$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/40a85d2e-9307-3798-b477-95f753e966e4.roa File: 40a85d2e-9307-3798-b477-95f753e966e4.roa (raw, json) Hash identifier: uGBtJrQQZxAAJurCxSUBdRTc4k3Qbs7+qDcdOO77T8Y= Subject key identifier: C9:C7:90:43:F2:F8:FF:73:4A:01:0F:85:3C:77:EB:BF:DA:68:5F:2A Certificate issuer: /CN=0a387fbb-813d-452e-8a43-3425e95bbecc Certificate serial: 010D0C9F4328584F0C078784CE606D1E472D3AA0 Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/40a85d2e-9307-3798-b477-95f753e966e4.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 401333 IP address blocks: 75.98.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:87:84:ce:60:6d:1e:47:2d:3a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=d1714c2e-b21c-4fe2-ab6d-67d40feeaae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c8:d9:19:e1:34:40:8d:fa:66:da:05:3c:ad: ce:d8:7b:a0:4c:06:2e:24:a8:cf:0e:03:86:c1:7b: b3:af:c2:dc:8e:2c:bf:1e:a1:f9:05:09:d4:0f:66: 15:80:3e:c9:6e:94:af:d2:1b:62:d0:67:6a:d3:3d: e5:52:03:40:65:e0:2f:8a:67:83:b4:25:c3:eb:b9: a1:f0:ac:ba:40:99:21:46:3d:8a:e3:00:e6:0c:4b: be:f2:75:9c:9b:b2:c0:a3:cf:ca:9b:e1:f2:23:5f: 18:de:e8:a1:cf:e7:0c:e9:13:ec:79:23:9a:01:0e: f5:59:5c:1a:48:bf:df:6c:65:e8:4f:78:5d:73:bc: 95:90:4a:d0:32:ee:65:bb:17:23:39:85:ec:33:62: b9:9d:7e:30:d9:96:c3:e3:c9:40:f5:1b:f5:1d:63: e6:8f:b5:68:02:7b:5f:9c:50:29:32:79:58:dc:f0: 1d:29:23:f0:38:f1:16:70:7f:78:ec:f4:12:20:87: 1e:df:b5:a3:65:6d:e2:05:1f:06:aa:f7:dc:8e:b2: dc:4b:45:29:93:f7:c3:c4:29:ee:58:58:8a:6d:b3: 72:1f:0e:1c:c1:df:0c:9e:eb:64:ee:e5:01:cc:cb: ea:10:35:49:25:b6:67:10:f6:4b:47:59:af:7b:c5: b4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C7:90:43:F2:F8:FF:73:4A:01:0F:85:3C:77:EB:BF:DA:68:5F:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/40a85d2e-9307-3798-b477-95f753e966e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl X509v3 Authority Key Identifier: keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer sbgp-ipAddrBlock: critical IPv4: 75.98.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:16:e6:90:40:77:a3:7b:b4:93:b2:32:d1:6c:e0:46:08:0a: 0a:5e:e9:42:52:53:d6:14:b1:20:59:8f:bb:0f:9a:90:08:5e: 4a:bc:56:cf:d5:31:e7:15:4f:51:e8:d8:0f:54:4f:fc:78:14: 55:6f:db:a6:06:4d:6c:27:4e:87:5d:d9:e9:b0:c9:7a:ab:40: c3:86:fa:b0:c3:d1:7e:92:5f:e8:fa:32:79:9c:d8:ac:6e:62: 8c:b0:e6:1f:1f:95:25:89:a6:ba:98:71:f5:29:0f:ef:77:36: f9:8e:43:c7:c4:62:4b:52:f6:d3:3d:76:ff:cf:01:54:6b:22: db:23:43:79:51:14:3a:29:14:ed:16:7c:7e:7f:1a:06:28:fe: c2:e5:1b:40:88:ba:d5:20:c3:fc:7c:57:0f:72:37:0d:29:9f: f0:81:99:5a:b9:00:24:14:96:ef:ee:06:0d:a6:1a:f9:b9:87: 5d:45:4f:d4:b1:a5:e7:5e:4a:d0:3b:1b:eb:a4:9d:47:6c:56: 87:ab:7c:74:8a:82:a5:63:1a:17:d7:0b:b7:49:50:e3:7b:eb: 52:63:e3:79:fa:40:9e:25:ff:15:af:ef:b9:a1:ed:31:aa:9d: 8b:7f:b7:37:79:41:2a:34:ed:2e:dc:07:da:80:88:4d:6d:8f: 4b:d0:45:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4eEzmBtHkctOqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEzODdmYmItODEzZC00NTJlLThhNDMtMzQyNWU5NWJi ZWNjMB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk ZDE3MTRjMmUtYjIxYy00ZmUyLWFiNmQtNjdkNDBmZWVhYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMjZGeE0QI36ZtoFPK3O2HugTAYuJKjPDgOG wXuzr8Lcjiy/HqH5BQnUD2YVgD7JbpSv0hti0Gdq0z3lUgNAZeAvimeDtCXD67mh 8Ky6QJkhRj2K4wDmDEu+8nWcm7LAo8/Km+HyI18Y3uihz+cM6RPseSOaAQ71WVwa SL/fbGXoT3hdc7yVkErQMu5luxcjOYXsM2K5nX4w2ZbD48lA9Rv1HWPmj7VoAntf nFApMnlY3PAdKSPwOPEWcH947PQSIIce37WjZW3iBR8GqvfcjrLcS0Upk/fDxCnu WFiKbbNyHw4cwd8Mnutk7uUBzMvqEDVJJbZnEPZLR1mve8W0YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnHkEPy+P9zSgEPhTx367/aaF8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4 N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1ZTk1YmJlY2MvNDBhODVkMmUtOTMwNy0z Nzk4LWI0NzctOTVmNzUzZTk2NmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGEzODdmYmItODEzZC00NTJlLThh NDMtMzQyNWU5NWJiZWNjLzBhMzg3ZmJiLTgxM2QtNDUyZS04YTQzLTM0MjVlOTVi YmVjYy5jcmwwHwYDVR0jBBgwFoAU0YPe7zgSQOCS6eXYUdv7BGEFo9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1 ZTk1YmJlY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2LnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwW5pBAd6N7tJOyMtFs4EYICgpe6UJSU9YUsSBZj7sPmpAIXkq8Vs/V MecVT1Ho2A9UT/x4FFVv26YGTWwnTodd2emwyXqrQMOG+rDD0X6SX+j6Mnmc2Kxu Yoyw5h8flSWJprqYcfUpD+93NvmOQ8fEYktS9tM9dv/PAVRrItsjQ3lRFDopFO0W fH5/GgYo/sLlG0CIutUgw/x8Vw9yNw0pn/CBmVq5ACQUlu/uBg2mGvm5h11FT9Sx pedeStA7G+uknUdsVoerfHSKgqVjGhfXC7dJUON761Jj43n6QJ4l/xWv77mh7TGq nYt/tzd5QSo07S7cB9qAiE1tj0vQRRY= -----END CERTIFICATE-----Generated at Mon Sep 21 23:44:23 2026 by rpki-client