$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/7440a128-6a1d-39f5-bb92-7f4c14e4a082.roa File: 7440a128-6a1d-39f5-bb92-7f4c14e4a082.roa (raw, json) Hash identifier: syOjel0HbxBS0I5WRTm/RpokPlTKwuQa3IaOc/vQBdE= Subject key identifier: 79:1F:DE:6C:0F:D5:85:46:A2:F6:45:88:59:79:9C:79:5D:47:69:85 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584EF2E75690A3263DBCB5ABC400 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/7440a128-6a1d-39f5-bb92-7f4c14e4a082.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 74.198.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:56:90:a3:26:3d:bc:b5:ab:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=74a36192-585a-473b-9457-78aaabf11970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:5b:ee:f8:b7:76:d5:fd:67:12:8d:7d:70: a4:4a:af:5a:d4:b1:92:1f:60:40:79:f5:7c:31:54: 43:01:94:f0:70:57:66:82:65:0f:3b:d3:26:5a:84: cb:e9:b7:1d:6b:1f:76:45:70:0a:f0:90:c3:08:03: 66:e8:14:c8:fc:b8:22:af:44:3b:4e:61:77:1a:77: 7c:48:d3:67:f3:79:e5:eb:7c:9e:49:dd:7e:8d:61: 16:db:3d:25:43:1f:36:f1:86:e0:dd:92:8a:b7:76: 2d:a1:f6:cd:d2:c3:e2:34:c0:4e:18:05:5e:0c:b1: 05:72:56:87:06:01:43:e0:3a:d5:63:28:c1:19:73: 16:9e:88:16:c0:34:dc:c9:4b:7b:e6:39:cc:5e:00: 3f:26:48:49:41:62:19:4a:52:2b:8e:0b:28:6b:91: e7:11:1a:1c:e8:fd:02:5f:bf:13:85:34:6a:8f:3a: 5b:77:44:2e:d4:5c:66:b5:3a:bc:18:16:44:25:de: 6e:80:7f:66:b7:fc:c6:5a:1c:30:38:c4:dc:71:a6: 6b:aa:e9:1d:98:4d:e4:6b:1c:e6:7b:d3:75:ae:e2: 5d:c1:ed:f5:51:08:a6:f4:4f:2f:84:a9:bb:5d:ed: 85:9c:1a:4f:8b:c5:d5:42:e9:79:84:e8:35:cc:84: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1F:DE:6C:0F:D5:85:46:A2:F6:45:88:59:79:9C:79:5D:47:69:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/7440a128-6a1d-39f5-bb92-7f4c14e4a082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a1:6a:ac:24:bd:f9:a3:49:05:e0:8a:ce:e1:ae:87:92:1d: 08:9e:f3:97:c9:df:32:90:e5:19:cc:08:ad:e5:4d:05:bd:83: 01:43:29:3a:d3:a7:f4:a8:90:fd:bd:36:d0:07:6a:f0:fe:55: 74:c0:77:79:92:d5:b1:46:24:d3:de:6c:1f:8b:13:d4:fb:ad: 9b:d7:f9:65:53:18:ac:70:d0:f2:04:5a:74:2d:4e:aa:a1:47: 64:71:ca:b5:b8:34:ca:0b:86:10:e8:d3:75:e5:f0:8c:8b:ec: be:f9:35:2e:25:4f:16:2f:06:17:84:82:90:14:83:4e:aa:85: f9:4b:79:65:03:1d:fa:ef:c9:4e:75:7e:2a:9c:ba:1b:e4:68: cb:9b:62:ba:c7:e5:6c:4f:dd:f1:e3:0b:6e:bf:4e:ed:da:68: a9:c9:a1:4f:c4:94:fb:99:1c:a8:b5:bd:79:69:e7:fb:28:6f: d4:0c:db:52:69:6b:eb:ed:7c:a5:59:e4:db:39:5c:91:a6:13: bc:d7:db:13:1a:c7:be:4f:62:cf:ea:f0:6b:30:f9:08:be:25: 92:d8:80:51:bc:5c:d0:8b:07:6d:44:19:00:48:38:bc:df:2a: 32:8b:3c:48:18:e5:44:e4:24:79:7a:2b:71:b3:72:5a:9d:8b: 07:78:2f:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y51aQoyY9vLWrxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NzRhMzYxOTItNTg1YS00NzNiLTk0NTctNzhhYWFiZjExOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqztb7vi3dtX9ZxKNfXCkSq9a1LGSH2BAefV8 MVRDAZTwcFdmgmUPO9MmWoTL6bcdax92RXAK8JDDCANm6BTI/Lgir0Q7TmF3Gnd8 SNNn83nl63yeSd1+jWEW2z0lQx828Ybg3ZKKt3YtofbN0sPiNMBOGAVeDLEFclaH BgFD4DrVYyjBGXMWnogWwDTcyUt75jnMXgA/JkhJQWIZSlIrjgsoa5HnERoc6P0C X78ThTRqjzpbd0Qu1FxmtTq8GBZEJd5ugH9mt/zGWhwwOMTccaZrqukdmE3kaxzm e9N1ruJdwe31UQim9E8vhKm7Xe2FnBpPi8XVQul5hOg1zISC1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkf3mwP1YVGovZFiFl5nHldR2mFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvNzQ0MGExMjgtNmExZC0z OWY1LWJiOTItN2Y0YzE0ZTRhMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASsa5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuhaqwkvfmjSQXgis7hroeSHQie85fJ3zKQ5RnMCK3lTQW9gwFDKTrT p/SokP29NtAHavD+VXTAd3mS1bFGJNPebB+LE9T7rZvX+WVTGKxw0PIEWnQtTqqh R2RxyrW4NMoLhhDo03Xl8IyL7L75NS4lTxYvBheEgpAUg06qhflLeWUDHfrvyU51 fiqcuhvkaMubYrrH5WxP3fHjC26/Tu3aaKnJoU/ElPuZHKi1vXlp5/sob9QM21Jp a+vtfKVZ5Ns5XJGmE7zX2xMax75PYs/q8Gsw+Qi+JZLYgFG8XNCLB21EGQBIOLzf KjKLPEgY5UTkJHl6K3Gzclqdiwd4Lzc= -----END CERTIFICATE-----Generated at Thu Sep 3 19:22:35 2026 by rpki-client