsgJRlqIT6GS1ZmsRf7sqvendxWHw= -----END CERTIFICATE-----Generated at Thu Mar 26 02:02:34 2026 by rpki-client