
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3bf3fd7d-9deb-3e68-833c-0a7a4a729b4c.roa
File: 3bf3fd7d-9deb-3e68-833c-0a7a4a729b4c.roa (raw, json)
Hash identifier: GaGwE1VyF5ffwTagptwFh8ld9ceNwIZBHuLC1blqiQI=
Subject key identifier: AE:0E:AE:89:47:ED:E2:0F:60:5B:77:A5:BD:5E:BC:2C:CA:C3:6F:D8
Certificate issuer: /CN=58eef8b8-39c9-495c-b889-44faff13a8aa
Certificate serial: 010D0C9F4328584EF1820809BF1E1267E4C81100
Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3bf3fd7d-9deb-3e68-833c-0a7a4a729b4c.roa
Signing time: Mon 24 Aug 2026 13:00:12 +0000
ROA not before: Mon 24 Aug 2026 13:00:12 +0000
ROA not after: Sun 22 Nov 2026 14:00:12 +0000
asID: 397016
IP address blocks: 50.21.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f1:82:08:09:bf:1e:12:67:e4:c8:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa
Validity
Not Before: Aug 24 13:00:12 2026 GMT
Not After : Nov 22 14:00:12 2026 GMT
Subject: CN=d4387a3c-8327-471c-8278-a6043f080401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:ed:c0:95:ef:6a:88:e8:44:2f:fb:ff:bd:
05:f9:4f:bf:f1:23:d7:11:9c:21:20:78:67:53:cc:
09:0a:20:70:27:09:46:36:e7:60:10:a0:80:c8:3f:
aa:d7:4d:d8:7b:05:29:79:4b:79:65:01:8a:95:be:
b2:b6:70:10:c6:dd:d1:c1:a5:eb:18:0d:d2:3a:85:
d2:25:39:6c:e0:52:07:47:9d:a4:c3:e5:f6:a1:d8:
39:9b:c9:dc:f5:ab:00:2d:c2:0b:a8:10:ca:b4:f5:
98:97:ba:5f:45:a2:c1:5e:45:96:9b:61:a8:07:fb:
6e:ce:11:97:53:21:70:91:70:96:4b:b9:52:b3:bf:
ef:9f:5d:49:1b:75:90:81:ae:d7:a6:28:23:7e:71:
05:a1:d1:05:3c:5c:0d:bf:65:9b:d2:72:e4:31:e2:
09:17:b3:f7:f6:27:8c:82:4d:85:f8:31:cf:6f:5a:
55:3c:2a:e4:ab:30:a1:b8:b0:c4:a3:ba:95:8c:ad:
71:6d:5d:2d:26:1a:80:26:1e:af:a4:87:45:f1:a6:
a0:78:4c:b5:9c:11:f8:11:ea:a9:c2:66:b4:4a:50:
8c:65:78:14:11:46:a4:e8:82:57:7d:84:dd:64:38:
4e:c2:88:57:d2:62:1e:d4:44:da:8c:76:a7:a0:3c:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0E:AE:89:47:ED:E2:0F:60:5B:77:A5:BD:5E:BC:2C:CA:C3:6F:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3bf3fd7d-9deb-3e68-833c-0a7a4a729b4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl
X509v3 Authority Key Identifier:
keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
sbgp-ipAddrBlock: critical
IPv4:
50.21.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:3d:68:34:b2:4e:7f:bf:2f:d1:df:93:01:f4:76:a8:aa:e5:
98:6c:cb:d0:70:6b:d6:75:7d:75:b6:94:6f:f9:7e:39:52:ad:
dc:df:9b:e9:b9:b9:ba:fc:e5:20:4a:e6:46:dc:fd:5a:e3:cf:
ec:c9:9a:ed:57:07:3a:62:8d:30:bf:4f:71:6f:3c:ee:39:65:
3d:80:85:3c:df:22:5d:0c:3f:7e:75:b7:c6:1d:fe:43:c5:f9:
c4:5a:28:31:71:f0:e3:53:9e:b7:02:87:40:6a:c9:52:17:d3:
50:f1:70:6e:7a:46:3e:b4:64:a5:a2:33:8e:c5:4d:e7:b4:2c:
a2:ae:30:cf:b0:42:aa:6b:b8:17:8a:cf:bc:9e:ad:a3:79:cf:
87:7b:74:2c:5e:48:74:b6:47:9a:b0:24:66:46:90:82:bb:16:
28:88:bb:54:af:8e:d4:d1:8b:4c:26:d7:20:80:fe:2c:96:f3:
74:4a:1b:00:99:49:59:c9:d7:d5:0c:ad:de:f1:75:b1:c2:31:
97:3f:f7:84:5f:3a:dd:4f:e7:28:91:96:35:ca:63:4e:c5:c0:
53:d2:60:f2:45:d9:a7:04:46:77:4f:87:7c:ed:5d:aa:81:6c:
d2:69:71:bf:1c:de:60:66:49:a5:19:9c:f1:6a:6b:0b:30:2d:
1d:45:cc:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgggJvx4SZ+TIEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNThlZWY4YjgtMzljOS00OTVjLWI4ODktNDRmYWZmMTNh
OGFhMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
ZDQzODdhM2MtODMyNy00NzFjLTgyNzgtYTYwNDNmMDgwNDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdztwJXvaojoRC/7/70F+U+/8SPXEZwhIHhn
U8wJCiBwJwlGNudgEKCAyD+q103YewUpeUt5ZQGKlb6ytnAQxt3RwaXrGA3SOoXS
JTls4FIHR52kw+X2odg5m8nc9asALcILqBDKtPWYl7pfRaLBXkWWm2GoB/tuzhGX
UyFwkXCWS7lSs7/vn11JG3WQga7XpigjfnEFodEFPFwNv2Wb0nLkMeIJF7P39ieM
gk2F+DHPb1pVPCrkqzChuLDEo7qVjK1xbV0tJhqAJh6vpIdF8aageEy1nBH4Eeqp
wma0SlCMZXgUEUak6IJXfYTdZDhOwohX0mIe1ETajHanoDwgsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4OrolH7eIPYFt3pb1evCzKw2/YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OGVl
ZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZhZmYxM2E4YWEvM2JmM2ZkN2QtOWRlYi0z
ZTY4LTgzM2MtMGE3YTRhNzI5YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNThlZWY4YjgtMzljOS00OTVjLWI4
ODktNDRmYWZmMTNhOGFhLzU4ZWVmOGI4LTM5YzktNDk1Yy1iODg5LTQ0ZmFmZjEz
YThhYS5jcmwwHwYDVR0jBBgwFoAU3r9s9ugxHnFt0lRmEzt4iRXpAS0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81OGVlZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZh
ZmYxM2E4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMhVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAc9aDSyTn+/L9HfkwH0dqiq5Zhsy9Bwa9Z1fXW2lG/5fjlSrdzfm+m5
ubr85SBK5kbc/Vrjz+zJmu1XBzpijTC/T3FvPO45ZT2AhTzfIl0MP351t8Yd/kPF
+cRaKDFx8ONTnrcCh0BqyVIX01DxcG56Rj60ZKWiM47FTee0LKKuMM+wQqpruBeK
z7yeraN5z4d7dCxeSHS2R5qwJGZGkIK7FiiIu1SvjtTRi0wm1yCA/iyW83RKGwCZ
SVnJ19UMrd7xdbHCMZc/94RfOt1P5yiRljXKY07FwFPSYPJF2acERndPh3ztXaqB
bNJpcb8c3mBmSaUZnPFqawswLR1FzAo=
-----END CERTIFICATE-----
Generated at Fri Oct 9 00:16:16 2026 by rpki-client