$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa File: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (raw, json) Hash identifier: zcTY/AuJsinB5zVqbP5qfeDPrTemmbRni2L9QXu3+ZA= Subject key identifier: A1:0A:B1:E4:F3:E8:BA:E3:5B:D5:9B:4E:15:CF:20:7B:EE:9B:F4:EC Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249 Certificate serial: 010D0C9F4328584D746FBDF6E81D1FFEA78D1380 Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 33368 IP address blocks: 208.86.24.0/22 maxlen: 22 2620:0:1a20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:bd:f6:e8:1d:1f:fe:a7:8d:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=00f79b28-5485-400c-8a38-609f6a4ccd89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:b2:f1:0a:9d:08:be:76:4d:52:f2:17:e1: 69:6b:9c:7a:5c:6b:40:5a:b1:c6:a9:a9:db:d5:2a: e7:cc:60:a9:66:ea:57:88:e0:3b:eb:df:88:20:1b: b5:39:7b:47:f6:ac:d2:21:af:1a:c6:e8:9a:6a:62: 4d:4b:82:4e:cf:71:a4:57:a7:26:f7:a4:e8:65:73: 80:d4:d5:d9:2e:05:36:70:39:fd:02:96:fd:d8:d8: 51:75:16:a6:82:be:a8:4d:44:99:ae:e9:5d:79:6b: 52:c6:16:7f:5e:79:5f:d6:db:6e:95:a9:e6:7a:99: 73:ed:18:78:ce:73:71:3d:df:26:15:f4:d7:43:a5: b4:fb:d7:61:f0:21:57:49:93:92:cc:5e:3f:81:83: d7:20:c7:97:a2:55:44:f7:9a:c1:d9:4b:fd:ac:c6: 32:50:f5:45:f3:85:93:6e:d8:cb:40:4c:f4:48:ec: 5c:31:55:17:d1:66:35:e7:bb:77:f6:f6:ab:47:52: c8:db:26:48:47:84:eb:42:c0:9c:60:de:8a:0c:e1: 84:34:45:d7:e3:36:f1:9a:d7:78:4c:12:e1:cf:e2: 3c:d7:63:3a:af:3c:ca:3e:a7:6e:a2:5f:a0:74:f9: 07:27:17:0d:1d:69:88:58:a2:18:a7:bb:ce:34:8d: 0c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0A:B1:E4:F3:E8:BA:E3:5B:D5:9B:4E:15:CF:20:7B:EE:9B:F4:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl X509v3 Authority Key Identifier: keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer sbgp-ipAddrBlock: critical IPv4: 208.86.24.0/22 IPv6: 2620:0:1a20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:19:1b:bd:dd:21:fd:92:84:e7:4b:d1:3a:aa:bf:30:68:88: 80:01:eb:67:20:1c:a4:a8:d5:df:35:6b:62:39:ca:2f:86:7f: be:a6:a7:bf:b8:6f:15:6f:00:b9:33:f7:f3:d8:31:5e:ef:b2: 8f:a7:32:ad:13:9e:db:9d:87:97:59:db:de:c4:ba:53:c0:9d: f4:53:ee:82:03:6f:05:1e:c5:b5:0b:45:72:57:97:46:ba:b8: 3b:04:11:36:b0:57:e3:84:58:88:16:7c:25:87:74:0a:0c:6f: 53:6d:22:f7:49:d8:1d:45:ae:98:63:fc:84:93:d1:45:69:65: c5:15:9e:1a:43:ae:88:6c:eb:28:29:6c:3d:05:cb:c6:7e:f5: f2:3e:26:a7:b3:d7:21:66:24:d5:6a:dc:44:18:e5:80:84:31: 0b:9c:05:95:5f:bf:62:f5:19:6c:9d:f8:73:79:fe:be:83:18: 0b:02:de:53:d0:f7:0b:83:20:c0:0f:fe:19:f8:8c:b6:99:49: 76:a5:4c:cf:c5:27:c8:6e:66:d9:af:82:37:17:39:9f:1e:13: de:08:de:58:a0:13:ae:c0:d1:22:43:bf:32:19:59:73:ed:fa: 99:cc:7f:fe:85:16:86:19:7e:68:64:b9:54:91:a4:49:4f:f6: 79:6f:5e:24 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE10b7326B0f/qeNE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh MjQ5MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MDBmNzliMjgtNTQ4NS00MDBjLThhMzgtNjA5ZjZhNGNjZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTyy8QqdCL52TVLyF+Fpa5x6XGtAWrHGqanb 1SrnzGCpZupXiOA769+IIBu1OXtH9qzSIa8axuiaamJNS4JOz3GkV6cm96ToZXOA 1NXZLgU2cDn9Apb92NhRdRamgr6oTUSZruldeWtSxhZ/Xnlf1ttulanmeplz7Rh4 znNxPd8mFfTXQ6W0+9dh8CFXSZOSzF4/gYPXIMeXolVE95rB2Uv9rMYyUPVF84WT btjLQEz0SOxcMVUX0WY157t39varR1LI2yZIR4TrQsCcYN6KDOGENEXX4zbxmtd4 TBLhz+I812M6rzzKPqduol+gdPkHJxcNHWmIWKIYp7vONI0MEwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFKEKseTz6LrjW9WbThXPIHvum/TsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvZWEwYjVkMWYtYTUwNS0z ODIxLWE2N2MtYjI5NmQwNzFiYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3 MWNlMmEyNDkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQC0FYYMA8E AgACMAkDBwAmIAAAGiAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVRkbvd0h/ZKE50vROqq/MGiIgAHrZyAc pKjV3zVrYjnKL4Z/vqanv7hvFW8AuTP389gxXu+yj6cyrROe252Hl1nb3sS6U8Cd 9FPuggNvBR7FtQtFcleXRrq4OwQRNrBX44RYiBZ8JYd0CgxvU20i90nYHUWumGP8 hJPRRWllxRWeGkOuiGzrKClsPQXLxn718j4mp7PXIWYk1WrcRBjlgIQxC5wFlV+/ YvUZbJ34c3n+voMYCwLeU9D3C4MgwA/+GfiMtplJdqVMz8UnyG5m2a+CNxc5nx4T 3gjeWKATrsDRIkO/MhlZc+36mcx//oUWhhl+aGS5VJGkSU/2eW9eJA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:19:29 2026 by rpki-client