$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/33aad2a5-8536-3054-a0d9-bdce7d0b3de8.roa File: 33aad2a5-8536-3054-a0d9-bdce7d0b3de8.roa (raw, json) Hash identifier: Q4POXay5Y2D/xxhnq6ATWct1X0MDKIHpR1pW/vcoUjc= Subject key identifier: 8D:D1:1E:15:3B:54:7D:4C:8F:92:95:58:71:6B:D6:25:A6:51:62:5F Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584F6F22ED2E9AC5CA3A90E77800 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/33aad2a5-8536-3054-a0d9-bdce7d0b3de8.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 812 IP address blocks: 74.198.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:ed:2e:9a:c5:ca:3a:90:e7:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=cf989c4f-5386-48d1-819d-df728ff1fb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:63:0b:80:b2:4a:40:c2:b8:9a:1f:b2:27:42: 7b:b8:65:fc:eb:65:42:84:d6:f7:d1:a3:15:b4:c8: 76:52:b6:b7:08:f3:c3:a9:0f:24:c9:47:66:94:90: 17:c8:d6:7a:31:51:e0:f9:d7:4b:fa:7a:c1:df:ac: 76:be:b7:04:16:3a:a7:18:c3:2d:c7:0f:4c:0c:c8: f3:df:33:31:2e:95:11:fb:0e:1c:28:f4:b7:c4:3d: b0:87:69:b8:f6:ff:10:e1:f5:f4:cf:e8:89:73:1e: 7a:0f:54:03:d1:b2:e2:f5:ea:37:f7:d5:5e:8f:e9: 07:74:7e:a1:c6:94:a2:b1:9b:1b:5c:ab:78:33:b9: 76:df:93:16:92:fa:ea:9b:9a:ba:42:1e:4b:73:ec: 31:4f:48:26:75:08:df:d3:f4:18:00:ce:c9:69:0d: e8:e1:4d:e9:38:5e:b8:80:58:10:37:62:1b:47:a2: 9b:24:b8:c3:b4:a4:db:ff:75:f8:29:fa:84:76:fb: a8:11:80:5c:e7:0e:12:0c:31:4b:96:74:04:d7:e5: ed:a5:52:da:cf:06:23:13:09:78:ed:13:4a:11:9b: ca:9f:cf:0d:02:9b:1b:cc:fe:58:26:8b:54:cb:b2: 4b:e3:08:8d:66:9a:0e:8e:ff:f3:48:b6:38:c0:5c: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D1:1E:15:3B:54:7D:4C:8F:92:95:58:71:6B:D6:25:A6:51:62:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/33aad2a5-8536-3054-a0d9-bdce7d0b3de8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ba:18:35:d3:26:74:0d:be:c4:6e:50:c6:3e:4d:98:ef:93: a9:b4:80:54:5a:9c:ff:5d:34:04:a9:9c:db:47:dd:77:c4:b2: 42:b9:fb:fe:a0:05:50:d0:0a:db:be:ec:a6:1d:cc:4a:d2:00: 31:ca:10:75:7d:88:26:c3:5b:2d:c7:10:64:4f:48:8b:ca:f4: 44:dc:ea:3e:36:ab:77:c3:23:1d:3a:e0:20:fb:d5:51:f2:76: 6f:2c:d1:29:a3:6a:2a:ae:2a:9b:3a:2b:7e:96:bf:1a:6a:a3: 9a:d7:bf:1e:70:b3:6c:ac:e9:93:95:12:95:b7:63:d7:5d:29: d3:ba:bc:d8:2f:65:fe:cb:c2:40:eb:cf:62:0d:f9:33:6a:cb: 5d:d0:f6:c9:c6:8a:fd:be:44:b6:75:88:28:43:76:ff:9c:8d: a9:2f:88:b6:d8:14:2f:6e:02:b9:c8:0c:20:4d:e6:c8:2c:09: f6:c3:6c:3d:b6:0f:7e:b8:f2:bc:a4:2a:f9:53:96:6d:45:86: 82:bb:6a:a8:90:e7:82:8e:9b:ea:a4:a6:60:34:7b:0b:eb:28: d1:20:bc:f6:a0:e4:11:bf:ec:cf:d0:ec:73:ea:0e:be:d1:d3: 7b:a3:8d:6e:0b:74:d2:25:4e:ab:33:06:96:45:72:e6:ab:91: eb:c8:92:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIu0umsXKOpDneAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2Y5ODljNGYtNTM4Ni00OGQxLTgxOWQtZGY3MjhmZjFmYjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGMLgLJKQMK4mh+yJ0J7uGX862VChNb30aMV tMh2Ura3CPPDqQ8kyUdmlJAXyNZ6MVHg+ddL+nrB36x2vrcEFjqnGMMtxw9MDMjz 3zMxLpUR+w4cKPS3xD2wh2m49v8Q4fX0z+iJcx56D1QD0bLi9eo399Vej+kHdH6h xpSisZsbXKt4M7l235MWkvrqm5q6Qh5Lc+wxT0gmdQjf0/QYAM7JaQ3o4U3pOF64 gFgQN2IbR6KbJLjDtKTb/3X4KfqEdvuoEYBc5w4SDDFLlnQE1+XtpVLazwYjEwl4 7RNKEZvKn88NApsbzP5YJotUy7JL4wiNZpoOjv/zSLY4wFzYrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3RHhU7VH1Mj5KVWHFr1iWmUWJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMzNhYWQyYTUtODUzNi0z MDU0LWEwZDktYmRjZTdkMGIzZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSsauMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH66GDXTJnQNvsRuUMY+TZjvk6m0gFRanP9dNASpnNtH3XfEskK5+/6g BVDQCtu+7KYdzErSADHKEHV9iCbDWy3HEGRPSIvK9ETc6j42q3fDIx064CD71VHy dm8s0SmjaiquKps6K36Wvxpqo5rXvx5ws2ys6ZOVEpW3Y9ddKdO6vNgvZf7LwkDr z2IN+TNqy13Q9snGiv2+RLZ1iChDdv+cjakviLbYFC9uArnIDCBN5sgsCfbDbD22 D3648rykKvlTlm1FhoK7aqiQ54KOm+qkpmA0ewvrKNEgvPag5BG/7M/Q7HPqDr7R 03ujjW4LdNIlTqszBpZFcuarkevIkrs= -----END CERTIFICATE-----Generated at Tue Oct 13 13:03:24 2026 by rpki-client