$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/21dfb560-2a18-39a6-9972-b64aeddba42a.roa File: 21dfb560-2a18-39a6-9972-b64aeddba42a.roa (raw, json) Hash identifier: 9tyWg/ITsyOLJHl3kOi5Ubn/Hqy0Dw9f8TEcPYYe9Rc= Subject key identifier: 45:5E:82:A3:5F:81:14:0A:3A:96:A9:9F:CA:91:C8:F1:73:C3:2F:0D Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584D7390C1CE1F70AB0CB3BD8E60 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/21dfb560-2a18-39a6-9972-b64aeddba42a.roa Signing time: Thu 09 Apr 2026 17:31:12 +0000 ROA not before: Thu 09 Apr 2026 17:31:12 +0000 ROA not after: Wed 08 Jul 2026 17:31:12 +0000 asID: 812 IP address blocks: 74.198.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:90:c1:ce:1f:70:ab:0c:b3:bd:8e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Apr 9 17:31:12 2026 GMT Not After : Jul 8 17:31:12 2026 GMT Subject: CN=fbd54ab6-7035-4f4a-a832-560759e4f4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:1a:96:e1:8c:e2:40:f1:05:0b:43:3d:ed: c1:d3:3f:07:0d:61:2e:85:2c:b1:39:76:fa:4f:db: 7e:9a:bb:bd:42:b8:b7:26:02:78:e8:cf:5a:59:a2: 58:5c:cd:64:14:b4:74:52:9c:a5:dd:28:9b:31:f6: cb:1c:a3:89:d6:2d:6d:18:67:97:92:c7:33:2f:07: 44:42:fd:48:d8:3b:f8:ac:d6:9b:e4:cb:44:cb:9b: 08:10:fa:15:8f:83:2b:05:82:23:4b:91:c4:0c:86: ba:bf:b8:3f:22:fd:e4:2d:4e:3e:fa:27:40:01:c9: ca:d3:0b:63:fe:a5:ed:b5:84:41:7b:64:12:53:1f: 85:a3:e7:64:74:8f:49:16:4e:a6:59:34:fd:76:a7: 91:f8:fa:9a:af:ad:71:95:2e:9c:3b:53:54:c2:f6: 9f:76:39:cb:d1:c3:78:cb:85:0c:3a:3f:95:ff:43: 13:e1:ed:f4:a9:4d:49:2b:5d:01:4a:8f:46:f2:b6: a8:9b:32:92:ef:3d:4f:36:87:88:bb:5f:cf:84:ba: 44:61:60:bd:5b:85:43:e4:5a:a8:9e:6c:bd:f3:de: 3c:2b:91:6e:18:c6:d4:c6:9e:a5:1b:b6:aa:db:14: f6:f1:50:04:44:8f:d1:fa:48:10:7c:94:da:cf:a2: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5E:82:A3:5F:81:14:0A:3A:96:A9:9F:CA:91:C8:F1:73:C3:2F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/21dfb560-2a18-39a6-9972-b64aeddba42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:d6:c6:89:cf:f4:c1:3d:8b:28:4c:14:88:fd:8c:87:3d:54: aa:57:99:e5:8c:98:3f:48:5d:4f:f6:31:d6:2a:d0:8d:c5:f6: 15:f6:2e:f2:6e:0d:ae:d8:ff:4e:53:81:37:41:76:4b:93:95: 97:bf:7e:22:ed:f9:81:04:b0:23:1f:3f:d4:0d:2e:97:87:cf: 19:ab:da:5a:21:8d:62:a3:5d:2a:a9:28:e3:4c:ef:e0:11:ac: 55:00:88:68:82:45:0e:ab:9a:96:19:a1:ad:e6:59:bf:a7:b7: b9:04:ca:7d:dc:f0:01:70:6f:35:b1:63:3a:71:4b:55:48:3d: de:ce:6e:29:df:09:d1:d5:ce:b4:b4:60:bf:c9:40:4f:1e:20: f6:c8:0d:19:43:9d:94:28:54:22:28:8d:41:76:10:b0:62:d2: 3e:27:04:a8:b0:4e:d3:13:7c:41:a2:c4:01:29:cd:02:46:58: 31:c5:fc:d3:e2:23:a7:63:d7:ec:b8:a2:d4:92:1a:10:3e:2f: a4:c5:9c:67:34:2e:26:c4:50:9e:49:e1:03:2f:4c:3f:a6:2c: 57:fa:20:b5:94:26:d1:df:00:a3:d8:b0:5e:5b:ca:28:bd:ec: 2a:4a:a7:7b:97:12:64:4c:5f:f4:dc:95:fe:2c:fb:ea:13:65: 0d:11:f4:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1zkMHOH3CrDLO9jmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDQwOTE3MzExMloXDTI2MDcwODE3MzExMlowLzEtMCsGA1UEAxMk ZmJkNTRhYjYtNzAzNS00ZjRhLWE4MzItNTYwNzU5ZTRmNGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBgaluGM4kDxBQtDPe3B0z8HDWEuhSyxOXb6 T9t+mru9Qri3JgJ46M9aWaJYXM1kFLR0Upyl3SibMfbLHKOJ1i1tGGeXksczLwdE Qv1I2Dv4rNab5MtEy5sIEPoVj4MrBYIjS5HEDIa6v7g/Iv3kLU4++idAAcnK0wtj /qXttYRBe2QSUx+Fo+dkdI9JFk6mWTT9dqeR+Pqar61xlS6cO1NUwvafdjnL0cN4 y4UMOj+V/0MT4e30qU1JK10BSo9G8raomzKS7z1PNoeIu1/PhLpEYWC9W4VD5Fqo nmy98948K5FuGMbUxp6lG7aq2xT28VAERI/R+kgQfJTaz6KlZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVegqNfgRQKOpapn8qRyPFzwy8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMjFkZmI1NjAtMmExOC0z OWE2LTk5NzItYjY0YWVkZGJhNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSsb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXWxonP9ME9iyhMFIj9jIc9VKpXmeWMmD9IXU/2MdYq0I3F9hX2LvJu Da7Y/05TgTdBdkuTlZe/fiLt+YEEsCMfP9QNLpeHzxmr2lohjWKjXSqpKONM7+AR rFUAiGiCRQ6rmpYZoa3mWb+nt7kEyn3c8AFwbzWxYzpxS1VIPd7ObinfCdHVzrS0 YL/JQE8eIPbIDRlDnZQoVCIojUF2ELBi0j4nBKiwTtMTfEGixAEpzQJGWDHF/NPi I6dj1+y4otSSGhA+L6TFnGc0LibEUJ5J4QMvTD+mLFf6ILWUJtHfAKPYsF5byii9 7CpKp3uXEmRMX/Tclf4s++oTZQ0R9Fw= -----END CERTIFICATE-----Generated at Sat Apr 18 02:05:19 2026 by rpki-client