$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa File: 655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa (raw, json) Hash identifier: xhZpQBUetgGHVMVxYdFPrqTvlWQrmWwDJblkBNM16NI= Subject key identifier: 6F:BA:DB:E7:1B:56:F9:5E:A9:19:6C:08:D1:11:1E:49:C4:A0:5B:BE Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584EF2E785C412EE994863666400 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 74.198.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:85:c4:12:ee:99:48:63:66:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=ed23d4d4-7f4c-4f87-a88a-1d0b24c91047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:da:a8:87:8f:0e:54:ba:fd:01:97:6f:ed: 1c:77:2d:62:cb:a7:36:83:90:f0:48:4f:2d:83:55: 62:d9:64:ba:07:ef:00:ef:b4:5f:a4:2a:f7:0d:2b: 5f:5f:e1:87:3a:10:c0:69:1a:09:11:c1:d8:b4:18: 3f:54:65:7c:32:59:34:20:27:9b:51:bc:ec:9f:ca: 30:c6:23:f2:36:62:08:f2:23:65:45:dc:31:d3:0b: ad:53:a3:51:0c:cc:c2:20:42:8d:61:07:bc:60:fe: f5:60:87:97:f4:64:f1:ea:27:0d:80:62:d5:e0:c9: af:85:1f:20:db:ac:e6:b9:56:43:47:60:05:e3:58: a7:76:88:7b:97:26:44:c8:ea:50:e0:84:a7:4a:03: 42:f4:a1:28:f2:59:0e:37:f8:07:43:8f:dc:ea:4d: b6:ea:a3:de:bd:88:e7:3d:df:71:fc:19:0d:b0:53: a8:ab:63:3d:3c:60:5c:2b:7b:c1:41:94:40:9e:15: e0:a0:1b:b2:b0:c6:d3:7a:cc:4b:64:df:aa:60:13: b9:30:2f:ea:c3:fa:88:21:7d:d8:82:6c:ed:0c:5f: f1:ae:6d:79:de:ca:01:ae:63:1f:2a:21:07:6a:3e: ae:61:b5:99:76:e6:b3:0e:af:ed:91:0c:49:c2:a5: 3f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BA:DB:E7:1B:56:F9:5E:A9:19:6C:08:D1:11:1E:49:C4:A0:5B:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:dc:2c:6b:c8:4c:34:ca:dd:93:df:b8:c7:94:ec:92:d1:01: 58:36:d7:61:87:fc:28:91:0e:80:78:db:a6:95:e8:3f:60:c3: 6d:7e:17:02:fb:72:ca:e9:3a:30:ba:2b:15:58:63:88:8a:1b: 5f:b6:59:be:cc:a0:f5:e0:3c:28:15:00:20:a2:55:b0:51:e9: 70:22:3b:d0:38:df:45:8d:65:50:50:bf:04:54:fc:a3:da:88: 62:c8:e7:4a:71:7c:37:1d:ec:65:f2:d8:72:cf:17:fc:38:cc: a0:59:36:fb:6f:11:7b:c8:1e:f5:b6:9b:5f:6b:ca:c7:b3:79: ee:4c:18:33:32:d5:36:c8:85:6b:36:99:c6:6d:68:ca:26:95: 62:8d:ac:33:eb:ea:97:2b:b4:fa:14:58:18:4d:85:cd:29:49: 35:82:c0:60:0f:94:2b:c0:ec:a0:ab:80:43:9d:f3:e8:0c:ed: 70:3e:14:a9:96:b0:61:94:3d:bd:75:19:08:f2:9a:98:ad:55: 06:b0:92:f1:8f:ae:13:4f:96:4d:1d:db:d3:c2:4f:77:d9:46: e0:f1:d1:07:9f:6b:9f:65:b3:1b:a9:01:b7:8b:4f:4c:61:92: 44:54:65:5d:f6:11:39:c0:c9:54:e9:3a:29:12:aa:83:b3:b3: 18:b6:15:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y54XEEu6ZSGNmZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZWQyM2Q0ZDQtN2Y0Yy00Zjg3LWE4OGEtMWQwYjI0YzkxMDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSzaqIePDlS6/QGXb+0cdy1iy6c2g5DwSE8t g1Vi2WS6B+8A77RfpCr3DStfX+GHOhDAaRoJEcHYtBg/VGV8Mlk0ICebUbzsn8ow xiPyNmII8iNlRdwx0wutU6NRDMzCIEKNYQe8YP71YIeX9GTx6icNgGLV4MmvhR8g 26zmuVZDR2AF41indoh7lyZEyOpQ4ISnSgNC9KEo8lkON/gHQ4/c6k226qPevYjn Pd9x/BkNsFOoq2M9PGBcK3vBQZRAnhXgoBuysMbTesxLZN+qYBO5MC/qw/qIIX3Y gmztDF/xrm153soBrmMfKiEHaj6uYbWZduazDq/tkQxJwqU/WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+62+cbVvleqRlsCNERHknEoFu+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvNjU1YWY1ZWItOGYyOS0z ZWI4LThkODctMTM4YmZjMTE5NWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSsa6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArcLGvITDTK3ZPfuMeU7JLRAVg212GH/CiRDoB426aV6D9gw21+FwL7 csrpOjC6KxVYY4iKG1+2Wb7MoPXgPCgVACCiVbBR6XAiO9A430WNZVBQvwRU/KPa iGLI50pxfDcd7GXy2HLPF/w4zKBZNvtvEXvIHvW2m19rysezee5MGDMy1TbIhWs2 mcZtaMomlWKNrDPr6pcrtPoUWBhNhc0pSTWCwGAPlCvA7KCrgEOd8+gM7XA+FKmW sGGUPb11GQjympitVQawkvGPrhNPlk0d29PCT3fZRuDx0Qefa59lsxupAbeLT0xh kkRUZV32ETnAyVTpOikSqoOzsxi2Fcw= -----END CERTIFICATE-----Generated at Thu Sep 3 15:57:40 2026 by rpki-client