$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/1864f875-b51c-3f70-9310-c813ffa14bbb.roa File: 1864f875-b51c-3f70-9310-c813ffa14bbb.roa (raw, json) Hash identifier: Nq87qOMNPI0K+klRggJjupsv04Lo2a0HGforjReu1Rk= Subject key identifier: CA:F8:3C:89:A3:80:3B:A7:40:5A:12:DC:79:86:3A:5A:F2:47:D4:75 Certificate issuer: /CN=0a387fbb-813d-452e-8a43-3425e95bbecc Certificate serial: 010D0C9F4328584EA7A0D8B7C332B0FFDFC47340 Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/1864f875-b51c-3f70-9310-c813ffa14bbb.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 401333 IP address blocks: 75.98.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:d8:b7:c3:32:b0:ff:df:c4:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=31d8b6b5-71c6-4cab-8a5f-b417eb38f0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:49:ab:e0:95:da:c5:18:13:8e:9f:87:5c:51: 7b:75:b6:ce:97:95:93:60:9c:ee:7a:47:91:a3:f8: 86:0a:5e:75:39:ba:3f:99:36:0d:c9:76:46:e5:98: db:af:a1:91:79:66:03:36:96:19:2d:82:57:63:bc: 4f:83:e0:5a:38:64:28:9d:f2:5d:73:08:fd:45:5a: 18:b4:18:ca:ee:43:bb:13:02:5c:c7:a6:38:62:64: f5:e0:17:c1:7c:0e:7f:d6:77:c5:95:4e:79:5c:fc: 31:34:45:68:27:bd:fa:c4:48:54:10:25:5c:60:d3: 34:de:90:71:1f:3d:9c:57:f0:ab:3f:cd:c5:c2:2d: a4:02:67:2b:f2:fa:d1:d4:2c:6c:b0:02:38:d4:09: 1a:a8:b6:9a:73:39:c0:77:ca:c5:97:f1:50:98:b1: fc:a7:25:e7:d1:a2:6f:68:3a:3b:9e:db:c0:5b:17: 44:91:99:27:7b:05:0e:b7:3d:d5:26:65:82:70:4a: fe:72:43:28:8d:ce:85:93:83:4c:74:3f:32:a8:6e: cd:07:25:d6:a0:a6:13:72:80:1f:36:43:90:b8:08: 18:76:fe:26:00:a5:93:50:e5:7c:09:c6:00:2e:fb: 91:db:e6:91:9f:e5:80:34:f0:6a:a8:77:cf:01:a4: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F8:3C:89:A3:80:3B:A7:40:5A:12:DC:79:86:3A:5A:F2:47:D4:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/1864f875-b51c-3f70-9310-c813ffa14bbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl X509v3 Authority Key Identifier: keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer sbgp-ipAddrBlock: critical IPv4: 75.98.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:29:71:64:4a:98:1e:a5:0c:46:20:a2:d3:e9:1b:43:33:1e: 0a:1b:18:eb:1a:52:47:24:5d:ff:ec:8c:04:46:95:35:8e:a7: 6f:1d:65:19:29:23:a4:e7:69:52:3d:25:4c:f2:71:0d:b1:32: 9c:03:29:9a:9d:74:fc:1e:12:29:86:9c:95:4c:54:ff:f0:b5: 59:d1:cb:f1:27:21:05:ef:55:8c:fa:c3:38:98:4a:85:ca:a2: eb:d3:fa:c6:a6:0e:de:68:ac:30:48:08:14:34:01:47:13:ce: 75:94:5f:d4:7e:c1:66:bb:57:d7:72:4f:69:6a:e4:7d:26:e3: 81:76:28:1f:90:30:11:11:37:0e:5f:c0:6d:f6:3d:1d:72:e3: f6:ae:84:f1:8c:2d:80:78:d0:07:74:37:bd:2e:bc:cc:b8:4d: de:71:d9:0b:00:54:22:db:80:57:40:a3:ae:d0:83:8b:68:75: cd:c6:e0:c0:6f:72:f6:09:9c:25:c5:59:d6:bd:d3:bc:a0:e1: 45:d5:24:29:cc:64:8d:b8:88:35:ac:d1:5e:44:30:67:14:bf: c7:9f:a8:77:87:58:a6:6a:cc:d7:ac:e2:f1:ca:61:2a:96:13: 06:c7:97:b7:3b:a1:d2:76:08:ba:d7:9d:34:a5:c6:3e:fc:07: 94:a8:ef:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noNi3wzKw/9/Ec0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEzODdmYmItODEzZC00NTJlLThhNDMtMzQyNWU5NWJi ZWNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzFkOGI2YjUtNzFjNi00Y2FiLThhNWYtYjQxN2ViMzhmMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Umr4JXaxRgTjp+HXFF7dbbOl5WTYJzuekeR o/iGCl51Obo/mTYNyXZG5Zjbr6GReWYDNpYZLYJXY7xPg+BaOGQonfJdcwj9RVoY tBjK7kO7EwJcx6Y4YmT14BfBfA5/1nfFlU55XPwxNEVoJ736xEhUECVcYNM03pBx Hz2cV/CrP83Fwi2kAmcr8vrR1CxssAI41AkaqLaacznAd8rFl/FQmLH8pyXn0aJv aDo7ntvAWxdEkZknewUOtz3VJmWCcEr+ckMojc6Fk4NMdD8yqG7NByXWoKYTcoAf NkOQuAgYdv4mAKWTUOV8CcYALvuR2+aRn+WANPBqqHfPAaT0fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr4PImjgDunQFoS3HmGOlryR9R1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4 N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1ZTk1YmJlY2MvMTg2NGY4NzUtYjUxYy0z ZjcwLTkzMTAtYzgxM2ZmYTE0YmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGEzODdmYmItODEzZC00NTJlLThh NDMtMzQyNWU5NWJiZWNjLzBhMzg3ZmJiLTgxM2QtNDUyZS04YTQzLTM0MjVlOTVi YmVjYy5jcmwwHwYDVR0jBBgwFoAU0YPe7zgSQOCS6eXYUdv7BGEFo9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1 ZTk1YmJlY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2LrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4pcWRKmB6lDEYgotPpG0MzHgobGOsaUkckXf/sjARGlTWOp28dZRkp I6TnaVI9JUzycQ2xMpwDKZqddPweEimGnJVMVP/wtVnRy/EnIQXvVYz6wziYSoXK ouvT+samDt5orDBICBQ0AUcTznWUX9R+wWa7V9dyT2lq5H0m44F2KB+QMBERNw5f wG32PR1y4/auhPGMLYB40Ad0N70uvMy4Td5x2QsAVCLbgFdAo67Qg4todc3G4MBv cvYJnCXFWda907yg4UXVJCnMZI24iDWs0V5EMGcUv8efqHeHWKZqzNes4vHKYSqW EwbHl7c7odJ2CLrXnTSlxj78B5So7yA= -----END CERTIFICATE-----Generated at Mon Sep 21 17:00:10 2026 by rpki-client