$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/1c66637c-2759-387a-8347-a896fc842be6.roa File: 1c66637c-2759-387a-8347-a896fc842be6.roa (raw, json) Hash identifier: F1sy6Yfr3T9egSKAwyQSZ5gklGfT+YswZ+uc6TXOLhY= Subject key identifier: 60:BF:9D:AA:56:A7:83:29:0E:71:F0:E4:4B:C4:3D:0F:39:8C:BF:12 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584ECBD1E612D9DBD535C5936600 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/1c66637c-2759-387a-8347-a896fc842be6.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 812 IP address blocks: 74.198.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e6:12:d9:db:d5:35:c5:93:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=393946d9-69f4-4768-877a-21c70c1a37be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:df:c0:e1:a8:de:ee:56:3c:ca:c4:e1:6e:d4: bc:fc:56:38:0c:00:3f:33:41:5a:9a:23:eb:c1:b4: e6:6e:1f:69:df:45:4f:05:29:64:4e:64:d5:43:36: 7c:1e:9a:d5:ae:dd:fd:d8:7e:d0:8e:b7:93:b4:39: a4:77:71:97:72:d7:41:ca:86:1d:30:6d:ce:a0:04: fe:3d:3e:d1:d0:1f:8e:f9:1a:79:b8:d7:93:79:03: fa:dc:c6:28:54:36:0e:12:3b:a2:fb:81:fa:22:74: b8:3c:a5:03:db:26:be:db:ad:8f:b9:42:47:9e:4e: 7a:ee:0d:6e:e3:e0:33:2f:3e:b2:45:bd:5e:9e:9e: 68:92:af:02:19:e4:2d:16:cf:bd:44:0c:11:44:13: 0a:53:57:1f:2e:00:1b:a9:30:1d:c5:bc:c9:db:2f: 99:bd:64:98:08:8c:15:0a:e0:0d:6d:be:58:93:27: 41:b9:5d:0f:67:6e:94:83:3b:6b:b2:fc:10:0f:33: ef:8a:3d:5c:10:d2:bf:8d:ea:d6:e0:69:23:49:06: 69:74:a2:74:27:ce:3d:b4:e4:bb:ad:5e:f4:9d:2a: a5:7b:0a:85:cb:f3:24:9f:ef:bb:67:99:93:e5:51: 35:e4:61:05:fd:0f:b7:8a:1e:7e:21:c5:0d:8d:4c: 8a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BF:9D:AA:56:A7:83:29:0E:71:F0:E4:4B:C4:3D:0F:39:8C:BF:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/1c66637c-2759-387a-8347-a896fc842be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:43:9a:48:00:5d:fe:9b:90:15:93:51:13:86:1a:b5:72:e9: 33:e5:ec:dd:12:5e:b4:ab:5b:d9:b2:56:e8:33:ba:eb:55:be: be:21:9c:d0:46:70:2a:50:b1:32:91:f8:d2:06:3f:b7:5c:28: 45:f2:23:e7:0e:93:ae:c6:28:be:ed:87:28:ae:e5:71:28:dc: cc:ca:d0:40:e7:66:0f:23:32:0e:a1:cc:7b:fc:dd:de:62:12: c0:f1:8b:ce:da:a9:96:74:f9:f0:0d:7f:67:be:c2:64:78:bb: dc:bb:4e:06:07:5e:a2:ab:fb:12:b0:6c:48:c9:c8:8c:67:f4: 89:4c:58:73:0e:9f:5f:67:30:64:d9:1d:db:16:24:81:46:8e: 37:19:6b:f8:62:14:e8:4b:9c:e8:cf:6d:d6:72:5f:cb:18:43: f7:b2:9f:e5:e8:d6:ae:7a:07:c2:81:74:9d:ab:c4:09:7b:ba: 0b:e6:f9:41:9a:99:f2:04:5b:5c:44:1d:2a:83:26:ce:ca:9b: 82:6f:e8:e3:19:7c:cc:b5:aa:26:1b:9e:ff:7e:49:9f:a5:d4: b6:32:21:c0:11:cd:dc:c1:f0:93:f4:28:10:46:58:7f:aa:3a: 84:f9:55:96:0b:fc:d4:e7:56:ed:41:79:51:85:fd:11:80:8b: 72:95:b4:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0eYS2dvVNcWTZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk MzkzOTQ2ZDktNjlmNC00NzY4LTg3N2EtMjFjNzBjMWEzN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7d/A4aje7lY8ysThbtS8/FY4DAA/M0FamiPr wbTmbh9p30VPBSlkTmTVQzZ8HprVrt392H7QjreTtDmkd3GXctdByoYdMG3OoAT+ PT7R0B+O+Rp5uNeTeQP63MYoVDYOEjui+4H6InS4PKUD2ya+262PuUJHnk567g1u 4+AzLz6yRb1enp5okq8CGeQtFs+9RAwRRBMKU1cfLgAbqTAdxbzJ2y+ZvWSYCIwV CuANbb5YkydBuV0PZ26UgztrsvwQDzPvij1cENK/jerW4GkjSQZpdKJ0J849tOS7 rV70nSqlewqFy/Mkn++7Z5mT5VE15GEF/Q+3ih5+IcUNjUyKrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC/napWp4MpDnHw5EvEPQ85jL8SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMWM2NjYzN2MtMjc1OS0z ODdhLTgzNDctYTg5NmZjODQyYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSsZcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNDmkgAXf6bkBWTUROGGrVy6TPl7N0SXrSrW9myVugzuutVvr4hnNBG cCpQsTKR+NIGP7dcKEXyI+cOk67GKL7thyiu5XEo3MzK0EDnZg8jMg6hzHv83d5i EsDxi87aqZZ0+fANf2e+wmR4u9y7TgYHXqKr+xKwbEjJyIxn9IlMWHMOn19nMGTZ HdsWJIFGjjcZa/hiFOhLnOjPbdZyX8sYQ/eyn+Xo1q56B8KBdJ2rxAl7ugvm+UGa mfIEW1xEHSqDJs7Km4Jv6OMZfMy1qiYbnv9+SZ+l1LYyIcARzdzB8JP0KBBGWH+q OoT5VZYL/NTnVu1BeVGF/RGAi3KVtBk= -----END CERTIFICATE-----Generated at Thu Sep 3 18:31:47 2026 by rpki-client