$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa File: 655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa (raw, json) Hash identifier: 7O90v2J8caSah+94PZOBbJeJyDMWA/gINTS2bz18P9A= Subject key identifier: DF:3C:87:C8:5A:B6:C9:9B:C4:48:F9:E4:4A:9D:9F:B9:C4:FE:65:79 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584F94D3643633D322A162BE79C0 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 812 IP address blocks: 74.198.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:64:36:33:d3:22:a1:62:be:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=624b25c7-8ae9-4e1d-9362-8dbdeb450b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:48:de:27:06:a4:7f:31:24:4f:4b:ba:b7:30: 79:22:7c:c2:6e:b1:f8:f0:bd:4d:d4:03:1c:f7:87: 45:af:ec:95:70:05:b0:32:56:93:44:e7:76:8d:8c: 7a:26:e7:9a:25:8c:82:71:ab:08:a5:d4:37:4b:e9: de:a8:62:3c:f5:69:75:75:d9:6a:64:7e:e1:4c:0c: 69:db:6f:ff:5f:94:03:a9:d9:19:a3:cb:bd:b1:61: fb:69:44:94:1b:e5:bf:c1:6c:07:36:56:7a:1c:f7: a8:ac:b3:51:eb:51:18:4f:ba:b2:2c:db:eb:76:ce: be:80:8a:f6:5e:bd:b6:ce:af:d6:8c:03:7a:0e:41: ac:63:68:bd:7a:a4:fc:14:46:4d:a1:5c:d2:9b:41: 45:e1:48:c4:92:81:e8:02:87:6a:22:19:8f:3e:fe: 30:ff:54:ff:46:be:1d:f8:57:6c:2b:bd:87:95:61: 4b:36:75:2b:01:9d:da:ad:8e:4d:a6:9b:26:56:46: 7e:c0:d4:ca:a1:95:de:0c:87:b7:0c:b5:4f:84:99: e0:e4:9c:1c:e4:00:6d:9b:73:53:50:96:62:e8:a4: 2f:bf:b0:30:21:0f:a7:31:e0:eb:84:2e:b7:22:69: 77:49:68:83:fa:d4:b2:b4:e6:00:6a:0a:2f:f3:ec: d8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3C:87:C8:5A:B6:C9:9B:C4:48:F9:E4:4A:9D:9F:B9:C4:FE:65:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:30:b3:55:eb:99:b9:b7:4b:3f:03:12:ba:05:a8:64:26:bf: 13:bc:e5:91:21:5d:9c:13:60:e5:46:6d:f0:d1:cd:dc:0d:ec: 85:95:fa:b9:35:01:17:eb:17:5f:d2:67:64:3d:47:cf:0e:e7: 14:e2:64:b9:c8:a9:de:43:9e:ad:ce:8a:7f:ec:72:cf:c2:dd: 6d:a2:7f:4c:6f:be:b4:09:0d:fc:17:f1:c9:0e:4a:e4:61:68: 17:17:b4:8d:60:c7:6b:93:68:f9:cf:02:be:45:da:d8:58:fd: ee:50:8a:c3:1c:5c:2e:c4:4d:b5:c3:c1:1f:da:43:c3:53:9a: 65:1f:4e:9e:a2:9d:db:87:28:f0:fe:87:4c:f5:ab:13:4d:ee: 4b:3c:fb:66:18:d6:30:93:0b:d3:a8:55:ec:51:fc:1d:74:53: 06:b1:f3:a4:cf:9d:9e:00:dc:a3:19:69:76:cb:97:26:cb:a4: 4d:1d:7a:da:b9:e7:3c:04:5f:dc:8c:f3:38:9b:18:25:a8:b0: 78:d6:61:1b:af:0b:96:33:cb:b7:16:90:82:3a:54:0c:e7:33: 70:e5:9d:b9:16:c5:a1:8b:60:61:f5:c2:ee:b4:fd:dc:19:74: b7:0e:ab:fb:fb:e8:a7:67:c9:d0:aa:98:15:a9:08:58:cf:4c: d9:e7:26:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U02Q2M9MioWK+ecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NjI0YjI1YzctOGFlOS00ZTFkLTkzNjItOGRiZGViNDUwYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUjeJwakfzEkT0u6tzB5InzCbrH48L1N1AMc 94dFr+yVcAWwMlaTROd2jYx6JueaJYyCcasIpdQ3S+neqGI89Wl1ddlqZH7hTAxp 22//X5QDqdkZo8u9sWH7aUSUG+W/wWwHNlZ6HPeorLNR61EYT7qyLNvrds6+gIr2 Xr22zq/WjAN6DkGsY2i9eqT8FEZNoVzSm0FF4UjEkoHoAodqIhmPPv4w/1T/Rr4d +FdsK72HlWFLNnUrAZ3arY5NppsmVkZ+wNTKoZXeDIe3DLVPhJng5Jwc5ABtm3NT UJZi6KQvv7AwIQ+nMeDrhC63Iml3SWiD+tSytOYAagov8+zYHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN88h8hatsmbxEj55Eqdn7nE/mV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvNjU1YWY1ZWItOGYyOS0z ZWI4LThkODctMTM4YmZjMTE5NWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSsa6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAws1Xrmbm3Sz8DEroFqGQmvxO85ZEhXZwTYOVGbfDRzdwN7IWV+rk1 ARfrF1/SZ2Q9R88O5xTiZLnIqd5Dnq3Oin/scs/C3W2if0xvvrQJDfwX8ckOSuRh aBcXtI1gx2uTaPnPAr5F2thY/e5QisMcXC7ETbXDwR/aQ8NTmmUfTp6induHKPD+ h0z1qxNN7ks8+2YY1jCTC9OoVexR/B10Uwax86TPnZ4A3KMZaXbLlybLpE0detq5 5zwEX9yM8zibGCWosHjWYRuvC5Yzy7cWkII6VAznM3DlnbkWxaGLYGH1wu60/dwZ dLcOq/v76KdnydCqmBWpCFjPTNnnJm4= -----END CERTIFICATE-----Generated at Sat Oct 31 01:15:07 2026 by rpki-client