$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3bf3fd7d-9deb-3e68-833c-0a7a4a729b4c.roa File: 3bf3fd7d-9deb-3e68-833c-0a7a4a729b4c.roa (raw, json) Hash identifier: 1pU8UtX/YipaNuJd2PSKgxdHL9+5RkguiW3Ni7fdb2s= Subject key identifier: 19:A1:CC:22:4C:CF:69:84:44:E5:47:B8:47:3C:9E:45:C9:DD:E8:F1 Certificate issuer: /CN=58eef8b8-39c9-495c-b889-44faff13a8aa Certificate serial: 010D0C9F4328584E4F1F3C6F591012B8093B4380 Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3bf3fd7d-9deb-3e68-833c-0a7a4a729b4c.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 397016 IP address blocks: 50.21.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:3c:6f:59:10:12:b8:09:3b:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=959f4ced-3c51-4453-9ec4-20e21a613648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:68:35:0b:63:8d:fc:61:d8:99:f8:f3:13:a9: d0:16:e3:c0:60:12:9e:91:c5:5e:ef:dc:68:cc:2e: 9d:65:a8:95:c3:a8:41:30:2d:b6:27:85:01:34:42: fa:36:ca:39:79:c1:75:ec:ac:ff:1e:a9:9e:23:8b: d9:ab:27:b9:9b:3a:02:7f:01:bd:c3:8c:a3:7a:24: c0:58:0d:e6:c1:95:5a:b7:76:0b:6e:9b:7d:bf:08: 9f:9b:0f:f1:86:f0:0e:88:00:9a:0a:2c:74:f7:53: b2:ce:84:43:50:08:61:c5:fc:e5:b5:c3:1e:43:2a: a2:a6:13:b9:ad:3a:02:7f:2d:cb:e9:7b:de:41:6a: 6f:de:24:16:c7:11:4c:ac:7c:2d:65:48:18:6e:88: 55:4d:73:83:18:72:45:85:2b:29:46:9b:e8:2e:a8: c5:a8:9d:1e:56:d8:df:f6:08:7b:af:8f:bd:02:7a: 28:e2:f5:be:d1:20:b9:da:ac:78:c0:85:f1:6c:54: 10:0a:56:61:db:2e:46:32:49:b9:11:fa:0a:da:f6: 0f:1c:54:64:60:2f:56:85:b9:19:63:c7:7f:8c:4a: 41:54:b8:74:75:f7:fb:f1:03:5c:74:26:e7:02:9c: c0:0c:15:ca:e9:76:8f:1c:23:13:e5:2f:ac:80:9e: 4d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A1:CC:22:4C:CF:69:84:44:E5:47:B8:47:3C:9E:45:C9:DD:E8:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3bf3fd7d-9deb-3e68-833c-0a7a4a729b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl X509v3 Authority Key Identifier: keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer sbgp-ipAddrBlock: critical IPv4: 50.21.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:5f:29:1f:9b:90:3d:02:8f:2f:2f:a7:32:0d:4a:ff:04:91: 57:a8:f5:fe:c7:27:34:5e:cf:ce:9d:e8:bc:83:9a:0b:d5:50: ab:e5:bd:3d:0d:48:f7:3a:05:b0:63:50:14:11:d1:38:a2:4b: b2:57:55:f9:3c:53:27:e1:70:68:74:bd:9d:b7:b1:9d:6f:24: 82:e9:4e:d1:aa:e0:a4:bb:88:d4:dc:39:09:37:46:1e:0e:4b: 46:bc:32:bd:93:d1:81:0f:90:2d:fe:75:a5:04:e8:5a:d5:56: df:20:c9:b9:be:33:6b:78:b3:37:08:51:f5:00:03:45:84:46: ce:99:d0:a3:3d:ed:87:78:c9:12:8c:7c:4e:cf:fb:a4:88:5c: 4b:00:a5:3d:17:ce:9d:de:a9:33:f6:76:d4:f8:90:bc:4f:c9: 0f:e6:16:21:28:ab:9b:7d:e7:75:21:51:79:21:2d:45:42:ca: da:2a:de:34:9c:b2:8f:a9:c6:ca:a1:12:c0:c2:99:2f:3b:1b: 30:11:56:f3:83:e9:89:f9:eb:32:cc:38:52:e8:ee:d8:e2:e8: 42:bc:29:07:6b:fd:e4:67:3a:fd:8c:45:82:eb:c4:d1:ca:1e: 31:ca:bb:f9:ea:2b:d9:b9:27:1f:b7:13:46:38:2c:2f:64:ff: 09:e8:2c:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PHzxvWRASuAk7Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThlZWY4YjgtMzljOS00OTVjLWI4ODktNDRmYWZmMTNh OGFhMB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk OTU5ZjRjZWQtM2M1MS00NDUzLTllYzQtMjBlMjFhNjEzNjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmg1C2ON/GHYmfjzE6nQFuPAYBKekcVe79xo zC6dZaiVw6hBMC22J4UBNEL6Nso5ecF17Kz/HqmeI4vZqye5mzoCfwG9w4yjeiTA WA3mwZVat3YLbpt9vwifmw/xhvAOiACaCix091OyzoRDUAhhxfzltcMeQyqiphO5 rToCfy3L6XveQWpv3iQWxxFMrHwtZUgYbohVTXODGHJFhSspRpvoLqjFqJ0eVtjf 9gh7r4+9Anoo4vW+0SC52qx4wIXxbFQQClZh2y5GMkm5EfoK2vYPHFRkYC9WhbkZ Y8d/jEpBVLh0dff78QNcdCbnApzADBXK6XaPHCMT5S+sgJ5NvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmhzCJMz2mEROVHuEc8nkXJ3ejxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OGVl ZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZhZmYxM2E4YWEvM2JmM2ZkN2QtOWRlYi0z ZTY4LTgzM2MtMGE3YTRhNzI5YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNThlZWY4YjgtMzljOS00OTVjLWI4 ODktNDRmYWZmMTNhOGFhLzU4ZWVmOGI4LTM5YzktNDk1Yy1iODg5LTQ0ZmFmZjEz YThhYS5jcmwwHwYDVR0jBBgwFoAU3r9s9ugxHnFt0lRmEzt4iRXpAS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81OGVlZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZh ZmYxM2E4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMhVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxfKR+bkD0Cjy8vpzINSv8EkVeo9f7HJzRez86d6LyDmgvVUKvlvT0N SPc6BbBjUBQR0TiiS7JXVfk8UyfhcGh0vZ23sZ1vJILpTtGq4KS7iNTcOQk3Rh4O S0a8Mr2T0YEPkC3+daUE6FrVVt8gybm+M2t4szcIUfUAA0WERs6Z0KM97Yd4yRKM fE7P+6SIXEsApT0Xzp3eqTP2dtT4kLxPyQ/mFiEoq5t953UhUXkhLUVCytoq3jSc so+pxsqhEsDCmS87GzARVvOD6Yn56zLMOFLo7tji6EK8KQdr/eRnOv2MRYLrxNHK HjHKu/nqK9m5Jx+3E0Y4LC9k/wnoLIw= -----END CERTIFICATE-----Generated at Fri Jul 24 17:02:00 2026 by rpki-client