$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa File: 19d4427b-9bf1-3955-a929-dbe9c540fd14.roa (raw, json) Hash identifier: 99hQ0rWMuOmmlyDElhWsTAvhMlEhqf7+BJYXA+xFOSc= Subject key identifier: B1:C2:6F:15:36:E4:F1:C9:87:73:D1:47:EF:EE:1A:24:A0:ED:5C:82 Certificate issuer: /CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Certificate serial: 010D0C9F4328584D143D7EB82D8BC51C838D1C80 Authority key identifier: B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 7018 IP address blocks: 198.17.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:7e:b8:2d:8b:c5:1c:83:8d:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=ea402fd5-533c-406e-9ebb-0fb27208d2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:bc:af:18:f4:ff:0b:66:f7:41:f9:3a:63:70: b3:75:4b:42:e5:b5:b1:da:91:11:33:5a:9c:9a:aa: eb:2a:1b:6d:88:3e:be:21:0f:c1:ff:64:ce:f0:2b: 14:f2:0f:95:1b:e7:43:85:f7:c9:96:41:ad:18:38: e3:b3:86:cb:b8:3b:b1:14:17:65:59:ec:fa:1a:0c: 28:51:79:dd:66:c4:8a:d7:e3:1f:f6:65:51:28:cc: e5:c3:79:c1:f2:6d:a4:c8:35:15:37:ef:42:08:9e: 20:68:63:d7:30:c5:93:22:eb:e2:4c:02:c6:86:40: a7:47:63:49:d5:18:ae:91:fc:70:20:17:6c:ca:db: 75:d6:a0:69:55:f9:fc:f7:c6:00:23:e5:a8:ee:6d: d6:46:e7:ea:f0:36:2c:14:d1:27:b7:96:40:05:65: c4:c3:bc:12:6c:b1:4c:10:c3:87:7c:9f:f7:2b:24: b0:3f:eb:0c:b7:e9:52:e1:6d:3e:b7:57:c7:a7:97: 95:ad:cc:42:4e:c8:1c:4c:33:be:5f:b1:1a:80:f5: 66:e0:1f:0e:3d:73:43:6e:08:79:de:aa:e7:55:36: 7b:19:58:04:14:88:7d:b2:18:d7:21:f9:7c:3d:4e: 15:64:ab:94:b7:11:06:49:e7:0a:ab:f5:14:6e:50: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C2:6F:15:36:E4:F1:C9:87:73:D1:47:EF:EE:1A:24:A0:ED:5C:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl X509v3 Authority Key Identifier: keyid:B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer sbgp-ipAddrBlock: critical IPv4: 198.17.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3f:bd:25:b7:ec:d9:bf:a6:08:d6:07:d0:2f:8d:64:6f:c7: b4:63:2b:cb:aa:13:d3:7a:91:98:ce:21:72:a9:bd:02:75:62: d7:6f:08:86:e4:25:e3:4d:56:a4:cb:86:3c:1f:a7:a0:ed:b7: c9:63:d3:18:eb:ab:83:64:47:0c:be:80:6d:c1:fc:22:0e:4d: f7:c6:45:8d:1d:d5:2f:fa:fd:75:53:b1:f8:c3:e7:12:a7:43: 94:85:51:63:fa:24:a6:c4:a5:11:30:b9:2c:ea:14:c9:ea:c9: 86:fc:ad:de:19:c8:df:db:f9:78:4f:68:2d:ff:fe:fc:e7:a4: 0d:e8:d6:cc:1b:76:2c:48:1b:f1:b3:d1:30:11:42:38:3f:3f: 8f:94:2f:75:fb:2f:8d:cb:b8:d7:56:b5:5e:0a:9b:20:2a:44: d6:a9:5b:61:10:e0:cb:0a:39:cd:47:18:07:ab:42:3f:1b:eb: 54:bb:10:37:65:69:d9:a6:c8:05:ce:c4:72:1b:c4:db:5f:31: 2e:f8:7c:d1:8e:23:a0:5e:e7:6a:75:05:35:1a:8a:3b:46:aa: b7:d0:50:0c:8f:46:05:a0:b9:d1:36:32:4f:82:11:c0:01:cf: 99:bc:82:53:ba:5d:6c:45:4f:26:83:2b:11:ac:66:07:9d:a1: 75:dd:07:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPX64LYvFHIONHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc5NDU0OGQtOTZhMy00ZjVjLTk0NTEtMjU3MWVkNGFj MDk3MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZWE0MDJmZDUtNTMzYy00MDZlLTllYmItMGZiMjcyMDhkMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87yvGPT/C2b3Qfk6Y3CzdUtC5bWx2pERM1qc mqrrKhttiD6+IQ/B/2TO8CsU8g+VG+dDhffJlkGtGDjjs4bLuDuxFBdlWez6Ggwo UXndZsSK1+Mf9mVRKMzlw3nB8m2kyDUVN+9CCJ4gaGPXMMWTIuviTALGhkCnR2NJ 1RiukfxwIBdsytt11qBpVfn898YAI+Wo7m3WRufq8DYsFNEnt5ZABWXEw7wSbLFM EMOHfJ/3KySwP+sMt+lS4W0+t1fHp5eVrcxCTsgcTDO+X7EagPVm4B8OPXNDbgh5 3qrnVTZ7GVgEFIh9shjXIfl8PU4VZKuUtxEGSecKq/UUblBcgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHCbxU25PHJh3PRR+/uGiSg7VyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0 NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcxZWQ0YWMwOTcvMTlkNDQyN2ItOWJmMS0z OTU1LWE5MjktZGJlOWM1NDBmZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTc5NDU0OGQtOTZhMy00ZjVjLTk0 NTEtMjU3MWVkNGFjMDk3LzE3OTQ1NDhkLTk2YTMtNGY1Yy05NDUxLTI1NzFlZDRh YzA5Ny5jcmwwHwYDVR0jBBgwFoAUtAkdRy8mJuguRRg0dr4eeMtK0EUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcx ZWQ0YWMwOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg/vSW37Nm/pgjWB9AvjWRvx7RjK8uqE9N6kZjOIXKpvQJ1YtdvCIbk JeNNVqTLhjwfp6Dtt8lj0xjrq4NkRwy+gG3B/CIOTffGRY0d1S/6/XVTsfjD5xKn Q5SFUWP6JKbEpREwuSzqFMnqyYb8rd4ZyN/b+XhPaC3//vznpA3o1swbdixIG/Gz 0TARQjg/P4+UL3X7L43LuNdWtV4KmyAqRNapW2EQ4MsKOc1HGAerQj8b61S7EDdl admmyAXOxHIbxNtfMS74fNGOI6Be52p1BTUaijtGqrfQUAyPRgWgudE2Mk+CEcAB z5m8glO6XWxFTyaDKxGsZgedoXXdB58= -----END CERTIFICATE-----Generated at Wed Mar 25 21:30:49 2026 by rpki-client