$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/a98f2dd1-82ec-3117-b5bd-75f7328d237c.roa File: a98f2dd1-82ec-3117-b5bd-75f7328d237c.roa (raw, json) Hash identifier: q14niESNImrT+HGmlWDzKGVnr5zOhwnao11phRWG7mU= Subject key identifier: C2:00:24:4B:01:D3:43:AA:CA:F6:4E:04:59:41:61:A1:D6:EE:A4:54 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584ECBD1CAF7FED186D9A12A3E80 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/a98f2dd1-82ec-3117-b5bd-75f7328d237c.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 812 IP address blocks: 74.198.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:ca:f7:fe:d1:86:d9:a1:2a:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=874a827c-5e5a-4822-a95e-2464fba3e9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fd:5c:fa:5c:7f:bc:80:99:9c:50:37:d7:29: f1:19:21:8a:3b:11:3e:62:84:9b:2c:99:aa:55:31: 79:95:45:1f:28:9c:05:7d:c8:86:58:5d:da:07:6f: b6:49:f2:ae:94:30:d9:46:fd:5a:85:c2:17:c5:a1: f9:a1:60:e3:a2:92:70:76:d6:4b:33:45:aa:d3:94: f2:d1:79:7f:de:0e:bc:95:2a:cd:e4:4d:52:bf:78: 40:ae:c5:e4:6b:5f:8b:de:25:44:85:9f:55:7f:b1: e7:a7:c4:f3:cf:7f:1d:85:59:9f:8e:ed:86:e3:ca: b4:fe:6f:70:54:b5:ab:9a:9a:a4:4a:98:7a:2b:e7: b9:15:df:5e:6b:f9:75:81:5a:1b:00:85:3f:49:3b: ea:02:51:79:6a:10:76:00:07:c9:d5:8c:a3:b8:43: c6:a2:bb:8f:49:c7:28:23:ef:9f:96:f8:0c:8d:fd: 38:a6:8b:77:e7:80:c6:6e:77:f2:96:66:6b:ff:fd: b0:e5:91:5a:f6:43:06:8a:2d:30:68:fc:1e:57:c2: 09:a2:c1:da:cb:07:d4:1d:58:e1:4b:30:02:ef:35: 61:4c:57:41:c3:0e:79:5d:a0:e6:69:1e:79:18:ee: de:c1:86:88:8a:6f:3b:37:ef:dc:f5:ed:a9:da:4d: 6c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:00:24:4B:01:D3:43:AA:CA:F6:4E:04:59:41:61:A1:D6:EE:A4:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/a98f2dd1-82ec-3117-b5bd-75f7328d237c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b7:4f:9f:45:a4:7f:ab:a8:61:80:73:fa:82:68:5e:06:4d: 6e:36:5e:f6:1d:88:35:b4:dc:9f:ca:c8:ff:a1:58:ad:8e:20: c0:0b:01:05:6c:30:ec:d6:58:64:68:49:41:74:a0:fc:f9:af: 5b:16:3a:33:c3:0c:f5:1d:97:bb:36:02:c2:35:bd:fe:e1:42: 6f:e8:95:93:c1:79:6b:97:6f:55:78:69:20:9b:07:57:9b:2f: 9f:f7:70:28:5f:e5:ab:b4:53:5c:f6:80:64:8f:98:d7:1c:e7: 2f:6b:66:e5:22:f8:b5:97:e7:a4:f7:2e:0b:56:29:40:43:39: 9c:dc:8a:c5:bf:5b:61:14:3b:e6:ef:f4:9f:19:21:df:2f:34: d0:77:da:e4:9f:6d:54:06:df:eb:19:d5:59:9f:56:07:b1:fd: b2:4e:59:6a:00:a2:24:e0:94:ed:07:fd:47:a7:10:16:ff:c7: 4e:21:20:2b:d5:a5:f9:35:32:68:91:61:27:7b:73:80:49:28: 68:15:5a:e7:1e:d1:99:b5:3a:4b:e6:b0:7c:4c:5b:f9:b5:55: ba:22:21:2f:57:dd:1c:18:fb:ef:74:cb:42:38:15:f0:c2:c7: 76:42:47:14:7f:6b:75:2e:f6:f7:28:e5:b5:c0:79:35:d7:90: 1b:f4:43:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0cr3/tGG2aEqPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk ODc0YTgyN2MtNWU1YS00ODIyLWE5NWUtMjQ2NGZiYTNlOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P1c+lx/vICZnFA31ynxGSGKOxE+YoSbLJmq VTF5lUUfKJwFfciGWF3aB2+2SfKulDDZRv1ahcIXxaH5oWDjopJwdtZLM0Wq05Ty 0Xl/3g68lSrN5E1Sv3hArsXka1+L3iVEhZ9Vf7Hnp8Tzz38dhVmfju2G48q0/m9w VLWrmpqkSph6K+e5Fd9ea/l1gVobAIU/STvqAlF5ahB2AAfJ1YyjuEPGoruPScco I++flvgMjf04pot354DGbnfylmZr//2w5ZFa9kMGii0waPweV8IJosHaywfUHVjh SzAC7zVhTFdBww55XaDmaR55GO7ewYaIim87N+/c9e2p2k1sKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIAJEsB00OqyvZOBFlBYaHW7qRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvYTk4ZjJkZDEtODJlYy0z MTE3LWI1YmQtNzVmNzMyOGQyMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSsawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG3T59FpH+rqGGAc/qCaF4GTW42XvYdiDW03J/KyP+hWK2OIMALAQVs MOzWWGRoSUF0oPz5r1sWOjPDDPUdl7s2AsI1vf7hQm/olZPBeWuXb1V4aSCbB1eb L5/3cChf5au0U1z2gGSPmNcc5y9rZuUi+LWX56T3LgtWKUBDOZzcisW/W2EUO+bv 9J8ZId8vNNB32uSfbVQG3+sZ1VmfVgex/bJOWWoAoiTglO0H/UenEBb/x04hICvV pfk1MmiRYSd7c4BJKGgVWuce0Zm1OkvmsHxMW/m1VboiIS9X3RwY++90y0I4FfDC x3ZCRxR/a3Uu9vco5bXAeTXXkBv0Q+U= -----END CERTIFICATE-----Generated at Thu Sep 3 19:22:29 2026 by rpki-client