$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/a5697730-7abd-3faa-b9ea-418533880990.roa File: a5697730-7abd-3faa-b9ea-418533880990.roa (raw, json) Hash identifier: hgD0Mgg3ByERPGBt4xp938RuLowcSrqUnT1kex3Sa/o= Subject key identifier: 01:D7:D6:DD:8F:63:A6:2F:F3:85:D9:2C:D9:C1:C5:C9:0C:44:C0:43 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584EF2E7576405094DDFCAFBDF7C Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/a5697730-7abd-3faa-b9ea-418533880990.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 74.198.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:57:64:05:09:4d:df:ca:fb:df:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=de9a1e7f-2f86-4979-be97-dbe3ce8e4c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:19:fd:53:88:79:0f:9e:72:18:f5:56:b1:4a: 4c:1a:1e:78:ba:1d:fc:5d:11:04:4f:05:a2:a8:da: 07:73:6d:e1:79:ff:4e:43:d3:8b:44:98:3b:c8:f3: dc:b5:02:33:dd:00:fe:ad:bd:a4:c1:04:bf:44:54: b1:e8:a2:a2:75:21:29:db:5c:a6:85:55:18:fb:9d: 44:23:ec:c4:af:fd:cf:ee:84:bd:88:e1:c5:a5:6d: 0c:dd:f3:af:7e:9c:64:82:40:19:60:81:00:15:77: 12:0f:33:8f:a0:45:0a:fb:38:f6:07:ba:dd:c3:ba: 18:58:76:5b:fb:05:5e:f1:2b:87:e8:ca:eb:4b:cc: bd:fd:5e:37:07:09:09:ed:8a:cb:f9:8c:38:b6:00: 3b:e9:7d:91:11:37:52:56:dc:e8:03:39:84:14:a7: 74:5e:f3:2f:90:03:6e:a1:41:e8:a0:e7:4d:4b:93: cd:10:78:3e:1b:31:6d:e1:cf:fa:d7:4c:37:13:51: bb:d7:33:33:52:18:0b:7c:86:61:03:fd:22:9e:29: d6:10:ff:9e:a2:08:c5:2a:4f:f7:5b:9c:c6:76:86: db:34:4c:8a:9c:0b:f4:3c:7a:00:85:d3:87:ff:a2: ef:73:7d:53:9d:03:a6:4a:a4:d3:c7:99:0d:2a:8c: b8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D7:D6:DD:8F:63:A6:2F:F3:85:D9:2C:D9:C1:C5:C9:0C:44:C0:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/a5697730-7abd-3faa-b9ea-418533880990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:19:43:e7:f8:06:16:1b:40:b6:bb:aa:0e:7a:b6:28:af:85: 5f:62:cb:fe:7e:4f:9f:4b:e1:1a:9e:9a:65:e7:4d:04:ee:54: 7c:b0:ad:62:a3:3c:25:39:0d:13:31:7f:7f:68:74:c4:e3:85: 53:d2:09:55:e1:60:4b:31:c6:a9:55:42:ee:d6:bb:3d:31:55: 25:b3:d7:8f:9e:33:89:37:25:a4:5d:09:98:06:06:2b:6c:e5: cb:98:1d:77:83:cb:83:06:f0:fa:c7:26:e4:69:5d:be:1f:68: 95:8d:57:cf:59:c9:e0:32:d6:4a:6f:eb:46:04:7d:9c:94:4a: 85:33:88:fb:78:82:47:16:0e:9c:0b:e7:a5:48:3a:26:2a:ea: 2b:53:87:28:37:2a:44:f5:76:87:e2:eb:5c:a5:72:40:5c:69: 47:69:ac:e6:53:06:f8:bf:06:37:cd:6a:52:52:d7:fa:e3:ed: 57:ff:56:ec:00:80:bf:6a:07:47:75:83:91:41:43:09:a4:74: e8:b3:f5:d9:9b:e0:42:6d:68:2a:1d:3a:27:c7:ca:f5:66:70: cc:d9:9d:90:90:b6:f9:c2:ab:24:c2:ac:40:32:64:f3:eb:48: 18:62:f9:11:17:db:55:e1:fa:14:6b:b3:ec:0b:2f:eb:ff:b4: 6f:f3:11:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y51dkBQlN38r733wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZGU5YTFlN2YtMmY4Ni00OTc5LWJlOTctZGJlM2NlOGU0YzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhn9U4h5D55yGPVWsUpMGh54uh38XREETwWi qNoHc23hef9OQ9OLRJg7yPPctQIz3QD+rb2kwQS/RFSx6KKidSEp21ymhVUY+51E I+zEr/3P7oS9iOHFpW0M3fOvfpxkgkAZYIEAFXcSDzOPoEUK+zj2B7rdw7oYWHZb +wVe8SuH6MrrS8y9/V43BwkJ7YrL+Yw4tgA76X2RETdSVtzoAzmEFKd0XvMvkANu oUHooOdNS5PNEHg+GzFt4c/610w3E1G71zMzUhgLfIZhA/0ininWEP+eogjFKk/3 W5zGdobbNEyKnAv0PHoAhdOH/6Lvc31TnQOmSqTTx5kNKoy45wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHX1t2PY6Yv84XZLNnBxckMRMBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvYTU2OTc3MzAtN2FiZC0z ZmFhLWI5ZWEtNDE4NTMzODgwOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASsZBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8ZQ+f4BhYbQLa7qg56tiivhV9iy/5+T59L4RqemmXnTQTuVHywrWKj PCU5DRMxf39odMTjhVPSCVXhYEsxxqlVQu7Wuz0xVSWz14+eM4k3JaRdCZgGBits 5cuYHXeDy4MG8PrHJuRpXb4faJWNV89ZyeAy1kpv60YEfZyUSoUziPt4gkcWDpwL 56VIOiYq6itThyg3KkT1dofi61ylckBcaUdprOZTBvi/BjfNalJS1/rj7Vf/VuwA gL9qB0d1g5FBQwmkdOiz9dmb4EJtaCodOifHyvVmcMzZnZCQtvnCqyTCrEAyZPPr SBhi+REX21Xh+hRrs+wLL+v/tG/zEfk= -----END CERTIFICATE-----Generated at Thu Sep 3 20:48:31 2026 by rpki-client