$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa File: 19d4427b-9bf1-3955-a929-dbe9c540fd14.roa (raw, json) Hash identifier: AikOPJGf0LNx92pRaxUGIVySZIkSaZrAWMUaiEy6dgw= Subject key identifier: 64:C0:A5:4B:FB:AE:FA:81:29:BC:92:AD:D4:D4:AA:22:D9:0F:2C:02 Certificate issuer: /CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Certificate serial: 010D0C9F4328584A73509AB2E233A2D7A57FF360 Authority key identifier: B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 7018 IP address blocks: 198.17.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:9a:b2:e2:33:a2:d7:a5:7f:f3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=699dfc5b-4347-415e-94ee-aa131df3dcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:68:ca:f2:72:42:15:fb:d1:39:d1:26:a8:fd: 69:d4:1f:3a:5c:93:91:b2:5f:65:9d:55:1c:44:97: e1:98:8d:e4:17:a6:c4:2b:52:b0:0b:bc:9a:cd:a2: fa:32:c4:21:ca:ed:68:d2:97:34:c8:40:ae:e2:5e: cf:ce:fc:63:36:8f:e9:23:02:29:6c:8e:39:94:2d: 86:61:7a:dd:a0:ec:fe:ce:ab:4d:b3:bd:8b:c8:a5: 73:93:a2:aa:76:e6:27:bc:f4:bb:b6:2f:1a:6b:0b: 7f:ec:7c:cc:57:cd:12:74:f4:ca:cb:77:78:a0:23: f0:ea:20:4d:ea:53:4c:f8:b8:22:96:fc:c7:ba:41: a7:4a:06:3e:f9:f3:6c:e3:6e:c3:83:91:19:36:ee: 15:d0:bb:06:42:56:44:4f:15:f1:05:65:70:0a:bb: c8:cd:0e:4d:19:39:e4:1e:70:e6:41:80:86:e0:3a: 57:ca:95:9c:d3:05:98:24:37:6c:77:a2:29:3e:14: 8d:21:d1:8c:46:a1:91:31:3b:54:b3:a6:e2:f9:3b: 8c:8f:a0:53:4f:12:38:c2:74:50:c8:e6:fb:2f:bb: c8:6e:66:d8:33:c0:5b:04:31:c0:ce:b2:03:da:64: 16:cb:38:97:2f:e9:5b:df:43:a7:7b:46:aa:41:35: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C0:A5:4B:FB:AE:FA:81:29:BC:92:AD:D4:D4:AA:22:D9:0F:2C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl X509v3 Authority Key Identifier: keyid:B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer sbgp-ipAddrBlock: critical IPv4: 198.17.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:80:6c:0f:84:a9:a8:cc:c5:ab:e6:e7:3d:ba:be:09:ac:b3: af:ab:b6:10:17:46:49:5b:50:e2:a8:91:f5:26:1e:98:c2:48: 70:e4:8a:45:ff:7c:29:bb:dd:3b:41:a7:95:11:ac:45:00:14: 9b:ac:0d:d6:8e:ec:4e:76:6a:6b:98:86:53:12:46:cd:cd:0f: a2:40:40:ae:b9:9d:88:09:b2:9a:6c:a1:8a:23:38:e0:ac:e2: f1:02:c9:a1:2a:0b:f9:2f:ae:9e:00:35:39:8c:d6:c7:2d:ee: e4:bb:1f:cb:a6:77:0a:73:d6:b6:35:31:ad:bf:2c:10:a3:81: c1:78:4a:34:2d:e9:00:e6:2e:46:ae:23:7a:d2:75:05:2b:b5: 84:86:45:8b:e2:fa:a7:27:30:e1:92:4b:01:0d:cd:c5:92:a4: da:83:9b:69:f2:27:e1:ec:ce:e5:a7:35:3c:a8:2a:87:40:17: 56:37:b8:79:05:53:81:32:12:e4:83:80:3b:4f:43:eb:5e:72: ad:16:ea:ac:01:4e:ed:65:b1:b8:4c:15:cf:9e:7f:fa:5d:58: 93:30:ab:ed:2b:bd:4c:34:10:5f:e8:91:57:35:be:5f:e4:cd: 5c:cc:51:bc:a1:80:0f:99:f2:8b:40:01:45:24:b6:38:fe:db: fb:c5:b1:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUJqy4jOi16V/82AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc5NDU0OGQtOTZhMy00ZjVjLTk0NTEtMjU3MWVkNGFj MDk3MB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk Njk5ZGZjNWItNDM0Ny00MTVlLTk0ZWUtYWExMzFkZjNkY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32jK8nJCFfvROdEmqP1p1B86XJORsl9lnVUc RJfhmI3kF6bEK1KwC7yazaL6MsQhyu1o0pc0yECu4l7PzvxjNo/pIwIpbI45lC2G YXrdoOz+zqtNs72LyKVzk6KqduYnvPS7ti8aawt/7HzMV80SdPTKy3d4oCPw6iBN 6lNM+LgilvzHukGnSgY++fNs427Dg5EZNu4V0LsGQlZETxXxBWVwCrvIzQ5NGTnk HnDmQYCG4DpXypWc0wWYJDdsd6IpPhSNIdGMRqGRMTtUs6bi+TuMj6BTTxI4wnRQ yOb7L7vIbmbYM8BbBDHAzrID2mQWyziXL+lb30One0aqQTW2zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTApUv7rvqBKbySrdTUqiLZDywCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0 NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcxZWQ0YWMwOTcvMTlkNDQyN2ItOWJmMS0z OTU1LWE5MjktZGJlOWM1NDBmZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTc5NDU0OGQtOTZhMy00ZjVjLTk0 NTEtMjU3MWVkNGFjMDk3LzE3OTQ1NDhkLTk2YTMtNGY1Yy05NDUxLTI1NzFlZDRh YzA5Ny5jcmwwHwYDVR0jBBgwFoAUtAkdRy8mJuguRRg0dr4eeMtK0EUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcx ZWQ0YWMwOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSAbA+EqajMxavm5z26vgmss6+rthAXRklbUOKokfUmHpjCSHDkikX/ fCm73TtBp5URrEUAFJusDdaO7E52amuYhlMSRs3ND6JAQK65nYgJsppsoYojOOCs 4vECyaEqC/kvrp4ANTmM1sct7uS7H8umdwpz1rY1Ma2/LBCjgcF4SjQt6QDmLkau I3rSdQUrtYSGRYvi+qcnMOGSSwENzcWSpNqDm2nyJ+HszuWnNTyoKodAF1Y3uHkF U4EyEuSDgDtPQ+tecq0W6qwBTu1lsbhMFc+ef/pdWJMwq+0rvUw0EF/okVc1vl/k zVzMUbyhgA+Z8otAAUUktjj+2/vFsds= -----END CERTIFICATE-----Generated at Sun Jul 20 16:23:40 2025 by rpki-client