$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/1bf2badd-b629-34e5-8e98-9070516667a3.roa File: 1bf2badd-b629-34e5-8e98-9070516667a3.roa (raw, json) Hash identifier: 3dEB0ZpnjcoM5SZMlLrxeAK+lTfLR1vo8KEaRLSfg6w= Subject key identifier: CA:E3:AA:1B:1D:B6:17:24:49:FB:F9:0D:C9:40:FC:D8:60:AB:D8:DE Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584D70695F6680E87B63D758F000 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/1bf2badd-b629-34e5-8e98-9070516667a3.roa Signing time: Wed 08 Apr 2026 14:24:25 +0000 ROA not before: Wed 08 Apr 2026 14:24:25 +0000 ROA not after: Tue 07 Jul 2026 14:24:25 +0000 asID: 812 IP address blocks: 74.198.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:69:5f:66:80:e8:7b:63:d7:58:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Apr 8 14:24:25 2026 GMT Not After : Jul 7 14:24:25 2026 GMT Subject: CN=dfdcf7a8-cc0a-44bb-87c6-8755a49ffcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:34:d6:e3:0f:19:97:c2:8b:cf:48:6e:6c: 6b:f9:c0:54:c2:4f:53:1b:09:44:a0:0a:d2:97:54: d6:8a:b5:0c:b5:47:02:dc:c8:2a:51:fc:0c:a1:f1: 5f:33:43:9e:2a:ce:17:4e:2a:36:8c:cc:68:fc:2f: ea:58:1d:b9:a4:47:c8:2c:48:6b:6c:df:d4:c2:db: 5c:ae:3d:1c:da:f6:26:9f:aa:b9:ce:c4:6f:e2:e2: 2e:10:a1:ec:9c:3b:42:6b:2d:7b:33:96:9c:b7:61: f2:8b:33:bf:03:3c:78:56:71:ec:7a:1c:c0:e1:77: da:02:f7:2b:8d:d1:9d:b9:99:4f:2d:62:10:b6:7c: d3:2c:c3:98:7b:1a:db:f6:b3:75:94:d3:88:66:06: 16:21:17:6c:dd:35:38:3d:95:12:59:9a:46:98:3a: de:b0:8b:61:b8:9d:fd:db:5f:a4:ac:2c:4c:20:b8: 8b:37:c4:1f:d2:de:bd:dc:73:c2:59:7a:93:66:3c: 90:a7:1e:d0:f8:67:e3:94:f9:e6:c8:41:4b:c5:d5: 1a:e4:0f:7f:9d:61:96:35:3d:be:ca:ae:e3:f0:2b: 6b:e9:3d:63:8f:18:4d:4f:85:d3:d8:76:99:a9:74: 6b:4e:8b:e8:d1:44:77:d9:a2:08:64:98:87:ee:03: 69:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E3:AA:1B:1D:B6:17:24:49:FB:F9:0D:C9:40:FC:D8:60:AB:D8:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/1bf2badd-b629-34e5-8e98-9070516667a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c7:4b:4f:f5:64:f1:0c:2b:a8:7c:d8:2b:1b:86:f6:2e:6e: e6:d4:0a:4e:2b:75:70:05:16:91:10:a1:51:34:a6:e1:e9:82: bd:15:49:4f:fa:c6:ec:8f:e7:15:04:57:0f:50:9d:6d:d8:ea: a9:75:a4:f7:01:6b:d4:71:ad:8d:fc:02:ee:84:6e:cd:8b:1a: f1:14:b0:36:9d:db:14:f5:39:46:9c:44:81:16:13:60:99:55: a8:95:96:56:ee:8f:2f:f8:52:6d:55:61:f2:1b:a8:40:b9:b9: ee:3d:5b:f6:66:55:41:a1:48:6b:b9:2b:58:19:f0:fe:1a:22: 95:28:21:84:62:63:95:8d:de:a0:fb:fa:59:f6:1a:20:23:a8: 36:92:d4:58:e2:91:50:30:40:34:08:92:76:a0:63:84:fc:ff: db:c3:b9:bd:6c:32:0e:c4:4c:7c:6c:45:c4:77:f4:7b:cc:d9: 77:c5:a2:e4:2f:47:ad:0b:39:90:e7:36:80:20:8f:58:87:9a: ac:2e:fb:6c:1a:ef:f0:4b:93:64:e7:25:bc:0f:55:a7:1b:8b: f5:48:b0:dd:c5:ac:b4:f6:11:49:e3:54:74:64:fe:5c:df:6b: cb:1e:34:af:b4:52:a6:65:b9:44:b9:19:98:27:ef:d7:7d:02: 6f:46:8b:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1waV9mgOh7Y9dY8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDQwODE0MjQyNVoXDTI2MDcwNzE0MjQyNVowLzEtMCsGA1UEAxMk ZGZkY2Y3YTgtY2MwYS00NGJiLTg3YzYtODc1NWE0OWZmY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngo01uMPGZfCi89Ibmxr+cBUwk9TGwlEoArS l1TWirUMtUcC3MgqUfwMofFfM0OeKs4XTio2jMxo/C/qWB25pEfILEhrbN/Uwttc rj0c2vYmn6q5zsRv4uIuEKHsnDtCay17M5act2HyizO/Azx4VnHsehzA4XfaAvcr jdGduZlPLWIQtnzTLMOYexrb9rN1lNOIZgYWIRds3TU4PZUSWZpGmDresIthuJ39 21+krCxMILiLN8Qf0t693HPCWXqTZjyQpx7Q+GfjlPnmyEFLxdUa5A9/nWGWNT2+ yq7j8Ctr6T1jjxhNT4XT2HaZqXRrTovo0UR32aIIZJiH7gNpqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrjqhsdthckSfv5DclA/Nhgq9jeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMWJmMmJhZGQtYjYyOS0z NGU1LThlOTgtOTA3MDUxNjY2N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSsYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPHS0/1ZPEMK6h82CsbhvYububUCk4rdXAFFpEQoVE0puHpgr0VSU/6 xuyP5xUEVw9QnW3Y6ql1pPcBa9RxrY38Au6Ebs2LGvEUsDad2xT1OUacRIEWE2CZ VaiVllbujy/4Um1VYfIbqEC5ue49W/ZmVUGhSGu5K1gZ8P4aIpUoIYRiY5WN3qD7 +ln2GiAjqDaS1FjikVAwQDQIknagY4T8/9vDub1sMg7ETHxsRcR39HvM2XfFouQv R60LOZDnNoAgj1iHmqwu+2wa7/BLk2TnJbwPVacbi/VIsN3FrLT2EUnjVHRk/lzf a8seNK+0UqZluUS5GZgn79d9Am9GiyE= -----END CERTIFICATE-----Generated at Sat Apr 18 02:05:18 2026 by rpki-client