$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/076c20c1-fa01-3b5b-a507-4795e33993c5.roa File: 076c20c1-fa01-3b5b-a507-4795e33993c5.roa (raw, json) Hash identifier: kjJ8eRHueq0iD+Wj5I261V5QYiSiI/gsUDU/nKp7I7c= Subject key identifier: 0C:8D:AA:5E:CA:3E:75:AA:64:C0:8C:8A:2D:50:3E:DB:60:A9:4E:B4 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584EF5B204CE067AD5459490A2A0 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/076c20c1-fa01-3b5b-a507-4795e33993c5.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 74.198.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:04:ce:06:7a:d5:45:94:90:a2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=cfbea7b5-f118-4f83-8f11-a9442af4a744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:54:36:50:3f:ad:01:85:4b:60:f0:b5:9d:5a: 15:4b:37:1e:66:1f:a1:e4:d6:31:6f:a1:89:e2:3e: de:a9:a1:2b:03:38:dd:2b:4a:5d:4d:5e:ff:a0:e6: ee:7b:96:c0:20:57:c7:8d:29:74:ec:a0:ea:dc:3a: 57:c9:e9:c9:c6:db:be:a9:0c:71:21:a2:7d:b9:7b: ee:d0:ba:e6:5a:57:43:0c:2f:a8:58:a1:56:b6:50: 49:7b:1a:b5:ef:43:0a:c2:56:f3:ec:96:6d:a6:86: 37:40:62:fa:12:82:a9:03:dd:cb:77:6e:ea:8f:07: 6e:df:9c:f6:fa:89:96:91:51:e1:74:6d:ef:6a:8d: 63:dc:ab:0c:c3:38:2e:31:d6:d3:bc:bc:4a:14:a2: d7:ab:29:a1:4d:1e:6d:18:a3:d1:39:2d:03:f8:f8: c5:4c:8a:f0:d8:fa:12:d3:e6:25:ce:e1:f7:2d:aa: 4b:66:e0:5a:06:1d:ce:af:9d:ea:2a:2f:35:14:d4: 4f:dc:02:54:c9:5f:a7:73:e9:de:a8:79:fe:3d:c6: 71:39:30:27:0b:1a:28:4e:82:06:5c:8b:d0:88:d4: cb:cb:e7:28:08:e5:58:ed:56:8e:84:c2:9c:01:e5: 95:74:b7:a0:ea:34:ef:89:ff:3e:1f:68:37:e2:90: 38:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8D:AA:5E:CA:3E:75:AA:64:C0:8C:8A:2D:50:3E:DB:60:A9:4E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/076c20c1-fa01-3b5b-a507-4795e33993c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:fe:06:1c:5b:27:72:a6:b1:98:54:74:5f:b6:01:85:5e:39: c5:55:fe:1a:22:27:53:a6:c4:76:f7:85:53:e5:f3:b2:d9:e4: f7:75:21:52:da:18:34:73:32:87:5d:f6:ef:63:1c:06:c0:98: 95:39:fb:9b:6d:3c:04:e9:76:df:5f:98:74:9f:2f:5e:d0:66: e0:57:9e:31:da:1a:c6:73:a7:36:ee:5b:66:04:ed:36:35:8e: 8f:cf:7e:86:ae:ca:1b:41:f2:6c:83:91:01:c9:13:71:43:fa: 53:e0:35:7c:94:df:d4:fd:c0:18:ea:cd:22:2a:05:b7:11:81: 28:28:db:3a:f7:6e:6f:df:8e:ee:77:9d:3d:c1:42:62:52:bd: ee:a5:d7:bc:52:9e:60:e3:00:27:6c:55:7c:b6:ba:cd:75:92: 21:f9:71:c7:15:03:5c:8d:cf:e1:36:f9:db:f4:bc:c2:74:8e: e4:d7:f1:90:ce:ad:a4:7a:00:2f:9a:ac:0c:91:f3:7f:1b:fc: 0d:94:95:a8:f0:af:94:8b:03:e7:26:3e:82:6f:23:81:16:d6: 0f:f5:5c:28:47:60:d5:61:26:f3:dc:a1:92:0a:e5:24:70:49: 6a:2f:0e:2a:b9:11:20:47:ce:bb:09:a8:f1:1a:62:ef:95:e4: 3a:d1:fb:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71sgTOBnrVRZSQoqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2ZiZWE3YjUtZjExOC00ZjgzLThmMTEtYTk0NDJhZjRhNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1Q2UD+tAYVLYPC1nVoVSzceZh+h5NYxb6GJ 4j7eqaErAzjdK0pdTV7/oObue5bAIFfHjSl07KDq3DpXyenJxtu+qQxxIaJ9uXvu 0LrmWldDDC+oWKFWtlBJexq170MKwlbz7JZtpoY3QGL6EoKpA93Ld27qjwdu35z2 +omWkVHhdG3vao1j3KsMwzguMdbTvLxKFKLXqymhTR5tGKPROS0D+PjFTIrw2PoS 0+YlzuH3LapLZuBaBh3Or53qKi81FNRP3AJUyV+nc+neqHn+PcZxOTAnCxooToIG XIvQiNTLy+coCOVY7VaOhMKcAeWVdLeg6jTvif8+H2g34pA4ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyNql7KPnWqZMCMii1QPttgqU60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMDc2YzIwYzEtZmEwMS0z YjViLWE1MDctNDc5NWUzMzk5M2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSsaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKX+BhxbJ3KmsZhUdF+2AYVeOcVV/hoiJ1OmxHb3hVPl87LZ5Pd1IVLa GDRzModd9u9jHAbAmJU5+5ttPATpdt9fmHSfL17QZuBXnjHaGsZzpzbuW2YE7TY1 jo/PfoauyhtB8myDkQHJE3FD+lPgNXyU39T9wBjqzSIqBbcRgSgo2zr3bm/fju53 nT3BQmJSve6l17xSnmDjACdsVXy2us11kiH5cccVA1yNz+E2+dv0vMJ0juTX8ZDO raR6AC+arAyR838b/A2Ulajwr5SLA+cmPoJvI4EW1g/1XChHYNVhJvPcoZIK5SRw SWovDiq5ESBHzrsJqPEaYu+V5DrR+9c= -----END CERTIFICATE-----Generated at Thu Sep 3 18:31:14 2026 by rpki-client