$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/3b598b44-3c1f-351a-ac51-9ba3eed0c2c8.roa File: 3b598b44-3c1f-351a-ac51-9ba3eed0c2c8.roa (raw, json) Hash identifier: pjtJ1Z9iyUgPQ4fBULYnEHqxsW/UDIL+sH9kLl2mvPo= Subject key identifier: 72:3F:0C:9F:21:CF:A3:23:D0:E6:FA:67:5D:F8:94:75:B2:97:88:40 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584ECBD1E83A34981D16670A8300 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/3b598b44-3c1f-351a-ac51-9ba3eed0c2c8.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 812 IP address blocks: 74.198.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e8:3a:34:98:1d:16:67:0a:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=4928b39c-55c8-40f6-b608-696b107dfd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:af:3f:90:c5:50:57:d7:1d:6c:12:85:ae:3f: 22:54:77:83:b5:6f:95:6c:33:c8:7b:1f:30:3c:47: eb:e6:7a:47:fa:8b:ac:36:ae:60:49:9b:64:32:ed: e9:e3:eb:bb:27:43:3c:24:88:f0:44:2f:42:17:d3: f4:f4:5b:35:e8:1f:4d:df:ca:ab:ff:ce:79:13:29: bd:d2:2c:a0:97:5f:0a:92:80:f8:7b:53:ad:8a:5e: 35:4f:db:8e:ae:bd:b1:09:82:ed:93:85:a1:76:55: fb:50:81:4f:01:23:3b:c3:01:08:17:b9:02:ff:c5: ed:c0:c0:ca:d4:0c:77:50:92:3f:e9:bb:45:22:58: 57:49:cc:7d:fa:a8:e7:bd:be:70:8a:b0:eb:10:f3: ba:06:9f:3f:c8:02:22:b9:87:90:87:25:33:f3:20: 52:5b:d4:6a:40:47:54:fd:0d:7b:25:4e:cd:75:10: f6:2b:3c:06:d0:c6:b5:00:ab:91:94:03:79:05:d5: a9:1a:c6:50:8f:8b:43:1c:de:fb:16:f1:31:b3:e3: 69:18:72:25:82:79:30:63:b4:59:6e:b5:5a:27:f2: 56:f5:7c:84:e9:a3:d9:ab:d2:ad:59:d9:67:8c:dc: f0:06:7a:cf:eb:7a:90:48:06:49:43:af:9c:94:a9: 14:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3F:0C:9F:21:CF:A3:23:D0:E6:FA:67:5D:F8:94:75:B2:97:88:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/3b598b44-3c1f-351a-ac51-9ba3eed0c2c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:eb:0e:ec:17:14:13:f9:1a:6f:4c:8e:38:9b:86:8e:a2:4f: c9:9d:10:56:cc:60:eb:9d:a3:fb:b0:98:a9:e5:b5:ba:e5:5f: 75:99:ef:17:b5:bd:d8:f0:88:a9:98:83:d3:31:5b:a3:c5:d3: 26:86:69:66:2f:dc:8d:25:68:55:12:bf:8a:67:57:56:ba:ed: a8:83:8b:a8:24:40:42:9e:d0:f5:08:07:3e:ce:34:fd:7b:85: d3:ed:dd:07:4f:f1:50:44:97:5f:f9:cf:ae:75:57:ba:36:c4: 55:21:4b:85:c1:43:84:83:38:bf:f1:78:68:12:3c:8b:15:75: f2:ca:85:be:d2:3f:6e:e8:b7:66:9a:9e:4a:a2:be:88:0f:26: 2a:77:55:83:c4:31:c2:59:35:9f:86:9e:78:79:30:da:a0:99: f2:49:8f:de:b0:a1:bb:cd:8d:a4:60:c8:d7:4e:9c:0b:f6:2e: 10:20:95:16:eb:d3:66:a9:97:24:d0:fe:7b:64:90:dc:5d:88: 5a:d2:d1:65:81:ef:03:0a:da:36:7b:d7:b5:2a:31:1b:5e:ab: 0a:1d:89:64:00:ef:b9:fb:24:89:b3:97:40:c7:fb:86:7d:a9: cd:a1:ec:5d:33:2d:89:65:81:35:a4:e7:36:a7:a6:38:5c:72: 68:46:e2:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0eg6NJgdFmcKgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk NDkyOGIzOWMtNTVjOC00MGY2LWI2MDgtNjk2YjEwN2RmZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA468/kMVQV9cdbBKFrj8iVHeDtW+VbDPIex8w PEfr5npH+ousNq5gSZtkMu3p4+u7J0M8JIjwRC9CF9P09Fs16B9N38qr/855Eym9 0iygl18KkoD4e1Otil41T9uOrr2xCYLtk4WhdlX7UIFPASM7wwEIF7kC/8XtwMDK 1Ax3UJI/6btFIlhXScx9+qjnvb5wirDrEPO6Bp8/yAIiuYeQhyUz8yBSW9RqQEdU /Q17JU7NdRD2KzwG0Ma1AKuRlAN5BdWpGsZQj4tDHN77FvExs+NpGHIlgnkwY7RZ brVaJ/JW9XyE6aPZq9KtWdlnjNzwBnrP63qQSAZJQ6+clKkUQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHI/DJ8hz6Mj0Ob6Z134lHWyl4hAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvM2I1OThiNDQtM2MxZi0z NTFhLWFjNTEtOWJhM2VlZDBjMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSsZMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTrDuwXFBP5Gm9Mjjibho6iT8mdEFbMYOudo/uwmKnltbrlX3WZ7xe1 vdjwiKmYg9MxW6PF0yaGaWYv3I0laFUSv4pnV1a67aiDi6gkQEKe0PUIBz7ONP17 hdPt3QdP8VBEl1/5z651V7o2xFUhS4XBQ4SDOL/xeGgSPIsVdfLKhb7SP27ot2aa nkqivogPJip3VYPEMcJZNZ+Gnnh5MNqgmfJJj96wobvNjaRgyNdOnAv2LhAglRbr 02aplyTQ/ntkkNxdiFrS0WWB7wMK2jZ717UqMRteqwodiWQA77n7JImzl0DH+4Z9 qc2h7F0zLYllgTWk5zanpjhccmhG4k8= -----END CERTIFICATE-----Generated at Thu Sep 3 19:22:35 2026 by rpki-client