
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa7e1b93-bcc0-3ff0-84d1-1f0fe786c43b.roa
File: aa7e1b93-bcc0-3ff0-84d1-1f0fe786c43b.roa (raw, json)
Hash identifier: ktmCFpJDalUBrNXIx3HC/BncSpbHuyhI3yPhMR8kZXs=
Subject key identifier: D2:E1:3F:38:E9:76:0A:3B:56:9F:D7:2C:F4:96:92:C7:27:6C:3A:38
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D143D4F617D9A7A11B50C7800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa7e1b93-bcc0-3ff0-84d1-1f0fe786c43b.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 36040
IP address blocks: 50.218.250.0/24 maxlen: 24
50.218.250.64/26 maxlen: 26
50.218.250.192/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 08 Mar 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:4f:61:7d:9a:7a:11:b5:0c:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=482198fd-212b-4586-9df6-3ae746d921bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:64:8d:17:dd:9a:9f:0c:dd:16:0e:67:de:
1a:e8:6e:bf:42:d5:37:55:c1:01:1b:d6:3b:38:03:
37:be:c8:b3:46:70:48:6e:57:f1:32:de:eb:53:6c:
5c:7b:6d:9e:d0:94:48:48:50:cd:9b:51:6a:46:cc:
54:91:0c:53:0a:44:bb:66:30:78:24:bd:5e:ea:38:
e8:a7:2e:da:38:ae:d5:fb:16:b4:a3:b5:50:ab:ec:
77:47:ee:a2:da:29:a0:d8:e4:75:c3:4b:4d:34:06:
d2:0c:7b:d3:dc:cf:b8:47:38:ff:d3:4d:49:2f:48:
6c:8b:c9:a4:36:18:23:4f:a0:d4:97:82:9e:5c:25:
68:d6:95:63:af:ef:e2:c3:c1:86:cd:61:65:bd:68:
33:5a:22:52:31:eb:28:4a:a0:c0:de:4c:00:2e:dd:
d6:8e:b9:4a:02:51:9f:f5:fa:f7:cf:f2:82:1e:f3:
e6:83:ae:ae:c4:1c:93:73:6a:e1:7a:a2:47:8b:f7:
35:f6:c7:a7:b3:36:b8:3c:9a:66:72:b3:06:ac:eb:
be:7e:0f:1b:10:06:66:55:af:89:bb:30:2c:29:a0:
f9:6b:81:08:0d:50:1b:e8:12:11:9e:fb:07:5f:33:
91:94:ae:72:1a:70:15:f2:60:59:a1:28:e3:db:96:
bc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E1:3F:38:E9:76:0A:3B:56:9F:D7:2C:F4:96:92:C7:27:6C:3A:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa7e1b93-bcc0-3ff0-84d1-1f0fe786c43b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.218.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:eb:70:91:83:9e:dd:d0:87:7f:aa:5b:a4:44:43:88:41:23:
85:92:8a:0c:a4:28:08:ec:7b:dd:8b:87:73:8e:2c:a6:65:9a:
d4:75:2a:b0:79:a5:64:60:93:45:b5:23:2f:e3:6b:50:b0:24:
55:f5:e0:69:1d:a2:a1:d5:c1:1e:0d:db:58:fb:15:c9:53:29:
7f:a5:48:5f:4c:70:6e:d1:e8:fc:38:3c:1d:8b:02:ae:e8:50:
37:a4:64:43:d2:3b:1e:a4:1e:46:85:55:b9:d5:0b:85:05:dc:
00:8c:be:10:9a:04:50:9a:f4:98:49:9f:7b:4c:b8:de:22:98:
8a:32:da:c7:25:78:4c:27:3a:62:0e:ce:89:b4:98:9c:94:7d:
b7:64:a1:0e:2f:c1:40:85:68:47:f8:e5:fc:51:af:dc:05:57:
b9:82:ab:62:5c:11:7c:6e:7a:f2:1a:6a:1b:f7:03:e2:67:ae:
c3:ea:79:57:a5:6e:32:40:ae:db:20:fb:99:d8:b1:e0:fc:57:
54:a3:d9:8b:6b:76:85:1d:a5:44:75:fc:25:68:fe:29:ea:fe:
cf:55:79:4f:0f:7a:c3:50:0a:48:31:98:f0:00:fc:83:f1:88:
34:10:92:22:f7:18:a2:a1:27:ab:0e:be:d9:42:95:16:fb:8c:
04:4c:c1:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPU9hfZp6EbUMeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
NDgyMTk4ZmQtMjEyYi00NTg2LTlkZjYtM2FlNzQ2ZDkyMWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr9kjRfdmp8M3RYOZ94a6G6/QtU3VcEBG9Y7
OAM3vsizRnBIblfxMt7rU2xce22e0JRISFDNm1FqRsxUkQxTCkS7ZjB4JL1e6jjo
py7aOK7V+xa0o7VQq+x3R+6i2img2OR1w0tNNAbSDHvT3M+4Rzj/001JL0hsi8mk
NhgjT6DUl4KeXCVo1pVjr+/iw8GGzWFlvWgzWiJSMesoSqDA3kwALt3WjrlKAlGf
9fr3z/KCHvPmg66uxByTc2rheqJHi/c19sensza4PJpmcrMGrOu+fg8bEAZmVa+J
uzAsKaD5a4EIDVAb6BIRnvsHXzORlK5yGnAV8mBZoSjj25a8wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNLhPzjpdgo7Vp/XLPSWkscnbDo4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE3ZTFiOTMtYmNjMC0z
ZmYwLTg0ZDEtMWYwZmU3ODZjNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMtr6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjrcJGDnt3Qh3+qW6REQ4hBI4WSigykKAjse92Lh3OOLKZlmtR1KrB5
pWRgk0W1Iy/ja1CwJFX14GkdoqHVwR4N21j7FclTKX+lSF9McG7R6Pw4PB2LAq7o
UDekZEPSOx6kHkaFVbnVC4UF3ACMvhCaBFCa9JhJn3tMuN4imIoy2scleEwnOmIO
zom0mJyUfbdkoQ4vwUCFaEf45fxRr9wFV7mCq2JcEXxuevIaahv3A+JnrsPqeVel
bjJArtsg+5nYseD8V1Sj2YtrdoUdpUR1/CVo/inq/s9VeU8PesNQCkgxmPAA/IPx
iDQQkiL3GKKhJ6sOvtlClRb7jARMwUg=
-----END CERTIFICATE-----
Generated at Sat Mar 7 10:19:08 2026 by rpki-client