$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/7440a128-6a1d-39f5-bb92-7f4c14e4a082.roa File: 7440a128-6a1d-39f5-bb92-7f4c14e4a082.roa (raw, json) Hash identifier: VrR9Va3dj7Ywr3W74u7LdFkLQzA2KZVzP5/oi/PDbRs= Subject key identifier: B3:86:AE:5E:F8:26:56:93:DB:01:79:CD:89:22:BD:A5:8F:66:8F:8E Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584D70706E0749FCD00142A47480 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/7440a128-6a1d-39f5-bb92-7f4c14e4a082.roa Signing time: Wed 08 Apr 2026 14:38:39 +0000 ROA not before: Wed 08 Apr 2026 14:38:39 +0000 ROA not after: Tue 07 Jul 2026 14:38:39 +0000 asID: 812 IP address blocks: 74.198.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:70:6e:07:49:fc:d0:01:42:a4:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Apr 8 14:38:39 2026 GMT Not After : Jul 7 14:38:39 2026 GMT Subject: CN=aa86d685-41e3-4cb7-a65d-70a9b175c445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:64:f5:ce:b4:0b:88:08:6f:d3:d4:69:e2:ed: e1:23:67:e5:21:71:ea:7f:cc:0f:47:1e:10:d9:a4: 24:bd:0b:59:78:16:06:dc:ed:92:e8:6c:6e:a0:d8: 6c:30:d6:ec:ad:1c:fa:c7:4e:a4:12:45:64:aa:ec: d3:b7:18:c2:4f:c8:72:e6:b4:1d:1c:97:a8:23:2a: 08:1a:a1:07:35:8d:eb:35:21:7b:dd:d3:32:28:02: 31:ab:48:f6:c7:50:93:df:3b:11:24:a7:0e:0e:19: e1:eb:f6:88:88:a3:19:d7:10:51:b7:d1:42:82:6b: 7f:57:8a:6b:d0:08:43:6f:da:e4:a2:c8:10:ff:b0: 32:11:2d:b5:82:92:21:ae:d6:41:f6:6f:db:82:03: 79:27:33:5f:44:90:bc:ce:35:e9:1c:e1:40:28:91: fe:3e:42:93:49:1a:42:f8:af:a6:61:96:49:31:b2: 17:9b:6d:d4:35:e3:27:89:63:b5:8a:20:32:3d:5d: b4:f4:9f:c3:ea:89:92:9d:af:6e:4b:94:6f:57:aa: 6e:38:3b:8f:fa:a2:c5:78:5b:0f:99:a8:c0:83:cb: 85:f1:fd:3b:b0:be:0a:d1:df:68:81:bf:e3:bf:ee: ce:f0:0a:05:d1:66:fb:66:b2:d7:10:2d:a3:5c:b4: 32:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:86:AE:5E:F8:26:56:93:DB:01:79:CD:89:22:BD:A5:8F:66:8F:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/7440a128-6a1d-39f5-bb92-7f4c14e4a082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:91:d5:0e:79:fc:51:a4:f5:8f:1a:f8:d9:8f:6d:e1:4d:89: 93:cb:dd:31:53:4b:12:a8:96:46:5d:e8:85:5a:a3:f7:6b:41: 0e:d3:63:1f:6d:dd:85:53:4a:04:4e:21:fe:c1:1d:a4:e2:1f: 2a:5e:fd:a1:08:00:cf:f5:97:91:ae:ae:b6:9a:2d:82:14:c2: 9e:d8:69:83:36:4f:df:95:33:41:b7:66:f3:a2:5c:db:11:cf: 8a:21:3e:c1:fd:b7:d4:cc:33:93:e6:31:c3:9d:39:78:f9:60: 30:08:fd:b6:2d:23:6c:99:13:f8:8d:7e:48:c8:da:fb:a7:07: 50:70:35:fc:f9:51:7d:d9:55:03:1e:f1:02:5e:d7:d6:b2:24: 8b:6e:ce:17:0a:8d:6c:06:82:23:c0:ee:e5:86:cd:3c:db:e0: 0a:a3:7f:6a:03:85:7e:2f:ff:57:46:d8:ca:28:6f:ce:b0:3b: 8f:3c:4e:50:e8:8d:76:26:87:a6:97:c5:d9:62:7b:7b:90:88: 80:d0:e9:c5:dd:98:48:e9:30:47:88:2d:5d:41:4d:a1:3a:a7: 9b:12:f7:61:ad:15:28:1d:7c:fa:e3:ae:c7:10:d2:9c:ba:2a: 95:77:c5:0c:b9:1a:fe:f4:d1:bc:bf:c2:2a:b9:fc:e7:6a:ec: dc:f7:9f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wcG4HSfzQAUKkdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDQwODE0MzgzOVoXDTI2MDcwNzE0MzgzOVowLzEtMCsGA1UEAxMk YWE4NmQ2ODUtNDFlMy00Y2I3LWE2NWQtNzBhOWIxNzVjNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWT1zrQLiAhv09Rp4u3hI2flIXHqf8wPRx4Q 2aQkvQtZeBYG3O2S6GxuoNhsMNbsrRz6x06kEkVkquzTtxjCT8hy5rQdHJeoIyoI GqEHNY3rNSF73dMyKAIxq0j2x1CT3zsRJKcODhnh6/aIiKMZ1xBRt9FCgmt/V4pr 0AhDb9rkosgQ/7AyES21gpIhrtZB9m/bggN5JzNfRJC8zjXpHOFAKJH+PkKTSRpC +K+mYZZJMbIXm23UNeMniWO1iiAyPV209J/D6omSna9uS5RvV6puODuP+qLFeFsP majAg8uF8f07sL4K0d9ogb/jv+7O8AoF0Wb7ZrLXEC2jXLQyOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOGrl74JlaT2wF5zYkivaWPZo+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvNzQ0MGExMjgtNmExZC0z OWY1LWJiOTItN2Y0YzE0ZTRhMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASsa5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmR1Q55/FGk9Y8a+NmPbeFNiZPL3TFTSxKolkZd6IVao/drQQ7TYx9t 3YVTSgROIf7BHaTiHype/aEIAM/1l5GurraaLYIUwp7YaYM2T9+VM0G3ZvOiXNsR z4ohPsH9t9TMM5PmMcOdOXj5YDAI/bYtI2yZE/iNfkjI2vunB1BwNfz5UX3ZVQMe 8QJe19ayJItuzhcKjWwGgiPA7uWGzTzb4Aqjf2oDhX4v/1dG2Moob86wO488TlDo jXYmh6aXxdlie3uQiIDQ6cXdmEjpMEeILV1BTaE6p5sS92GtFSgdfPrjrscQ0py6 KpV3xQy5Gv700by/wiq5/Odq7Nz3n7c= -----END CERTIFICATE-----Generated at Sat Apr 18 02:05:19 2026 by rpki-client