$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b6885cf-02c3-3159-9262-992377c85978.roa File: 4b6885cf-02c3-3159-9262-992377c85978.roa (raw, json) Hash identifier: k7OXKeLVeRKTEqO/jKWbFIdVxegbqVsesi9KK89NJWI= Subject key identifier: C4:3B:2A:4C:C1:5E:0B:CF:D2:F4:C9:23:48:AE:F0:D5:03:E9:7F:94 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D9505E4F4B7D38E32AA831410 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b6885cf-02c3-3159-9262-992377c85978.roa Signing time: Tue 21 Apr 2026 17:08:54 +0000 ROA not before: Tue 21 Apr 2026 17:08:54 +0000 ROA not after: Mon 20 Jul 2026 17:08:54 +0000 asID: 212238 IP address blocks: 50.114.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:05:e4:f4:b7:d3:8e:32:aa:83:14:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 21 17:08:54 2026 GMT Not After : Jul 20 17:08:54 2026 GMT Subject: CN=5c8e2cdc-b734-46cf-9976-261ef58551fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:ec:df:af:c1:50:d3:14:06:f6:8c:0b:ac: 5c:a4:1c:2f:04:8a:16:9b:a7:d2:73:2a:95:8c:e4: bc:8f:dc:fb:b5:e4:f8:6c:37:1a:47:f1:a0:54:1d: d5:d9:19:39:25:aa:c9:d7:92:3d:33:b4:24:22:70: ca:d7:62:4a:1c:00:ef:36:4b:ad:68:67:25:35:11: 9c:2c:70:da:6c:d1:ce:a2:47:76:36:f5:f7:d3:8b: 91:aa:bd:54:8f:3c:37:b1:9b:e7:08:45:58:2c:56: b3:9b:0b:21:7d:b1:ea:1c:26:08:1a:d3:89:56:f4: 09:80:c9:89:0c:d6:a5:61:5e:3d:df:b4:f0:b0:49: b6:a0:c8:51:3d:75:3f:e2:c9:7c:49:88:c8:c4:cb: f2:b6:68:3a:07:ba:cc:c8:29:ca:e2:94:27:02:99: 35:d6:4d:94:a9:fb:e7:f0:ef:48:e3:55:b4:3c:50: 05:a7:e7:e0:da:b9:13:0b:c4:25:69:4e:89:c5:2b: fe:1d:f8:c6:80:e3:8f:78:25:49:13:df:7e:92:10: ba:ed:9b:17:c5:6e:fa:5d:3d:1c:f9:b2:36:71:a4: a6:89:01:2f:84:9c:da:66:ef:9b:ef:ec:6a:25:63: ff:7b:34:80:4a:0c:98:59:79:f4:c2:48:74:24:df: 2d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3B:2A:4C:C1:5E:0B:CF:D2:F4:C9:23:48:AE:F0:D5:03:E9:7F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b6885cf-02c3-3159-9262-992377c85978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 50.114.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:88:2d:4e:b6:3e:51:04:e0:57:91:58:4c:d0:69:90:14:b9: ad:3d:a7:fa:ce:1f:36:70:ee:fb:b5:59:ef:6a:6f:d3:5a:b5: b1:6f:64:b1:d9:ce:95:c5:eb:bb:97:23:48:28:95:19:05:8d: b0:73:e5:e7:ee:74:82:c4:12:64:6f:ad:2f:3d:b4:c7:03:46: e4:1b:3f:8f:6b:a6:07:31:64:b2:17:a9:3a:b9:19:f4:7d:0d: 27:ab:ed:4b:ee:dd:10:62:98:9e:88:b9:6f:12:22:06:d8:43: e8:f8:bf:ac:83:98:61:02:b2:53:05:78:23:83:fa:64:33:0a: 84:47:79:9a:03:7a:67:cb:c3:f3:44:8f:98:ba:13:6d:fd:13: e6:10:14:dc:53:fc:23:4a:c7:c5:c9:72:7c:4d:51:f7:d9:1e: 08:36:a3:64:e0:f6:a2:92:17:16:a5:af:d9:75:22:56:18:c5: ea:25:ab:d3:08:3c:db:8a:13:0a:49:42:94:c3:d6:8d:85:84: 40:22:9b:63:b1:33:ed:da:53:92:a8:7c:2b:90:1b:8a:73:0c: db:ca:7d:da:82:bc:88:59:ae:f1:60:67:b5:c1:04:15:2a:49: bf:b5:02:e6:87:94:cd:6a:6a:71:99:1e:a1:27:d4:e7:0b:dc: 35:92:3a:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2VBeT0t9OOMqqDFBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDQyMTE3MDg1NFoXDTI2MDcyMDE3MDg1NFowLzEtMCsGA1UEAxMk NWM4ZTJjZGMtYjczNC00NmNmLTk5NzYtMjYxZWY1ODU1MWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpTs36/BUNMUBvaMC6xcpBwvBIoWm6fScyqV jOS8j9z7teT4bDcaR/GgVB3V2Rk5JarJ15I9M7QkInDK12JKHADvNkutaGclNRGc LHDabNHOokd2NvX304uRqr1Ujzw3sZvnCEVYLFazmwshfbHqHCYIGtOJVvQJgMmJ DNalYV4937TwsEm2oMhRPXU/4sl8SYjIxMvytmg6B7rMyCnK4pQnApk11k2Uqfvn 8O9I41W0PFAFp+fg2rkTC8QlaU6JxSv+HfjGgOOPeCVJE99+khC67ZsXxW76XT0c +bI2caSmiQEvhJzaZu+b7+xqJWP/ezSASgyYWXn0wkh0JN8twwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ7KkzBXgvP0vTJI0iu8NUD6X+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGI2ODg1Y2YtMDJjMy0z MTU5LTkyNjItOTkyMzc3Yzg1OTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMnLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqILU62PlEE4FeRWEzQaZAUua09p/rOHzZw7vu1We9qb9NatbFvZLHZ zpXF67uXI0golRkFjbBz5efudILEEmRvrS89tMcDRuQbP49rpgcxZLIXqTq5GfR9 DSer7Uvu3RBimJ6IuW8SIgbYQ+j4v6yDmGECslMFeCOD+mQzCoRHeZoDemfLw/NE j5i6E239E+YQFNxT/CNKx8XJcnxNUffZHgg2o2Tg9qKSFxalr9l1IlYYxeolq9MI PNuKEwpJQpTD1o2FhEAim2OxM+3aU5KofCuQG4pzDNvKfdqCvIhZrvFgZ7XBBBUq Sb+1AuaHlM1qanGZHqEn1OcL3DWSOlw= -----END CERTIFICATE-----Generated at Thu Apr 23 21:39:35 2026 by rpki-client