$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa File: c4def65c-3694-3645-bf50-43caec096461.roa (raw, json) Hash identifier: UqQIUaXfxveyAEN90p53qdTTkOVCIDMhScY+NEN2CqQ= Subject key identifier: B0:5D:24:38:02:0E:E6:6B:39:B9:BC:5B:60:57:94:5F:93:B2:2A:2D Certificate issuer: /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Certificate serial: 010D0C9F4328584F4973BEFE59C03902E1C33640 Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 67.221.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:be:fe:59:c0:39:02:e1:c3:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=961b2ab6-4dcc-4b95-990a-276dbc0d1432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2b:76:ed:7f:53:7e:1f:76:64:cc:15:39:87: d8:4a:a6:e9:0a:58:60:23:80:d1:b0:41:4c:62:04: 67:0c:b5:60:e5:00:68:2a:ba:b9:cd:34:6c:27:d7: ea:63:ed:2c:17:22:95:88:d8:55:a0:f8:f5:90:bc: 99:ac:52:72:d9:6a:7c:f7:3d:89:a1:12:46:c0:fe: d1:f5:d7:24:2d:51:58:5e:92:2c:35:ed:e3:e9:05: 58:a2:d3:17:7e:d1:5e:7a:5f:c2:8a:da:d3:5d:f7: f0:6f:04:b6:c3:0f:59:10:71:08:e7:82:53:0a:23: 08:82:a7:fd:6e:4a:bb:09:db:c7:c9:00:25:78:2a: ef:61:5a:fe:c1:b1:94:31:1f:63:05:2a:d7:63:01: 95:11:f9:29:d6:65:62:d0:6c:ae:a2:cd:9d:ea:d0: 6b:1d:44:8a:b7:7e:9e:a0:8a:cb:8e:30:36:a0:93: 0c:7d:22:1d:45:9f:f2:49:50:d8:00:d9:cb:7a:45: e8:33:dc:e3:cc:ab:43:90:ec:ac:5d:f9:d2:14:3e: ff:5a:b2:8d:8c:54:44:de:a9:10:29:8d:b8:8b:09: 27:a2:3f:ef:dd:7d:ee:f4:29:29:a6:a4:72:58:22: a9:9a:ff:fd:73:bc:88:8b:e3:e7:61:41:d5:c1:8e: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5D:24:38:02:0E:E6:6B:39:B9:BC:5B:60:57:94:5F:93:B2:2A:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl X509v3 Authority Key Identifier: keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer sbgp-ipAddrBlock: critical IPv4: 67.221.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a0:45:3e:30:02:96:c2:73:0f:3b:8f:bb:ab:36:26:af:af: 47:41:a3:d0:03:c6:08:fa:f2:ee:1b:32:7c:3b:06:27:cc:65: 42:6a:44:1d:58:05:f9:88:b4:4a:1e:33:72:a8:89:68:b9:6f: 73:8e:16:f7:96:37:ed:2d:f7:ac:84:e4:8a:c4:e3:a0:68:16: 97:99:4c:f5:b0:f3:75:b2:a6:cb:db:e0:7c:41:2d:37:1e:f6: 68:45:ed:e0:4e:92:90:1f:d7:49:db:5f:ed:35:31:74:f5:65: b3:87:27:7c:26:95:67:86:91:fa:c5:6c:4a:c1:65:d2:0f:9e: 09:b3:7c:e6:bb:06:96:a8:07:c0:fe:a5:da:9f:4e:79:b1:6a: 8f:97:5a:5b:75:10:03:f5:18:03:26:21:d7:b5:6b:54:17:87: 15:f1:82:f2:d2:c3:8f:eb:81:d9:66:7a:e0:40:d3:c5:b0:b9: ee:19:30:e5:24:8d:d4:2f:b5:d1:09:83:2d:42:23:ea:e5:d1: 3b:1a:50:1c:57:cc:85:77:38:06:03:e6:5f:cd:04:85:b7:c5: 9b:81:4f:55:0a:ea:9a:b3:d4:00:1e:02:f9:03:8d:9b:e9:14: 3c:ea:1d:64:d8:34:78:37:d2:29:79:3a:6b:f9:e7:bd:73:79: cb:89:ae:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc77+WcA5AuHDNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZjYTgxYzMtZTViZi00OGFjLThhZjktMGQ3ODljMzVh MmFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTYxYjJhYjYtNGRjYy00Yjk1LTk5MGEtMjc2ZGJjMGQxNDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtit27X9Tfh92ZMwVOYfYSqbpClhgI4DRsEFM YgRnDLVg5QBoKrq5zTRsJ9fqY+0sFyKViNhVoPj1kLyZrFJy2Wp89z2JoRJGwP7R 9dckLVFYXpIsNe3j6QVYotMXftFeel/CitrTXffwbwS2ww9ZEHEI54JTCiMIgqf9 bkq7CdvHyQAleCrvYVr+wbGUMR9jBSrXYwGVEfkp1mVi0Gyuos2d6tBrHUSKt36e oIrLjjA2oJMMfSIdRZ/ySVDYANnLekXoM9zjzKtDkOysXfnSFD7/WrKNjFRE3qkQ KY24iwknoj/v3X3u9CkppqRyWCKpmv/9c7yIi+PnYUHVwY44uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBdJDgCDuZrObm8W2BXlF+TsiotMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNh ODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4OWMzNWEyYWQvYzRkZWY2NWMtMzY5NC0z NjQ1LWJmNTAtNDNjYWVjMDk2NDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTZjYTgxYzMtZTViZi00OGFjLThh ZjktMGQ3ODljMzVhMmFkLzE2Y2E4MWMzLWU1YmYtNDhhYy04YWY5LTBkNzg5YzM1 YTJhZC5jcmwwHwYDVR0jBBgwFoAUOpt3WcS0K+2JuuBO0tmA1rhWa4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNhODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4 OWMzNWEyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ90nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFegRT4wApbCcw87j7urNiavr0dBo9ADxgj68u4bMnw7BifMZUJqRB1Y BfmItEoeM3KoiWi5b3OOFveWN+0t96yE5IrE46BoFpeZTPWw83Wypsvb4HxBLTce 9mhF7eBOkpAf10nbX+01MXT1ZbOHJ3wmlWeGkfrFbErBZdIPngmzfOa7BpaoB8D+ pdqfTnmxao+XWlt1EAP1GAMmIde1a1QXhxXxgvLSw4/rgdlmeuBA08Wwue4ZMOUk jdQvtdEJgy1CI+rl0TsaUBxXzIV3OAYD5l/NBIW3xZuBT1UK6pqz1AAeAvkDjZvp FDzqHWTYNHg30il5Omv5571zecuJriY= -----END CERTIFICATE-----Generated at Fri Sep 25 23:24:20 2026 by rpki-client