$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/b1cc0a78-a4ce-36a3-84d6-2e2100bc1f5f.roa File: b1cc0a78-a4ce-36a3-84d6-2e2100bc1f5f.roa (raw, json) Hash identifier: XCnjCJzpnXsK8moWMGN/HbqHfzdFIOl/rlAV6UHJ2KY= Subject key identifier: 01:AF:D1:C8:56:E5:D2:03:2A:B3:71:0F:60:3B:3D:78:09:6A:2A:C5 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584EF2E765C3CDF9F5E570129B00 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/b1cc0a78-a4ce-36a3-84d6-2e2100bc1f5f.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 74.198.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:65:c3:cd:f9:f5:e5:70:12:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=15718ed2-5fc2-417f-aa7b-8c9e5ae0e741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:95:11:56:f7:27:36:e1:56:fc:16:39:bd: f9:94:59:69:6b:f5:9b:9c:90:56:f6:8a:8f:b9:a3: 2c:70:22:ed:d6:24:9e:68:42:6b:02:fb:d7:db:c1: f7:82:0a:81:01:6e:4e:d6:bf:6d:c3:4f:eb:4d:af: b0:e4:7b:d1:06:ad:a6:27:f1:b9:d1:13:51:63:77: b2:72:1e:cf:2e:f4:91:71:05:7c:c8:24:fc:be:ad: ac:31:69:96:6e:09:41:cc:21:c5:f4:b2:27:1f:5f: 62:5e:ed:75:26:7e:06:ec:05:71:6d:a3:94:49:38: 4f:32:6e:7e:f6:bc:0c:9f:3e:83:94:6e:33:1d:91: e1:b2:a3:55:5e:4a:73:55:83:3e:a7:a0:7a:64:8d: a0:29:4c:2e:93:89:ae:36:75:6a:2f:5c:c1:0e:b2: c6:27:ef:88:26:7e:5a:ae:10:39:aa:2c:10:5b:bd: 0d:72:9c:7f:e3:cc:28:b2:fd:c8:f9:19:62:60:93: 32:b1:2a:ae:a5:83:b8:82:fe:1f:5b:16:58:b7:de: fa:3c:22:fe:bd:99:4d:5a:b7:41:d4:8d:1f:76:01: 26:fe:79:7c:82:48:fe:68:ea:d6:f8:93:d3:0c:b3: c8:6f:e3:cb:79:a8:f0:97:00:75:80:ad:18:e1:f5: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AF:D1:C8:56:E5:D2:03:2A:B3:71:0F:60:3B:3D:78:09:6A:2A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/b1cc0a78-a4ce-36a3-84d6-2e2100bc1f5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0e:e1:8e:e9:8d:59:1e:9c:ea:40:24:b4:ad:e5:85:e6:72: 5a:f9:11:50:87:75:74:f5:1c:0c:7f:4a:64:10:c8:80:44:de: e8:a2:18:26:a3:8f:4a:77:c1:86:14:e7:a5:be:46:b2:25:66: 4d:29:11:d5:bb:ba:10:0b:20:ce:9c:d4:26:54:f1:a4:4f:80: b0:58:91:af:4f:9f:b6:c4:a0:fd:e2:58:b0:67:52:ad:04:19: 73:ae:c2:cb:1b:ca:4b:5d:33:1a:94:11:97:64:08:a9:7f:2f: 3e:aa:f0:96:ef:50:d3:fc:d8:2e:5d:4e:05:43:22:51:d9:bc: 09:a9:ee:16:86:78:c6:1c:01:2d:10:47:66:04:14:1b:95:a3: 8e:a3:ec:0b:78:1f:0d:dd:7a:59:6e:d5:06:dc:27:d1:04:03: 2d:b8:89:87:ba:2b:cb:01:5f:c7:48:51:ad:3d:49:cf:b5:36: b7:32:b9:34:ea:d6:e6:78:28:e6:80:e0:9a:df:28:2b:db:c6: 2d:50:41:48:ac:7e:27:bd:f5:99:35:a3:0c:f9:5c:16:b0:1d: 7f:d7:0f:b5:28:dc:22:a4:7f:c4:d4:62:35:43:e4:3c:19:1d: cd:d0:4e:5f:0a:6a:49:bb:38:f9:96:c9:b0:77:aa:06:b7:45: d1:8f:84:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y52XDzfn15XASmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MTU3MThlZDItNWZjMi00MTdmLWFhN2ItOGM5ZTVhZTBlNzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov6VEVb3JzbhVvwWOb35lFlpa/WbnJBW9oqP uaMscCLt1iSeaEJrAvvX28H3ggqBAW5O1r9tw0/rTa+w5HvRBq2mJ/G50RNRY3ey ch7PLvSRcQV8yCT8vq2sMWmWbglBzCHF9LInH19iXu11Jn4G7AVxbaOUSThPMm5+ 9rwMnz6DlG4zHZHhsqNVXkpzVYM+p6B6ZI2gKUwuk4muNnVqL1zBDrLGJ++IJn5a rhA5qiwQW70Ncpx/48wosv3I+RliYJMysSqupYO4gv4fWxZYt976PCL+vZlNWrdB 1I0fdgEm/nl8gkj+aOrW+JPTDLPIb+PLeajwlwB1gK0Y4fUcKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGv0chW5dIDKrNxD2A7PXgJairFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvYjFjYzBhNzgtYTRjZS0z NmEzLTg0ZDYtMmUyMTAwYmMxZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSsYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEO4Y7pjVkenOpAJLSt5YXmclr5EVCHdXT1HAx/SmQQyIBE3uiiGCaj j0p3wYYU56W+RrIlZk0pEdW7uhALIM6c1CZU8aRPgLBYka9Pn7bEoP3iWLBnUq0E GXOuwssbyktdMxqUEZdkCKl/Lz6q8JbvUNP82C5dTgVDIlHZvAmp7haGeMYcAS0Q R2YEFBuVo46j7At4Hw3dellu1QbcJ9EEAy24iYe6K8sBX8dIUa09Sc+1NrcyuTTq 1uZ4KOaA4JrfKCvbxi1QQUisfie99Zk1owz5XBawHX/XD7Uo3CKkf8TUYjVD5DwZ Hc3QTl8Kakm7OPmWybB3qga3RdGPhOo= -----END CERTIFICATE-----Generated at Thu Sep 3 20:06:54 2026 by rpki-client