$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/89c1a27c-4785-3e9c-9da2-88ec327f90d6.roa File: 89c1a27c-4785-3e9c-9da2-88ec327f90d6.roa (raw, json) Hash identifier: qLMO1bWcy8SvGLglPFwP4XSa/nZpkiOafRJybrrQSoo= Subject key identifier: F6:1F:61:3D:D7:39:FF:D5:29:07:8D:70:36:ED:09:B0:56:9C:CE:09 Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32 Certificate serial: 010D0C9F4328584D499609D18F5BF528B39F0A80 Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/89c1a27c-4785-3e9c-9da2-88ec327f90d6.roa Signing time: Wed 25 Mar 2026 16:37:54 +0000 ROA not before: Wed 25 Mar 2026 16:37:54 +0000 ROA not after: Tue 23 Jun 2026 16:37:54 +0000 asID: 812 IP address blocks: 74.198.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:96:09:d1:8f:5b:f5:28:b3:9f:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32 Validity Not Before: Mar 25 16:37:54 2026 GMT Not After : Jun 23 16:37:54 2026 GMT Subject: CN=cb808c41-f86d-4bcc-9b1a-ad41ed7fafd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:34:9f:dd:16:17:94:b1:bd:21:e6:1c:3c:75: 87:8a:50:81:c6:4e:ee:75:fa:97:7b:31:61:e8:73: eb:f7:be:f0:8b:9f:a6:bc:ff:b8:d7:30:b7:56:48: 92:7e:6a:ef:05:cc:01:6b:f4:d1:c5:2c:40:37:33: 9e:c4:d8:56:f0:e0:fe:76:ee:06:5f:14:7a:90:a9: 19:d0:d0:21:fa:f3:4d:76:46:f4:e0:33:3b:f8:70: a6:d6:00:c1:ff:1a:92:82:4d:37:c1:61:e3:ef:3a: ab:02:cf:76:08:9f:bc:3a:3c:a5:b1:87:f3:c7:ca: 02:b3:62:94:36:88:5b:74:09:ad:5e:3b:ca:39:f0: d6:73:45:d3:c2:60:52:3b:15:b9:f2:39:c6:d2:6f: 5f:25:52:c0:84:02:e7:06:68:0f:4c:ab:e7:f6:ed: 3a:9d:76:19:46:bf:7b:e0:cc:80:5c:dc:e8:84:8c: d6:ff:0f:dd:76:00:37:6a:e8:92:73:2e:03:0d:bf: 2f:6f:08:8a:27:a3:2d:5e:0e:03:52:9f:b2:bf:dd: cd:d6:db:ee:7c:b2:ab:1c:c8:cc:4c:65:7b:c6:f8: f6:17:4c:e0:8c:d8:13:4a:d1:c6:66:68:75:77:26: 35:34:d7:98:c8:ca:39:a6:67:4d:58:1a:d3:e3:c9: 97:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1F:61:3D:D7:39:FF:D5:29:07:8D:70:36:ED:09:B0:56:9C:CE:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/89c1a27c-4785-3e9c-9da2-88ec327f90d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl X509v3 Authority Key Identifier: keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer sbgp-ipAddrBlock: critical IPv4: 74.198.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a7:a1:c2:5d:3a:6e:53:2d:8f:04:6a:1b:1d:3e:22:da:37: 90:92:e2:97:8a:fb:eb:28:75:63:de:fb:40:d7:7a:ff:13:6e: 8c:44:eb:f2:da:93:29:d0:58:8e:ec:8f:51:66:1f:5a:20:98: dc:cf:d4:37:07:c5:c1:9b:d6:de:e2:61:af:85:f2:8a:53:73: 89:25:9f:1f:dc:d6:6b:08:8e:95:33:0b:44:f0:cd:3c:99:10: 59:ab:2d:82:d0:75:7b:74:00:52:74:02:49:10:0a:ae:73:ab: a1:21:f9:70:f5:37:5b:6e:31:e2:6f:9f:49:a5:09:eb:74:75: 11:bc:ae:2a:cd:78:4f:9b:3a:e5:64:0f:02:ca:13:5f:f8:0e: 32:13:22:5e:c7:2f:e2:3c:2f:65:79:0d:c6:3e:21:29:01:96: 9d:a0:6a:38:74:cf:ae:99:a7:9f:56:b7:ff:98:f1:e1:64:88: 6d:51:5c:8a:75:a6:33:1f:cc:3d:b2:73:a2:69:2c:43:e6:26: 6b:e1:e2:70:58:d6:b1:ae:36:03:3a:5f:f5:5f:50:40:a3:f0: 31:d4:21:f7:5f:08:d3:35:ca:b7:c6:a9:5b:17:84:b9:3f:22: 3b:e1:c3:85:df:f5:b3:ce:da:ba:c0:97:e0:11:5f:8a:41:04: 92:61:6a:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JlgnRj1v1KLOfCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw YTMyMB4XDTI2MDMyNTE2Mzc1NFoXDTI2MDYyMzE2Mzc1NFowLzEtMCsGA1UEAxMk Y2I4MDhjNDEtZjg2ZC00YmNjLTliMWEtYWQ0MWVkN2ZhZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDSf3RYXlLG9IeYcPHWHilCBxk7udfqXezFh 6HPr977wi5+mvP+41zC3VkiSfmrvBcwBa/TRxSxANzOexNhW8OD+du4GXxR6kKkZ 0NAh+vNNdkb04DM7+HCm1gDB/xqSgk03wWHj7zqrAs92CJ+8OjylsYfzx8oCs2KU NohbdAmtXjvKOfDWc0XTwmBSOxW58jnG0m9fJVLAhALnBmgPTKvn9u06nXYZRr97 4MyAXNzohIzW/w/ddgA3auiScy4DDb8vbwiKJ6MtXg4DUp+yv93N1tvufLKrHMjM TGV7xvj2F0zgjNgTStHGZmh1dyY1NNeYyMo5pmdNWBrT48mXfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYfYT3XOf/VKQeNcDbtCbBWnM4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvODljMWEyN2MtNDc4NS0z ZTljLTlkYTItODhlYzMyN2Y5MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3 ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0 MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASsZaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGnocJdOm5TLY8EahsdPiLaN5CS4peK++sodWPe+0DXev8TboxE6/La kynQWI7sj1FmH1ogmNzP1DcHxcGb1t7iYa+F8opTc4klnx/c1msIjpUzC0TwzTyZ EFmrLYLQdXt0AFJ0AkkQCq5zq6Eh+XD1N1tuMeJvn0mlCet0dRG8rirNeE+bOuVk DwLKE1/4DjITIl7HL+I8L2V5DcY+ISkBlp2gajh0z66Zp59Wt/+Y8eFkiG1RXIp1 pjMfzD2yc6JpLEPmJmvh4nBY1rGuNgM6X/VfUECj8DHUIfdfCNM1yrfGqVsXhLk/ Ijvhw4Xf9bPO2rrAl+ARX4pBBJJhakI= -----END CERTIFICATE-----Generated at Thu Mar 26 21:27:32 2026 by rpki-client