$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/89c1a27c-4785-3e9c-9da2-88ec327f90d6.roa File: 89c1a27c-4785-3e9c-9da2-88ec327f90d6.roa (raw, json) Hash identifier: +W9daqrDUuIcfIDEufQilfI0Qnu71dLNU6DAjCo6L7A= Subject key identifier: 9E:FB:F1:76:51:90:63:A8:F3:0F:79:55:17:F6:DE:5E:45:40:E4:51 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584ECBD1EDBEE812FC9D14E04C00 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/89c1a27c-4785-3e9c-9da2-88ec327f90d6.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 812 IP address blocks: 74.198.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:ed:be:e8:12:fc:9d:14:e0:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=2c7078ff-4ec4-4f86-a3d9-7c27d56ca476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9a:34:93:5a:98:eb:a4:7b:00:f6:85:6b:52: 4f:01:4d:fd:fd:62:d4:36:bf:93:e7:a5:fc:f4:85: 6c:f0:a2:c6:8b:82:97:a0:5f:b0:a5:a0:b9:fc:f2: d7:97:c7:85:68:57:9b:21:1c:74:0a:91:11:4b:8d: 01:15:59:12:25:cc:04:8c:68:6d:81:a3:ef:84:99: 5d:af:9c:b5:5c:63:2a:0b:4d:f0:8b:37:9e:b4:36: ae:db:e7:bf:73:c7:d5:d0:f1:fe:d5:26:71:42:69: 8a:fa:7c:a0:49:98:26:7c:fc:eb:90:e3:48:f2:a2: ea:3f:36:20:89:6e:90:95:94:0c:23:c1:9d:c6:da: ee:a1:1b:2a:cf:85:80:7c:e8:22:51:58:14:0c:d2: 1b:31:75:b4:f9:d2:60:d8:01:65:34:3e:3a:3a:0c: 5d:6e:a8:de:51:45:ff:1b:4b:e2:5c:31:eb:78:d1: 94:ad:90:32:d3:ab:bb:4e:39:60:6f:f9:0a:1d:69: 35:79:7d:bf:ec:a7:e5:71:d9:66:77:c2:cf:05:a6: 29:bb:91:cb:50:68:a2:77:35:ce:77:58:a0:ab:61: 60:51:49:f9:af:81:21:e4:3d:66:2b:ee:a0:d1:f9: 2b:ec:67:8c:c3:3b:94:e9:9b:51:ee:7d:34:13:4b: a4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FB:F1:76:51:90:63:A8:F3:0F:79:55:17:F6:DE:5E:45:40:E4:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/89c1a27c-4785-3e9c-9da2-88ec327f90d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f5:aa:6c:e3:14:c6:9a:58:2f:2b:0d:d0:73:05:c0:b0:24: 44:ec:d1:f8:37:f2:b1:e2:db:89:5c:14:df:38:f6:ad:3d:32: 34:53:75:55:a0:7d:fc:0e:c1:89:3f:8c:c2:fe:ff:21:95:03: da:a1:18:00:6d:a2:f0:89:77:42:a3:b5:dd:b8:88:c3:db:28: 3d:c0:f8:0c:70:93:17:5a:00:cb:74:14:e2:10:5f:d4:cf:00: 11:44:09:03:28:96:46:21:80:26:37:90:60:27:5b:e1:78:c4: 92:20:d8:ab:43:ba:9b:99:16:13:ab:e8:b9:30:72:97:a1:17: 23:d4:7f:d8:42:af:ce:5d:4e:23:a2:82:85:7a:79:3f:2f:a6: 64:43:b6:b7:3d:12:5d:9e:cf:b9:a7:be:3a:40:a7:fb:dc:50: c2:fe:e9:ce:df:a5:9c:05:cf:4c:97:a1:8a:bb:66:a7:33:95: d5:10:f0:7a:76:d2:f7:c7:39:79:10:78:2d:f0:7c:89:dc:0e: d8:f2:95:31:4b:7e:ef:b6:48:c4:37:b8:22:61:2f:2c:dd:03: 8b:0b:08:9d:47:8d:b9:b5:b7:e3:3d:6e:1b:da:c4:32:b4:65: a2:58:01:81:93:4b:3c:0d:1f:50:b2:1b:6e:21:1f:07:f9:a0: d1:cf:9c:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0e2+6BL8nRTgTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk MmM3MDc4ZmYtNGVjNC00Zjg2LWEzZDktN2MyN2Q1NmNhNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZo0k1qY66R7APaFa1JPAU39/WLUNr+T56X8 9IVs8KLGi4KXoF+wpaC5/PLXl8eFaFebIRx0CpERS40BFVkSJcwEjGhtgaPvhJld r5y1XGMqC03wizeetDau2+e/c8fV0PH+1SZxQmmK+nygSZgmfPzrkONI8qLqPzYg iW6QlZQMI8GdxtruoRsqz4WAfOgiUVgUDNIbMXW0+dJg2AFlND46OgxdbqjeUUX/ G0viXDHreNGUrZAy06u7Tjlgb/kKHWk1eX2/7Kflcdlmd8LPBaYpu5HLUGiidzXO d1igq2FgUUn5r4Eh5D1mK+6g0fkr7GeMwzuU6ZtR7n00E0uknQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ778XZRkGOo8w95VRf23l5FQORRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvODljMWEyN2MtNDc4NS0z ZTljLTlkYTItODhlYzMyN2Y5MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASsZaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD1qmzjFMaaWC8rDdBzBcCwJETs0fg38rHi24lcFN849q09MjRTdVWg ffwOwYk/jML+/yGVA9qhGABtovCJd0Kjtd24iMPbKD3A+AxwkxdaAMt0FOIQX9TP ABFECQMolkYhgCY3kGAnW+F4xJIg2KtDupuZFhOr6LkwcpehFyPUf9hCr85dTiOi goV6eT8vpmRDtrc9El2ez7mnvjpAp/vcUML+6c7fpZwFz0yXoYq7ZqczldUQ8Hp2 0vfHOXkQeC3wfIncDtjylTFLfu+2SMQ3uCJhLyzdA4sLCJ1Hjbm1t+M9bhvaxDK0 ZaJYAYGTSzwNH1CyG24hHwf5oNHPnCY= -----END CERTIFICATE-----Generated at Thu Sep 3 19:22:41 2026 by rpki-client