$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa File: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (raw, json) Hash identifier: mey3/+j94WGap9yoRvGH8psiQUd/GMe2ufuYz1gPNtE= Subject key identifier: 5C:B0:61:4A:D5:75:C6:23:03:C3:EE:D2:14:5A:4C:D5:A1:10:9B:A7 Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249 Certificate serial: 010D0C9F4328584E54B49431DB0A72DCD7365840 Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 33368 IP address blocks: 208.86.24.0/22 maxlen: 22 2620:0:1a20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:94:31:db:0a:72:dc:d7:36:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=34a5b8b9-d1bd-4dba-8869-9d700cc1ada8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:4f:3b:56:51:95:c5:67:bd:4d:70:88:83: 20:8b:24:0a:e9:2c:c4:70:58:81:85:2b:86:40:89: 4b:bc:cc:23:db:fd:dc:b0:3a:a1:73:81:7c:19:84: 3a:12:f4:d1:34:c7:c5:a9:07:cc:b6:6e:08:fb:d6: 25:c6:95:eb:40:94:2b:24:49:79:8c:1a:10:16:71: f4:bc:1b:59:7e:80:de:99:1b:50:95:a7:e6:5d:71: a6:47:d0:e2:69:a6:9f:a8:e9:a2:df:7a:a8:92:3d: 4c:f3:63:d1:82:d7:93:33:6a:29:28:49:4f:be:e0: 34:2d:92:f0:f7:22:d9:4b:de:93:f5:15:0d:69:21: 5a:2c:24:09:5c:d6:e4:1b:d0:db:ba:b3:13:89:e1: 35:b0:cb:e9:03:1a:24:cf:9d:cf:e8:4a:69:2b:b4: 4c:3e:81:b2:a6:cf:56:9e:2f:d8:0b:0a:98:af:8e: 91:f2:71:7d:0d:f5:6b:e4:ce:a5:19:51:ba:c5:a9: 9b:d6:93:66:a1:9a:38:8a:4f:20:1b:18:a0:bc:45: d0:67:df:d5:0b:56:89:04:ce:06:8d:5d:dd:59:25: 1d:89:5a:f9:73:6b:6d:ba:18:40:e0:24:55:a3:46: 30:8a:ff:27:9e:c4:58:b8:99:ac:0e:2b:50:06:27: 26:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B0:61:4A:D5:75:C6:23:03:C3:EE:D2:14:5A:4C:D5:A1:10:9B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl X509v3 Authority Key Identifier: keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer sbgp-ipAddrBlock: critical IPv4: 208.86.24.0/22 IPv6: 2620:0:1a20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:97:2e:ca:71:68:f1:15:1e:ba:8d:01:7e:3e:e0:31:40:8e: 13:70:f5:d1:e7:72:be:db:77:55:e3:e4:1a:ae:ca:64:dc:91: 2c:5d:d2:30:17:70:85:7d:e8:f7:2a:d2:5a:11:b7:19:f1:ec: 38:25:b3:19:15:7b:f2:af:9e:8f:08:29:2c:20:44:2a:c5:c1: df:0b:59:6a:62:cb:86:89:13:ba:c7:58:b7:e2:0b:6d:75:f4: c5:d5:fb:25:7c:9c:88:68:0c:b8:77:dd:b5:05:50:02:3b:ad: b9:f6:86:63:08:95:59:12:b0:7b:fc:d8:c5:e7:f2:5f:92:f4: 0d:34:0a:0f:49:27:8d:c8:13:b5:18:eb:11:87:9b:c6:c8:63: c2:62:34:3d:77:4c:ee:41:6a:8b:6d:ad:56:df:63:67:c8:a2: 58:22:7f:8d:c9:e8:b7:b4:d3:34:ec:4d:79:eb:26:a3:fe:54: 05:de:75:a9:6a:b1:e8:a1:34:3a:37:03:82:7b:23:2f:bd:af: 53:4c:02:04:85:5f:f1:99:e7:12:b1:65:d4:90:d9:4d:22:d7: 28:c9:1c:f1:fd:4b:35:a8:fd:2f:93:87:3f:84:a4:e3:08:cd: 64:e6:c6:fc:76:be:f4:80:4b:a7:ea:39:0d:e4:a5:e2:fd:0d: 16:a4:40:fd -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE5UtJQx2wpy3Nc2WEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh MjQ5MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk MzRhNWI4YjktZDFiZC00ZGJhLTg4NjktOWQ3MDBjYzFhZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ5PO1ZRlcVnvU1wiIMgiyQK6SzEcFiBhSuG QIlLvMwj2/3csDqhc4F8GYQ6EvTRNMfFqQfMtm4I+9YlxpXrQJQrJEl5jBoQFnH0 vBtZfoDemRtQlafmXXGmR9DiaaafqOmi33qokj1M82PRgteTM2opKElPvuA0LZLw 9yLZS96T9RUNaSFaLCQJXNbkG9DburMTieE1sMvpAxokz53P6EppK7RMPoGyps9W ni/YCwqYr46R8nF9DfVr5M6lGVG6xamb1pNmoZo4ik8gGxigvEXQZ9/VC1aJBM4G jV3dWSUdiVr5c2ttuhhA4CRVo0Ywiv8nnsRYuJmsDitQBicm1QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFywYUrVdcYjA8Pu0hRaTNWhEJunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvZWEwYjVkMWYtYTUwNS0z ODIxLWE2N2MtYjI5NmQwNzFiYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3 MWNlMmEyNDkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQC0FYYMA8E AgACMAkDBwAmIAAAGiAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhpcuynFo8RUeuo0Bfj7gMUCOE3D10edy vtt3VePkGq7KZNyRLF3SMBdwhX3o9yrSWhG3GfHsOCWzGRV78q+ejwgpLCBEKsXB 3wtZamLLhokTusdYt+ILbXX0xdX7JXyciGgMuHfdtQVQAjutufaGYwiVWRKwe/zY xefyX5L0DTQKD0knjcgTtRjrEYebxshjwmI0PXdM7kFqi22tVt9jZ8iiWCJ/jcno t7TTNOxNeesmo/5UBd51qWqx6KE0OjcDgnsjL72vU0wCBIVf8ZnnErFl1JDZTSLX KMkc8f1LNaj9L5OHP4Sk4wjNZObG/Ha+9IBLp+o5DeSl4v0NFqRA/Q== -----END CERTIFICATE-----Generated at Fri Jul 24 04:26:12 2026 by rpki-client