$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa File: 8a4778b3-1fbe-3ce6-9849-f83537b13285.roa (raw, json) Hash identifier: vp7oIUjmCGG6XfsPNDHM+Maf1lFmmZQpPnVQvdE4jVo= Subject key identifier: 45:ED:6D:60:0D:41:23:76:3B:87:C5:2F:D6:4C:0F:B1:A1:31:2E:AE Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584BA39D22D9EA7A1B494C367640 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 21949 IP address blocks: 50.21.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:22:d9:ea:7a:1b:49:4c:36:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=d487f4b7-038a-4482-828a-53617a61f48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:d4:22:2c:d6:33:6e:e5:a5:8c:e1:ad:79: 13:b3:9b:c0:38:7d:c2:6f:52:86:7f:0b:83:99:9d: c1:06:9f:b2:e0:70:56:c1:fd:f5:5c:cd:e2:28:eb: df:9c:05:ad:fe:4b:70:69:49:16:0f:b4:ce:c8:c8: 29:ec:a2:ba:18:1e:c5:f2:a8:ba:b1:96:30:af:6d: 31:56:23:29:05:b9:c8:eb:ce:6a:dd:4c:93:93:b5: 7d:0f:d4:34:6a:a9:41:29:1a:2b:54:55:ef:ab:46: 63:e9:dd:7e:27:8f:d1:22:88:54:c7:86:81:5c:94: bd:d1:f5:5f:34:ee:b4:be:3a:55:56:8d:29:bf:f0: aa:05:e4:3f:82:99:08:eb:fc:8a:0f:6b:40:78:dc: 1e:63:15:c2:3d:cb:f1:17:2e:a4:a8:eb:84:53:68: a4:0d:a1:1a:8c:8b:10:87:88:90:8e:dd:5e:2c:2e: 71:33:50:4e:b8:69:5d:44:3b:bb:d2:f5:2c:e4:70: 9c:f5:42:73:27:25:98:3f:9b:bc:35:eb:ec:82:52: 60:16:28:cb:ea:74:89:84:e4:b3:10:38:32:ec:4d: ff:25:5b:02:3c:37:41:ea:5f:ba:d3:84:70:45:1e: 50:82:39:90:85:75:f1:d8:79:1d:ed:ca:a2:e4:fa: 1c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:ED:6D:60:0D:41:23:76:3B:87:C5:2F:D6:4C:0F:B1:A1:31:2E:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 50.21.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7f:a3:16:d2:4a:56:46:50:7d:b9:9f:c3:c8:e8:78:76:97: 9e:e3:3f:7f:2e:3d:ad:4c:40:00:53:1e:28:5c:4a:42:d8:ab: 4d:4c:d6:4d:48:1e:05:dd:ae:13:e8:fc:e0:f9:48:29:5b:ca: 14:ee:c2:d1:46:7b:ae:b0:c8:58:30:9a:14:34:0b:96:71:7a: 74:20:35:f8:63:fd:44:d8:e6:d8:4b:46:ce:36:6b:c6:70:aa: 93:78:e5:1f:19:cb:ed:93:95:25:aa:27:72:6c:a8:8e:f7:ad: c8:58:f7:80:24:51:cf:a6:75:4f:0d:cc:4d:19:0c:2d:46:49: 2a:c7:6b:0c:9f:7d:67:84:5d:91:61:6d:25:95:bb:41:04:f9: d3:67:94:b0:9e:3d:8a:0c:34:7c:39:bd:61:08:11:18:98:de: 8a:27:8f:72:75:87:0b:16:a9:43:a5:3f:f8:6e:ee:95:36:7e: a9:f1:e7:a0:47:24:ad:d6:72:26:49:c0:a6:45:88:72:fd:3c: cb:6a:b0:c8:6b:28:26:aa:24:50:7d:59:a5:0b:39:02:3b:dd: 59:49:d2:b4:ec:64:6e:8d:1c:fc:17:a0:dc:72:2d:4b:ab:e3: 48:5a:76:aa:9c:4a:4d:41:78:5d:66:cb:db:c4:91:79:8a:1b: 89:a8:cc:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSLZ6nobSUw2dkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZDQ4N2Y0YjctMDM4YS00NDgyLTgyOGEtNTM2MTdhNjFmNDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs3UIizWM27lpYzhrXkTs5vAOH3Cb1KGfwuD mZ3BBp+y4HBWwf31XM3iKOvfnAWt/ktwaUkWD7TOyMgp7KK6GB7F8qi6sZYwr20x ViMpBbnI685q3UyTk7V9D9Q0aqlBKRorVFXvq0Zj6d1+J4/RIohUx4aBXJS90fVf NO60vjpVVo0pv/CqBeQ/gpkI6/yKD2tAeNweYxXCPcvxFy6kqOuEU2ikDaEajIsQ h4iQjt1eLC5xM1BOuGldRDu70vUs5HCc9UJzJyWYP5u8NevsglJgFijL6nSJhOSz EDgy7E3/JVsCPDdB6l+604RwRR5QgjmQhXXx2Hkd7cqi5PocfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXtbWANQSN2O4fFL9ZMD7GhMS6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvOGE0Nzc4YjMtMWZiZS0z Y2U2LTk4NDktZjgzNTM3YjEzMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMhVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5/oxbSSlZGUH25n8PI6Hh2l57jP38uPa1MQABTHihcSkLYq01M1k1I HgXdrhPo/OD5SClbyhTuwtFGe66wyFgwmhQ0C5ZxenQgNfhj/UTY5thLRs42a8Zw qpN45R8Zy+2TlSWqJ3JsqI73rchY94AkUc+mdU8NzE0ZDC1GSSrHawyffWeEXZFh bSWVu0EE+dNnlLCePYoMNHw5vWEIERiY3oonj3J1hwsWqUOlP/hu7pU2fqnx56BH JK3WciZJwKZFiHL9PMtqsMhrKCaqJFB9WaULOQI73VlJ0rTsZG6NHPwXoNxyLUur 40hadqqcSk1BeF1my9vEkXmKG4mozG4= -----END CERTIFICATE-----Generated at Sat Nov 1 02:26:56 2025 by rpki-client