$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/a98f2dd1-82ec-3117-b5bd-75f7328d237c.roa File: a98f2dd1-82ec-3117-b5bd-75f7328d237c.roa (raw, json) Hash identifier: KdSN96Z1Kzm1057G2df/aE4Tn1zGmFuVelkUcrs9u14= Subject key identifier: FD:3C:7F:81:89:DC:B8:4A:AE:C3:4D:A2:74:D5:6C:27:F3:5A:DB:44 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584F6F22D375B56442FC56BD4D00 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/a98f2dd1-82ec-3117-b5bd-75f7328d237c.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 812 IP address blocks: 74.198.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:d3:75:b5:64:42:fc:56:bd:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=8cab0eab-b3e0-442e-92a4-a50d50629b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:58:40:3e:9d:b5:c7:0b:a8:5c:39:ba:9d:34: 6f:5a:9c:a5:8e:19:39:60:e8:53:a7:79:32:2e:55: 57:3c:47:7d:4c:02:7a:9e:24:a9:ee:61:62:d7:f5: aa:6c:50:69:75:69:7d:0d:61:43:22:8b:aa:10:51: 22:46:26:1e:66:ce:4e:77:d7:52:91:c1:b5:f8:36: 69:23:c6:e1:cb:a0:1e:54:9c:68:d8:1d:b4:54:54: c2:85:e5:32:c0:c3:50:19:ca:be:62:79:9b:9f:6e: db:b7:34:81:79:c7:f5:f9:e3:b6:65:12:44:88:87: 64:91:d1:30:96:f7:67:54:a2:e6:92:a4:20:71:c9: 59:a7:65:85:91:66:44:4f:a0:74:45:8a:41:d6:4b: 32:8d:64:39:32:b5:9c:71:47:da:2b:9b:b0:b8:c3: e3:4c:83:c0:00:8c:98:da:a5:d6:97:95:66:d6:b2: 4f:e1:21:88:ec:e4:0a:41:76:74:93:b3:81:0a:04: 07:77:bc:58:71:c0:0f:6c:28:8d:8e:a7:eb:95:15: 37:4a:6b:e0:6b:2e:f4:46:d4:cd:23:ca:c0:3d:59: ef:30:2a:7a:e1:da:ab:77:36:e1:76:1e:3b:a4:ea: 90:4b:71:a0:bf:6c:4b:e5:1c:cb:1b:aa:1a:81:2d: 2a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3C:7F:81:89:DC:B8:4A:AE:C3:4D:A2:74:D5:6C:27:F3:5A:DB:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/a98f2dd1-82ec-3117-b5bd-75f7328d237c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:fb:32:a2:2c:88:e2:06:a8:d0:81:ba:30:70:ba:b8:89:48: 7a:0f:61:dd:7e:07:af:52:5f:98:6c:4d:b7:a1:2e:b7:9d:24: 73:b7:18:6b:58:9b:ca:37:53:55:1c:19:da:e8:6e:69:bc:8d: 78:fa:15:d4:c3:ac:8b:4e:35:13:dd:99:c4:c0:ae:14:de:28: f3:b3:f1:fa:ba:10:bd:73:12:8f:b6:8b:5f:4a:af:c2:6b:82: 6a:09:2a:50:88:aa:20:db:4b:eb:f2:f6:1a:8e:d7:58:4b:70: 88:f1:f7:38:24:d2:47:7e:f1:2b:e4:20:f0:97:4c:00:73:ca: 6c:f8:49:02:03:fe:ff:f8:eb:c1:d1:6a:05:2a:27:b6:5b:61: 83:7c:22:a6:aa:85:ae:eb:a7:ce:10:f0:1e:36:fc:46:10:b8: e4:08:12:b9:c6:7a:38:6a:30:58:2d:f2:91:6a:7f:be:32:85: a1:bd:18:1e:3c:57:1b:1b:c9:aa:58:16:8a:16:5a:25:ec:06: 52:11:ca:04:ff:48:dc:eb:1c:31:67:2e:4f:04:7d:49:52:b1: 1d:79:86:ab:6d:71:09:a6:ee:9e:30:57:f4:ae:e1:19:57:57: 76:0f:62:e1:88:cf:2f:fe:e9:a7:04:93:10:99:90:ee:eb:ed: 13:51:ce:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vItN1tWRC/Fa9TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk OGNhYjBlYWItYjNlMC00NDJlLTkyYTQtYTUwZDUwNjI5YjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lhAPp21xwuoXDm6nTRvWpyljhk5YOhTp3ky LlVXPEd9TAJ6niSp7mFi1/WqbFBpdWl9DWFDIouqEFEiRiYeZs5Od9dSkcG1+DZp I8bhy6AeVJxo2B20VFTCheUywMNQGcq+Ynmbn27btzSBecf1+eO2ZRJEiIdkkdEw lvdnVKLmkqQgcclZp2WFkWZET6B0RYpB1ksyjWQ5MrWccUfaK5uwuMPjTIPAAIyY 2qXWl5Vm1rJP4SGI7OQKQXZ0k7OBCgQHd7xYccAPbCiNjqfrlRU3Smvgay70RtTN I8rAPVnvMCp64dqrdzbhdh47pOqQS3Ggv2xL5RzLG6oagS0qcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP08f4GJ3LhKrsNNonTVbCfzWttEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvYTk4ZjJkZDEtODJlYy0z MTE3LWI1YmQtNzVmNzMyOGQyMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSsawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMr7MqIsiOIGqNCBujBwuriJSHoPYd1+B69SX5hsTbehLredJHO3GGtY m8o3U1UcGdrobmm8jXj6FdTDrItONRPdmcTArhTeKPOz8fq6EL1zEo+2i19Kr8Jr gmoJKlCIqiDbS+vy9hqO11hLcIjx9zgk0kd+8SvkIPCXTABzymz4SQID/v/468HR agUqJ7ZbYYN8Iqaqha7rp84Q8B42/EYQuOQIErnGejhqMFgt8pFqf74yhaG9GB48 VxsbyapYFooWWiXsBlIRygT/SNzrHDFnLk8EfUlSsR15hqttcQmm7p4wV/Su4RlX V3YPYuGIzy/+6acEkxCZkO7r7RNRzhg= -----END CERTIFICATE-----Generated at Sun Oct 11 23:05:44 2026 by rpki-client