$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa File: 19d4427b-9bf1-3955-a929-dbe9c540fd14.roa (raw, json) Hash identifier: kibi1oTJqFUyELi8CqvhT9FenoM0ogox3DapRxI63TY= Subject key identifier: 54:C8:3F:F2:A6:DE:2E:B8:33:48:9C:FB:81:76:CC:20:A7:39:C6:C7 Certificate issuer: /CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Certificate serial: 010D0C9F4328584F4975810BA2C0468ADBF5D070 Authority key identifier: B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7018 IP address blocks: 198.17.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:81:0b:a2:c0:46:8a:db:f5:d0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4923eede-83df-411e-9d5a-b1f6d28c7cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d7:f4:6a:e2:5a:d1:6e:ad:b4:af:0f:4f:be: 5c:65:94:26:ec:7d:70:50:23:61:98:d1:44:ba:05: 85:b0:93:29:d0:22:00:ae:7e:65:3c:3d:6c:56:e2: bc:08:ef:ed:e9:52:ff:09:5e:bd:b6:60:65:0b:26: a7:f8:06:fe:30:31:80:0c:39:62:a9:50:e0:38:0e: 05:fc:72:d1:78:19:3c:b0:74:49:dd:c0:33:5a:a1: 93:9c:8b:59:18:2d:01:e5:d0:85:37:87:aa:ab:b6: d5:89:b0:1c:f2:d8:11:4a:a8:aa:70:af:74:7a:21: 7d:78:48:8f:87:2d:9b:77:31:6e:69:24:c5:88:41: aa:3b:94:e9:b7:2f:e0:f1:7c:98:6b:14:25:c7:a7: 83:da:cb:71:ac:d4:99:0e:48:86:39:5b:96:d6:42: 72:23:e1:09:16:f2:ff:7e:45:ce:5b:ee:45:ef:83: 49:93:d0:5e:39:a1:97:4c:9a:d2:0b:fa:d8:98:55: a8:09:cc:8c:31:0b:64:c1:c2:5f:8f:07:8f:a0:01: 2b:06:1e:78:cd:77:e5:b5:d8:92:b0:5d:d0:7f:56: 39:96:0f:79:52:ca:6c:82:c7:73:ad:78:9e:34:ba: 2f:25:74:f1:c6:da:83:4a:7a:50:a7:4d:d6:f0:9d: d5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C8:3F:F2:A6:DE:2E:B8:33:48:9C:FB:81:76:CC:20:A7:39:C6:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl X509v3 Authority Key Identifier: keyid:B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer sbgp-ipAddrBlock: critical IPv4: 198.17.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:45:2d:41:f8:6a:35:5b:df:69:9e:d4:42:db:8b:81:e1:f8: 9d:a4:13:d4:9c:8c:86:b7:14:a2:eb:9c:5a:c5:20:b8:84:5e: 15:40:8c:c3:5a:e7:8a:c5:0b:fb:ea:82:bb:65:3d:de:43:03: fe:f4:eb:17:0f:d2:70:82:95:e9:23:cc:73:40:6f:65:00:82: 5c:0c:80:cd:72:84:b7:25:7a:86:c7:f7:d4:54:6e:1d:4d:80: 35:95:77:10:28:1e:65:ae:4e:e4:45:0d:38:c1:32:5d:a8:4e: 70:fa:5d:d3:44:85:36:01:17:a5:cb:26:f4:7a:62:f5:6a:36: aa:49:f5:6f:1c:05:47:1e:16:7e:fe:4e:2b:28:62:1f:39:f9: b3:66:42:b1:cb:ea:62:35:95:9f:f0:6f:d2:11:68:02:02:b5: 74:98:3b:be:24:22:20:f1:55:c4:a0:91:5e:2c:c3:ff:4b:51: 68:c6:23:49:e0:32:f6:cb:c4:6c:68:7c:09:83:b7:a5:1d:0b: cc:98:1e:8e:c3:3d:79:93:f9:49:85:33:22:99:15:7c:b2:45: 1b:8b:9c:0d:06:46:a0:18:e3:af:a1:d1:0b:0d:40:74:bc:16: df:55:67:9a:85:7f:7a:34:b3:3c:35:78:ae:2f:9b:ac:10:f8: ac:d0:7e:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdYELosBGitv10HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc5NDU0OGQtOTZhMy00ZjVjLTk0NTEtMjU3MWVkNGFj MDk3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDkyM2VlZGUtODNkZi00MTFlLTlkNWEtYjFmNmQyOGM3Y2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotf0auJa0W6ttK8PT75cZZQm7H1wUCNhmNFE ugWFsJMp0CIArn5lPD1sVuK8CO/t6VL/CV69tmBlCyan+Ab+MDGADDliqVDgOA4F /HLReBk8sHRJ3cAzWqGTnItZGC0B5dCFN4eqq7bVibAc8tgRSqiqcK90eiF9eEiP hy2bdzFuaSTFiEGqO5Tpty/g8XyYaxQlx6eD2stxrNSZDkiGOVuW1kJyI+EJFvL/ fkXOW+5F74NJk9BeOaGXTJrSC/rYmFWoCcyMMQtkwcJfjwePoAErBh54zXfltdiS sF3Qf1Y5lg95UspsgsdzrXieNLovJXTxxtqDSnpQp03W8J3VfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTIP/Km3i64M0ic+4F2zCCnOcbHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0 NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcxZWQ0YWMwOTcvMTlkNDQyN2ItOWJmMS0z OTU1LWE5MjktZGJlOWM1NDBmZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTc5NDU0OGQtOTZhMy00ZjVjLTk0 NTEtMjU3MWVkNGFjMDk3LzE3OTQ1NDhkLTk2YTMtNGY1Yy05NDUxLTI1NzFlZDRh YzA5Ny5jcmwwHwYDVR0jBBgwFoAUtAkdRy8mJuguRRg0dr4eeMtK0EUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcx ZWQ0YWMwOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhFLUH4ajVb32me1ELbi4Hh+J2kE9ScjIa3FKLrnFrFILiEXhVAjMNa 54rFC/vqgrtlPd5DA/706xcP0nCClekjzHNAb2UAglwMgM1yhLcleobH99RUbh1N gDWVdxAoHmWuTuRFDTjBMl2oTnD6XdNEhTYBF6XLJvR6YvVqNqpJ9W8cBUceFn7+ TisoYh85+bNmQrHL6mI1lZ/wb9IRaAICtXSYO74kIiDxVcSgkV4sw/9LUWjGI0ng MvbLxGxofAmDt6UdC8yYHo7DPXmT+UmFMyKZFXyyRRuLnA0GRqAY46+h0QsNQHS8 Ft9VZ5qFf3o0szw1eK4vm6wQ+KzQfoc= -----END CERTIFICATE-----Generated at Thu Oct 8 17:09:02 2026 by rpki-client