$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/34d249c2-ff02-3617-9829-9253b682e85d.roa File: 34d249c2-ff02-3617-9829-9253b682e85d.roa (raw, json) Hash identifier: 1nsCeLZsZ/+yAvYQsbU0HeIYu80+AD2NUdb159zG9g4= Subject key identifier: 9E:EA:33:26:93:CD:52:6A:E9:7D:3D:E3:30:48:1A:95:C5:A7:C4:D7 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584E534F3950E5F64F8C6515B0C0 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/34d249c2-ff02-3617-9829-9253b682e85d.roa Signing time: Sun 28 Jun 2026 21:00:11 +0000 ROA not before: Sun 28 Jun 2026 21:00:11 +0000 ROA not after: Sat 26 Sep 2026 21:00:11 +0000 asID: 812 IP address blocks: 74.198.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:53:4f:39:50:e5:f6:4f:8c:65:15:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Jun 28 21:00:11 2026 GMT Not After : Sep 26 21:00:11 2026 GMT Subject: CN=7c92a550-2b5f-4aa4-a553-a82bdecc022d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:04:8c:55:be:83:6c:5b:58:64:be:a6:b2: ba:d7:78:2b:89:91:46:fc:41:8a:6a:0f:b3:d5:10: 5d:ae:d2:cf:f5:27:04:ea:61:18:51:bc:4d:f7:4a: 16:47:09:23:7f:11:e1:62:5d:23:16:5a:96:b8:41: e1:50:d3:1d:8a:fc:5a:cc:b1:f3:7c:eb:1b:90:d3: df:de:8c:9a:5f:3f:d9:f7:b1:15:68:6a:4b:0f:b1: d8:60:93:36:f3:0f:f6:3f:e8:15:53:64:ec:d3:1e: ba:3d:06:0a:93:08:8c:26:ab:77:6e:a4:55:fb:70: b1:73:16:b0:a4:b7:8a:b8:17:37:ff:d8:c5:20:8e: eb:39:55:f1:82:f3:17:30:08:6b:2a:c8:a0:0e:e8: 5b:85:aa:aa:b2:24:65:14:d3:74:2b:d4:de:48:18: 25:30:af:c5:0c:68:a6:82:29:3f:ea:1a:d4:34:2f: 41:40:fa:b8:d8:40:1f:75:f6:75:f1:51:78:07:61: a2:98:c4:3f:d2:ef:74:7d:3f:fa:c1:a2:cb:da:ae: 46:1a:a2:14:13:91:b0:27:d1:fb:d3:94:31:8b:31: 30:6b:14:8c:97:96:3a:7a:92:3e:20:18:d1:eb:3c: 61:6d:6c:3f:59:a8:a2:df:cb:4f:32:c3:34:93:e0: 77:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EA:33:26:93:CD:52:6A:E9:7D:3D:E3:30:48:1A:95:C5:A7:C4:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/34d249c2-ff02-3617-9829-9253b682e85d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:71:82:f5:09:9c:f5:e8:ae:02:02:4d:3a:d9:48:49:c5:05: de:39:c6:07:f5:4e:47:e4:62:12:23:8e:42:9a:30:a6:36:bb: 66:a1:eb:e5:8b:d2:2a:39:d9:ac:0b:2d:fa:92:6f:c2:00:42: 9f:3c:71:6e:55:ea:ec:6f:06:72:8d:f3:ac:eb:b2:70:0e:cf: 77:65:c4:a2:c5:ca:b3:26:96:8c:ae:ff:7e:b1:87:ed:4e:ec: 2b:90:c1:9a:25:51:d0:f9:ad:95:4e:0e:16:80:82:ba:eb:2e: ba:7a:f9:86:db:00:1b:f9:0a:45:e8:20:21:05:74:b2:88:ba: 1e:b9:a8:73:8c:0c:e7:cc:32:ea:c8:0a:10:21:2e:2d:26:6a: 68:03:d9:f8:a7:0f:72:a6:8f:7a:3c:2b:52:d7:e6:b0:d4:0e: 1e:8c:82:b7:8d:34:e7:64:2d:a7:ea:73:28:36:4b:a6:95:f3: d3:34:fd:68:17:6d:95:ed:10:d0:4f:eb:9f:fb:42:f3:ab:2b: 40:ba:ad:88:8c:04:6d:ff:07:74:54:4e:ac:3d:fa:a4:a8:3b: c4:66:e6:5b:5f:87:a1:fd:21:cb:c4:b1:4f:77:5f:2a:cd:e2: 65:1f:03:71:d7:27:8e:14:2b:de:2c:39:73:8b:2c:e5:ec:dd: e5:16:41:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5TTzlQ5fZPjGUVsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDYyODIxMDAxMVoXDTI2MDkyNjIxMDAxMVowLzEtMCsGA1UEAxMk N2M5MmE1NTAtMmI1Zi00YWE0LWE1NTMtYTgyYmRlY2MwMjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWUEjFW+g2xbWGS+prK613griZFG/EGKag+z 1RBdrtLP9ScE6mEYUbxN90oWRwkjfxHhYl0jFlqWuEHhUNMdivxazLHzfOsbkNPf 3oyaXz/Z97EVaGpLD7HYYJM28w/2P+gVU2Ts0x66PQYKkwiMJqt3bqRV+3Cxcxaw pLeKuBc3/9jFII7rOVXxgvMXMAhrKsigDuhbhaqqsiRlFNN0K9TeSBglMK/FDGim gik/6hrUNC9BQPq42EAfdfZ18VF4B2GimMQ/0u90fT/6waLL2q5GGqIUE5GwJ9H7 05QxizEwaxSMl5Y6epI+IBjR6zxhbWw/Waii38tPMsM0k+B3/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7qMyaTzVJq6X094zBIGpXFp8TXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMzRkMjQ5YzItZmYwMi0z NjE3LTk4MjktOTI1M2I2ODJlODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESsbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtxgvUJnPXorgICTTrZSEnFBd45xgf1TkfkYhIjjkKaMKY2u2ah6+WL 0io52awLLfqSb8IAQp88cW5V6uxvBnKN86zrsnAOz3dlxKLFyrMmloyu/36xh+1O 7CuQwZolUdD5rZVODhaAgrrrLrp6+YbbABv5CkXoICEFdLKIuh65qHOMDOfMMurI ChAhLi0mamgD2finD3Kmj3o8K1LX5rDUDh6MgreNNOdkLafqcyg2S6aV89M0/WgX bZXtENBP65/7QvOrK0C6rYiMBG3/B3RUTqw9+qSoO8Rm5ltfh6H9IcvEsU93XyrN 4mUfA3HXJ44UK94sOXOLLOXs3eUWQdI= -----END CERTIFICATE-----Generated at Sun Jul 19 15:02:47 2026 by rpki-client