$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/2a9e68fd-baa0-33a2-a892-cada89803b9f.roa File: 2a9e68fd-baa0-33a2-a892-cada89803b9f.roa (raw, json) Hash identifier: bGhWpIkw8LMQ7Mbr+zZI4pANb4VlfizhOOielnL/8hM= Subject key identifier: 6F:7A:B3:4F:04:E2:89:6B:8E:DA:F8:4C:ED:1C:B7:41:B5:DD:72:82 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584D49975E1256DC780EE9C5D4C0 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/2a9e68fd-baa0-33a2-a892-cada89803b9f.roa Signing time: Wed 25 Mar 2026 16:40:34 +0000 ROA not before: Wed 25 Mar 2026 16:40:34 +0000 ROA not after: Tue 23 Jun 2026 16:40:34 +0000 asID: 812 IP address blocks: 74.198.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:97:5e:12:56:dc:78:0e:e9:c5:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Mar 25 16:40:34 2026 GMT Not After : Jun 23 16:40:34 2026 GMT Subject: CN=21000a16-4122-4be6-a1c8-3c1ce6475b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:51:ef:8d:05:9f:f1:39:74:b4:19:18:fa: d5:ef:9c:a0:f0:17:74:d0:ac:bd:a6:bf:7a:bd:8b: 40:52:98:26:ca:bf:85:44:1f:14:68:cf:fd:85:86: 1d:87:ad:ba:1e:7a:fb:4b:9c:38:d6:1f:ce:61:0e: fd:63:8d:68:18:34:de:b5:5e:2b:44:8a:a9:6e:b1: f2:e1:11:c9:7b:4e:fd:00:eb:99:e8:2d:38:60:50: 23:13:51:32:fd:3b:07:ff:32:96:01:d4:47:96:8a: 0e:a6:88:d7:65:aa:be:84:df:0a:30:4c:e6:74:55: e6:b2:83:21:d2:09:b2:77:8e:cc:df:8a:3e:de:c0: ff:b1:b0:e1:df:ff:c5:a5:50:d7:bf:7a:d8:68:16: 1f:2e:e1:af:85:16:0c:f1:93:14:fd:3c:f4:df:70: 04:9b:63:10:bb:c0:ad:0d:d2:24:d7:fe:fd:4f:2e: 43:e0:78:1a:f3:b9:81:cd:27:89:03:05:36:e4:6a: 20:f9:a4:cb:fb:c9:f5:f2:56:36:bc:00:7f:44:6e: 41:44:93:55:44:76:40:e4:b8:b1:68:fe:27:82:70: 51:1f:75:02:fb:47:c9:eb:55:6d:22:6a:b1:a5:b5: a0:b3:10:0b:f8:37:11:23:02:0e:d8:0e:66:65:cf: 36:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7A:B3:4F:04:E2:89:6B:8E:DA:F8:4C:ED:1C:B7:41:B5:DD:72:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/2a9e68fd-baa0-33a2-a892-cada89803b9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:11:b0:ab:8b:af:34:c4:ee:45:69:3b:00:d7:81:4a:d2:ab: 29:68:29:4a:6f:0d:37:88:39:28:6a:67:05:f8:eb:35:9d:3a: 0d:4b:97:42:7b:b6:cd:0f:b5:ec:06:3b:07:67:c1:66:61:5e: 4d:96:01:f2:77:e8:fe:e9:95:7c:cf:95:17:df:21:6f:03:c0: f2:8d:eb:1f:b9:c8:62:05:1a:20:dd:28:5d:40:4b:f4:80:3f: 15:58:3a:18:47:58:d0:63:13:68:f1:4a:a9:7b:97:de:aa:a3: 20:9a:3d:d0:5d:27:6b:b6:33:12:e9:d6:57:dd:a9:41:bf:5c: b0:4c:08:ea:66:01:1b:56:b8:07:6d:69:98:29:c3:a5:2c:fa: ff:f7:01:a6:e6:9d:3f:67:66:9e:4a:7d:bb:71:a3:8f:73:64: 04:2c:5d:5f:de:b8:ca:ee:85:bd:98:ea:8a:bc:91:61:da:ff: ac:6b:49:47:5b:69:4c:9d:c3:7c:a1:93:4f:47:aa:11:2b:31: 8e:02:e1:47:5c:1b:90:1d:56:f0:f5:84:d8:df:0a:b4:c5:00: 19:e0:90:cc:0f:b8:ea:60:7d:cd:22:be:2d:1d:e8:d0:2b:bf: 21:d7:e6:5d:ad:5d:6f:b0:5f:40:1b:7d:ab:59:6b:a5:7b:4a: eb:45:83:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Jl14SVtx4DunF1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDMyNTE2NDAzNFoXDTI2MDYyMzE2NDAzNFowLzEtMCsGA1UEAxMk MjEwMDBhMTYtNDEyMi00YmU2LWExYzgtM2MxY2U2NDc1YjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhFR740Fn/E5dLQZGPrV75yg8Bd00Ky9pr96 vYtAUpgmyr+FRB8UaM/9hYYdh626Hnr7S5w41h/OYQ79Y41oGDTetV4rRIqpbrHy 4RHJe079AOuZ6C04YFAjE1Ey/TsH/zKWAdRHlooOpojXZaq+hN8KMEzmdFXmsoMh 0gmyd47M34o+3sD/sbDh3//FpVDXv3rYaBYfLuGvhRYM8ZMU/Tz033AEm2MQu8Ct DdIk1/79Ty5D4Hga87mBzSeJAwU25Gog+aTL+8n18lY2vAB/RG5BRJNVRHZA5Lix aP4ngnBRH3UC+0fJ61VtImqxpbWgsxAL+DcRIwIO2A5mZc82hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG96s08E4olrjtr4TO0ct0G13XKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMmE5ZTY4ZmQtYmFhMC0z M2EyLWE4OTItY2FkYTg5ODAzYjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASsa4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQRsKuLrzTE7kVpOwDXgUrSqyloKUpvDTeIOShqZwX46zWdOg1Ll0J7 ts0PtewGOwdnwWZhXk2WAfJ36P7plXzPlRffIW8DwPKN6x+5yGIFGiDdKF1AS/SA PxVYOhhHWNBjE2jxSql7l96qoyCaPdBdJ2u2MxLp1lfdqUG/XLBMCOpmARtWuAdt aZgpw6Us+v/3AabmnT9nZp5Kfbtxo49zZAQsXV/euMruhb2Y6oq8kWHa/6xrSUdb aUydw3yhk09HqhErMY4C4UdcG5AdVvD1hNjfCrTFABngkMwPuOpgfc0ivi0d6NAr vyHX5l2tXW+wX0AbfatZa6V7SutFg/k= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:58 2026 by rpki-client