$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa File: 8a4778b3-1fbe-3ce6-9849-f83537b13285.roa (raw, json) Hash identifier: 2arqIkOWTp3C93UObUbRLuGV+FF0aL5GwXGnzsf9LFs= Subject key identifier: 67:BA:86:39:C8:68:24:3A:DF:6C:04:E6:39:85:A1:9F:D1:93:3D:4B Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D65152B6A48FE1515CA215920 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 21949 IP address blocks: 50.21.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:2b:6a:48:fe:15:15:ca:21:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=752e726f-761d-4e71-b6d7-1c131fdc0526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:51:fe:00:5d:b8:78:d8:18:f0:76:73:13:6b: a5:17:76:e7:04:92:6e:cd:74:71:a9:a4:55:62:f6: c2:d5:9a:ed:af:92:22:e5:1e:60:8b:f4:af:7f:22: 7e:ef:3d:e5:e9:66:1e:99:95:00:30:5c:ad:c2:39: 61:1a:2d:0f:c3:87:d6:ac:ab:62:a9:b7:d9:2d:0d: c7:99:04:8b:28:9b:ff:a6:3e:95:d8:ef:db:3e:f3: 23:36:d7:1c:eb:7e:77:36:3e:4c:2b:b6:23:79:92: 11:0d:82:06:38:ea:43:67:6a:99:0e:a5:01:6b:ff: 98:37:a2:9f:94:c5:a9:4c:8c:6c:f8:07:cf:77:4f: 21:8d:27:84:ff:00:c2:37:56:ea:e9:15:94:8f:26: 32:73:9e:65:4b:10:56:6f:dd:26:28:95:28:54:33: 24:63:8c:ff:99:be:c6:af:64:20:4e:6c:f8:2a:6a: 68:f0:92:fe:57:08:40:a4:51:4a:5c:43:f9:bf:f8: f1:f9:56:4e:bd:43:d4:d7:4e:3e:a8:ce:bb:2c:57: ae:3a:d9:11:43:1f:c9:03:d2:98:f9:2d:1d:5e:cf: 10:57:83:11:70:99:72:17:7d:63:0c:06:43:ed:f0: 01:19:10:38:d5:82:24:27:81:f8:37:62:3c:7a:98: b6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BA:86:39:C8:68:24:3A:DF:6C:04:E6:39:85:A1:9F:D1:93:3D:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 50.21.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:dc:74:ee:39:bb:e7:97:d9:24:b7:87:3e:fa:ef:65:ad:d4: 0c:b3:6b:59:b4:a7:66:4c:4f:28:9c:e3:66:39:25:28:60:71: fb:72:b5:bd:21:40:9d:38:2b:af:45:9a:2e:a6:6a:2f:bc:b6: f9:12:76:92:d2:c7:d0:43:e4:33:c8:29:7f:8b:94:2c:5d:f3: b6:5c:29:62:db:5f:86:0f:53:05:cd:b0:a4:d5:c6:ef:af:e7: 8d:c1:74:5d:40:1d:6a:22:99:9b:7a:c4:e2:ed:53:2b:47:75: e4:6d:ab:13:49:cb:6c:bf:6a:ff:9e:55:dd:42:b9:ca:bf:08: a9:30:fe:bf:ad:a1:ee:51:f5:7b:1a:12:01:12:bf:0a:d7:fe: 1f:a0:b5:42:e7:9b:bd:0e:c8:42:fe:c6:33:d9:87:26:e2:4f: 86:07:e0:ef:6b:4a:b9:d4:e4:93:bd:24:7d:2d:e4:a5:98:5b: 20:d2:2c:e6:51:11:ff:6b:45:df:76:b4:a9:43:a8:0c:86:0b: f2:e7:a1:21:e7:da:0b:dc:a5:72:21:9e:0f:38:80:0c:4d:37: a9:78:86:97:19:fe:9f:6c:bb:88:be:fe:44:98:9d:80:05:00: 14:3f:19:a5:c1:cd:6b:a3:23:d7:49:46:48:67:a3:ac:d6:c7: 5d:6b:01:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFStqSP4VFcohWSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NzUyZTcyNmYtNzYxZC00ZTcxLWI2ZDctMWMxMzFmZGMwNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1H+AF24eNgY8HZzE2ulF3bnBJJuzXRxqaRV YvbC1Zrtr5Ii5R5gi/SvfyJ+7z3l6WYemZUAMFytwjlhGi0Pw4fWrKtiqbfZLQ3H mQSLKJv/pj6V2O/bPvMjNtcc6353Nj5MK7YjeZIRDYIGOOpDZ2qZDqUBa/+YN6Kf lMWpTIxs+AfPd08hjSeE/wDCN1bq6RWUjyYyc55lSxBWb90mKJUoVDMkY4z/mb7G r2QgTmz4Kmpo8JL+VwhApFFKXEP5v/jx+VZOvUPU104+qM67LFeuOtkRQx/JA9KY +S0dXs8QV4MRcJlyF31jDAZD7fABGRA41YIkJ4H4N2I8epi23wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe6hjnIaCQ632wE5jmFoZ/Rkz1LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvOGE0Nzc4YjMtMWZiZS0z Y2U2LTk4NDktZjgzNTM3YjEzMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMhVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjcdO45u+eX2SS3hz7672Wt1Ayza1m0p2ZMTyic42Y5JShgcftytb0h QJ04K69Fmi6mai+8tvkSdpLSx9BD5DPIKX+LlCxd87ZcKWLbX4YPUwXNsKTVxu+v 543BdF1AHWoimZt6xOLtUytHdeRtqxNJy2y/av+eVd1Cucq/CKkw/r+toe5R9Xsa EgESvwrX/h+gtULnm70OyEL+xjPZhybiT4YH4O9rSrnU5JO9JH0t5KWYWyDSLOZR Ef9rRd92tKlDqAyGC/LnoSHn2gvcpXIhng84gAxNN6l4hpcZ/p9su4i+/kSYnYAF ABQ/GaXBzWujI9dJRkhno6zWx11rAQA= -----END CERTIFICATE-----Generated at Sat Apr 18 00:07:16 2026 by rpki-client