$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/3b598b44-3c1f-351a-ac51-9ba3eed0c2c8.roa File: 3b598b44-3c1f-351a-ac51-9ba3eed0c2c8.roa (raw, json) Hash identifier: XgsWe8mFdqSYQdlxJClZweyqkjb/wUl0v+puL8NCsv0= Subject key identifier: 95:19:65:F6:08:97:04:15:0C:7A:B1:1E:2E:D7:70:52:3F:55:FD:F2 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584D499540549BBCEB4CE4F28050 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/3b598b44-3c1f-351a-ac51-9ba3eed0c2c8.roa Signing time: Wed 25 Mar 2026 16:36:18 +0000 ROA not before: Wed 25 Mar 2026 16:36:18 +0000 ROA not after: Tue 23 Jun 2026 16:36:18 +0000 asID: 812 IP address blocks: 74.198.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:95:40:54:9b:bc:eb:4c:e4:f2:80:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Mar 25 16:36:18 2026 GMT Not After : Jun 23 16:36:18 2026 GMT Subject: CN=8443bc0f-0e7e-4ed5-93f1-b099cc91a66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:77:da:71:14:97:36:c0:19:c1:c6:c3:d6: b9:9d:f6:3f:70:98:2e:4a:d6:17:3f:ba:03:89:24: bf:2b:cf:ad:c2:45:d7:07:c4:a9:3e:89:8f:8c:77: 34:09:62:7d:78:e3:59:19:9a:73:bf:33:b6:72:5d: 17:57:89:82:51:ab:19:2e:b9:08:71:7f:16:f2:c4: e2:29:e8:8e:6a:33:0d:22:b8:b9:7c:09:3a:62:23: 90:b9:e0:09:04:24:4e:1f:85:73:1e:86:0f:a4:28: 28:45:13:3f:0d:18:cb:68:23:e7:86:d0:bc:d6:59: c5:cb:46:b3:9f:51:c4:b4:00:f8:90:20:12:89:8e: 2e:6a:a3:f3:64:ca:6e:8c:44:92:a9:91:57:09:5f: 67:c7:99:71:2c:62:59:5e:29:69:09:30:0e:7e:2c: f4:39:db:ca:7c:c7:ed:26:dd:16:9d:d5:95:0a:64: b2:5a:ec:90:65:49:97:e9:40:53:74:74:39:9c:6f: 90:47:32:e9:1f:d7:b6:33:37:e2:ca:16:33:d0:70: 26:80:1b:90:b6:dc:59:ff:1a:26:8a:87:6e:a8:e4: c5:fb:49:3a:57:14:4d:42:ef:d8:56:e5:a7:52:70: d4:64:4d:4e:78:25:c1:14:70:c8:69:fb:fb:e3:9b: c2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:19:65:F6:08:97:04:15:0C:7A:B1:1E:2E:D7:70:52:3F:55:FD:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/3b598b44-3c1f-351a-ac51-9ba3eed0c2c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7f:7b:aa:8e:76:1d:4d:a7:2c:01:93:47:d1:f9:17:af:78: d2:00:f3:f4:cb:67:28:75:8b:3e:75:37:0c:ab:dc:53:d4:cb: e9:13:6f:bc:6d:e5:15:6f:74:77:e0:8d:d2:d4:a4:56:d6:99: e3:34:5c:ec:2e:68:47:7f:1a:61:25:7c:2c:f4:e5:03:8f:e0: 86:00:10:4a:e5:3c:54:72:af:00:f2:cf:0b:a7:20:7e:a2:c6: 7f:4e:62:6e:6d:f1:82:6f:a3:43:3d:54:42:6d:33:3d:ee:97: c4:d1:51:40:12:d1:48:73:57:0c:1b:66:a4:c1:cc:15:6a:d4: e0:6a:c1:60:d5:d4:5a:62:fa:3b:23:3e:b7:5c:d1:92:2f:75: 70:8a:d6:cd:a2:54:43:b8:2c:74:ce:85:fd:0b:e8:ad:1b:cd: 97:e2:79:4a:cb:95:64:d1:c3:95:73:b8:49:4c:1a:95:e8:02: e5:64:60:67:48:24:18:71:2e:a4:5d:00:4f:4c:e1:f7:00:f3: 49:45:4b:cd:92:59:ba:d5:a0:fe:28:b0:37:54:79:7f:6e:a3: 99:33:24:bb:9f:3e:db:3d:45:c0:fe:a4:d8:b2:34:67:a0:b5: 16:18:35:5a:9f:dd:4b:8b:de:8a:47:af:fd:b2:80:6d:95:67: 83:8f:82:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JlUBUm7zrTOTygFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDMyNTE2MzYxOFoXDTI2MDYyMzE2MzYxOFowLzEtMCsGA1UEAxMk ODQ0M2JjMGYtMGU3ZS00ZWQ1LTkzZjEtYjA5OWNjOTFhNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxp32nEUlzbAGcHGw9a5nfY/cJguStYXP7oD iSS/K8+twkXXB8SpPomPjHc0CWJ9eONZGZpzvzO2cl0XV4mCUasZLrkIcX8W8sTi KeiOajMNIri5fAk6YiOQueAJBCROH4VzHoYPpCgoRRM/DRjLaCPnhtC81lnFy0az n1HEtAD4kCASiY4uaqPzZMpujESSqZFXCV9nx5lxLGJZXilpCTAOfiz0OdvKfMft Jt0WndWVCmSyWuyQZUmX6UBTdHQ5nG+QRzLpH9e2MzfiyhYz0HAmgBuQttxZ/xom ioduqOTF+0k6VxRNQu/YVuWnUnDUZE1OeCXBFHDIafv745vCQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUZZfYIlwQVDHqxHi7XcFI/Vf3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvM2I1OThiNDQtM2MxZi0z NTFhLWFjNTEtOWJhM2VlZDBjMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSsZMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9/e6qOdh1NpywBk0fR+ReveNIA8/TLZyh1iz51Nwyr3FPUy+kTb7xt 5RVvdHfgjdLUpFbWmeM0XOwuaEd/GmElfCz05QOP4IYAEErlPFRyrwDyzwunIH6i xn9OYm5t8YJvo0M9VEJtMz3ul8TRUUAS0UhzVwwbZqTBzBVq1OBqwWDV1Fpi+jsj Prdc0ZIvdXCK1s2iVEO4LHTOhf0L6K0bzZfieUrLlWTRw5VzuElMGpXoAuVkYGdI JBhxLqRdAE9M4fcA80lFS82SWbrVoP4osDdUeX9uo5kzJLufPts9RcD+pNiyNGeg tRYYNVqf3UuL3opHr/2ygG2VZ4OPguc= -----END CERTIFICATE-----Generated at Thu Mar 26 18:34:09 2026 by rpki-client