$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/89102dc6-4690-360a-95b0-3da4b2e09af9.roa File: 89102dc6-4690-360a-95b0-3da4b2e09af9.roa (raw, json) Hash identifier: 4CVsSlBCHnimu/2hvXdovaIwGhdfudm13cWZmA23aQg= Subject key identifier: 4D:5B:2D:25:12:DF:2A:80:29:15:E5:92:01:E2:6D:18:D1:F3:08:5F Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584D4995B8B7162BA7523048F780 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/89102dc6-4690-360a-95b0-3da4b2e09af9.roa Signing time: Wed 25 Mar 2026 16:37:15 +0000 ROA not before: Wed 25 Mar 2026 16:37:15 +0000 ROA not after: Tue 23 Jun 2026 16:37:15 +0000 asID: 812 IP address blocks: 74.198.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:95:b8:b7:16:2b:a7:52:30:48:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Mar 25 16:37:15 2026 GMT Not After : Jun 23 16:37:15 2026 GMT Subject: CN=2ad80740-2135-4a04-8d7d-46ad7d29d175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:04:c7:5a:89:f5:51:df:f7:c8:6f:f4:1a:70: f2:70:d5:93:2b:08:64:bd:22:b3:0f:3d:08:34:51: 92:57:64:79:07:76:d6:e8:fa:13:16:7b:7f:a7:50: 3f:4f:be:77:41:59:86:35:7b:58:e4:38:2c:c7:43: ec:01:37:e9:c2:07:43:f1:95:9c:7a:fc:6c:97:a7: 78:3a:60:e3:1f:63:17:8a:a1:12:8b:0b:de:9c:74: 9e:d7:37:50:c2:60:51:12:b5:d9:d7:1e:17:2a:dd: 3b:e5:26:c8:79:1c:c0:e1:3a:6b:3a:82:ab:39:68: 83:af:3f:f4:6e:eb:6f:50:2f:cf:3c:ce:67:35:15: f7:cc:56:ac:c0:d7:e5:a9:4e:70:5a:fe:77:7f:d7: cf:1d:fb:6b:8c:6e:87:9f:c4:4b:ba:a6:ab:b6:94: 0f:35:ea:5e:42:8d:e2:04:2f:1a:d3:e4:29:f4:50: 9f:4f:87:5f:67:19:55:f3:6c:5e:26:97:82:d1:c0: a8:2b:45:69:13:a9:95:ed:84:2c:c7:1b:0c:a9:54: e2:50:c1:50:10:07:13:62:7f:43:da:a2:05:14:36: d8:c4:ff:26:91:a9:be:ee:47:6f:a9:e7:1b:09:e2: ea:36:a6:ba:c7:3c:5a:0e:51:fb:58:02:2a:7b:5e: 30:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5B:2D:25:12:DF:2A:80:29:15:E5:92:01:E2:6D:18:D1:F3:08:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/89102dc6-4690-360a-95b0-3da4b2e09af9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:00:c9:b3:ed:1b:07:27:98:da:86:4a:6f:b0:05:6e:f5:80: 54:2d:a3:7a:cf:4b:15:3b:57:ee:10:94:d7:62:af:8f:2e:1b: 2a:ed:5b:88:2c:e2:9d:d9:40:76:59:db:4d:ac:a0:52:ae:c1: f8:39:4b:c3:6e:89:61:cf:29:65:0a:11:8e:b8:55:8d:16:db: 1e:5d:ac:e4:16:85:c6:c1:5e:f7:30:4f:ef:0a:4d:43:4a:df: ed:37:4d:ca:df:f8:c4:a4:e1:cd:67:71:33:3a:03:eb:b5:20: 46:e8:59:eb:4c:43:46:94:aa:55:b5:dc:62:ee:9d:5f:9e:d2: 3f:1b:df:ce:43:39:17:74:69:db:c5:4c:de:11:09:c8:c4:da: d5:39:02:bd:49:b7:ee:53:48:59:7d:f9:63:45:5d:88:c1:7d: b4:de:8c:9d:61:65:1a:b4:1a:b4:ae:6a:fb:52:36:40:94:25: 21:a7:e8:8f:2e:db:e0:fc:df:d5:15:13:47:2b:09:ab:f1:e0: 7b:00:fe:65:f9:b5:aa:39:f4:c8:17:4d:23:b3:97:c0:55:fa: 91:5e:fc:27:7d:64:3d:4c:9c:25:00:8d:8a:c1:c6:09:86:a9: cb:d3:f4:06:41:e3:02:24:ef:33:35:c8:df:72:a5:4c:54:b1: d1:6e:77:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Jlbi3FiunUjBI94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDMyNTE2MzcxNVoXDTI2MDYyMzE2MzcxNVowLzEtMCsGA1UEAxMk MmFkODA3NDAtMjEzNS00YTA0LThkN2QtNDZhZDdkMjlkMTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwTHWon1Ud/3yG/0GnDycNWTKwhkvSKzDz0I NFGSV2R5B3bW6PoTFnt/p1A/T753QVmGNXtY5Dgsx0PsATfpwgdD8ZWcevxsl6d4 OmDjH2MXiqESiwvenHSe1zdQwmBRErXZ1x4XKt075SbIeRzA4TprOoKrOWiDrz/0 butvUC/PPM5nNRX3zFaswNflqU5wWv53f9fPHftrjG6Hn8RLuqartpQPNepeQo3i BC8a0+Qp9FCfT4dfZxlV82xeJpeC0cCoK0VpE6mV7YQsxxsMqVTiUMFQEAcTYn9D 2qIFFDbYxP8mkam+7kdvqecbCeLqNqa6xzxaDlH7WAIqe14waQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1bLSUS3yqAKRXlkgHibRjR8whfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvODkxMDJkYzYtNDY5MC0z NjBhLTk1YjAtM2RhNGIyZTA5YWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSsZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0AybPtGwcnmNqGSm+wBW71gFQto3rPSxU7V+4QlNdir48uGyrtW4gs 4p3ZQHZZ202soFKuwfg5S8NuiWHPKWUKEY64VY0W2x5drOQWhcbBXvcwT+8KTUNK 3+03Tcrf+MSk4c1ncTM6A+u1IEboWetMQ0aUqlW13GLunV+e0j8b385DORd0advF TN4RCcjE2tU5Ar1Jt+5TSFl9+WNFXYjBfbTejJ1hZRq0GrSuavtSNkCUJSGn6I8u 2+D839UVE0crCavx4HsA/mX5tao59MgXTSOzl8BV+pFe/Cd9ZD1MnCUAjYrBxgmG qcvT9AZB4wIk7zM1yN9ypUxUsdFud54= -----END CERTIFICATE-----Generated at Fri Mar 27 00:17:23 2026 by rpki-client