$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/e9ebb67d-70f4-34e5-9266-30e30bd72549.roa File: e9ebb67d-70f4-34e5-9266-30e30bd72549.roa (raw, json) Hash identifier: Uo5DBhUjzwnwiDp0e8luzaotv1VpGvKfF1Hi8P+eTnw= Subject key identifier: 43:87:10:D6:7F:84:7B:8F:9C:23:31:10:9E:EE:9F:6F:E2:34:40:4A Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584EF2E78115754919B22668B0A0 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/e9ebb67d-70f4-34e5-9266-30e30bd72549.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 74.198.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:81:15:75:49:19:b2:26:68:b0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=c7b6ed8e-2eb9-4f0b-b49a-e41740b3e4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7b:38:6b:56:3f:5a:28:45:39:7a:95:fe:2d: 26:70:a5:02:40:5a:fa:29:ce:a8:77:10:8c:cc:9e: 7d:71:6b:93:43:61:99:47:74:e4:5c:85:cd:23:99: 7d:87:fe:22:54:b5:3d:f0:58:ef:61:2a:89:49:9b: 49:f2:c6:11:6e:69:4f:0f:5f:22:cf:d9:05:70:54: 4e:fc:78:24:37:1c:41:30:8f:81:5a:8e:46:bd:92: fc:53:e5:f5:df:4f:14:e7:33:03:8d:22:17:d2:3e: c2:b5:67:44:14:e0:da:51:f4:ad:5a:b4:62:13:b2: 6c:3f:4e:85:6b:f3:40:2f:fa:9c:c0:ff:c5:59:1b: 94:83:7d:5e:d9:3f:e1:d6:4e:29:e6:02:d7:d3:32: b9:11:34:97:8c:2d:6a:77:70:b3:33:0e:01:ef:ac: 8e:cd:f4:46:2a:e2:28:4f:28:37:51:6e:20:96:d1: 84:ff:9b:b3:25:59:d7:c5:44:49:5b:1d:88:93:fa: 09:27:96:f4:e8:1a:b5:b8:fc:ff:d8:2e:52:ac:b6: fd:de:8e:13:75:fa:09:87:72:70:e3:dc:b3:b4:3e: 95:14:da:0e:9a:5d:43:02:91:32:28:cc:50:bc:3f: c7:c8:59:32:f7:f2:dc:95:1b:60:b4:a5:a4:ff:df: 64:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:87:10:D6:7F:84:7B:8F:9C:23:31:10:9E:EE:9F:6F:E2:34:40:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/e9ebb67d-70f4-34e5-9266-30e30bd72549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:aa:92:57:c3:43:9c:fc:d6:d5:dd:8a:35:3e:33:9d:7e:01: 3d:af:23:d9:3e:0f:f1:0f:2b:a2:0c:2a:db:21:d6:82:99:7c: 8f:75:98:e3:bd:0f:b6:0e:e9:32:bb:c2:1d:c1:79:b3:24:34: 4f:02:62:aa:09:f6:3b:b5:b5:c4:6e:59:86:79:88:f0:08:fe: 0e:3b:a1:14:cd:4d:58:f1:bc:81:9d:72:71:98:72:d6:c6:a2: c6:d9:05:9f:01:f8:3a:e5:49:96:ba:ed:04:8e:4d:69:10:39: 94:94:f3:e0:44:4f:3c:bc:28:5f:f6:45:75:ae:fb:f9:83:57: c7:d0:28:5a:42:82:74:46:6a:3e:b9:5f:1f:d4:92:b9:d5:85: e3:bc:bd:31:bb:1c:2a:3d:b1:aa:c5:de:21:c4:b1:a4:a3:4b: 11:88:c7:82:12:e9:5a:19:1a:11:43:a3:0a:47:c4:87:7b:8c: 19:de:2a:7a:fa:56:e0:fa:01:cc:13:67:c5:52:86:a5:91:8a: b4:b0:0b:e1:41:81:be:6c:f2:9f:e4:91:1e:86:9c:c1:14:59: ea:49:f9:fa:8e:c5:da:8a:03:72:85:27:80:6c:ac:e7:06:80: f9:8e:e7:0a:e6:d8:9e:df:92:5d:65:90:57:bf:9b:99:1d:a7: 07:25:fc:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y54EVdUkZsiZosKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk YzdiNmVkOGUtMmViOS00ZjBiLWI0OWEtZTQxNzQwYjNlNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ns4a1Y/WihFOXqV/i0mcKUCQFr6Kc6odxCM zJ59cWuTQ2GZR3TkXIXNI5l9h/4iVLU98FjvYSqJSZtJ8sYRbmlPD18iz9kFcFRO /HgkNxxBMI+BWo5GvZL8U+X1308U5zMDjSIX0j7CtWdEFODaUfStWrRiE7JsP06F a/NAL/qcwP/FWRuUg31e2T/h1k4p5gLX0zK5ETSXjC1qd3CzMw4B76yOzfRGKuIo Tyg3UW4gltGE/5uzJVnXxURJWx2Ik/oJJ5b06Bq1uPz/2C5SrLb93o4TdfoJh3Jw 49yztD6VFNoOml1DApEyKMxQvD/HyFky9/LclRtgtKWk/99k5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOHENZ/hHuPnCMxEJ7un2/iNEBKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvZTllYmI2N2QtNzBmNC0z NGU1LTkyNjYtMzBlMzBiZDcyNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSsZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6qklfDQ5z81tXdijU+M51+AT2vI9k+D/EPK6IMKtsh1oKZfI91mOO9 D7YO6TK7wh3BebMkNE8CYqoJ9ju1tcRuWYZ5iPAI/g47oRTNTVjxvIGdcnGYctbG osbZBZ8B+DrlSZa67QSOTWkQOZSU8+BETzy8KF/2RXWu+/mDV8fQKFpCgnRGaj65 Xx/UkrnVheO8vTG7HCo9sarF3iHEsaSjSxGIx4IS6VoZGhFDowpHxId7jBneKnr6 VuD6AcwTZ8VShqWRirSwC+FBgb5s8p/kkR6GnMEUWepJ+fqOxdqKA3KFJ4BsrOcG gPmO5wrm2J7fkl1lkFe/m5kdpwcl/Gk= -----END CERTIFICATE-----Generated at Thu Sep 3 19:22:39 2026 by rpki-client