$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa File: 8a4778b3-1fbe-3ce6-9849-f83537b13285.roa (raw, json) Hash identifier: t39wvRtwxHqSBcV0ZoimpKy+SV6JVWtNyNIPNhjTh0E= Subject key identifier: FB:C2:DC:33:B1:68:39:84:84:CC:30:E3:95:BB:F1:BF:83:F2:49:A4 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584EE7BCBAD5037E8CA3278D1500 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 21949 IP address blocks: 50.21.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:ba:d5:03:7e:8c:a3:27:8d:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=3bcd3bed-a462-43fe-bea0-498ac8b6bd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:31:61:75:5c:b8:d4:53:6d:f2:e1:97:19:16: ca:07:59:94:47:f8:b5:9c:26:0c:a8:4a:d9:25:42: 94:f2:9a:51:d2:61:25:9e:bf:3b:ab:96:91:2d:4a: ba:87:35:95:94:72:a9:6a:6e:88:c4:7b:03:7e:80: 9c:32:25:7b:8e:7d:14:70:24:d1:cd:1c:5c:fd:5f: 5e:06:e8:b2:b8:d8:a0:b5:c7:db:51:d6:40:da:81: 39:ec:8f:cd:78:9c:e4:73:29:6d:ba:c9:ba:70:5c: 29:6f:6a:d9:77:db:99:fc:26:17:51:7b:94:c7:1b: 82:94:b0:ce:02:29:a1:f9:34:a4:5a:c9:5a:ba:a3: c1:b6:cd:3b:cd:6d:0a:be:a2:1b:1d:9a:5e:41:83: 66:9a:49:7e:84:06:28:42:7f:b6:9c:9b:78:c8:b1: 47:34:af:dd:96:ef:03:13:d9:64:fd:8f:53:d6:b0: fa:f4:a4:58:dc:cf:27:a8:7e:97:67:ad:0c:60:bf: 34:70:ec:cd:17:5f:01:df:06:cd:85:f2:b9:eb:e4: 77:d4:e4:18:38:0e:a4:3d:0d:5a:2a:8f:80:66:42: 0b:83:3b:a3:05:50:6c:8a:dc:6d:6d:46:99:3a:b9: f3:ae:a4:b6:3b:41:e3:7a:bc:98:7d:84:1b:4f:ac: aa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C2:DC:33:B1:68:39:84:84:CC:30:E3:95:BB:F1:BF:83:F2:49:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 50.21.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:8d:5a:f7:ef:fd:de:76:0a:f4:ab:ec:af:01:5c:74:91:67: c9:39:35:d4:73:8f:2e:a8:98:03:1c:ef:5b:48:6d:90:07:cd: 4f:43:37:90:f2:50:02:33:e7:18:1b:7c:53:dd:ff:e7:a9:ac: ad:f2:46:43:13:c1:dd:ea:2f:e3:81:d6:4a:05:07:67:16:2f: 19:3b:b9:6d:4b:c6:18:1e:e7:5f:11:c2:de:e8:9e:b4:b8:fa: 33:62:4a:61:d8:20:64:f5:66:ed:a9:04:36:5a:93:00:ce:ba: 20:58:30:7f:cc:4c:94:c3:ac:d0:c2:c7:17:02:79:10:83:7b: a8:69:2c:bd:4a:a8:72:ce:4f:7a:66:35:9b:74:a3:50:ec:e3: 04:0e:75:11:b4:a8:96:64:35:29:e0:4f:d8:25:89:17:84:30: b0:c8:89:b1:ff:0a:3f:24:ba:7d:c4:a4:02:93:4c:3f:92:b3: a2:dd:ee:a4:8e:67:02:a0:08:40:46:a8:e6:83:d6:94:52:38: ed:a8:ed:a9:5a:70:02:13:14:eb:5a:f2:1e:da:cb:7c:41:35: 6a:69:b9:63:d7:71:ee:a7:5d:ba:7d:9b:c7:d9:04:4a:4a:ee: f7:2d:85:8a:fa:c5:f8:f1:21:e2:cc:ad:3a:f3:84:22:4f:99: 17:ba:f4:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLrVA36MoyeNFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk M2JjZDNiZWQtYTQ2Mi00M2ZlLWJlYTAtNDk4YWM4YjZiZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTFhdVy41FNt8uGXGRbKB1mUR/i1nCYMqErZ JUKU8ppR0mElnr87q5aRLUq6hzWVlHKpam6IxHsDfoCcMiV7jn0UcCTRzRxc/V9e BuiyuNigtcfbUdZA2oE57I/NeJzkcyltusm6cFwpb2rZd9uZ/CYXUXuUxxuClLDO Aimh+TSkWslauqPBts07zW0KvqIbHZpeQYNmmkl+hAYoQn+2nJt4yLFHNK/dlu8D E9lk/Y9T1rD69KRY3M8nqH6XZ60MYL80cOzNF18B3wbNhfK56+R31OQYOA6kPQ1a Ko+AZkILgzujBVBsitxtbUaZOrnzrqS2O0HjeryYfYQbT6yqBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvC3DOxaDmEhMww45W78b+D8kmkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvOGE0Nzc4YjMtMWZiZS0z Y2U2LTk4NDktZjgzNTM3YjEzMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMhVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+NWvfv/d52CvSr7K8BXHSRZ8k5NdRzjy6omAMc71tIbZAHzU9DN5Dy UAIz5xgbfFPd/+eprK3yRkMTwd3qL+OB1koFB2cWLxk7uW1Lxhge518Rwt7onrS4 +jNiSmHYIGT1Zu2pBDZakwDOuiBYMH/MTJTDrNDCxxcCeRCDe6hpLL1KqHLOT3pm NZt0o1Ds4wQOdRG0qJZkNSngT9gliReEMLDIibH/Cj8kun3EpAKTTD+Ss6Ld7qSO ZwKgCEBGqOaD1pRSOO2o7alacAITFOta8h7ay3xBNWppuWPXce6nXbp9m8fZBEpK 7vcthYr6xfjxIeLMrTrzhCJPmRe69Ng= -----END CERTIFICATE-----Generated at Tue Sep 22 00:43:19 2026 by rpki-client