$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa File: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (raw, json) Hash identifier: wvQYkhOlIQI9jJLoFAB94GOgEUhfaRDLnuic+mgivQY= Subject key identifier: 98:81:28:74:26:85:53:26:ED:39:EF:99:AB:9B:B1:16:4D:A3:8A:83 Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249 Certificate serial: 010D0C9F432858491246A8505189CBC4AD0F8164 Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 33368 IP address blocks: 208.86.24.0/22 maxlen: 22 2620:0:1a20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a8:50:51:89:cb:c4:ad:0f:81:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=3335d577-afd0-4e5a-83f4-1fd36af27d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ce:8b:ad:33:33:53:40:86:d4:a3:f9:bd:6f: c8:5b:6c:a4:b9:43:19:84:91:f8:d9:c2:4e:44:f7: a6:2f:cf:be:21:3d:f2:a2:21:97:4d:cd:ed:c4:c2: ad:34:7a:16:df:c9:d9:a3:b9:8d:7e:7c:60:e7:df: 70:e7:78:0c:f4:14:0a:9c:dc:71:7c:28:53:f8:cb: a5:7f:ce:99:24:ea:c5:5f:a2:b4:5c:4a:bb:7f:cd: a2:61:b8:f9:47:e0:1b:0d:02:f2:a5:62:2a:de:8f: 11:3c:fe:df:44:35:fb:f2:07:e0:96:56:8a:4e:fe: 47:8e:30:3e:a7:53:8a:9a:2b:11:9b:d0:77:bb:5f: 51:ca:26:c0:ad:b9:13:e1:15:68:aa:84:9b:33:63: 07:f3:4d:db:65:57:86:0c:00:89:63:f5:f7:6f:83: de:7f:8a:5b:ce:d7:96:7c:53:66:55:1a:ea:ea:a8: 4b:3a:bd:80:28:82:7e:a8:83:59:db:bf:9b:74:f4: 60:a2:c1:96:39:e1:63:5e:5f:8e:25:a9:a3:f9:da: 2c:18:68:4b:97:bb:0c:d5:39:cc:cd:26:a4:0e:3f: 89:10:71:2c:1f:4f:19:d3:69:73:37:df:89:70:5f: db:30:99:60:87:1f:16:7f:02:74:f9:4e:59:45:b4: c9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:81:28:74:26:85:53:26:ED:39:EF:99:AB:9B:B1:16:4D:A3:8A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl X509v3 Authority Key Identifier: keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer sbgp-ipAddrBlock: critical IPv4: 208.86.24.0/22 IPv6: 2620:0:1a20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7d:7a:79:9b:4e:b6:01:10:d1:55:77:61:05:ae:b5:99:d0: a7:9b:5a:c7:78:51:a8:74:58:ce:19:11:8c:24:6d:fe:12:b3: 82:c5:93:74:b3:c0:da:3e:7d:10:f3:dd:69:35:a0:b3:f0:6f: ce:a2:cb:7a:ec:78:65:02:6c:04:b4:a4:96:ac:ec:a6:f1:35: f3:53:c7:be:8b:26:a2:c6:a5:b8:c2:6c:dc:8d:c8:f1:d6:4e: 81:ba:9d:b4:30:9f:d0:45:a7:d4:7f:29:b7:d0:54:fe:5f:38: 0b:e7:fa:b9:de:7d:2e:25:d6:32:ec:3f:0d:f9:43:43:5b:48: 36:0c:b4:59:09:09:f2:28:ac:77:d4:2d:37:73:b4:58:be:cd: 03:db:4c:94:0c:b1:3d:10:0b:02:d3:3a:09:3b:ad:e3:0f:a3: ab:f9:56:ce:b4:a8:6f:78:0f:bf:b2:3b:83:db:2a:1e:60:3a: 10:66:cf:49:90:b4:67:6d:92:13:a8:cb:61:7a:1e:10:82:54: 1f:24:1f:0b:34:59:1f:b7:c5:23:e3:56:2f:03:c2:40:d4:d9: 89:88:e8:13:c1:f1:19:ea:6b:54:d4:52:57:5d:3c:34:6e:36: 3e:bf:27:66:d9:a9:1e:b8:b4:0b:85:bf:46:c3:6d:0e:1b:54: dc:47:f1:76 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkSRqhQUYnLxK0PgWQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh MjQ5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MzMzNWQ1NzctYWZkMC00ZTVhLTgzZjQtMWZkMzZhZjI3ZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM6LrTMzU0CG1KP5vW/IW2ykuUMZhJH42cJO RPemL8++IT3yoiGXTc3txMKtNHoW38nZo7mNfnxg599w53gM9BQKnNxxfChT+Mul f86ZJOrFX6K0XEq7f82iYbj5R+AbDQLypWIq3o8RPP7fRDX78gfgllaKTv5HjjA+ p1OKmisRm9B3u19RyibArbkT4RVoqoSbM2MH803bZVeGDACJY/X3b4Pef4pbzteW fFNmVRrq6qhLOr2AKIJ+qINZ27+bdPRgosGWOeFjXl+OJamj+dosGGhLl7sM1TnM zSakDj+JEHEsH08Z02lzN9+JcF/bMJlghx8WfwJ0+U5ZRbTJCQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJiBKHQmhVMm7TnvmaubsRZNo4qDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvZWEwYjVkMWYtYTUwNS0z ODIxLWE2N2MtYjI5NmQwNzFiYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3 MWNlMmEyNDkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQC0FYYMA8E AgACMAkDBwAmIAAAGiAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWH16eZtOtgEQ0VV3YQWutZnQp5tax3hR qHRYzhkRjCRt/hKzgsWTdLPA2j59EPPdaTWgs/BvzqLLeux4ZQJsBLSklqzspvE1 81PHvosmosaluMJs3I3I8dZOgbqdtDCf0EWn1H8pt9BU/l84C+f6ud59LiXWMuw/ DflDQ1tINgy0WQkJ8iisd9QtN3O0WL7NA9tMlAyxPRALAtM6CTut4w+jq/lWzrSo b3gPv7I7g9sqHmA6EGbPSZC0Z22SE6jLYXoeEIJUHyQfCzRZH7fFI+NWLwPCQNTZ iYjoE8HxGeprVNRSV108NG42Pr8nZtmpHri0C4W/RsNtDhtU3Efxdg== -----END CERTIFICATE-----Generated at Tue Apr 29 16:29:40 2025 by rpki-client