$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/a8e77fbf-65a9-3d56-9ef5-046562143f67.roa File: a8e77fbf-65a9-3d56-9ef5-046562143f67.roa (raw, json) Hash identifier: aLXqJKP9RnSvxHnm+DLQ7GglvrXqNAlCIbzXqlnqzPM= Subject key identifier: EE:C6:9A:CC:D4:AC:CC:C7:0A:34:42:6C:B6:FA:E6:31:39:A8:70:18 Certificate issuer: /CN=0a387fbb-813d-452e-8a43-3425e95bbecc Certificate serial: 010D0C9F4328584F0C077F63B7C39C8F3417D780 Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/a8e77fbf-65a9-3d56-9ef5-046562143f67.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 401333 IP address blocks: 75.98.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:7f:63:b7:c3:9c:8f:34:17:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=a3b66692-c058-47a4-ac98-66fa7f14625d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:63:c7:74:96:fd:3e:84:a0:34:8e:11:f1:18: dd:3c:83:4b:03:de:31:ff:4c:71:1f:b8:5f:0d:86: 4c:20:99:1d:4f:47:5c:6d:5f:39:05:76:83:8c:d2: 68:84:b0:4e:8a:5b:e8:8a:34:e8:3c:ba:6b:b6:70: e6:d1:ec:bd:ed:45:44:47:e8:9b:dd:45:c4:27:7e: 19:75:f1:a7:68:61:aa:c7:c0:5f:04:e0:5c:38:71: bb:43:a4:ed:04:52:cb:7a:18:17:bd:01:16:ba:b1: e5:58:6f:36:bf:af:d7:fd:28:48:ea:c2:b4:52:e5: 07:b1:e6:ad:14:cd:31:e6:aa:56:77:b2:0d:9e:b7: 9a:22:8e:54:b2:c0:cd:da:54:68:e0:42:a4:11:dc: 69:17:19:eb:fe:1c:92:25:be:a8:bc:74:a7:f8:b7: e2:51:a9:d7:a1:27:76:ef:dd:68:57:ec:b9:f1:9f: 21:f4:78:1d:0b:57:39:99:79:30:e9:dd:12:41:d0: 13:83:da:20:48:f7:28:98:d5:e2:33:61:15:ae:dc: 36:fe:01:f6:31:49:24:30:cf:88:17:b9:c4:19:3c: b5:d0:bc:50:1d:46:4b:f2:7f:06:51:cd:8e:5b:da: 12:57:71:b1:7d:37:d6:41:6f:a7:e6:68:28:99:89: 8f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C6:9A:CC:D4:AC:CC:C7:0A:34:42:6C:B6:FA:E6:31:39:A8:70:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/a8e77fbf-65a9-3d56-9ef5-046562143f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl X509v3 Authority Key Identifier: keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer sbgp-ipAddrBlock: critical IPv4: 75.98.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0d:1c:12:22:87:5e:00:4d:f5:eb:c8:49:5e:27:57:73:41: 52:7c:7c:4c:c4:65:7a:76:77:f6:b1:42:d2:79:92:c1:ee:14: 36:10:de:1f:af:ed:dc:3c:24:9e:0d:c8:69:d5:81:78:a9:de: 1a:b9:51:71:3b:16:2b:fe:7d:a2:31:57:5e:d4:6e:0b:d0:9a: 71:a6:dd:60:f1:69:3e:fe:e9:47:b6:96:98:7a:cb:43:1e:9b: 8f:84:cd:c7:e5:20:94:46:c6:32:18:db:df:94:5e:86:c7:39: 70:ab:8a:2f:a2:cd:65:49:dd:64:22:26:21:5c:0d:61:4d:d7: 25:6f:64:32:53:6c:40:04:15:d6:d0:66:ca:ad:84:a1:88:56: b1:c8:e1:e0:1f:bc:20:85:d1:78:a1:14:3a:6e:6a:80:a8:47: a0:82:29:4d:59:4a:fa:d5:36:ee:5f:c5:b3:c5:ac:a1:7a:af: 89:4b:72:f2:0e:bf:1b:01:5a:71:24:ee:89:af:3a:48:3e:69: 55:e5:cd:05:0f:7f:0e:da:39:c8:10:fd:86:e0:e8:72:f3:52: f5:93:6b:8a:5b:92:f2:8f:dc:5f:68:27:03:b1:2f:8b:a9:6e: 63:7f:ca:0b:f8:a1:fd:0b:52:03:0b:b2:78:b7:ab:45:34:ad: d3:7a:c0:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB39jt8OcjzQX14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEzODdmYmItODEzZC00NTJlLThhNDMtMzQyNWU5NWJi ZWNjMB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk YTNiNjY2OTItYzA1OC00N2E0LWFjOTgtNjZmYTdmMTQ2MjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WPHdJb9PoSgNI4R8RjdPINLA94x/0xxH7hf DYZMIJkdT0dcbV85BXaDjNJohLBOilvoijToPLprtnDm0ey97UVER+ib3UXEJ34Z dfGnaGGqx8BfBOBcOHG7Q6TtBFLLehgXvQEWurHlWG82v6/X/ShI6sK0UuUHseat FM0x5qpWd7INnreaIo5UssDN2lRo4EKkEdxpFxnr/hySJb6ovHSn+LfiUanXoSd2 791oV+y58Z8h9HgdC1c5mXkw6d0SQdATg9ogSPcomNXiM2EVrtw2/gH2MUkkMM+I F7nEGTy10LxQHUZL8n8GUc2OW9oSV3GxfTfWQW+n5mgomYmPuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7GmszUrMzHCjRCbLb65jE5qHAYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4 N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1ZTk1YmJlY2MvYThlNzdmYmYtNjVhOS0z ZDU2LTllZjUtMDQ2NTYyMTQzZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGEzODdmYmItODEzZC00NTJlLThh NDMtMzQyNWU5NWJiZWNjLzBhMzg3ZmJiLTgxM2QtNDUyZS04YTQzLTM0MjVlOTVi YmVjYy5jcmwwHwYDVR0jBBgwFoAU0YPe7zgSQOCS6eXYUdv7BGEFo9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1 ZTk1YmJlY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2LuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkNHBIih14ATfXryEleJ1dzQVJ8fEzEZXp2d/axQtJ5ksHuFDYQ3h+v 7dw8JJ4NyGnVgXip3hq5UXE7Fiv+faIxV17UbgvQmnGm3WDxaT7+6Ue2lph6y0Me m4+EzcflIJRGxjIY29+UXobHOXCrii+izWVJ3WQiJiFcDWFN1yVvZDJTbEAEFdbQ ZsqthKGIVrHI4eAfvCCF0XihFDpuaoCoR6CCKU1ZSvrVNu5fxbPFrKF6r4lLcvIO vxsBWnEk7omvOkg+aVXlzQUPfw7aOcgQ/Ybg6HLzUvWTa4pbkvKP3F9oJwOxL4up bmN/ygv4of0LUgMLsni3q0U0rdN6wOo= -----END CERTIFICATE-----Generated at Mon Sep 21 22:17:07 2026 by rpki-client