$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/33aad2a5-8536-3054-a0d9-bdce7d0b3de8.roa File: 33aad2a5-8536-3054-a0d9-bdce7d0b3de8.roa (raw, json) Hash identifier: dQ+ADMvOs0SDYqUuBS1LQzBJLmLGUmINZKn+QdCgK0s= Subject key identifier: B6:EA:A4:26:78:36:64:38:03:BE:4F:C6:F7:F1:E1:19:F8:3A:C0:2F Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584ECBD1E3A0C554D0F9CE0F5400 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/33aad2a5-8536-3054-a0d9-bdce7d0b3de8.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 812 IP address blocks: 74.198.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e3:a0:c5:54:d0:f9:ce:0f:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=0fa44247-ab32-457c-9f20-65f8d511951b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:78:29:f2:51:9a:0b:36:c1:d0:ea:b9:f5:71: 25:a2:cd:0b:f9:22:98:34:db:cc:92:2a:8d:63:76: 5f:53:23:fe:65:4d:d5:41:f3:a9:91:0d:55:5c:8c: a8:6f:b1:14:d3:82:e7:2c:21:9a:74:f0:37:73:37: 01:f3:1e:81:fe:86:ff:69:4d:ee:2a:b4:da:61:9a: ab:3d:07:14:26:6f:c4:38:2c:41:0a:c4:06:aa:8a: 59:16:fe:3a:f7:d0:84:25:32:c4:69:dd:ed:c5:e4: 2a:d7:ea:ba:9a:2a:92:d1:b7:e1:92:68:86:4d:53: 1b:20:6e:5d:6a:6b:be:d1:72:ad:05:4b:89:f4:6d: 3a:fd:96:31:86:36:37:60:99:0d:3e:23:d5:76:06: ac:99:b0:6e:49:24:4e:24:61:5c:da:d4:c5:e9:7e: 4e:ef:74:a5:29:78:1b:57:b9:bb:25:bd:7d:2f:b8: 57:b1:37:f8:52:a6:73:c5:ab:e2:c5:0b:2f:e0:3a: e8:79:42:ad:22:43:4a:e1:24:e3:0c:23:28:c9:51: 6f:e0:11:24:9d:00:a0:eb:a6:c2:13:41:76:66:74: 52:a6:f7:53:07:62:66:dd:42:91:2e:11:e4:a0:b3: e4:a6:f1:45:97:d6:92:30:78:cd:66:12:85:c1:ad: 36:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EA:A4:26:78:36:64:38:03:BE:4F:C6:F7:F1:E1:19:F8:3A:C0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/33aad2a5-8536-3054-a0d9-bdce7d0b3de8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:27:5e:6a:23:9f:aa:6f:0a:29:9c:95:e7:a6:bf:06:d6:18: 65:f5:9a:86:81:10:c2:59:b0:81:c6:60:89:29:2c:7a:97:24: 20:cd:ef:58:52:bf:6d:12:c0:6b:88:c4:81:c9:7c:52:40:47: 38:3b:87:d0:e8:5a:4a:5b:a8:00:36:86:0e:bd:24:4f:a0:ce: 8d:ec:96:83:e7:61:63:84:3e:39:c9:0a:c5:28:ac:7a:d3:99: f7:62:8c:43:4f:7d:a7:a6:7c:54:6d:3c:1b:c3:bf:44:e1:8a: 7c:1a:d4:64:8f:05:ec:e7:ba:0c:22:db:23:a1:83:c2:5e:b1: e6:84:4e:0b:20:a4:58:cb:45:50:b6:3d:92:4a:2a:39:2a:91: fe:fa:bc:3e:1d:42:8a:61:a4:fb:e1:e2:fe:37:01:c2:a0:1c: 76:2d:e1:c4:16:eb:20:9e:e2:54:af:72:17:c4:54:27:e9:a5: d4:78:82:1b:94:6b:c8:a8:dd:11:ab:46:9c:77:b6:e5:34:d8: 8b:14:f7:f2:f3:cf:f9:47:1e:a7:34:04:9e:a6:b8:ab:9d:a0: 71:4d:93:47:48:00:e0:d5:00:67:08:aa:d0:73:62:e4:6c:c0: 5a:53:be:1f:a9:7d:56:34:18:b4:81:bf:9f:c6:46:24:4f:ed: 01:bf:8b:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0eOgxVTQ+c4PVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk MGZhNDQyNDctYWIzMi00NTdjLTlmMjAtNjVmOGQ1MTE5NTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ngp8lGaCzbB0Oq59XElos0L+SKYNNvMkiqN Y3ZfUyP+ZU3VQfOpkQ1VXIyob7EU04LnLCGadPA3czcB8x6B/ob/aU3uKrTaYZqr PQcUJm/EOCxBCsQGqopZFv4699CEJTLEad3txeQq1+q6miqS0bfhkmiGTVMbIG5d amu+0XKtBUuJ9G06/ZYxhjY3YJkNPiPVdgasmbBuSSROJGFc2tTF6X5O73SlKXgb V7m7Jb19L7hXsTf4UqZzxavixQsv4DroeUKtIkNK4STjDCMoyVFv4BEknQCg66bC E0F2ZnRSpvdTB2Jm3UKRLhHkoLPkpvFFl9aSMHjNZhKFwa02MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbqpCZ4NmQ4A75Pxvfx4Rn4OsAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMzNhYWQyYTUtODUzNi0z MDU0LWEwZDktYmRjZTdkMGIzZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSsauMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcnXmojn6pvCimcleemvwbWGGX1moaBEMJZsIHGYIkpLHqXJCDN71hS v20SwGuIxIHJfFJARzg7h9DoWkpbqAA2hg69JE+gzo3sloPnYWOEPjnJCsUorHrT mfdijENPfaemfFRtPBvDv0Thinwa1GSPBeznugwi2yOhg8JeseaETgsgpFjLRVC2 PZJKKjkqkf76vD4dQophpPvh4v43AcKgHHYt4cQW6yCe4lSvchfEVCfppdR4ghuU a8io3RGrRpx3tuU02IsU9/Lzz/lHHqc0BJ6muKudoHFNk0dIAODVAGcIqtBzYuRs wFpTvh+pfVY0GLSBv5/GRiRP7QG/i38= -----END CERTIFICATE-----Generated at Thu Sep 3 20:06:53 2026 by rpki-client