$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa File: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (raw, json) Hash identifier: xz0K5N11pkR4Ek5gVFi+gmsk9CmLhN3y0r5erIuD8vk= Subject key identifier: 7D:F4:8C:0E:EF:0D:C9:32:15:B6:5D:54:79:09:39:B9:05:2D:72:B9 Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249 Certificate serial: 010D0C9F4328584AD23BAC5AE10ABD758CA780E0 Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 33368 IP address blocks: 208.86.24.0/22 maxlen: 22 2620:0:1a20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ac:5a:e1:0a:bd:75:8c:a7:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=483c9f3c-9b7d-4f74-8930-d052576d909e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ea:e3:28:6f:c7:b1:cb:ed:ac:7c:05:c4:d0: f2:41:7a:e3:b6:63:ab:4a:d5:52:aa:27:cb:7e:ab: af:9e:c2:54:a5:4f:c5:78:b9:3c:90:3a:aa:59:03: 4c:85:9b:6e:b3:0e:39:71:d0:2d:a8:58:4f:ea:70: 5c:be:2a:b4:d9:9d:1b:a7:68:22:7f:76:d1:0b:b5: 91:4f:9e:78:a4:63:f5:7f:2a:a3:91:0e:33:4a:36: 19:ea:30:a9:8a:6a:f6:7d:5c:86:21:d0:c0:1d:bf: ea:ac:01:be:a1:84:7c:b5:43:a4:4a:06:ae:d8:7a: 4e:22:e4:ee:10:ba:ea:ca:c4:fd:dc:48:3d:3f:85: c8:51:09:c9:c9:20:4e:4f:3f:a2:86:c3:49:b8:8d: 1f:6a:b0:45:03:b0:0e:00:48:63:6b:6f:20:4f:76: db:9d:78:f1:84:3d:8c:a9:79:fe:f6:73:98:a3:f6: 7a:8e:c7:0a:dc:e0:4d:26:cb:5a:5c:dc:fb:1d:cc: ff:38:08:a8:b3:4e:fb:cf:bc:79:bc:d7:8a:e9:f5: a0:0c:35:6b:e9:7f:f3:15:ab:ac:a7:4a:57:7b:0f: 30:50:07:2f:fd:75:e4:08:8f:58:ec:ae:b1:e2:05: 20:67:a8:82:5f:5e:58:85:d0:0f:63:91:c7:d2:cd: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F4:8C:0E:EF:0D:C9:32:15:B6:5D:54:79:09:39:B9:05:2D:72:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl X509v3 Authority Key Identifier: keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer sbgp-ipAddrBlock: critical IPv4: 208.86.24.0/22 IPv6: 2620:0:1a20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:66:17:b8:8a:28:df:c2:75:9a:49:19:a3:11:9c:2d:78:a4: 69:6b:38:a3:fd:6f:c8:9b:e3:28:ce:f2:b6:3a:a0:55:f4:27: 2d:90:ac:b7:39:69:b7:13:ad:a1:7b:65:58:17:0e:d2:b8:ae: 9b:f7:eb:b8:dc:d2:01:3b:9f:2f:6f:4a:ab:cc:78:25:b3:c8: ea:80:d8:21:0a:da:b9:62:b4:24:5e:0e:17:de:c1:a3:6e:6f: 5a:a2:d7:89:1d:c4:aa:f6:67:07:d0:e9:8e:77:bb:34:7c:da: af:23:85:65:9b:56:44:21:3d:d2:bf:54:9c:d5:c7:aa:af:4e: 87:27:fb:24:ae:cf:2b:26:b4:b4:53:3f:f7:45:85:33:f1:3e: 97:96:62:da:7a:ec:b4:43:26:a8:ab:e8:dd:ab:b0:a3:8c:31: 5b:17:6d:7e:b2:65:9f:bd:58:0d:d3:cf:f1:49:a0:b3:44:f0: b0:3b:dc:12:6a:b4:8c:2e:49:94:d7:f9:4c:35:fc:24:a2:16: 43:f4:12:6a:6e:3f:77:36:50:08:3e:0d:79:72:bf:4b:db:97: 00:99:cb:de:46:71:50:53:a6:58:b2:5c:ff:56:14:31:2a:95: cb:3a:67:4a:a2:9c:72:ed:b7:6a:35:c0:a0:9c:0a:d6:34:55: 4c:65:25:cf -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErSO6xa4Qq9dYyngOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh MjQ5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NDgzYzlmM2MtOWI3ZC00Zjc0LTg5MzAtZDA1MjU3NmQ5MDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+rjKG/HscvtrHwFxNDyQXrjtmOrStVSqifL fquvnsJUpU/FeLk8kDqqWQNMhZtusw45cdAtqFhP6nBcviq02Z0bp2gif3bRC7WR T554pGP1fyqjkQ4zSjYZ6jCpimr2fVyGIdDAHb/qrAG+oYR8tUOkSgau2HpOIuTu ELrqysT93Eg9P4XIUQnJySBOTz+ihsNJuI0farBFA7AOAEhja28gT3bbnXjxhD2M qXn+9nOYo/Z6jscK3OBNJstaXNz7Hcz/OAios077z7x5vNeK6fWgDDVr6X/zFaus p0pXew8wUAcv/XXkCI9Y7K6x4gUgZ6iCX15YhdAPY5HH0s3h9QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFH30jA7vDckyFbZdVHkJObkFLXK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvZWEwYjVkMWYtYTUwNS0z ODIxLWE2N2MtYjI5NmQwNzFiYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3 MWNlMmEyNDkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQC0FYYMA8E AgACMAkDBwAmIAAAGiAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAT2YXuIoo38J1mkkZoxGcLXikaWs4o/1v yJvjKM7ytjqgVfQnLZCstzlptxOtoXtlWBcO0rium/fruNzSATufL29Kq8x4JbPI 6oDYIQrauWK0JF4OF97Bo25vWqLXiR3EqvZnB9Dpjne7NHzaryOFZZtWRCE90r9U nNXHqq9Ohyf7JK7PKya0tFM/90WFM/E+l5Zi2nrstEMmqKvo3auwo4wxWxdtfrJl n71YDdPP8Umgs0TwsDvcEmq0jC5JlNf5TDX8JKIWQ/QSam4/dzZQCD4NeXK/S9uX AJnL3kZxUFOmWLJc/1YUMSqVyzpnSqKccu23ajXAoJwK1jRVTGUlzw== -----END CERTIFICATE-----Generated at Thu Aug 21 01:28:15 2025 by rpki-client