
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa
File: 19d4427b-9bf1-3955-a929-dbe9c540fd14.roa (raw, json)
Hash identifier: NZucJpGoylVZXJj20ZU+mtaeWOKHlY4IlRmDjGQO8Ck=
Subject key identifier: EB:85:5F:FE:1E:54:71:15:CC:62:85:6E:E3:A0:BC:F2:54:F5:9D:19
Certificate issuer: /CN=1794548d-96a3-4f5c-9451-2571ed4ac097
Certificate serial: 010D0C9F4328584B540C6739D316B0D7B8862540
Authority key identifier: B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa
Signing time: Sat 27 Sep 2025 01:00:33 +0000
ROA not before: Sat 27 Sep 2025 01:00:33 +0000
ROA not after: Fri 26 Dec 2025 02:00:33 +0000
asID: 7018
IP address blocks: 198.17.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:54:0c:67:39:d3:16:b0:d7:b8:86:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1794548d-96a3-4f5c-9451-2571ed4ac097
Validity
Not Before: Sep 27 01:00:33 2025 GMT
Not After : Dec 26 02:00:33 2025 GMT
Subject: CN=fa8db29e-4a65-40cd-ba5f-1faa4f00bf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:96:d2:3b:e8:0b:d8:7c:17:f9:3d:f3:31:8e:
4b:03:46:04:16:d9:1c:8f:1d:f0:d3:b0:3d:a4:8a:
db:5f:32:be:7c:d2:e7:03:6c:63:41:41:1b:c6:61:
7a:d9:47:09:b8:ce:6d:4b:3d:32:60:0d:9c:19:01:
cb:b0:85:71:14:80:12:1d:da:63:79:72:29:29:f4:
86:50:1b:f9:47:40:7f:eb:c2:e5:50:16:e3:dc:a3:
a2:66:2e:9a:d5:93:0d:12:3e:ab:6a:d1:35:dc:6f:
41:d5:78:66:bd:3a:47:db:7c:08:b0:5e:b1:92:f5:
61:5d:18:91:dc:5d:80:1a:8f:61:22:2e:7f:dc:9f:
b8:dc:7d:05:17:c6:12:65:a6:02:28:c9:70:e5:45:
75:63:9e:0a:0d:ea:79:c4:74:14:af:ae:7d:c2:2c:
2b:b3:5d:d2:87:75:fe:0e:aa:2a:41:88:c6:36:c9:
91:57:14:69:12:ad:95:0e:73:c3:a4:af:16:88:1e:
45:b1:3d:46:84:b5:88:8b:1d:51:ca:2d:b4:84:10:
66:58:ad:d4:fc:05:bb:03:d6:41:dc:b9:3a:7a:d5:
74:a9:4a:57:f7:ee:8a:5a:81:f7:f2:f6:43:8b:94:
f7:91:de:0c:f8:96:ec:55:2b:b2:bb:f0:4b:4a:6d:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:85:5F:FE:1E:54:71:15:CC:62:85:6E:E3:A0:BC:F2:54:F5:9D:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl
X509v3 Authority Key Identifier:
keyid:B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:20:b3:e0:1d:63:82:a2:e2:4d:13:66:29:f6:8b:f5:2e:a9:
5a:91:6d:57:e0:95:d5:60:1a:e2:85:90:b2:3a:9d:0c:4c:b9:
0f:7f:92:1c:8c:e3:62:bc:79:5d:64:c3:b1:de:d8:59:fc:09:
5d:c7:5a:5d:e0:7e:dc:fc:b7:62:fc:ad:84:7f:46:7c:20:db:
f5:d4:b6:42:f0:1a:ad:c7:0c:1f:76:7c:1e:ce:7e:32:ff:16:
19:13:5b:5d:69:df:36:36:3b:82:15:3f:ce:4c:d3:d9:63:2b:
1b:42:b6:2d:a1:d9:37:65:d2:22:5b:b3:31:5e:0c:ed:5a:f0:
8c:5a:12:68:49:9b:b4:d3:c7:64:59:5a:0c:e3:cc:c3:4b:5b:
a7:d0:79:64:a3:0a:0e:73:9a:15:1e:9d:ff:a9:5d:dd:ce:3f:
72:d3:a0:67:38:16:95:2f:05:a8:c3:8e:c1:16:d9:2b:6e:b5:
f1:20:86:0e:73:0f:68:81:2e:a9:26:1c:bd:cf:f6:a5:5c:27:
81:95:3d:33:8d:82:b5:50:c1:27:22:80:be:b4:7c:b0:0d:61:
b8:0e:eb:ea:a6:f5:42:50:e3:4a:69:22:e8:5b:b2:cd:67:30:
76:e5:d2:4a:6d:a2:8f:6a:b2:82:4c:fb:a5:d4:af:c2:24:36:
7c:51:50:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 04:36:13 2025 by rpki-client