$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa File: 19d4427b-9bf1-3955-a929-dbe9c540fd14.roa (raw, json) Hash identifier: NZucJpGoylVZXJj20ZU+mtaeWOKHlY4IlRmDjGQO8Ck= Subject key identifier: EB:85:5F:FE:1E:54:71:15:CC:62:85:6E:E3:A0:BC:F2:54:F5:9D:19 Certificate issuer: /CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Certificate serial: 010D0C9F4328584B540C6739D316B0D7B8862540 Authority key identifier: B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 7018 IP address blocks: 198.17.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:67:39:d3:16:b0:d7:b8:86:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=fa8db29e-4a65-40cd-ba5f-1faa4f00bf94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:96:d2:3b:e8:0b:d8:7c:17:f9:3d:f3:31:8e: 4b:03:46:04:16:d9:1c:8f:1d:f0:d3:b0:3d:a4:8a: db:5f:32:be:7c:d2:e7:03:6c:63:41:41:1b:c6:61: 7a:d9:47:09:b8:ce:6d:4b:3d:32:60:0d:9c:19:01: cb:b0:85:71:14:80:12:1d:da:63:79:72:29:29:f4: 86:50:1b:f9:47:40:7f:eb:c2:e5:50:16:e3:dc:a3: a2:66:2e:9a:d5:93:0d:12:3e:ab:6a:d1:35:dc:6f: 41:d5:78:66:bd:3a:47:db:7c:08:b0:5e:b1:92:f5: 61:5d:18:91:dc:5d:80:1a:8f:61:22:2e:7f:dc:9f: b8:dc:7d:05:17:c6:12:65:a6:02:28:c9:70:e5:45: 75:63:9e:0a:0d:ea:79:c4:74:14:af:ae:7d:c2:2c: 2b:b3:5d:d2:87:75:fe:0e:aa:2a:41:88:c6:36:c9: 91:57:14:69:12:ad:95:0e:73:c3:a4:af:16:88:1e: 45:b1:3d:46:84:b5:88:8b:1d:51:ca:2d:b4:84:10: 66:58:ad:d4:fc:05:bb:03:d6:41:dc:b9:3a:7a:d5: 74:a9:4a:57:f7:ee:8a:5a:81:f7:f2:f6:43:8b:94: f7:91:de:0c:f8:96:ec:55:2b:b2:bb:f0:4b:4a:6d: 81:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:85:5F:FE:1E:54:71:15:CC:62:85:6E:E3:A0:BC:F2:54:F5:9D:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl X509v3 Authority Key Identifier: keyid:B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer sbgp-ipAddrBlock: critical IPv4: 198.17.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:20:b3:e0:1d:63:82:a2:e2:4d:13:66:29:f6:8b:f5:2e:a9: 5a:91:6d:57:e0:95:d5:60:1a:e2:85:90:b2:3a:9d:0c:4c:b9: 0f:7f:92:1c:8c:e3:62:bc:79:5d:64:c3:b1:de:d8:59:fc:09: 5d:c7:5a:5d:e0:7e:dc:fc:b7:62:fc:ad:84:7f:46:7c:20:db: f5:d4:b6:42:f0:1a:ad:c7:0c:1f:76:7c:1e:ce:7e:32:ff:16: 19:13:5b:5d:69:df:36:36:3b:82:15:3f:ce:4c:d3:d9:63:2b: 1b:42:b6:2d:a1:d9:37:65:d2:22:5b:b3:31:5e:0c:ed:5a:f0: 8c:5a:12:68:49:9b:b4:d3:c7:64:59:5a:0c:e3:cc:c3:4b:5b: a7:d0:79:64:a3:0a:0e:73:9a:15:1e:9d:ff:a9:5d:dd:ce:3f: 72:d3:a0:67:38:16:95:2f:05:a8:c3:8e:c1:16:d9:2b:6e:b5: f1:20:86:0e:73:0f:68:81:2e:a9:26:1c:bd:cf:f6:a5:5c:27: 81:95:3d:33:8d:82:b5:50:c1:27:22:80:be:b4:7c:b0:0d:61: b8:0e:eb:ea:a6:f5:42:50:e3:4a:69:22:e8:5b:b2:cd:67:30: 76:e5:d2:4a:6d:a2:8f:6a:b2:82:4c:fb:a5:d4:af:c2:24:36: 7c:51:50:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGc50xaw17iGJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc5NDU0OGQtOTZhMy00ZjVjLTk0NTEtMjU3MWVkNGFj MDk3MB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmE4ZGIyOWUtNGE2NS00MGNkLWJhNWYtMWZhYTRmMDBiZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZbSO+gL2HwX+T3zMY5LA0YEFtkcjx3w07A9 pIrbXzK+fNLnA2xjQUEbxmF62UcJuM5tSz0yYA2cGQHLsIVxFIASHdpjeXIpKfSG UBv5R0B/68LlUBbj3KOiZi6a1ZMNEj6ratE13G9B1XhmvTpH23wIsF6xkvVhXRiR 3F2AGo9hIi5/3J+43H0FF8YSZaYCKMlw5UV1Y54KDep5xHQUr659wiwrs13Sh3X+ DqoqQYjGNsmRVxRpEq2VDnPDpK8WiB5FsT1GhLWIix1Ryi20hBBmWK3U/AW7A9ZB 3Lk6etV0qUpX9+6KWoH38vZDi5T3kd4M+JbsVSuyu/BLSm2BkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuFX/4eVHEVzGKFbuOgvPJU9Z0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0 NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcxZWQ0YWMwOTcvMTlkNDQyN2ItOWJmMS0z OTU1LWE5MjktZGJlOWM1NDBmZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTc5NDU0OGQtOTZhMy00ZjVjLTk0 NTEtMjU3MWVkNGFjMDk3LzE3OTQ1NDhkLTk2YTMtNGY1Yy05NDUxLTI1NzFlZDRh YzA5Ny5jcmwwHwYDVR0jBBgwFoAUtAkdRy8mJuguRRg0dr4eeMtK0EUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcx ZWQ0YWMwOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIgs+AdY4Ki4k0TZin2i/UuqVqRbVfgldVgGuKFkLI6nQxMuQ9/khyM 42K8eV1kw7He2Fn8CV3HWl3gftz8t2L8rYR/Rnwg2/XUtkLwGq3HDB92fB7OfjL/ FhkTW11p3zY2O4IVP85M09ljKxtCti2h2Tdl0iJbszFeDO1a8IxaEmhJm7TTx2RZ WgzjzMNLW6fQeWSjCg5zmhUenf+pXd3OP3LToGc4FpUvBajDjsEW2StutfEghg5z D2iBLqkmHL3P9qVcJ4GVPTONgrVQwScigL60fLANYbgO6+qm9UJQ40ppIuhbss1n MHbl0kptoo9qsoJM+6XUr8IkNnxRUBU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:52:04 2025 by rpki-client