$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa File: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (raw, json) Hash identifier: JCi+eaQ/S7YPlo32NZ/lb3Ho+vdH4Prf/LVgn4QsLUw= Subject key identifier: 05:C6:8C:FF:C9:5C:4B:80:8F:63:BE:AB:BE:35:20:8D:CB:61:89:A8 Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249 Certificate serial: 010D0C9F43285849F17FB2A980B05A3D8E46EF00 Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 33368 IP address blocks: 208.86.24.0/22 maxlen: 22 2620:0:1a20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:b2:a9:80:b0:5a:3d:8e:46:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=6aa03202-db7c-4ce8-9d42-0f29b2fb0c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:0c:d4:fd:f0:d8:43:58:ac:d5:fb:00:0e:75: 79:57:42:fa:37:b7:0a:4e:6e:85:4c:2d:38:42:17: df:78:38:3a:a5:5e:d8:3f:b8:2b:c0:ba:c5:2d:9c: 34:51:60:ed:8b:c5:12:ad:13:f7:7c:35:35:2f:93: fc:2a:26:d9:b8:9d:2a:f7:89:a3:54:2a:a8:d5:d5: 60:2b:a5:57:cd:30:fc:d6:d1:7d:86:5d:5c:34:bf: 58:2e:9b:85:eb:33:70:ad:83:c7:37:23:8e:c0:65: 8d:e7:f4:d2:40:34:e8:88:4b:93:2e:7e:17:a3:50: 03:f9:12:d7:80:c5:d3:2a:47:42:0b:01:10:f4:9d: 73:37:36:63:a5:49:99:cf:ad:87:08:f3:41:29:c4: 9c:b7:4f:f8:44:35:6a:cd:43:29:3e:70:8f:08:fd: e2:e6:e1:6a:af:d3:48:0d:4b:60:f0:0d:77:e8:2f: 7a:6b:d4:90:41:35:8f:3a:ea:0a:d9:ec:88:96:dc: 8a:4c:4c:f9:92:66:be:2d:82:95:f0:e9:4e:71:92: 9c:a1:4a:f2:27:60:b6:de:e8:9d:17:c4:78:49:7f: ef:e9:c3:8d:55:82:82:c0:3d:e6:b8:4c:fc:ed:c3: 5a:96:25:e6:23:64:fb:2e:1b:ee:06:50:15:3f:02: 51:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C6:8C:FF:C9:5C:4B:80:8F:63:BE:AB:BE:35:20:8D:CB:61:89:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl X509v3 Authority Key Identifier: keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer sbgp-ipAddrBlock: critical IPv4: 208.86.24.0/22 IPv6: 2620:0:1a20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:32:f1:81:25:29:3d:0c:4d:a9:48:e6:db:95:be:0e:a1:46: 0e:ff:6c:6e:84:a7:3d:84:ca:8f:c9:98:54:0e:db:35:e1:de: c6:6c:8f:7c:01:34:35:8d:8e:bc:b9:49:14:7e:34:82:d8:4e: e4:41:5e:49:36:15:50:cb:09:50:6d:69:1d:ab:a8:e8:18:31: c4:7d:ec:15:fd:63:af:02:37:47:5a:5e:76:be:96:bc:c9:4b: 5b:4a:32:ab:62:1f:95:26:30:de:9a:6b:9b:60:f5:87:24:ed: 43:eb:16:65:8e:db:34:a7:37:3d:7b:a5:34:80:0a:54:91:e9: 0d:5a:fd:06:e8:46:3f:e0:01:8f:67:5e:18:9f:49:12:6b:50: c9:98:b8:13:36:9d:0c:5b:0a:60:ba:51:62:d3:f2:c7:9b:1a: 64:72:87:8b:19:ba:59:80:2c:b3:12:3d:cd:3f:47:ec:76:65: f7:0b:5b:23:66:93:09:fe:14:ee:10:89:28:0e:7d:18:d0:3d: 28:b6:8b:c7:f9:14:79:79:14:25:24:7f:dc:95:6b:4a:32:ee: 61:e0:72:19:18:1a:5c:e0:89:77:60:cc:87:fd:da:fa:8b:37: f8:12:f3:da:f2:44:19:96:5a:a4:cd:1b:cc:b6:32:d8:c4:24: dc:94:36:91 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnxf7KpgLBaPY5G7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh MjQ5MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NmFhMDMyMDItZGI3Yy00Y2U4LTlkNDItMGYyOWIyZmIwYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+wzU/fDYQ1is1fsADnV5V0L6N7cKTm6FTC04 QhffeDg6pV7YP7grwLrFLZw0UWDti8USrRP3fDU1L5P8KibZuJ0q94mjVCqo1dVg K6VXzTD81tF9hl1cNL9YLpuF6zNwrYPHNyOOwGWN5/TSQDToiEuTLn4Xo1AD+RLX gMXTKkdCCwEQ9J1zNzZjpUmZz62HCPNBKcSct0/4RDVqzUMpPnCPCP3i5uFqr9NI DUtg8A136C96a9SQQTWPOuoK2eyIltyKTEz5kma+LYKV8OlOcZKcoUryJ2C23uid F8R4SX/v6cONVYKCwD3muEz87cNaliXmI2T7LhvuBlAVPwJR5QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAXGjP/JXEuAj2O+q741II3LYYmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvZWEwYjVkMWYtYTUwNS0z ODIxLWE2N2MtYjI5NmQwNzFiYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3 MWNlMmEyNDkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQC0FYYMA8E AgACMAkDBwAmIAAAGiAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMjLxgSUpPQxNqUjm25W+DqFGDv9sboSn PYTKj8mYVA7bNeHexmyPfAE0NY2OvLlJFH40gthO5EFeSTYVUMsJUG1pHauo6Bgx xH3sFf1jrwI3R1pedr6WvMlLW0oyq2IflSYw3pprm2D1hyTtQ+sWZY7bNKc3PXul NIAKVJHpDVr9BuhGP+ABj2deGJ9JEmtQyZi4EzadDFsKYLpRYtPyx5saZHKHixm6 WYAssxI9zT9H7HZl9wtbI2aTCf4U7hCJKA59GNA9KLaLx/kUeXkUJSR/3JVrSjLu YeByGRgaXOCJd2DMh/3a+os3+BLz2vJEGZZapM0bzLYy2MQk3JQ2kQ== -----END CERTIFICATE-----Generated at Tue Jun 17 21:02:13 2025 by rpki-client