$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa File: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (raw, json) Hash identifier: Rkz7DEqCUllVzIHXqXP5EhMR1vCluEmjFkwPGdEVjuw= Subject key identifier: 37:90:DF:C9:37:45:F7:58:56:0D:F6:36:D9:27:51:18:DD:90:3F:49 Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249 Certificate serial: 010D0C9F4328584F9A686453AEC2CA30A9589B40 Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 33368 IP address blocks: 208.86.24.0/22 maxlen: 22 2620:0:1a20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:64:53:ae:c2:ca:30:a9:58:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=87739959-d27a-4407-8c86-022f2ba91ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:49:32:a1:c5:a5:0b:34:41:ce:21:bf:9a:c6: 99:88:f5:79:85:40:80:40:fb:53:69:65:4a:23:bf: 0b:2d:26:17:22:b7:c8:bb:1f:2b:07:38:ad:da:be: 52:2f:99:0a:ea:5c:23:b6:7d:03:c3:b2:44:f7:89: 7a:72:95:07:ec:63:04:4d:3d:e9:db:f1:87:d9:c0: 89:79:9f:f7:5d:a0:df:5e:a6:36:c4:51:da:3e:c7: 18:d8:d2:7e:d0:dd:60:f2:c0:a8:56:cc:99:cd:13: 5a:cb:13:61:b1:b9:9a:6b:a8:92:e0:c7:dc:a0:f1: 49:46:cf:6b:da:2d:58:aa:3b:1b:d2:d3:32:f7:86: 68:dd:8d:47:81:59:18:fd:dc:7e:f0:a8:62:80:98: 1c:a7:7b:80:c1:7a:7c:3e:07:e1:66:c5:f8:e7:ea: 6d:02:3f:41:41:83:74:49:f3:2a:83:6f:77:15:b6: 4b:03:9e:a3:61:54:d2:23:f9:15:7d:94:9d:2a:bd: bb:63:72:fd:4c:35:18:37:92:10:34:41:9c:6e:a9: f0:f0:ca:51:e5:6d:7d:56:30:f1:ae:e2:51:0d:3d: 82:93:41:d3:ec:45:f5:6d:99:a7:6e:14:1c:4e:9e: 6d:ff:21:e5:8b:12:3e:67:99:f5:62:d1:e1:4e:1d: 04:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:90:DF:C9:37:45:F7:58:56:0D:F6:36:D9:27:51:18:DD:90:3F:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl X509v3 Authority Key Identifier: keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer sbgp-ipAddrBlock: critical IPv4: 208.86.24.0/22 IPv6: 2620:0:1a20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:78:71:a5:a9:ad:c5:18:a4:b3:04:4d:e9:80:27:b5:73:9a: 14:d6:ec:b2:85:48:96:9f:25:48:a1:03:e7:40:df:9c:ff:89: 0f:83:51:0b:71:86:1d:ca:83:f8:3e:0a:ad:e6:97:97:2a:c3: 5a:0f:a5:05:4f:58:5e:cf:a2:a9:cb:9b:a6:0d:a6:ed:14:dd: 81:66:cd:79:71:25:51:57:7f:dc:49:d6:f0:5c:91:51:71:40: b6:31:cd:f8:e8:7c:1e:84:52:71:54:05:19:df:34:cd:57:fb: 2f:02:b5:d0:97:07:6a:74:bd:40:27:ba:a7:38:73:34:79:32: ce:4c:9b:c0:eb:84:ab:5e:f1:64:78:50:8e:f1:28:79:31:1e: db:6e:e5:2b:05:d8:90:66:dc:4e:e7:43:6c:e1:9f:f6:d9:ac: 6c:fb:22:c1:7c:0b:66:fa:e1:c2:35:75:7d:3d:21:90:c2:1b: 40:6b:73:5d:26:89:c7:6f:88:5a:6a:d1:cf:06:aa:aa:71:f8: f4:81:61:32:91:6f:37:60:51:78:96:43:b5:b4:d3:f5:eb:8e: 56:b7:85:96:d7:2f:f3:47:25:14:87:5b:15:1e:ec:0d:ad:e9: d3:5b:a2:c9:4c:0f:92:b0:59:a6:61:76:42:64:c5:3a:cf:d0: 73:73:4b:d9 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE+aaGRTrsLKMKlYm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh MjQ5MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ODc3Mzk5NTktZDI3YS00NDA3LThjODYtMDIyZjJiYTkxY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUkyocWlCzRBziG/msaZiPV5hUCAQPtTaWVK I78LLSYXIrfIux8rBzit2r5SL5kK6lwjtn0Dw7JE94l6cpUH7GMETT3p2/GH2cCJ eZ/3XaDfXqY2xFHaPscY2NJ+0N1g8sCoVsyZzRNayxNhsbmaa6iS4MfcoPFJRs9r 2i1Yqjsb0tMy94Zo3Y1HgVkY/dx+8KhigJgcp3uAwXp8PgfhZsX45+ptAj9BQYN0 SfMqg293FbZLA56jYVTSI/kVfZSdKr27Y3L9TDUYN5IQNEGcbqnw8MpR5W19VjDx ruJRDT2Ck0HT7EX1bZmnbhQcTp5t/yHlixI+Z5n1YtHhTh0EyQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDeQ38k3RfdYVg32NtknURjdkD9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvZWEwYjVkMWYtYTUwNS0z ODIxLWE2N2MtYjI5NmQwNzFiYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3 MWNlMmEyNDkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQC0FYYMA8E AgACMAkDBwAmIAAAGiAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKXhxpamtxRikswRN6YAntXOaFNbssoVI lp8lSKED50DfnP+JD4NRC3GGHcqD+D4KreaXlyrDWg+lBU9YXs+iqcubpg2m7RTd gWbNeXElUVd/3EnW8FyRUXFAtjHN+Oh8HoRScVQFGd80zVf7LwK10JcHanS9QCe6 pzhzNHkyzkybwOuEq17xZHhQjvEoeTEe227lKwXYkGbcTudDbOGf9tmsbPsiwXwL ZvrhwjV1fT0hkMIbQGtzXSaJx2+IWmrRzwaqqnH49IFhMpFvN2BReJZDtbTT9euO VreFltcv80clFIdbFR7sDa3p01uiyUwPkrBZpmF2QmTFOs/Qc3NL2Q== -----END CERTIFICATE-----Generated at Tue Nov 3 12:56:31 2026 by rpki-client