$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/90f81bee-a360-3591-8ca3-8d12d391f177.roa File: 90f81bee-a360-3591-8ca3-8d12d391f177.roa (raw, json) Hash identifier: w+BKzGoWdpXDeZtDGCG5z4QlBYnpdgFPH5cJvv2x+Yo= Subject key identifier: A5:29:B0:FF:D3:BE:B2:BA:60:AA:FC:1E:8E:F4:FD:59:2E:6E:44:72 Certificate issuer: /CN=0a387fbb-813d-452e-8a43-3425e95bbecc Certificate serial: 010D0C9F4328584F0C0786C351DB50F23AC43180 Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/90f81bee-a360-3591-8ca3-8d12d391f177.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 401333 IP address blocks: 75.98.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:86:c3:51:db:50:f2:3a:c4:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=5882c9db-cc10-442b-84e0-23011a6a09d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:7b:a7:17:95:87:14:fe:7c:cb:3f:43:3e: ca:3b:81:09:e8:29:4d:d5:7c:3e:e2:a2:5a:f7:38: 48:0d:9a:01:7e:f6:39:80:8a:5b:ce:21:bf:ea:d7: 9b:79:4b:88:cc:4a:c7:0d:c9:e5:58:fe:80:45:4b: 09:3b:9d:7f:86:db:d1:b8:ba:8c:ff:99:94:ca:1d: 20:e2:78:bc:74:15:e1:5e:02:0a:af:da:6a:8a:b1: de:42:e4:1e:b1:58:e5:61:b1:13:ce:39:a9:0c:1b: 4b:dc:6a:f8:07:46:1f:91:65:90:3c:e7:71:7f:79: 62:cc:2e:ad:eb:94:ac:31:78:9e:30:de:a4:e9:6e: df:b8:e5:d1:61:47:fc:c5:ef:94:64:94:11:a7:a3: b1:ae:8f:c0:58:f4:e8:cc:4b:06:89:09:9c:f3:f3: 82:ae:e0:47:c7:65:d0:d6:85:8d:ff:6d:0b:91:09: aa:cf:b0:ff:e6:a8:e4:3c:a5:83:f6:59:4e:8f:ce: 50:ee:b8:ec:4d:19:ba:4d:ff:b1:be:a4:13:b5:b6: b1:78:5b:2f:f7:94:a6:4e:6b:0b:06:11:1a:07:5c: 81:88:83:9f:d4:09:0b:05:0f:c8:08:83:58:e2:e5: 0d:69:f1:93:15:2d:32:c5:32:04:f5:c1:ce:a5:60: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:29:B0:FF:D3:BE:B2:BA:60:AA:FC:1E:8E:F4:FD:59:2E:6E:44:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/90f81bee-a360-3591-8ca3-8d12d391f177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl X509v3 Authority Key Identifier: keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer sbgp-ipAddrBlock: critical IPv4: 75.98.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:0c:0c:6c:73:b5:af:d7:5d:a8:92:ba:78:85:6f:72:7a:64: 9b:8f:f2:08:c1:59:2a:4e:1f:25:b5:5d:19:e7:f9:44:16:42: b4:62:da:cc:c5:1a:17:06:8b:7c:44:01:cb:21:70:4a:e3:a4: d3:46:ad:be:d6:8d:aa:b8:31:7f:43:a7:0e:76:f9:20:4c:73: e8:a7:cd:e0:24:eb:de:9f:cf:c7:e2:f0:59:34:43:3a:9e:92: 6e:66:09:d7:db:9d:d0:c8:9c:3f:8b:9e:97:9d:a9:7d:15:85: 4b:2d:c3:01:5f:68:c7:4d:3c:75:f3:6b:b2:a9:de:33:13:b5: 30:bb:87:5c:eb:18:f2:0d:73:88:8a:6e:9a:d9:e4:f2:70:f1: bd:45:52:3f:75:ee:22:c7:66:62:be:85:5b:4c:24:a6:35:95: e8:be:45:3e:50:3e:f4:cf:7b:5d:b2:76:3f:7e:10:65:81:6f: d5:94:3e:aa:c2:97:70:b3:5a:0f:46:19:0d:78:f4:ef:ca:d8: 0c:51:5a:ab:fc:09:02:86:3d:0c:01:ff:44:f5:60:78:f6:05: a9:06:e7:70:e5:62:11:68:ab:56:90:41:2f:2e:07:3b:6d:23: 7f:0b:0c:9e:3c:68:96:2e:0c:0b:49:f7:52:87:31:9f:f9:45: 84:82:d9:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4bDUdtQ8jrEMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEzODdmYmItODEzZC00NTJlLThhNDMtMzQyNWU5NWJi ZWNjMB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk NTg4MmM5ZGItY2MxMC00NDJiLTg0ZTAtMjMwMTFhNmEwOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOt7pxeVhxT+fMs/Qz7KO4EJ6ClN1Xw+4qJa 9zhIDZoBfvY5gIpbziG/6tebeUuIzErHDcnlWP6ARUsJO51/htvRuLqM/5mUyh0g 4ni8dBXhXgIKr9pqirHeQuQesVjlYbETzjmpDBtL3Gr4B0YfkWWQPOdxf3lizC6t 65SsMXieMN6k6W7fuOXRYUf8xe+UZJQRp6Oxro/AWPTozEsGiQmc8/OCruBHx2XQ 1oWN/20LkQmqz7D/5qjkPKWD9llOj85Q7rjsTRm6Tf+xvqQTtbaxeFsv95SmTmsL BhEaB1yBiIOf1AkLBQ/ICINY4uUNafGTFS0yxTIE9cHOpWA2cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUpsP/TvrK6YKr8Ho70/VkubkRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4 N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1ZTk1YmJlY2MvOTBmODFiZWUtYTM2MC0z NTkxLThjYTMtOGQxMmQzOTFmMTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGEzODdmYmItODEzZC00NTJlLThh NDMtMzQyNWU5NWJiZWNjLzBhMzg3ZmJiLTgxM2QtNDUyZS04YTQzLTM0MjVlOTVi YmVjYy5jcmwwHwYDVR0jBBgwFoAU0YPe7zgSQOCS6eXYUdv7BGEFo9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1 ZTk1YmJlY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2LjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEMDGxzta/XXaiSuniFb3J6ZJuP8gjBWSpOHyW1XRnn+UQWQrRi2szF GhcGi3xEAcshcErjpNNGrb7Wjaq4MX9Dpw52+SBMc+inzeAk696fz8fi8Fk0Qzqe km5mCdfbndDInD+LnpedqX0VhUstwwFfaMdNPHXza7Kp3jMTtTC7h1zrGPINc4iK bprZ5PJw8b1FUj917iLHZmK+hVtMJKY1lei+RT5QPvTPe12ydj9+EGWBb9WUPqrC l3CzWg9GGQ149O/K2AxRWqv8CQKGPQwB/0T1YHj2BakG53DlYhFoq1aQQS8uBztt I38LDJ48aJYuDAtJ91KHMZ/5RYSC2cw= -----END CERTIFICATE-----Generated at Mon Sep 21 14:31:46 2026 by rpki-client