$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/4ff4e7ec-fc15-350e-8db4-b87e38c86324.roa File: 4ff4e7ec-fc15-350e-8db4-b87e38c86324.roa (raw, json) Hash identifier: kFbND98O6U4q6w9W75kUGQgwFAu5t2K5+BIeyc4j9wk= Subject key identifier: 06:A2:AF:11:C5:70:68:9B:87:2F:D3:C2:32:0F:B2:18:CE:E7:FA:F4 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584F6F22F055C9A574A8E3DD5580 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/4ff4e7ec-fc15-350e-8db4-b87e38c86324.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 812 IP address blocks: 74.198.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:f0:55:c9:a5:74:a8:e3:dd:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=0e26e55d-81d9-4d93-a341-bfa007037b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:75:81:77:9d:98:48:a7:1f:de:b5:c4:da:6d: d8:f1:26:38:36:1e:46:19:ca:bd:25:51:ed:59:fa: ad:55:9a:59:b5:31:14:2c:ca:4a:7f:ff:9a:94:90: 88:96:f1:8e:2c:9b:8b:27:05:13:7d:32:8d:bf:1c: 30:35:e1:ac:c8:a6:c6:76:05:78:f0:30:f7:78:b2: 42:87:df:5f:49:de:33:e5:94:e7:ba:ba:d4:1d:d5: 58:03:1b:e3:e5:1b:11:d4:11:36:b1:a5:d4:d2:31: 0d:1d:d8:95:63:85:eb:0d:64:9d:98:90:c6:1f:63: cb:0a:15:c7:b3:c2:02:50:1a:f5:ab:bb:11:1d:45: 1d:c3:0a:3c:5a:17:b2:06:0d:db:22:a8:1a:eb:2d: 0c:5e:96:c6:f0:29:8f:33:e8:e2:43:6c:bf:08:b3: 1a:b5:e8:9d:30:51:1b:ed:0e:52:42:e8:21:d5:b9: c5:8c:40:d3:ce:82:55:78:9c:03:7c:8f:9d:63:1e: 79:a4:e4:1b:db:77:bb:97:29:77:0d:57:14:e5:8c: 22:85:eb:6f:ec:0f:01:75:e8:cf:1f:61:07:06:7d: e2:67:1f:d8:f4:e1:79:c1:a4:ea:b4:57:2a:51:ec: 24:68:ea:7c:8f:69:63:60:00:20:b3:aa:7c:83:64: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A2:AF:11:C5:70:68:9B:87:2F:D3:C2:32:0F:B2:18:CE:E7:FA:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/4ff4e7ec-fc15-350e-8db4-b87e38c86324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:2e:bb:da:95:7b:86:5e:36:66:72:f6:a3:d1:b5:b2:cf:ab: 30:3f:21:3f:a6:fb:60:fd:54:e4:02:24:a1:80:c3:bd:ef:3a: 1b:d1:bf:c2:d3:c7:d8:6c:14:8c:13:0a:c8:ea:5d:2a:cf:45: 6c:2d:68:1b:fa:80:0b:f9:a0:59:23:8c:a5:b1:9a:af:c6:5a: 9e:fc:db:9e:4b:20:e6:94:75:6e:09:7f:24:df:9a:60:ec:eb: 59:0c:bb:c0:68:b7:cd:5c:d2:cb:41:1f:ab:73:a2:1e:39:06: 2d:83:9f:ad:cf:31:eb:2b:00:3a:69:f7:55:c4:6e:7b:4a:3a: 6c:8d:17:a6:c0:68:f7:82:67:af:70:cc:d5:39:d3:76:a7:40: d1:57:08:e4:aa:75:d4:25:3d:19:6a:8f:0b:14:62:eb:06:14: 4b:bf:25:f6:96:1d:7a:41:10:be:9d:bb:59:7f:dc:74:21:91: a7:cd:2b:3b:75:85:a0:42:41:9f:39:3b:da:09:fd:42:d1:3a: aa:51:b9:04:6a:80:3e:33:44:92:6d:c9:8d:88:65:33:51:40: ab:12:a4:4e:ae:65:0f:ce:74:5d:48:a2:f1:7c:3e:57:6d:06: f2:77:77:4e:67:c6:df:c7:74:c0:02:c6:75:51:2c:16:e3:b2: 41:33:95:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIvBVyaV0qOPdVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk MGUyNmU1NWQtODFkOS00ZDkzLWEzNDEtYmZhMDA3MDM3YjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnWBd52YSKcf3rXE2m3Y8SY4Nh5GGcq9JVHt WfqtVZpZtTEULMpKf/+alJCIlvGOLJuLJwUTfTKNvxwwNeGsyKbGdgV48DD3eLJC h99fSd4z5ZTnurrUHdVYAxvj5RsR1BE2saXU0jENHdiVY4XrDWSdmJDGH2PLChXH s8ICUBr1q7sRHUUdwwo8WheyBg3bIqga6y0MXpbG8CmPM+jiQ2y/CLMateidMFEb 7Q5SQugh1bnFjEDTzoJVeJwDfI+dYx55pOQb23e7lyl3DVcU5Ywihetv7A8BdejP H2EHBn3iZx/Y9OF5waTqtFcqUewkaOp8j2ljYAAgs6p8g2QsHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAairxHFcGibhy/TwjIPshjO5/r0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvNGZmNGU3ZWMtZmMxNS0z NTBlLThkYjQtYjg3ZTM4Yzg2MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASsZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMuu9qVe4ZeNmZy9qPRtbLPqzA/IT+m+2D9VOQCJKGAw73vOhvRv8LT x9hsFIwTCsjqXSrPRWwtaBv6gAv5oFkjjKWxmq/GWp78255LIOaUdW4JfyTfmmDs 61kMu8Bot81c0stBH6tzoh45Bi2Dn63PMesrADpp91XEbntKOmyNF6bAaPeCZ69w zNU503anQNFXCOSqddQlPRlqjwsUYusGFEu/JfaWHXpBEL6du1l/3HQhkafNKzt1 haBCQZ85O9oJ/ULROqpRuQRqgD4zRJJtyY2IZTNRQKsSpE6uZQ/OdF1IovF8Pldt BvJ3d05nxt/HdMACxnVRLBbjskEzlSI= -----END CERTIFICATE-----Generated at Tue Oct 13 10:22:31 2026 by rpki-client