$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa File: 8a4778b3-1fbe-3ce6-9849-f83537b13285.roa (raw, json) Hash identifier: JlvyYBzpQ2o/DN7vea3hAx4sMbKOSYjMpcAt63krzJg= Subject key identifier: 16:AF:CD:9A:7A:C6:2E:6F:47:15:96:9A:EB:D9:F6:DE:58:34:83:7D Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584AC2E106F1D5826B7C7E7DE680 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 21949 IP address blocks: 50.21.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:06:f1:d5:82:6b:7c:7e:7d:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=18b6e215-8c27-4448-afe4-05573226e7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9e:cc:f9:7f:b7:aa:21:80:1c:b0:e7:fe:28: 1c:bb:75:77:4d:6a:60:e7:1d:99:69:ea:6e:8f:c6: af:00:9c:17:46:61:03:8f:03:ff:2c:a2:ba:20:92: 5f:b1:86:75:48:de:2e:7a:ce:d4:90:a3:11:45:1e: 2d:4e:97:a7:46:40:bd:47:22:c3:97:80:15:2c:32: 2e:ee:d8:df:01:61:a9:21:0c:34:84:c0:e4:ba:ec: 6b:b2:f5:a0:2f:8a:07:73:6a:33:14:75:d8:64:7a: 93:6c:e8:ac:af:16:5e:dc:4b:ec:97:b9:46:7c:92: dc:92:ad:97:b1:c7:0c:a0:dd:51:7e:91:f6:14:71: 12:4b:b7:f6:60:64:75:87:b3:1a:0c:9d:29:2f:13: b8:f6:39:74:5e:a0:7f:c3:9b:70:e5:f9:fd:73:44: 69:29:02:4e:40:6d:0c:70:33:55:7f:14:18:18:d9: 86:0a:a3:ec:37:ca:cd:7f:95:12:48:14:1e:aa:10: 6f:d0:58:94:10:55:51:20:65:24:ac:ac:4f:bc:ef: d4:4e:8d:4a:97:73:c0:f3:22:dd:4b:7e:ce:22:56: 7d:c3:4c:d9:a4:a0:05:70:c7:d8:75:c2:68:13:6c: 8a:a6:fb:71:18:56:a2:d1:64:b8:28:70:79:78:7d: f1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AF:CD:9A:7A:C6:2E:6F:47:15:96:9A:EB:D9:F6:DE:58:34:83:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 50.21.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:1d:b9:70:ee:4f:27:05:b2:1f:48:b0:58:fc:c8:da:1a:c3: 0e:ea:bd:83:81:3d:8f:72:79:9c:74:34:81:a6:65:6f:01:ca: 75:a3:a4:85:52:bc:5f:75:54:85:f3:a0:84:d8:a2:48:7b:7a: 0e:c7:e1:76:ef:89:6a:c0:28:c4:b8:ff:d2:64:19:77:a8:40: be:5c:ac:52:34:6a:3f:1f:7b:52:55:26:57:96:d8:91:43:fc: c5:72:b9:30:1d:f7:20:9c:28:e0:67:94:ef:79:3a:16:f8:e1: 2d:bb:9a:17:32:2e:98:56:a4:4a:19:3a:71:17:a9:96:a9:cb: a7:3b:d3:4b:e0:f1:a8:fd:72:c2:45:fc:95:28:9d:86:75:95: af:87:82:00:9e:39:e3:22:67:6b:f1:ee:b2:b4:d9:50:35:4c: 68:b5:92:37:1e:3a:c0:ba:ef:d8:0f:09:35:4a:64:24:9e:7a: a5:c9:84:e5:36:75:e7:c2:f4:7a:d2:61:f9:c5:e1:6c:47:05: b9:44:46:b3:70:61:90:21:e1:8d:08:70:11:9d:6b:e1:2f:49: 5c:95:92:e9:63:b0:f0:78:8c:dc:c1:aa:7f:96:e3:07:d2:0f: 1c:53:7a:8b:0e:6a:15:c4:dc:88:fe:34:83:7c:6c:4c:9a:56: af:bc:74:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Qbx1YJrfH595oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MThiNmUyMTUtOGMyNy00NDQ4LWFmZTQtMDU1NzMyMjZlN2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ7M+X+3qiGAHLDn/igcu3V3TWpg5x2Zaepu j8avAJwXRmEDjwP/LKK6IJJfsYZ1SN4ues7UkKMRRR4tTpenRkC9RyLDl4AVLDIu 7tjfAWGpIQw0hMDkuuxrsvWgL4oHc2ozFHXYZHqTbOisrxZe3Evsl7lGfJLckq2X sccMoN1RfpH2FHESS7f2YGR1h7MaDJ0pLxO49jl0XqB/w5tw5fn9c0RpKQJOQG0M cDNVfxQYGNmGCqPsN8rNf5USSBQeqhBv0FiUEFVRIGUkrKxPvO/UTo1Kl3PA8yLd S37OIlZ9w0zZpKAFcMfYdcJoE2yKpvtxGFai0WS4KHB5eH3xmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBavzZp6xi5vRxWWmuvZ9t5YNIN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvOGE0Nzc4YjMtMWZiZS0z Y2U2LTk4NDktZjgzNTM3YjEzMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMhVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYduXDuTycFsh9IsFj8yNoaww7qvYOBPY9yeZx0NIGmZW8BynWjpIVS vF91VIXzoITYokh7eg7H4XbviWrAKMS4/9JkGXeoQL5crFI0aj8fe1JVJleW2JFD /MVyuTAd9yCcKOBnlO95Ohb44S27mhcyLphWpEoZOnEXqZapy6c700vg8aj9csJF /JUonYZ1la+HggCeOeMiZ2vx7rK02VA1TGi1kjceOsC679gPCTVKZCSeeqXJhOU2 defC9HrSYfnF4WxHBblERrNwYZAh4Y0IcBGda+EvSVyVkuljsPB4jNzBqn+W4wfS DxxTeosOahXE3Ij+NIN8bEyaVq+8dIY= -----END CERTIFICATE-----Generated at Thu Aug 7 04:41:21 2025 by rpki-client