$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/674da243-fbcb-3c77-a6f0-86e00d7c5707.roa File: 674da243-fbcb-3c77-a6f0-86e00d7c5707.roa (raw, json) Hash identifier: EWfiUgtbLpc3C5xQYKfShXPTQ0TwnbxkGLhic4Hzn2g= Subject key identifier: 1F:24:E3:A1:E7:40:C5:65:60:27:B3:18:D3:62:9C:6E:57:C8:CC:B2 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584EF5B20EBEAF3100155CB94D00 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/674da243-fbcb-3c77-a6f0-86e00d7c5707.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 74.198.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:0e:be:af:31:00:15:5c:b9:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=d9c071be-a7b0-4cd8-bff8-c63049261eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:b4:dc:94:a1:2d:ff:76:5b:3d:a0:d0:72: a0:a6:6c:0b:bd:09:dd:15:e1:ec:c8:2e:4a:f7:b0: ef:a7:68:97:d8:f8:5d:92:98:7c:bd:c1:12:ec:ac: 59:eb:9f:cd:77:8b:5e:31:bb:50:10:f3:88:c2:e3: 2c:42:76:64:40:d2:71:55:93:c3:f2:c0:81:4a:34: 82:c5:06:64:b7:93:00:84:ff:36:45:3f:d6:a0:02: 12:f8:92:6d:36:04:f1:d9:d2:36:5f:56:4c:40:1e: 11:7b:2f:c8:93:45:42:ab:57:e6:f0:5e:6a:d4:3b: 17:fe:2b:92:4f:ff:16:ec:87:67:b9:38:ac:a8:93: b1:60:c5:57:c0:f2:ae:e7:58:5f:bf:6a:4b:80:e7: b6:73:d4:f1:4f:7d:84:98:67:ca:7f:77:bc:7b:32: 32:72:1b:83:50:17:58:58:98:8c:c1:0a:52:ca:8a: b4:72:47:44:2a:a4:15:a0:18:d2:0d:ad:0c:cf:db: f1:7c:2b:19:b4:ae:79:bd:01:e8:7d:04:64:06:46: a5:c3:65:da:c6:c9:0c:df:55:99:0b:c0:f3:0b:2b: ef:c4:5d:75:e4:18:e6:84:d4:b0:8d:87:f6:57:e6: db:c5:35:1c:69:33:dc:15:37:33:e0:f5:8a:94:ae: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:24:E3:A1:E7:40:C5:65:60:27:B3:18:D3:62:9C:6E:57:C8:CC:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/674da243-fbcb-3c77-a6f0-86e00d7c5707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ce:6a:fc:87:71:87:55:1b:39:f3:3e:68:71:2b:4f:f3:29: 73:e2:b2:75:7c:be:01:4a:bc:e8:81:ca:4b:8d:39:92:aa:22: 49:a0:34:b8:63:e7:db:3c:6e:12:43:19:34:2f:07:94:2d:42: 8e:88:99:bd:ae:c5:64:37:f3:30:50:b2:84:13:60:78:14:7f: 4d:ea:e5:e7:7c:c3:73:18:84:37:50:54:a4:46:6f:bf:a2:6a: 6d:e2:34:47:8b:ce:81:99:72:21:0f:7b:bb:d1:57:ed:50:ea: 05:0b:53:e1:f1:88:fa:b7:0c:c8:16:c1:83:05:4c:f3:e2:98: c7:73:c7:2b:8f:fd:3c:56:80:7b:f2:d9:b2:f3:db:87:87:e0: db:a9:6e:68:fd:6e:b6:28:a8:e9:70:eb:46:e7:f4:4d:9a:55: a1:81:bf:43:d6:41:4e:f3:26:e6:82:56:d0:58:91:b4:40:12: 0f:26:35:86:49:11:c7:14:32:35:ad:4e:c3:09:11:81:57:4f: dd:bf:2b:a3:cb:91:90:b3:51:05:8b:51:12:16:de:14:6c:ec: e0:b3:b3:5d:dc:a5:24:ec:5c:ab:e9:d3:92:0e:ba:05:58:87: 1a:44:5c:89:ce:79:ee:29:ea:9b:70:ba:10:e7:11:a2:14:57: d4:1d:90:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71sg6+rzEAFVy5TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDljMDcxYmUtYTdiMC00Y2Q4LWJmZjgtYzYzMDQ5MjYxZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWi03JShLf92Wz2g0HKgpmwLvQndFeHsyC5K 97Dvp2iX2Phdkph8vcES7KxZ65/Nd4teMbtQEPOIwuMsQnZkQNJxVZPD8sCBSjSC xQZkt5MAhP82RT/WoAIS+JJtNgTx2dI2X1ZMQB4Rey/Ik0VCq1fm8F5q1DsX/iuS T/8W7IdnuTisqJOxYMVXwPKu51hfv2pLgOe2c9TxT32EmGfKf3e8ezIychuDUBdY WJiMwQpSyoq0ckdEKqQVoBjSDa0Mz9vxfCsZtK55vQHofQRkBkalw2XaxskM31WZ C8DzCyvvxF115BjmhNSwjYf2V+bbxTUcaTPcFTcz4PWKlK7/MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8k46HnQMVlYCezGNNinG5XyMyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvNjc0ZGEyNDMtZmJjYi0z Yzc3LWE2ZjAtODZlMDBkN2M1NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSsboMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITOavyHcYdVGznzPmhxK0/zKXPisnV8vgFKvOiBykuNOZKqIkmgNLhj 59s8bhJDGTQvB5QtQo6Imb2uxWQ38zBQsoQTYHgUf03q5ed8w3MYhDdQVKRGb7+i am3iNEeLzoGZciEPe7vRV+1Q6gULU+HxiPq3DMgWwYMFTPPimMdzxyuP/TxWgHvy 2bLz24eH4Nupbmj9brYoqOlw60bn9E2aVaGBv0PWQU7zJuaCVtBYkbRAEg8mNYZJ EccUMjWtTsMJEYFXT92/K6PLkZCzUQWLURIW3hRs7OCzs13cpSTsXKvp05IOugVY hxpEXInOee4p6ptwuhDnEaIUV9QdkIY= -----END CERTIFICATE-----Generated at Thu Sep 3 19:23:10 2026 by rpki-client