$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/c46a48c5-4b0b-31f9-b535-f5ea5cf6156c.roa File: c46a48c5-4b0b-31f9-b535-f5ea5cf6156c.roa (raw, json) Hash identifier: Hlo48Ahv307le7mg//kLtIaSZk9bPhgvia0hSdQgUGQ= Subject key identifier: A2:31:1B:56:2A:CF:BF:70:E6:4E:F8:45:88:42:8F:17:3D:E0:26:D0 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584EF5B20D86FB27F65BFF14F300 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/c46a48c5-4b0b-31f9-b535-f5ea5cf6156c.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 74.198.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:0d:86:fb:27:f6:5b:ff:14:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=c84386cd-9b51-4a83-9952-060805f706dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:72:d9:6b:35:86:d9:51:db:47:28:f4:51: 1a:ff:02:a9:3d:c2:22:2c:3e:b8:e3:50:d2:bc:2b: db:ca:f0:df:85:d2:12:b8:3f:6d:07:5b:6f:e7:e7: 76:09:cd:e7:3e:0d:23:10:48:5a:96:b4:96:a5:a7: b9:a6:4c:70:0c:20:ba:f9:93:65:6a:60:f2:15:20: 32:8d:03:ef:60:98:3c:bb:09:ab:16:a1:c6:6e:2f: 53:8c:9d:61:57:c6:d0:72:5e:de:ff:6e:4e:ea:6f: 3c:d7:be:4b:1b:60:8c:6f:15:0f:16:e0:a9:2b:37: 4a:50:5e:79:93:21:fa:c8:4c:85:02:cd:e9:a7:79: 15:60:a5:f4:89:2b:37:3d:3f:02:91:9b:46:26:3d: a8:9a:e6:b2:1b:3e:c5:98:86:ff:e9:7d:8c:c0:eb: 5d:8a:ff:03:67:5b:9b:a6:75:ed:df:31:f3:d2:a2: aa:ab:88:a1:7a:28:4e:cc:ab:b5:11:9f:59:9a:b9: 9d:45:a9:20:64:02:c9:43:bf:76:4b:27:6a:72:8e: 57:66:58:bb:04:b5:a9:1f:88:b4:9e:92:3b:a8:9c: a0:b6:82:0a:ab:f2:f2:66:5c:5e:d3:eb:7e:ed:5c: d0:dc:7b:3f:b0:54:08:20:36:32:28:40:87:44:ed: 69:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:31:1B:56:2A:CF:BF:70:E6:4E:F8:45:88:42:8F:17:3D:E0:26:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/c46a48c5-4b0b-31f9-b535-f5ea5cf6156c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:8b:71:aa:22:39:f1:05:9e:51:25:e4:80:16:43:46:65:79: da:75:07:36:c8:90:5f:6f:72:65:30:f9:94:40:ca:23:8b:8f: 51:de:28:a8:37:3f:16:59:74:0d:e8:50:36:e0:f9:a2:ae:9b: ce:de:03:dd:b7:c8:33:60:fd:22:39:ca:00:91:5d:62:0a:17: 4c:e6:ce:e2:93:34:2b:bb:c3:eb:71:ba:9e:c9:80:96:b1:a4: 90:02:90:21:47:4f:56:3f:f2:d9:5c:3d:41:67:6e:57:5d:b4: 56:a6:e6:ad:1e:67:68:c7:77:fe:23:8e:06:ab:cb:a8:63:ba: db:0b:31:b2:8c:15:40:be:8f:32:c0:9d:c8:6a:d0:0a:e8:1c: 9b:18:5a:a0:09:66:bc:aa:31:a7:ff:b9:72:0f:3e:5c:e7:3d: 9c:6e:79:5d:71:f8:97:8b:02:aa:56:58:52:02:0d:4d:9f:eb: 20:ac:19:fd:2b:bd:72:50:07:0a:47:c8:ae:ee:97:db:bd:62: 76:8e:31:20:3b:ab:44:fc:56:8a:52:da:a3:30:24:f8:72:b8: d8:39:11:b7:9a:ad:cd:c7:16:10:91:78:0b:76:c2:49:f9:b9: 53:0b:9e:64:a4:8f:1c:b7:9c:93:f0:5b:29:e6:20:93:0c:62: 35:5d:4e:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71sg2G+yf2W/8U8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzg0Mzg2Y2QtOWI1MS00YTgzLTk5NTItMDYwODA1ZjcwNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLxy2Ws1htlR20co9FEa/wKpPcIiLD6441DS vCvbyvDfhdISuD9tB1tv5+d2Cc3nPg0jEEhalrSWpae5pkxwDCC6+ZNlamDyFSAy jQPvYJg8uwmrFqHGbi9TjJ1hV8bQcl7e/25O6m88175LG2CMbxUPFuCpKzdKUF55 kyH6yEyFAs3pp3kVYKX0iSs3PT8CkZtGJj2omuayGz7FmIb/6X2MwOtdiv8DZ1ub pnXt3zHz0qKqq4iheihOzKu1EZ9ZmrmdRakgZALJQ792Sydqco5XZli7BLWpH4i0 npI7qJygtoIKq/LyZlxe0+t+7VzQ3Hs/sFQIIDYyKECHRO1ppwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIxG1Yqz79w5k74RYhCjxc94CbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvYzQ2YTQ4YzUtNGIwYi0z MWY5LWI1MzUtZjVlYTVjZjYxNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSsbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqLcaoiOfEFnlEl5IAWQ0Zledp1BzbIkF9vcmUw+ZRAyiOLj1HeKKg3 PxZZdA3oUDbg+aKum87eA923yDNg/SI5ygCRXWIKF0zmzuKTNCu7w+txup7JgJax pJACkCFHT1Y/8tlcPUFnblddtFam5q0eZ2jHd/4jjgary6hjutsLMbKMFUC+jzLA nchq0AroHJsYWqAJZryqMaf/uXIPPlznPZxueV1x+JeLAqpWWFICDU2f6yCsGf0r vXJQBwpHyK7ul9u9YnaOMSA7q0T8VopS2qMwJPhyuNg5Ebearc3HFhCReAt2wkn5 uVMLnmSkjxy3nJPwWynmIJMMYjVdTrQ= -----END CERTIFICATE-----Generated at Thu Sep 3 19:23:03 2026 by rpki-client