$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/73a827d3-702c-3659-b4f7-c1d3ac48445e.roa File: 73a827d3-702c-3659-b4f7-c1d3ac48445e.roa (raw, json) Hash identifier: fJZxMM9CWcWJgLccc/U2iuntRkOUYO0tDXNwkwZnjsI= Subject key identifier: 71:36:79:D6:AC:41:67:EA:E4:F6:34:4E:8D:03:7B:93:CE:7C:35:F2 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584A49706CD0FF8FE91C7D877280 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/73a827d3-702c-3659-b4f7-c1d3ac48445e.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 21949 IP address blocks: 50.21.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:6c:d0:ff:8f:e9:1c:7d:87:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=da854c8d-ac7d-41f7-9880-c7d3590a81a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:36:a1:d9:a7:e5:00:66:6e:94:62:74:6a:d3: f0:d5:98:ec:03:23:48:d4:ea:52:33:00:9e:ab:ad: 0a:f0:c8:3c:1c:df:f8:88:25:71:50:2a:dc:ca:7a: 05:47:3e:f3:5d:9f:e3:60:fd:cd:2e:3f:b0:69:52: e1:c7:23:73:d9:06:c4:b1:b7:4f:5d:74:87:56:af: 28:8b:52:60:b3:3a:7e:33:28:2b:e1:e0:64:5c:4c: 84:2f:b2:68:3b:19:19:2f:51:27:42:0d:e8:41:a7: 82:af:05:54:e6:f4:78:0f:55:4c:ba:b0:12:5f:e8: 37:5e:a9:01:08:8b:30:94:1b:11:3b:7c:f3:18:81: 52:cf:c2:b0:7c:b5:50:92:88:bb:57:d2:81:d5:44: c8:27:e5:4c:a9:7d:58:5e:0a:4b:1f:6b:75:f1:6b: 22:0b:14:ac:83:05:fa:e2:95:35:e1:97:4f:3e:16: ce:95:e7:2b:8b:2c:f4:bf:aa:47:8b:3e:ff:37:04: 07:6f:35:e0:f1:24:f5:15:10:fe:5f:be:1f:41:c1: ac:d2:63:00:6d:9c:17:e9:bb:ff:07:29:b6:01:e6: 6c:cf:b4:8e:f6:cf:87:78:f6:8f:1c:23:a9:c6:e0: 05:bc:a8:04:ba:af:18:80:1e:c7:4f:89:45:9a:5f: 02:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:36:79:D6:AC:41:67:EA:E4:F6:34:4E:8D:03:7B:93:CE:7C:35:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/73a827d3-702c-3659-b4f7-c1d3ac48445e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 50.21.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:93:60:3c:09:85:68:0f:4e:8a:65:a6:1c:2e:ac:a4:27:db: a4:aa:71:ae:58:73:72:e6:31:0b:ec:aa:3b:78:32:28:91:ca: af:7b:73:3f:a0:dc:22:d0:f7:18:eb:5c:00:b8:7b:20:50:38: d7:73:90:85:a3:da:09:60:c8:ff:b6:fa:96:78:2e:56:c0:4e: bc:3b:c8:20:69:46:03:c7:e5:b1:5e:ed:81:53:14:8d:96:f7: 29:d9:79:4a:6e:06:38:78:53:9a:73:e5:d3:23:4d:58:a7:a2: c9:a8:4f:31:d2:2c:3f:ea:20:6b:c7:09:37:1a:ee:85:29:9b: 52:81:16:87:4e:7a:05:24:0b:41:d6:b2:19:1c:55:7f:f5:1a: ee:7a:3c:f2:d8:ca:b3:8c:a0:e8:9d:38:30:a2:70:49:c6:65: bb:e3:c2:e0:ff:f4:15:00:7d:59:33:ef:d8:c5:66:2d:39:a9: 62:8c:8b:6e:68:ca:d4:5b:fa:10:b2:59:90:5a:d2:d4:de:47: 04:4d:2d:7a:d8:f3:ea:dc:7a:dd:d1:c8:47:28:dc:95:59:00: 48:f3:ff:4b:ce:50:d5:d1:f1:2d:3b:c7:14:50:f4:ed:8e:ec: 69:c0:12:88:0c:6e:cf:b7:66:8f:d1:a5:c7:5e:6c:6a:40:27: 56:d2:62:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcGzQ/4/pHH2HcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZGE4NTRjOGQtYWM3ZC00MWY3LTk4ODAtYzdkMzU5MGE4MWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDah2aflAGZulGJ0atPw1ZjsAyNI1OpSMwCe q60K8Mg8HN/4iCVxUCrcynoFRz7zXZ/jYP3NLj+waVLhxyNz2QbEsbdPXXSHVq8o i1Jgszp+Mygr4eBkXEyEL7JoOxkZL1EnQg3oQaeCrwVU5vR4D1VMurASX+g3XqkB CIswlBsRO3zzGIFSz8KwfLVQkoi7V9KB1UTIJ+VMqX1YXgpLH2t18WsiCxSsgwX6 4pU14ZdPPhbOlecriyz0v6pHiz7/NwQHbzXg8ST1FRD+X74fQcGs0mMAbZwX6bv/ Bym2AeZsz7SO9s+HePaPHCOpxuAFvKgEuq8YgB7HT4lFml8CkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE2edasQWfq5PY0To0De5POfDXyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNzNhODI3ZDMtNzAyYy0z NjU5LWI0ZjctYzFkM2FjNDg0NDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMhUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyTYDwJhWgPToplphwurKQn26Sqca5Yc3LmMQvsqjt4MiiRyq97cz+g 3CLQ9xjrXAC4eyBQONdzkIWj2glgyP+2+pZ4LlbATrw7yCBpRgPH5bFe7YFTFI2W 9ynZeUpuBjh4U5pz5dMjTVinosmoTzHSLD/qIGvHCTca7oUpm1KBFodOegUkC0HW shkcVX/1Gu56PPLYyrOMoOidODCicEnGZbvjwuD/9BUAfVkz79jFZi05qWKMi25o ytRb+hCyWZBa0tTeRwRNLXrY8+rcet3RyEco3JVZAEjz/0vOUNXR8S07xxRQ9O2O 7GnAEogMbs+3Zo/RpcdebGpAJ1bSYlo= -----END CERTIFICATE-----Generated at Tue Jul 1 04:11:17 2025 by rpki-client