$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa File: 655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa (raw, json) Hash identifier: Du+kDvHA7ELZ13OdUet0zPJ19LNmnXwwKWwe6rJkRA8= Subject key identifier: BC:61:E0:B8:52:DB:10:65:19:8B:7C:65:E9:F0:EC:8A:58:2D:4D:BB Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584D7070EC1468DA221CE6B457C0 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa Signing time: Wed 08 Apr 2026 14:39:38 +0000 ROA not before: Wed 08 Apr 2026 14:39:38 +0000 ROA not after: Tue 07 Jul 2026 14:39:38 +0000 asID: 812 IP address blocks: 74.198.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:70:ec:14:68:da:22:1c:e6:b4:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Apr 8 14:39:38 2026 GMT Not After : Jul 7 14:39:38 2026 GMT Subject: CN=751b3a00-255b-4654-8a1b-fa651209c794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:38:9d:52:94:a8:7f:a8:aa:59:ce:e9:aa: 24:e3:b8:b9:e2:ba:66:bd:f3:99:7a:55:dc:70:8b: ce:05:ec:c5:34:12:b9:a2:63:b6:95:d5:76:48:0e: 92:ee:7a:85:37:36:98:62:d6:ba:d4:de:70:1b:b9: d6:6b:b7:52:5e:2e:ca:18:43:9f:3d:8b:c9:e4:bd: ba:64:da:22:8c:e0:20:b0:61:c7:f3:94:b1:ce:b3: 99:49:ad:8a:5e:ed:5e:d7:27:aa:ff:bc:70:7e:e2: 9e:c1:b5:68:7d:ef:b3:1e:65:0f:cd:75:00:ac:b8: 55:a2:e1:6c:d5:9a:4e:8c:31:32:c9:d4:9e:d5:84: 96:22:d7:5e:27:61:f9:cd:71:0b:f6:82:44:83:49: 85:57:b8:bf:f1:a4:a1:64:1b:d7:ec:a0:4c:9d:92: a9:6d:69:22:d7:c8:eb:6e:29:51:72:2a:29:0d:bb: ba:23:7b:52:86:8b:2c:6d:24:59:8d:dc:b2:c5:b7: 48:a5:84:7e:74:7e:24:65:ad:7b:f1:d8:03:c2:89: 57:1e:25:68:27:56:25:f5:aa:52:9d:ec:c1:76:8d: 07:70:89:e7:10:2d:95:92:5d:75:ed:f7:b8:63:a4: ba:e8:be:38:98:8b:1c:82:64:ad:3f:2a:37:39:c7: 28:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:61:E0:B8:52:DB:10:65:19:8B:7C:65:E9:F0:EC:8A:58:2D:4D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:52:ce:4f:77:c3:9d:b3:f8:dc:61:f5:3b:b7:3a:80:2a:62: b4:30:a6:0f:e3:4f:5c:79:96:22:1c:78:5f:b7:cc:73:b8:9d: d3:75:72:a9:19:76:6c:06:51:db:b3:b7:a3:d5:6c:3d:96:42: da:db:6d:73:6c:83:6f:59:2c:68:40:33:6c:fa:8b:90:b3:42: d6:4f:08:1c:00:44:54:a6:57:e7:86:8b:b1:e0:39:1b:b2:f2: 3f:c1:54:0f:81:9a:79:6d:ab:0e:a5:c5:ca:11:30:46:19:f0: f4:80:9f:0e:94:4f:19:04:d2:47:0c:4f:e9:0d:18:90:29:34: 45:8b:28:16:a3:f2:b3:9a:88:2e:cf:21:65:c6:1e:79:33:1a: b0:95:0d:1f:f2:25:7d:84:25:44:25:24:9c:3a:73:3d:61:b8: 38:bd:fa:f4:8d:41:ef:29:db:d3:4b:9c:11:17:97:8f:27:c5: e2:eb:35:e8:2e:ba:55:12:b3:c0:40:c8:92:6a:ec:97:d8:7e: 14:0f:a6:69:b9:67:dc:9c:49:d7:eb:b1:51:28:ca:3a:2c:41: 62:6a:9a:de:05:6f:8f:4d:23:5b:2d:62:a8:ac:3a:a6:e2:8e: 07:ec:a3:e5:35:00:3f:1a:a6:1f:f2:ea:89:62:9c:d5:e2:b0: 38:85:5d:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wcOwUaNoiHOa0V8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDQwODE0MzkzOFoXDTI2MDcwNzE0MzkzOFowLzEtMCsGA1UEAxMk NzUxYjNhMDAtMjU1Yi00NjU0LThhMWItZmE2NTEyMDljNzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP84nVKUqH+oqlnO6aok47i54rpmvfOZelXc cIvOBezFNBK5omO2ldV2SA6S7nqFNzaYYta61N5wG7nWa7dSXi7KGEOfPYvJ5L26 ZNoijOAgsGHH85SxzrOZSa2KXu1e1yeq/7xwfuKewbVofe+zHmUPzXUArLhVouFs 1ZpOjDEyydSe1YSWItdeJ2H5zXEL9oJEg0mFV7i/8aShZBvX7KBMnZKpbWki18jr bilRciopDbu6I3tShossbSRZjdyyxbdIpYR+dH4kZa178dgDwolXHiVoJ1Yl9apS nezBdo0HcInnEC2Vkl117fe4Y6S66L44mIscgmStPyo3OccoVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxh4LhS2xBlGYt8Zenw7IpYLU27MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvNjU1YWY1ZWItOGYyOS0z ZWI4LThkODctMTM4YmZjMTE5NWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSsa6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFSzk93w52z+Nxh9Tu3OoAqYrQwpg/jT1x5liIceF+3zHO4ndN1cqkZ dmwGUduzt6PVbD2WQtrbbXNsg29ZLGhAM2z6i5CzQtZPCBwARFSmV+eGi7HgORuy 8j/BVA+Bmnltqw6lxcoRMEYZ8PSAnw6UTxkE0kcMT+kNGJApNEWLKBaj8rOaiC7P IWXGHnkzGrCVDR/yJX2EJUQlJJw6cz1huDi9+vSNQe8p29NLnBEXl48nxeLrNegu ulUSs8BAyJJq7JfYfhQPpmm5Z9ycSdfrsVEoyjosQWJqmt4Fb49NI1stYqisOqbi jgfso+U1AD8aph/y6olinNXisDiFXXg= -----END CERTIFICATE-----Generated at Sat Apr 18 02:05:20 2026 by rpki-client