$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/8514efee-ce18-38cf-9bf6-f6432a19ca56.roa File: 8514efee-ce18-38cf-9bf6-f6432a19ca56.roa (raw, json) Hash identifier: mtYeSvNuvbtF3dW4TKIP2U/2M+g+vdZ+kS+rvy7Li54= Subject key identifier: E4:11:39:9A:AE:69:77:16:AB:F4:B5:41:A8:A7:C1:F2:1C:5B:1A:BD Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584D498072D80B043EF9D14E3980 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/8514efee-ce18-38cf-9bf6-f6432a19ca56.roa Signing time: Wed 25 Mar 2026 15:54:24 +0000 ROA not before: Wed 25 Mar 2026 15:54:24 +0000 ROA not after: Tue 23 Jun 2026 15:54:24 +0000 asID: 812 IP address blocks: 74.198.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:80:72:d8:0b:04:3e:f9:d1:4e:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Mar 25 15:54:24 2026 GMT Not After : Jun 23 15:54:24 2026 GMT Subject: CN=9dc1cf8c-9a1d-4f30-b66c-2a7b05cdaf02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cb:67:ec:e9:12:3c:49:63:34:82:66:ce:d6: e7:3f:b4:3f:e0:3e:65:2f:21:ac:d4:79:67:84:1e: a1:b1:89:61:54:1f:14:93:0a:09:54:dc:f2:89:40: ff:2d:49:9f:fc:ba:45:92:e4:9f:83:93:66:80:2c: e6:97:10:b4:4e:22:f6:74:fd:f3:c7:31:0c:e7:3b: 7e:6d:54:3a:f5:24:f0:12:d2:b5:b3:df:5f:d4:d5: 50:f0:8c:57:ca:37:6a:cd:08:99:44:95:02:32:37: 0e:df:20:c1:dd:5e:40:5e:50:70:25:62:7c:37:2c: b3:11:38:0d:7c:23:0a:34:0a:b2:a2:86:26:52:fd: 0a:a9:79:4d:77:fc:75:9f:7b:b2:56:81:66:0c:bb: 99:f7:0b:d3:ca:09:47:7a:24:18:3c:74:de:13:40: 76:a5:f0:53:21:e0:ab:c5:4f:12:9d:30:31:60:76: d3:83:48:f4:e8:2e:26:60:bb:ec:b3:b9:48:10:20: 70:4e:51:a1:e2:ad:df:24:8e:db:b4:bf:fd:4e:58: 1d:63:b9:2a:7f:a8:ae:13:b6:49:f2:a1:5c:e8:e4: c6:52:58:eb:79:de:d8:cc:fd:2e:2a:ae:33:ea:29: cc:06:07:c9:0c:95:02:b0:72:bc:1b:10:f0:c3:b9: 54:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:11:39:9A:AE:69:77:16:AB:F4:B5:41:A8:A7:C1:F2:1C:5B:1A:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/8514efee-ce18-38cf-9bf6-f6432a19ca56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:61:e2:ed:c5:b1:ed:ff:cf:0c:c7:1e:51:f1:80:cc:81:b4: f3:61:ca:36:23:92:02:02:0b:ff:9b:6b:8d:c6:89:56:80:75: 6f:8d:08:8f:82:31:5f:18:2c:0b:40:ed:b3:14:e5:84:db:40: 06:3b:53:ea:b0:b8:21:8c:16:a7:9a:c3:9a:83:59:fb:59:81: 77:a0:71:f1:06:75:be:1c:c1:81:65:6b:84:bc:a4:8b:a8:73: 89:d2:76:4b:15:3a:7b:22:4e:ca:58:b4:43:94:5a:e8:bf:27: b5:96:d0:5f:20:3b:98:b7:95:0b:2a:97:51:02:21:96:f5:ee: 84:e8:ba:09:d5:6b:20:32:57:4f:ae:9a:7c:41:8b:24:c8:e6: d5:7f:b7:d0:af:e3:59:20:86:4e:5a:1e:3d:95:a8:ac:30:33: 8b:f5:ce:a9:27:a7:d3:b1:2f:72:cd:e6:95:5e:ff:7e:46:b0: 60:d7:60:5d:2b:07:74:b1:fd:13:92:eb:b3:6e:43:3b:a4:34: ab:b8:21:6f:4b:4c:27:d0:9e:2b:ec:70:5e:03:36:25:da:81: 91:94:a2:cf:45:ee:e3:a4:6f:05:f4:17:66:54:d5:87:26:86: a2:bb:d7:dd:7b:17:03:63:ee:34:3a:e3:c5:60:76:77:50:ac: f7:cf:b6:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JgHLYCwQ++dFOOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDMyNTE1NTQyNFoXDTI2MDYyMzE1NTQyNFowLzEtMCsGA1UEAxMk OWRjMWNmOGMtOWExZC00ZjMwLWI2NmMtMmE3YjA1Y2RhZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mtn7OkSPEljNIJmztbnP7Q/4D5lLyGs1Hln hB6hsYlhVB8UkwoJVNzyiUD/LUmf/LpFkuSfg5NmgCzmlxC0TiL2dP3zxzEM5zt+ bVQ69STwEtK1s99f1NVQ8IxXyjdqzQiZRJUCMjcO3yDB3V5AXlBwJWJ8NyyzETgN fCMKNAqyooYmUv0KqXlNd/x1n3uyVoFmDLuZ9wvTyglHeiQYPHTeE0B2pfBTIeCr xU8SnTAxYHbTg0j06C4mYLvss7lIECBwTlGh4q3fJI7btL/9TlgdY7kqf6iuE7ZJ 8qFc6OTGUljred7YzP0uKq4z6inMBgfJDJUCsHK8GxDww7lU5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQROZquaXcWq/S1QainwfIcWxq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvODUxNGVmZWUtY2UxOC0z OGNmLTliZjYtZjY0MzJhMTljYTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSsYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1h4u3Fse3/zwzHHlHxgMyBtPNhyjYjkgICC/+ba43GiVaAdW+NCI+C MV8YLAtA7bMU5YTbQAY7U+qwuCGMFqeaw5qDWftZgXegcfEGdb4cwYFla4S8pIuo c4nSdksVOnsiTspYtEOUWui/J7WW0F8gO5i3lQsql1ECIZb17oTougnVayAyV0+u mnxBiyTI5tV/t9Cv41kghk5aHj2VqKwwM4v1zqknp9OxL3LN5pVe/35GsGDXYF0r B3Sx/ROS67NuQzukNKu4IW9LTCfQnivscF4DNiXagZGUos9F7uOkbwX0F2ZU1Ycm hqK71917FwNj7jQ648VgdndQrPfPtio= -----END CERTIFICATE-----Generated at Thu Mar 26 20:39:36 2026 by rpki-client