$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/37c61494-afdb-3cd9-ba1b-5807e3bc7588.roa File: 37c61494-afdb-3cd9-ba1b-5807e3bc7588.roa (raw, json) Hash identifier: n2Wch14cazvW86rfxhrtuY6Ks0Z2ZVFaNbSCsGGTgNM= Subject key identifier: B9:F1:C0:93:34:F5:A4:FF:45:C4:46:1D:FA:0F:6A:31:92:97:62:AC Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584EF2E77FE55C7F284F78A39D00 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/37c61494-afdb-3cd9-ba1b-5807e3bc7588.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 74.198.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:7f:e5:5c:7f:28:4f:78:a3:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=c6c4f2f5-e9b9-4cfb-b9c1-ae2d5e48dfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:09:2b:2d:03:ff:6b:63:eb:81:24:2f:09:50: 28:58:f0:76:49:ae:68:69:41:c2:2c:f5:d9:1b:88: ee:c8:20:5a:78:6d:6f:69:67:bd:50:f7:5d:71:2c: 0a:0c:1a:0e:59:6b:3b:ff:8a:53:1b:b7:c2:9b:9f: 65:2f:2b:10:65:4c:f3:57:95:e0:aa:94:38:5c:ff: 24:8f:b7:69:c4:fe:a8:89:ac:96:ec:35:46:c8:c2: a4:be:4a:b2:ef:32:11:93:38:c7:76:79:1e:86:0e: 4a:dc:a2:15:b3:d9:00:33:83:84:87:33:bb:2b:f5: ab:3d:b9:4e:1e:be:c5:90:79:56:da:cd:ae:69:f9: bc:d5:bb:a1:22:aa:1a:1d:52:c6:50:04:96:08:13: 6d:f0:64:2b:c1:79:65:bc:c7:78:3e:3f:5b:1b:6e: 95:d6:d1:88:ed:38:8c:e0:dc:2e:e9:9f:2e:0b:37: 2c:1c:77:b8:67:65:9b:32:1e:e3:45:b0:8f:d6:2e: 56:62:8f:c6:46:5a:a9:11:50:ce:c6:e2:58:db:ae: 43:cf:00:34:a2:4e:e5:ec:94:85:70:e4:64:ca:9f: 4c:54:e4:20:97:29:23:0b:ce:82:0d:d5:22:37:fe: 4c:64:29:7b:a2:a4:56:5c:07:c8:30:ad:9b:ef:77: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F1:C0:93:34:F5:A4:FF:45:C4:46:1D:FA:0F:6A:31:92:97:62:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/37c61494-afdb-3cd9-ba1b-5807e3bc7588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a4:09:fb:1f:e6:12:49:de:38:32:d7:2c:22:cf:47:b8:d9: fe:2b:d7:e3:91:d6:30:09:5a:20:b8:fd:b7:00:ab:93:97:93: 29:18:0f:e1:3d:04:42:06:cb:94:74:06:e5:b0:69:16:c1:2c: 67:68:07:04:0b:3c:21:4b:dc:95:58:db:c5:ec:5d:a3:03:79: ad:dd:20:38:2f:97:44:fe:5f:55:56:e2:c6:eb:44:fe:ed:c1: 6e:93:0b:ad:66:af:60:97:9b:9d:2f:82:07:45:b3:87:8c:84: 7d:b0:05:7e:4d:9d:85:79:20:45:83:64:0e:6e:ed:f8:61:65: 91:15:7f:66:98:ff:0c:fb:e3:99:c7:43:c4:56:2c:a8:68:f9: d3:63:42:2f:11:a7:48:06:32:42:ea:0e:26:db:54:d5:ec:f1: 5d:3a:d6:3f:62:f4:d3:24:50:94:3e:8c:55:2a:ae:41:96:60: 61:79:45:c8:40:fd:e3:6b:d9:7c:a3:30:74:7f:ec:29:16:d9: 9b:c0:b2:63:84:29:65:84:81:b0:74:ee:13:fb:17:7b:ae:44: 16:8c:11:50:12:9f:07:54:21:a5:46:4a:be:8e:05:af:6d:79: 48:6e:e5:2d:cf:5a:08:bb:6b:f1:b2:63:d3:8a:b0:47:18:12: 50:e3:81:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53/lXH8oT3ijnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk YzZjNGYyZjUtZTliOS00Y2ZiLWI5YzEtYWUyZDVlNDhkZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QkrLQP/a2PrgSQvCVAoWPB2Sa5oaUHCLPXZ G4juyCBaeG1vaWe9UPddcSwKDBoOWWs7/4pTG7fCm59lLysQZUzzV5XgqpQ4XP8k j7dpxP6oiayW7DVGyMKkvkqy7zIRkzjHdnkehg5K3KIVs9kAM4OEhzO7K/WrPblO Hr7FkHlW2s2uafm81buhIqoaHVLGUASWCBNt8GQrwXllvMd4Pj9bG26V1tGI7TiM 4Nwu6Z8uCzcsHHe4Z2WbMh7jRbCP1i5WYo/GRlqpEVDOxuJY265DzwA0ok7l7JSF cORkyp9MVOQglykjC86CDdUiN/5MZCl7oqRWXAfIMK2b73dkjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnxwJM09aT/RcRGHfoPajGSl2KsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMzdjNjE0OTQtYWZkYi0z Y2Q5LWJhMWItNTgwN2UzYmM3NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSsZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmkCfsf5hJJ3jgy1ywiz0e42f4r1+OR1jAJWiC4/bcAq5OXkykYD+E9 BEIGy5R0BuWwaRbBLGdoBwQLPCFL3JVY28XsXaMDea3dIDgvl0T+X1VW4sbrRP7t wW6TC61mr2CXm50vggdFs4eMhH2wBX5NnYV5IEWDZA5u7fhhZZEVf2aY/wz745nH Q8RWLKho+dNjQi8Rp0gGMkLqDibbVNXs8V061j9i9NMkUJQ+jFUqrkGWYGF5RchA /eNr2XyjMHR/7CkW2ZvAsmOEKWWEgbB07hP7F3uuRBaMEVASnwdUIaVGSr6OBa9t eUhu5S3PWgi7a/GyY9OKsEcYElDjgT4= -----END CERTIFICATE-----Generated at Thu Sep 3 19:22:41 2026 by rpki-client