$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa File: 8a4778b3-1fbe-3ce6-9849-f83537b13285.roa (raw, json) Hash identifier: SB1P3KGulZSjOI/KEnwUQiEZGtH91lYgP2bXRfBnLKY= Subject key identifier: A1:F9:E3:C1:3C:27:A4:F2:80:64:65:AE:67:2C:4D:CE:C7:52:17:04 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584E4559EF5C3F2EB29251699F80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 21949 IP address blocks: 50.21.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:ef:5c:3f:2e:b2:92:51:69:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=570eba16-50c7-463d-8a96-85e3f43a9cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2c:d7:a0:7a:d4:79:7e:1a:63:91:61:7a:86: 0d:f4:4e:c6:e2:0d:44:5f:87:0b:60:23:b6:a8:33: c5:89:6a:0e:98:65:58:90:71:77:8b:bd:58:00:71: 36:9f:af:7e:62:4d:72:85:59:90:57:8b:71:28:c1: 26:11:ea:37:d2:88:cf:53:ea:a2:fa:75:1a:90:b4: 24:29:dc:57:2a:19:3f:70:f2:b9:a7:02:fc:26:ea: b1:96:1e:ee:7c:68:39:ff:a9:0f:5f:22:0c:2b:6c: 47:be:d7:32:27:49:d0:08:50:44:7a:cb:e4:b3:73: a6:8d:1c:f8:34:90:66:cb:10:3b:2f:91:6d:2a:a5: 1b:00:1a:ae:48:20:24:5b:04:42:48:8f:35:06:e5: 1f:6f:86:67:84:e2:0d:f6:47:34:72:0c:66:29:25: 72:ea:c0:7e:e6:93:b5:f2:13:7d:f2:59:41:f8:f7: 5c:59:cc:f5:bb:86:4c:0f:b7:2a:c0:f3:dd:37:bb: 38:8a:cb:33:da:b7:4d:18:7d:4e:1a:54:1b:f2:46: d8:77:6b:7d:92:7c:b4:30:aa:ff:ce:f3:8b:9c:a8: 77:fa:00:7c:cd:fc:4b:39:82:3c:a6:6c:6b:e2:97: 19:78:da:14:b5:9b:09:d6:3d:57:c5:d6:50:e9:8e: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F9:E3:C1:3C:27:A4:F2:80:64:65:AE:67:2C:4D:CE:C7:52:17:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 50.21.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a5:cf:98:1b:7b:ed:18:83:c5:65:2c:89:37:57:48:a1:c8: 04:73:32:95:b2:43:ad:1d:b9:55:2d:14:9f:61:c4:8a:57:85: 4a:a7:ad:f5:99:4f:04:01:87:55:61:3f:2e:ff:50:28:90:33: e5:4a:8e:90:c9:bf:84:9a:5e:57:08:f9:81:98:dc:4e:d7:d6: 64:47:70:7a:30:a5:d9:30:1c:d4:85:0d:07:c6:d6:7c:b3:74: e2:a8:d1:ce:94:2a:9f:b9:cd:f8:05:09:32:7d:15:3d:22:92: f6:b9:d6:af:f0:99:36:e3:4e:29:4e:1d:fa:27:c5:db:c8:b5: 65:fb:08:45:65:8b:89:84:af:6f:da:71:c6:a6:49:75:ca:e0: 62:20:91:81:b5:d8:d3:4c:84:ce:bb:8b:19:78:ae:32:0a:50: 65:67:da:87:9b:27:f8:70:8e:60:94:8f:9a:94:16:7d:65:e7: ed:ed:4d:2d:fa:b3:f4:d9:82:53:7d:ca:16:e7:0e:fd:49:5d: fb:19:a6:f0:c4:b8:27:6d:2c:f8:3b:5a:fb:7e:4a:39:b7:94: bf:fa:02:4f:0a:25:40:94:57:0c:3f:d8:65:d5:d2:2b:fc:23: d3:fa:03:5b:25:05:73:65:a9:30:7d:7c:4e:4f:d5:6d:22:d5: 0d:14:f6:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWe9cPy6yklFpn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk NTcwZWJhMTYtNTBjNy00NjNkLThhOTYtODVlM2Y0M2E5Y2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyzXoHrUeX4aY5FheoYN9E7G4g1EX4cLYCO2 qDPFiWoOmGVYkHF3i71YAHE2n69+Yk1yhVmQV4txKMEmEeo30ojPU+qi+nUakLQk KdxXKhk/cPK5pwL8Juqxlh7ufGg5/6kPXyIMK2xHvtcyJ0nQCFBEesvks3OmjRz4 NJBmyxA7L5FtKqUbABquSCAkWwRCSI81BuUfb4ZnhOIN9kc0cgxmKSVy6sB+5pO1 8hN98llB+PdcWcz1u4ZMD7cqwPPdN7s4issz2rdNGH1OGlQb8kbYd2t9kny0MKr/ zvOLnKh3+gB8zfxLOYI8pmxr4pcZeNoUtZsJ1j1XxdZQ6Y4szQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKH548E8J6TygGRlrmcsTc7HUhcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvOGE0Nzc4YjMtMWZiZS0z Y2U2LTk4NDktZjgzNTM3YjEzMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMhVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmlz5gbe+0Yg8VlLIk3V0ihyARzMpWyQ60duVUtFJ9hxIpXhUqnrfWZ TwQBh1VhPy7/UCiQM+VKjpDJv4SaXlcI+YGY3E7X1mRHcHowpdkwHNSFDQfG1nyz dOKo0c6UKp+5zfgFCTJ9FT0ikva51q/wmTbjTilOHfonxdvItWX7CEVli4mEr2/a ccamSXXK4GIgkYG12NNMhM67ixl4rjIKUGVn2oebJ/hwjmCUj5qUFn1l5+3tTS36 s/TZglN9yhbnDv1JXfsZpvDEuCdtLPg7Wvt+Sjm3lL/6Ak8KJUCUVww/2GXV0iv8 I9P6A1slBXNlqTB9fE5P1W0i1Q0U9mU= -----END CERTIFICATE-----Generated at Tue Jul 21 13:03:26 2026 by rpki-client