$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/69ebc0fa-7569-3cb9-85af-1ad04ed8e7f2.roa File: 69ebc0fa-7569-3cb9-85af-1ad04ed8e7f2.roa (raw, json) Hash identifier: tKOQXFnk0v4iqdMXs3JNcQp0tA1RmbQsPXTuATNM+NU= Subject key identifier: 2E:D5:D1:DD:8D:BB:BD:D9:E1:2E:A0:BC:83:5A:5F:06:7B:EF:C0:63 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584F03A847BC4A9E2702DD83E480 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/69ebc0fa-7569-3cb9-85af-1ad04ed8e7f2.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 74.198.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:47:bc:4a:9e:27:02:dd:83:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=9073dae8-cff9-4fb6-9040-6ac6e210a1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:8d:28:af:00:27:45:26:ea:83:93:ef:23: 34:ad:6a:94:5e:26:10:7b:a6:67:db:13:75:f4:6d: 16:c3:ac:7a:86:6b:39:bf:24:1f:62:fe:8f:9a:44: e4:2f:22:da:67:17:70:2b:64:d4:3f:46:09:40:bd: 5e:a6:74:40:f8:82:74:83:5c:e6:09:77:b6:ad:56: a8:6f:d6:9f:22:19:6e:f2:d3:1a:80:de:88:67:3c: 88:5e:65:6c:2b:ee:78:6e:8f:1a:4e:49:bc:39:0c: 07:5c:84:c0:40:e6:1c:ee:03:70:48:b3:41:2d:55: 54:51:79:5e:fa:3f:54:81:7d:7a:1f:af:a7:c5:74: c7:2e:88:05:5f:25:12:a8:06:87:ff:18:94:ab:a7: 3b:cd:a1:3f:73:ba:d1:20:ae:cb:e7:22:e2:75:bd: 58:2b:14:c0:09:98:6f:01:81:c8:d3:3c:9c:2c:d2: 54:43:84:94:a7:36:f2:a4:44:9a:8c:09:b8:3e:b0: 99:eb:1a:29:5f:80:24:f2:23:0d:d8:e0:1c:5b:09: 67:62:23:ac:8b:db:19:ca:f6:18:25:01:49:c8:e4: d2:89:5b:7a:2c:0e:98:9b:b7:f0:cd:45:d3:8b:93: 56:10:5b:e4:ba:6a:0e:c3:72:a9:ab:f5:ff:01:12: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D5:D1:DD:8D:BB:BD:D9:E1:2E:A0:BC:83:5A:5F:06:7B:EF:C0:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/69ebc0fa-7569-3cb9-85af-1ad04ed8e7f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:f2:5a:22:36:fc:65:59:b3:35:92:54:81:8a:24:3f:4d:a8: e2:2f:76:5b:8b:d9:5d:b9:10:e3:7d:d9:82:79:50:3a:e2:4e: c9:a4:9a:51:a3:8a:a3:89:57:13:20:89:9a:bb:0b:70:bf:47: 3d:ab:ca:1e:c6:9f:f7:b0:8f:5f:1c:03:61:c5:fc:36:d1:51: f8:c0:47:bb:57:23:4e:46:bf:3f:bd:53:85:9a:dd:19:16:bb: b7:80:96:4b:01:83:1d:88:2a:a7:74:da:a6:8a:3a:32:8f:86: 1d:ee:79:0c:99:94:b1:8d:ea:ef:b5:5a:0d:df:74:c0:6b:22: 6d:96:f4:f7:69:53:3b:7f:47:73:90:13:50:35:6e:58:39:98: d8:eb:cb:48:80:f8:b8:9a:de:35:6d:55:d0:83:19:20:b4:e1: 22:c7:da:86:8f:f2:66:44:c2:88:33:3a:80:54:d1:be:62:e5: fd:6d:23:d7:50:3f:64:21:6d:b5:8c:de:6e:b6:6f:d1:bb:69: 19:43:8d:6b:67:d2:db:72:38:5e:c5:b1:9c:d7:75:96:0b:16: 20:e7:26:62:d3:3c:8a:3b:6e:8d:0a:95:73:c9:bc:98:c5:3a: 8c:f6:5a:ab:48:eb:6c:20:d7:6b:48:04:99:99:60:5d:dd:6c: 82:ca:7b:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8DqEe8Sp4nAt2D5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk OTA3M2RhZTgtY2ZmOS00ZmI2LTkwNDAtNmFjNmUyMTBhMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWaNKK8AJ0Um6oOT7yM0rWqUXiYQe6Zn2xN1 9G0Ww6x6hms5vyQfYv6PmkTkLyLaZxdwK2TUP0YJQL1epnRA+IJ0g1zmCXe2rVao b9afIhlu8tMagN6IZzyIXmVsK+54bo8aTkm8OQwHXITAQOYc7gNwSLNBLVVUUXle +j9UgX16H6+nxXTHLogFXyUSqAaH/xiUq6c7zaE/c7rRIK7L5yLidb1YKxTACZhv AYHI0zycLNJUQ4SUpzbypESajAm4PrCZ6xopX4Ak8iMN2OAcWwlnYiOsi9sZyvYY JQFJyOTSiVt6LA6Ym7fwzUXTi5NWEFvkumoOw3Kpq/X/ARItSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7V0d2Nu73Z4S6gvINaXwZ778BjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvNjllYmMwZmEtNzU2OS0z Y2I5LTg1YWYtMWFkMDRlZDhlN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSsbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANXyWiI2/GVZszWSVIGKJD9NqOIvdluL2V25EON92YJ5UDriTsmkmlGj iqOJVxMgiZq7C3C/Rz2ryh7Gn/ewj18cA2HF/DbRUfjAR7tXI05Gvz+9U4Wa3RkW u7eAlksBgx2IKqd02qaKOjKPhh3ueQyZlLGN6u+1Wg3fdMBrIm2W9PdpUzt/R3OQ E1A1blg5mNjry0iA+Lia3jVtVdCDGSC04SLH2oaP8mZEwogzOoBU0b5i5f1tI9dQ P2QhbbWM3m62b9G7aRlDjWtn0ttyOF7FsZzXdZYLFiDnJmLTPIo7bo0KlXPJvJjF Ooz2WqtI62wg12tIBJmZYF3dbILKe0w= -----END CERTIFICATE-----Generated at Thu Sep 3 20:06:53 2026 by rpki-client