$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa File: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (raw, json) Hash identifier: /IOkaiXTr0qJEeLYLCx1kLB8jjsZsWRx/MDZU5j++0I= Subject key identifier: D6:F6:A7:FB:30:B6:1E:79:D6:FF:BF:FA:5B:CD:76:F9:D5:63:21:38 Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249 Certificate serial: 010D0C9F4328584EF7175F7A6A5BB07CF55CC180 Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 33368 IP address blocks: 208.86.24.0/22 maxlen: 22 2620:0:1a20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:5f:7a:6a:5b:b0:7c:f5:5c:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=8524e990-1497-4877-b0b1-4d8bfb2210e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:3b:29:45:a3:29:30:1a:21:96:06:0c:4b: dc:d1:c9:cd:9a:6a:f8:88:08:14:8a:18:07:28:80: e9:a8:c4:6c:c9:3a:d6:eb:22:5a:62:87:cd:d8:b1: 32:a1:1e:a7:ff:43:e4:98:d1:96:23:46:af:e8:5a: 8f:00:a4:8c:f6:83:b6:18:f8:88:82:6a:66:10:9d: 69:c0:15:10:7f:99:6b:a0:0a:8a:0d:5b:dd:e3:c2: 18:b2:49:27:00:ab:c8:ee:f0:41:c3:63:30:6e:00: 7b:ee:85:61:b4:03:b6:80:14:49:46:f0:e2:12:f6: 73:56:4d:09:8a:31:3f:c8:74:d5:ec:ef:52:6f:f8: 77:cd:af:3a:46:ad:35:69:38:a6:cd:90:4d:ee:7b: 7c:a2:d7:e1:d4:9e:85:cf:c3:82:c0:53:07:1a:28: 0b:c2:75:6f:95:32:f6:56:7a:f8:84:65:13:a6:c7: 32:d7:db:83:b6:ad:0f:79:e0:25:05:15:a6:31:f6: 73:9d:79:f2:75:de:1d:76:17:73:24:73:86:11:b5: 45:a6:ef:ee:5e:b5:91:0b:38:d1:17:68:27:d6:d8: ce:87:e7:4a:14:f7:19:4b:e8:78:b4:3b:85:89:70: 3d:01:96:6e:f0:52:96:0c:68:95:d4:3e:16:ab:f5: 8c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F6:A7:FB:30:B6:1E:79:D6:FF:BF:FA:5B:CD:76:F9:D5:63:21:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl X509v3 Authority Key Identifier: keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer sbgp-ipAddrBlock: critical IPv4: 208.86.24.0/22 IPv6: 2620:0:1a20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:66:df:d9:47:f4:60:f9:27:c8:37:d9:8a:86:d4:c8:e7:3a: ad:70:20:76:eb:91:b4:34:f9:2c:a6:6c:33:dc:73:af:d1:d5: 6e:46:47:b9:7b:fe:da:bf:cd:fd:af:5f:b0:85:64:37:15:06: c3:3e:d9:aa:dc:48:a9:4e:30:55:dc:f4:a2:81:e0:96:3e:67: af:8f:fd:4b:76:9d:59:93:84:80:c2:1f:21:37:36:f1:8b:e4: 6b:d7:64:d3:13:af:3f:c4:90:47:15:ab:d4:95:72:26:8b:60: 75:76:50:c5:7d:b6:0b:70:d8:9d:ff:50:6d:89:38:76:c1:86: 0f:6a:b0:e5:ef:fa:8f:35:7c:32:47:5a:0f:0a:9c:24:95:8e: 16:2e:2a:55:16:dc:97:74:a2:5b:c6:71:0d:29:8a:9e:db:38: 0c:c8:d0:bf:af:29:c0:ae:12:d6:32:07:6f:a9:ec:77:de:8d: 39:0f:31:2f:e5:a6:16:c0:c0:a5:68:f8:2b:2f:ee:b2:42:43: fd:6b:c5:53:1b:98:93:c1:28:21:ef:f5:ed:43:f0:e1:75:4f: ab:e3:45:ac:b8:d5:4e:e4:c2:26:35:e9:6f:ff:30:93:e6:1e: fb:64:cb:90:b6:18:54:3f:41:e3:87:7f:3a:1d:af:a4:2e:59: 9f:36:03:13 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE73F196aluwfPVcwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh MjQ5MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ODUyNGU5OTAtMTQ5Ny00ODc3LWIwYjEtNGQ4YmZiMjIxMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaA7KUWjKTAaIZYGDEvc0cnNmmr4iAgUihgH KIDpqMRsyTrW6yJaYofN2LEyoR6n/0PkmNGWI0av6FqPAKSM9oO2GPiIgmpmEJ1p wBUQf5lroAqKDVvd48IYskknAKvI7vBBw2MwbgB77oVhtAO2gBRJRvDiEvZzVk0J ijE/yHTV7O9Sb/h3za86Rq01aTimzZBN7nt8otfh1J6Fz8OCwFMHGigLwnVvlTL2 Vnr4hGUTpscy19uDtq0PeeAlBRWmMfZznXnydd4ddhdzJHOGEbVFpu/uXrWRCzjR F2gn1tjOh+dKFPcZS+h4tDuFiXA9AZZu8FKWDGiV1D4Wq/WMQQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNb2p/swth551v+/+lvNdvnVYyE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvZWEwYjVkMWYtYTUwNS0z ODIxLWE2N2MtYjI5NmQwNzFiYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3 MWNlMmEyNDkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQC0FYYMA8E AgACMAkDBwAmIAAAGiAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKWbf2Uf0YPknyDfZiobUyOc6rXAgduuR tDT5LKZsM9xzr9HVbkZHuXv+2r/N/a9fsIVkNxUGwz7ZqtxIqU4wVdz0ooHglj5n r4/9S3adWZOEgMIfITc28Yvka9dk0xOvP8SQRxWr1JVyJotgdXZQxX22C3DYnf9Q bYk4dsGGD2qw5e/6jzV8MkdaDwqcJJWOFi4qVRbcl3SiW8ZxDSmKnts4DMjQv68p wK4S1jIHb6nsd96NOQ8xL+WmFsDApWj4Ky/uskJD/WvFUxuYk8EoIe/17UPw4XVP q+NFrLjVTuTCJjXpb/8wk+Ye+2TLkLYYVD9B44d/Oh2vpC5ZnzYDEw== -----END CERTIFICATE-----Generated at Fri Sep 11 01:14:40 2026 by rpki-client