$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/50cfbbe5-984d-320f-8dee-db0b40fabcf7.roa File: 50cfbbe5-984d-320f-8dee-db0b40fabcf7.roa (raw, json) Hash identifier: nLTDeA6hNUe0qZfqNqMOdgrdMlpWBL7aOpjsbKs9ebw= Subject key identifier: 14:38:CE:67:4B:70:41:C5:50:69:A1:45:C0:4F:02:73:88:7A:C4:3E Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D343A38F077010B4FBF467880 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/50cfbbe5-984d-320f-8dee-db0b40fabcf7.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 21949 IP address blocks: 70.35.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:38:f0:77:01:0b:4f:bf:46:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=f832b927-a42c-41f1-93ab-ce6cbcae40f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:51:2c:72:0f:bd:23:99:14:04:8d:8e:62: 0a:10:aa:17:7b:a2:99:e7:d2:2a:2c:8d:52:77:bf: 96:f4:0f:42:b7:2c:10:9a:82:12:71:bb:cc:ae:85: 82:40:57:5b:f7:e7:85:ff:c6:c3:5a:cb:e6:8a:de: 08:25:65:92:c2:6b:4d:d6:32:82:a1:6f:e3:5d:21: d4:f0:67:2a:89:a8:f0:1d:ba:d3:d4:b3:4e:c5:b9: ed:58:a1:74:1c:8a:56:a5:57:7d:a6:b0:45:06:d9: 5b:84:53:25:61:d1:8a:ac:36:14:3a:34:59:de:06: 8c:9c:36:85:55:ee:97:f5:73:53:1b:ec:8c:fb:2f: 2f:16:4e:8e:41:d3:42:16:4e:a5:3d:50:05:15:11: 91:59:1f:4f:73:b5:c0:d9:29:18:f8:29:b5:d8:6b: dd:7e:6f:54:b7:e5:55:f2:6f:fb:7b:ef:3a:ee:af: e3:22:29:db:09:1a:d6:3d:ed:63:7a:e7:f0:d2:3c: b2:a8:13:17:af:d8:25:cc:f1:c2:61:5e:fe:28:39: aa:4e:91:66:fc:99:6b:60:87:5d:29:f7:a5:ad:d7: 8f:95:dd:c0:6d:07:c1:08:01:3e:5b:ca:c7:1f:0f: 2b:38:54:1b:9a:80:e1:c2:c7:ef:69:a8:cf:2e:c5: 53:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:38:CE:67:4B:70:41:C5:50:69:A1:45:C0:4F:02:73:88:7A:C4:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/50cfbbe5-984d-320f-8dee-db0b40fabcf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 70.35.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:63:cb:2d:6f:ca:0b:57:a4:81:81:c5:fd:0a:62:95:94:ce: ef:e1:1b:77:1f:24:2b:bb:54:1f:99:06:01:55:85:77:8a:c1: 70:5f:4d:83:6d:8e:e9:c7:eb:76:8d:82:ac:15:72:6b:c6:e8: 83:cc:87:65:94:1e:7c:7b:97:ed:2b:8b:d7:f1:56:be:65:48: 6b:1e:5f:2e:86:3c:6b:af:ef:f0:fd:f4:11:90:66:55:09:50: 49:19:5a:93:25:99:56:e7:e2:1f:93:21:57:cf:76:e0:21:f4: c0:eb:09:ec:ef:af:8b:99:82:73:1d:8b:22:29:53:1e:dc:4d: 1d:b8:1f:f8:fd:0c:9a:21:a2:cb:c7:a7:cc:3a:b1:aa:f3:52: 64:4d:33:89:84:b7:d5:c8:27:9b:d5:c3:a1:97:5d:64:91:ac: 78:99:e3:8b:76:01:1b:24:a6:41:a8:d7:c1:48:2c:d1:17:7d: 56:b5:73:86:32:33:24:df:2c:c7:9c:f3:e1:5c:85:6b:5b:b9: 5f:30:dd:b6:8b:45:23:14:ff:99:3d:d6:1b:a8:8a:9d:dc:dc: 67:cb:c5:65:12:32:cf:60:02:63:ef:86:f4:1d:22:ce:fc:a9: df:97:03:44:7c:03:2d:06:ff:90:7e:79:76:03:8a:9e:1f:7b: 11:c4:13:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OjjwdwELT79GeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk ZjgzMmI5MjctYTQyYy00MWYxLTkzYWItY2U2Y2JjYWU0MGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9lRLHIPvSOZFASNjmIKEKoXe6KZ59IqLI1S d7+W9A9CtywQmoIScbvMroWCQFdb9+eF/8bDWsvmit4IJWWSwmtN1jKCoW/jXSHU 8GcqiajwHbrT1LNOxbntWKF0HIpWpVd9prBFBtlbhFMlYdGKrDYUOjRZ3gaMnDaF Ve6X9XNTG+yM+y8vFk6OQdNCFk6lPVAFFRGRWR9Pc7XA2SkY+Cm12Gvdfm9Ut+VV 8m/7e+867q/jIinbCRrWPe1jeufw0jyyqBMXr9glzPHCYV7+KDmqTpFm/JlrYIdd KfelrdePld3AbQfBCAE+W8rHHw8rOFQbmoDhwsfvaajPLsVT1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQ4zmdLcEHFUGmhRcBPAnOIesQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNTBjZmJiZTUtOTg0ZC0z MjBmLThkZWUtZGIwYjQwZmFiY2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1jyy1vygtXpIGBxf0KYpWUzu/hG3cfJCu7VB+ZBgFVhXeKwXBfTYNt junH63aNgqwVcmvG6IPMh2WUHnx7l+0ri9fxVr5lSGseXy6GPGuv7/D99BGQZlUJ UEkZWpMlmVbn4h+TIVfPduAh9MDrCezvr4uZgnMdiyIpUx7cTR24H/j9DJohosvH p8w6sarzUmRNM4mEt9XIJ5vVw6GXXWSRrHiZ44t2ARskpkGo18FILNEXfVa1c4Yy MyTfLMec8+FchWtbuV8w3baLRSMU/5k91huoip3c3GfLxWUSMs9gAmPvhvQdIs78 qd+XA0R8Ay0G/5B+eXYDip4fexHEE80= -----END CERTIFICATE-----Generated at Thu Mar 26 07:33:21 2026 by rpki-client