$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/1e4c7949-37d5-339f-88ea-7a70cd9c54b8.roa File: 1e4c7949-37d5-339f-88ea-7a70cd9c54b8.roa (raw, json) Hash identifier: gqrbM7IQARRLWSEdAvsyIdCl7Iwq7lF7nHBhwQgOblg= Subject key identifier: 51:8E:9F:1D:30:35:2E:BC:AE:80:6F:EA:AF:49:99:62:9E:E7:71:0D Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584D707007D834E63664DCAD4480 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/1e4c7949-37d5-339f-88ea-7a70cd9c54b8.roa Signing time: Wed 08 Apr 2026 14:37:50 +0000 ROA not before: Wed 08 Apr 2026 14:37:50 +0000 ROA not after: Tue 23 Jun 2026 16:40:16 +0000 asID: 812 IP address blocks: 74.198.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:70:07:d8:34:e6:36:64:dc:ad:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Apr 8 14:37:50 2026 GMT Not After : Jun 23 16:40:16 2026 GMT Subject: CN=22916f66-7843-4531-b68f-8761d4c2687c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5c:94:4d:ee:bc:56:4c:25:49:23:e6:06:ce: ec:47:87:a0:74:4a:ef:5f:21:fd:8e:ba:c7:fa:f2: 62:05:98:46:d7:b2:53:1e:9c:25:f4:8e:03:0e:09: 65:54:fe:a5:67:2e:84:50:c5:76:b1:07:0f:31:6f: ee:02:fa:d9:a5:36:4a:b7:b5:9d:43:c7:d0:8b:f7: e8:5a:f5:4e:9c:93:7b:cd:1f:9a:09:3d:5c:98:11: 76:77:d5:a4:63:02:94:87:9b:63:fd:be:77:10:bd: b3:15:9e:e0:71:79:06:30:87:c6:31:de:54:d7:39: cf:d9:9e:d6:49:35:78:d4:98:8f:36:db:bc:47:f8: 0a:90:fa:1c:f1:62:e5:04:42:4c:b4:e3:6d:37:8c: 92:5b:46:6d:1d:9a:03:23:99:40:a8:41:9b:3c:b9: 45:7e:e2:61:09:be:ee:c5:9d:45:55:fb:c6:0b:4f: 2b:39:5d:3f:c4:d2:70:5f:7f:a8:b4:b2:77:d6:f7: 59:a5:30:a1:94:8b:25:c6:1b:9a:1b:dd:19:50:dd: a8:4f:79:44:79:df:f3:ce:14:6b:37:56:f3:67:43: 37:56:13:5b:1d:a0:d7:e5:bc:d9:d3:15:61:21:fe: 68:0e:1c:f9:fd:f0:4e:53:e1:23:3d:04:6a:5e:10: 95:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8E:9F:1D:30:35:2E:BC:AE:80:6F:EA:AF:49:99:62:9E:E7:71:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/1e4c7949-37d5-339f-88ea-7a70cd9c54b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:cf:16:c2:a3:25:cf:16:65:33:4e:6c:ed:9b:ff:15:0a:f3: 45:21:b4:73:fd:3b:ba:6e:4c:48:0b:1c:2b:45:94:d3:36:49: 77:f8:a7:5d:4f:78:8d:9e:d6:02:1c:e5:28:0f:05:2d:17:63: 85:18:a0:2c:e5:e0:11:74:30:b0:03:ac:88:90:5c:48:4e:66: 63:36:3e:01:3e:d0:0c:f1:93:8c:0a:60:06:4c:bf:b3:4e:f3: 10:b5:9f:1f:7a:30:59:45:4c:b2:80:6f:6f:66:14:1e:6e:1b: 87:1c:b6:bc:e1:57:27:fe:a8:a1:0e:49:24:19:04:32:5f:c0: 36:99:f4:bb:7a:11:a4:bc:c7:39:38:a8:69:df:f5:d3:9c:e0: fb:ad:0d:93:19:e3:f2:31:7d:29:e1:ea:37:dd:24:82:f3:9c: f0:c4:ed:69:d4:f0:20:d3:e2:4b:b5:09:6b:2d:a0:05:2d:a9: 04:17:30:b5:59:08:dd:79:52:84:a1:d1:1c:f0:e0:7a:98:37: 75:7b:7d:4c:84:b6:07:79:1e:cc:f3:c9:35:bd:23:11:10:46: 1c:c3:2e:42:16:5d:28:5b:a9:6f:29:47:af:a9:e7:c6:b6:44: e9:65:11:2a:3c:a0:0f:e6:38:11:fb:55:22:42:4c:97:33:4f: a2:af:2e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wcAfYNOY2ZNytRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDQwODE0Mzc1MFoXDTI2MDYyMzE2NDAxNlowLzEtMCsGA1UEAxMk MjI5MTZmNjYtNzg0My00NTMxLWI2OGYtODc2MWQ0YzI2ODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVyUTe68VkwlSSPmBs7sR4egdErvXyH9jrrH +vJiBZhG17JTHpwl9I4DDgllVP6lZy6EUMV2sQcPMW/uAvrZpTZKt7WdQ8fQi/fo WvVOnJN7zR+aCT1cmBF2d9WkYwKUh5tj/b53EL2zFZ7gcXkGMIfGMd5U1znP2Z7W STV41JiPNtu8R/gKkPoc8WLlBEJMtONtN4ySW0ZtHZoDI5lAqEGbPLlFfuJhCb7u xZ1FVfvGC08rOV0/xNJwX3+otLJ31vdZpTChlIslxhuaG90ZUN2oT3lEed/zzhRr N1bzZ0M3VhNbHaDX5bzZ0xVhIf5oDhz5/fBOU+EjPQRqXhCV4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGOnx0wNS68roBv6q9JmWKe53ENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMWU0Yzc5NDktMzdkNS0z MzlmLTg4ZWEtN2E3MGNkOWM1NGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSsa0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnPFsKjJc8WZTNObO2b/xUK80UhtHP9O7puTEgLHCtFlNM2SXf4p11P eI2e1gIc5SgPBS0XY4UYoCzl4BF0MLADrIiQXEhOZmM2PgE+0Azxk4wKYAZMv7NO 8xC1nx96MFlFTLKAb29mFB5uG4cctrzhVyf+qKEOSSQZBDJfwDaZ9Lt6EaS8xzk4 qGnf9dOc4PutDZMZ4/IxfSnh6jfdJILznPDE7WnU8CDT4ku1CWstoAUtqQQXMLVZ CN15UoSh0Rzw4HqYN3V7fUyEtgd5HszzyTW9IxEQRhzDLkIWXShbqW8pR6+p58a2 ROllESo8oA/mOBH7VSJCTJczT6KvLt4= -----END CERTIFICATE-----Generated at Sat Apr 18 02:05:18 2026 by rpki-client