$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa File: 19d4427b-9bf1-3955-a929-dbe9c540fd14.roa (raw, json) Hash identifier: nN8dfEO4i+kpVCVinkL1eZlWcCwaGvN5SnH25Jla8DA= Subject key identifier: 89:5C:72:E6:5F:DC:2E:2D:B0:DF:BF:CE:6C:63:CC:54:31:2C:B7:B1 Certificate issuer: /CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Certificate serial: 010D0C9F4328584993F9DEE1CB4B478427493F98 Authority key identifier: B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 7018 IP address blocks: 198.17.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:de:e1:cb:4b:47:84:27:49:3f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=fe3d99ef-c791-4f89-8385-f10d317c80a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:26:5a:e1:f8:45:81:52:16:e4:35:c2:77: 02:1a:91:29:f3:64:74:1f:5f:7d:2d:cb:d4:bb:84: bf:75:39:b3:84:1c:63:f0:b4:93:f0:3c:8a:4f:27: 58:7b:bc:2d:bb:a1:e2:2b:11:ee:a8:13:88:3d:e7: 89:14:77:7e:a5:8d:67:89:66:04:c3:93:3f:17:2f: f2:11:26:68:fc:02:2a:7e:3c:77:3d:5d:00:ad:12: 71:f3:20:8c:22:03:63:3a:5d:05:a0:24:23:bd:0c: 24:0f:e2:54:1a:a4:88:10:08:e3:83:5a:7f:84:cd: 8f:f8:41:2b:cf:eb:b2:55:5c:8e:4a:2a:ae:53:45: 9b:e6:e6:72:2a:cc:f8:88:6a:31:40:c3:18:5a:98: ce:6e:dc:f0:58:95:03:72:3e:18:63:14:bf:c1:10: 67:c6:67:2a:40:0e:0c:11:65:08:b3:22:e2:97:3c: f7:7a:f5:9f:b9:97:76:e6:3e:3e:4e:c2:9a:17:aa: 0d:50:9a:18:12:0b:f8:e8:b9:51:e0:c1:94:91:c9: c3:7a:3d:f1:4a:1e:be:a4:fa:58:85:7d:f6:79:d8: 4e:1b:97:0e:a7:cc:98:80:76:df:0e:2c:5e:e1:1f: 69:e4:e7:34:a9:2c:2c:3c:4e:8e:ca:3a:21:31:73: 54:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5C:72:E6:5F:DC:2E:2D:B0:DF:BF:CE:6C:63:CC:54:31:2C:B7:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl X509v3 Authority Key Identifier: keyid:B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer sbgp-ipAddrBlock: critical IPv4: 198.17.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ac:f2:81:86:58:03:37:d1:b5:dc:54:6d:8d:33:94:4c:b7: 48:43:00:10:2a:85:23:15:6a:48:5b:86:09:99:51:ff:c2:ce: 2a:ba:ce:95:c7:08:80:40:cc:17:4d:90:c9:2f:a4:e6:73:d7: 42:43:51:ce:b8:ee:80:b9:ba:b8:87:11:1d:47:73:69:24:ea: 97:f4:52:a3:ab:45:04:35:2c:0e:7e:cf:b3:2e:90:3b:99:fd: 4c:1f:90:95:77:0f:77:93:c1:ac:11:f2:81:3c:eb:aa:d6:40: 79:c6:f1:47:43:33:a5:c1:47:5b:ac:e8:50:a7:ae:74:df:61: d4:8c:18:08:46:3e:68:5a:cf:d8:7f:36:63:0b:b0:bd:3d:32: 29:aa:b9:a4:5b:03:7c:0c:bf:c6:94:ec:5b:66:17:72:9a:14: c4:ef:73:a8:aa:67:4e:ea:30:c8:4c:0c:1e:c8:3e:90:8a:b9: cd:a2:ec:72:f4:f7:e7:7c:4d:fa:e6:97:68:67:a7:a4:6e:44: de:8a:de:50:78:c6:16:c9:b8:b6:e1:8a:9e:35:7b:42:b6:0b: 71:05:1a:cd:3b:74:4d:8a:08:9e:98:e9:ed:98:2e:29:c6:7a: a8:71:d6:73:92:9f:c3:66:7e:18:29:85:1f:e6:08:9f:09:8b: 14:83:58:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+d7hy0tHhCdJP5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc5NDU0OGQtOTZhMy00ZjVjLTk0NTEtMjU3MWVkNGFj MDk3MB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZmUzZDk5ZWYtYzc5MS00Zjg5LTgzODUtZjEwZDMxN2M4MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgUmWuH4RYFSFuQ1wncCGpEp82R0H199LcvU u4S/dTmzhBxj8LST8DyKTydYe7wtu6HiKxHuqBOIPeeJFHd+pY1niWYEw5M/Fy/y ESZo/AIqfjx3PV0ArRJx8yCMIgNjOl0FoCQjvQwkD+JUGqSIEAjjg1p/hM2P+EEr z+uyVVyOSiquU0Wb5uZyKsz4iGoxQMMYWpjObtzwWJUDcj4YYxS/wRBnxmcqQA4M EWUIsyLilzz3evWfuZd25j4+TsKaF6oNUJoYEgv46LlR4MGUkcnDej3xSh6+pPpY hX32edhOG5cOp8yYgHbfDixe4R9p5Oc0qSwsPE6OyjohMXNUGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlccuZf3C4tsN+/zmxjzFQxLLexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0 NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcxZWQ0YWMwOTcvMTlkNDQyN2ItOWJmMS0z OTU1LWE5MjktZGJlOWM1NDBmZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTc5NDU0OGQtOTZhMy00ZjVjLTk0 NTEtMjU3MWVkNGFjMDk3LzE3OTQ1NDhkLTk2YTMtNGY1Yy05NDUxLTI1NzFlZDRh YzA5Ny5jcmwwHwYDVR0jBBgwFoAUtAkdRy8mJuguRRg0dr4eeMtK0EUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcx ZWQ0YWMwOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSs8oGGWAM30bXcVG2NM5RMt0hDABAqhSMVakhbhgmZUf/Cziq6zpXH CIBAzBdNkMkvpOZz10JDUc647oC5uriHER1Hc2kk6pf0UqOrRQQ1LA5+z7MukDuZ /UwfkJV3D3eTwawR8oE866rWQHnG8UdDM6XBR1us6FCnrnTfYdSMGAhGPmhaz9h/ NmMLsL09MimquaRbA3wMv8aU7FtmF3KaFMTvc6iqZ07qMMhMDB7IPpCKuc2i7HL0 9+d8Tfrml2hnp6RuRN6K3lB4xhbJuLbhip41e0K2C3EFGs07dE2KCJ6Y6e2YLinG eqhx1nOSn8NmfhgphR/mCJ8JixSDWMk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:10 2025 by rpki-client