$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/a8e77fbf-65a9-3d56-9ef5-046562143f67.roa File: a8e77fbf-65a9-3d56-9ef5-046562143f67.roa (raw, json) Hash identifier: 8WzSC5Du+AhUE4tOIuDpQCpCD47m0CsapQOIk7ftobU= Subject key identifier: 3C:D8:23:EC:E8:D9:46:A4:48:F6:A2:38:48:06:54:76:C3:29:2F:3A Certificate issuer: /CN=0a387fbb-813d-452e-8a43-3425e95bbecc Certificate serial: 010D0C9F4328584FADF332D9C107FE054D908800 Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/a8e77fbf-65a9-3d56-9ef5-046562143f67.roa Signing time: Sat 31 Oct 2026 01:00:13 +0000 ROA not before: Sat 31 Oct 2026 01:00:13 +0000 ROA not after: Fri 29 Jan 2027 02:00:13 +0000 asID: 401333 IP address blocks: 75.98.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ad:f3:32:d9:c1:07:fe:05:4d:90:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc Validity Not Before: Oct 31 01:00:13 2026 GMT Not After : Jan 29 02:00:13 2027 GMT Subject: CN=80668b57-ddef-4163-8b6e-b35c1762df0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:37:3f:fe:07:70:2b:39:1e:0c:09:cb:e0:4d: ec:79:35:51:e6:46:27:1d:9d:cc:f8:4f:e5:71:d4: 1f:71:98:e9:bc:ec:dc:d3:57:1c:00:06:eb:9a:3f: be:12:65:7c:6b:8a:66:8d:56:01:e5:e8:5f:92:80: c0:a8:ec:8a:c8:81:dc:7a:b4:2e:64:bf:93:ad:38: c7:52:fa:0e:54:14:d7:51:bd:70:24:93:16:ea:68: 7f:c2:2f:4c:b2:b3:b9:bd:74:9e:2f:a3:68:75:0a: 90:09:0c:41:d5:9f:4c:d5:0f:ba:73:db:44:28:28: 0e:16:2b:76:40:b5:fe:5d:0c:ba:3b:e7:92:53:17: a9:e7:0e:e9:44:fb:b7:e9:45:c6:99:ab:22:ee:13: 45:d1:46:43:27:4f:f8:60:d6:fa:49:f4:df:a8:4a: 25:36:cd:aa:c9:e6:dc:46:61:f1:a5:c1:40:ed:8d: a4:a1:05:e4:af:5b:c0:26:c4:eb:63:55:7b:9b:25: 6c:28:52:d3:6d:33:1b:37:66:9e:6d:46:00:49:24: fb:6e:cd:ed:6b:5b:ec:46:ad:42:8b:f8:26:a5:d1: 21:75:1a:db:3e:eb:fd:8f:d5:72:c0:92:22:1e:19: 0b:9f:77:16:97:3c:7d:18:a1:6d:9a:24:df:02:7f: ef:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D8:23:EC:E8:D9:46:A4:48:F6:A2:38:48:06:54:76:C3:29:2F:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/a8e77fbf-65a9-3d56-9ef5-046562143f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl X509v3 Authority Key Identifier: keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer sbgp-ipAddrBlock: critical IPv4: 75.98.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:9c:1c:8f:0d:ff:be:35:ab:81:0f:83:3a:0e:ef:cd:53:32: e0:6f:1b:a0:51:17:ba:ac:11:8a:2a:e0:52:92:16:b3:42:3a: f6:d9:de:d7:49:51:4b:a1:58:3e:a8:a7:dd:3d:3c:34:6a:d4: 78:20:75:37:98:a4:36:51:8d:53:e9:80:c3:5b:16:8c:e8:71: dd:8d:3b:64:1f:2f:6a:2c:88:f5:00:5c:a4:58:e9:89:c4:22: f4:4f:21:fa:34:ea:85:3a:21:e7:fe:cf:f9:b3:f6:5d:13:f4: 68:ae:f1:55:50:49:dd:04:eb:d4:ae:42:8f:24:57:9e:ba:78: c2:ed:5e:2d:fb:d6:28:94:36:03:82:58:a1:e2:66:1c:78:87: a9:ce:e3:e5:d1:94:e0:d4:9f:97:3c:d9:1f:2d:6f:23:5d:7c: 8e:63:8b:24:11:4b:31:c9:20:ae:38:72:48:47:b9:4d:6b:47: 9b:f0:aa:06:9b:5a:53:51:b0:52:19:91:9f:f7:bb:7f:e1:59: 9d:b7:ec:d1:9a:16:25:11:94:81:88:36:db:3a:5e:64:a1:0f: b4:3d:ef:27:82:f2:16:da:33:96:22:ad:10:b7:96:cf:a7:60: a2:ac:b7:5d:35:37:3f:54:3f:ed:b1:c5:b0:98:e3:a1:4d:4b: e6:ed:d0:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+t8zLZwQf+BU2QiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEzODdmYmItODEzZC00NTJlLThhNDMtMzQyNWU5NWJi ZWNjMB4XDTI2MTAzMTAxMDAxM1oXDTI3MDEyOTAyMDAxM1owLzEtMCsGA1UEAxMk ODA2NjhiNTctZGRlZi00MTYzLThiNmUtYjM1YzE3NjJkZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzc//gdwKzkeDAnL4E3seTVR5kYnHZ3M+E/l cdQfcZjpvOzc01ccAAbrmj++EmV8a4pmjVYB5ehfkoDAqOyKyIHcerQuZL+TrTjH UvoOVBTXUb1wJJMW6mh/wi9MsrO5vXSeL6NodQqQCQxB1Z9M1Q+6c9tEKCgOFit2 QLX+XQy6O+eSUxep5w7pRPu36UXGmasi7hNF0UZDJ0/4YNb6SfTfqEolNs2qyebc RmHxpcFA7Y2koQXkr1vAJsTrY1V7myVsKFLTbTMbN2aebUYASST7bs3ta1vsRq1C i/gmpdEhdRrbPuv9j9VywJIiHhkLn3cWlzx9GKFtmiTfAn/vfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzYI+zo2UakSPaiOEgGVHbDKS86MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4 N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1ZTk1YmJlY2MvYThlNzdmYmYtNjVhOS0z ZDU2LTllZjUtMDQ2NTYyMTQzZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGEzODdmYmItODEzZC00NTJlLThh NDMtMzQyNWU5NWJiZWNjLzBhMzg3ZmJiLTgxM2QtNDUyZS04YTQzLTM0MjVlOTVi YmVjYy5jcmwwHwYDVR0jBBgwFoAU0YPe7zgSQOCS6eXYUdv7BGEFo9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1 ZTk1YmJlY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2LuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+cHI8N/741q4EPgzoO781TMuBvG6BRF7qsEYoq4FKSFrNCOvbZ3tdJ UUuhWD6op909PDRq1HggdTeYpDZRjVPpgMNbFozocd2NO2QfL2osiPUAXKRY6YnE IvRPIfo06oU6Ief+z/mz9l0T9Giu8VVQSd0E69SuQo8kV566eMLtXi371iiUNgOC WKHiZhx4h6nO4+XRlODUn5c82R8tbyNdfI5jiyQRSzHJIK44ckhHuU1rR5vwqgab WlNRsFIZkZ/3u3/hWZ237NGaFiURlIGINts6XmShD7Q97yeC8hbaM5YirRC3ls+n YKKst101Nz9UP+2xxbCY46FNS+bt0AE= -----END CERTIFICATE-----Generated at Sun Nov 15 10:05:00 2026 by rpki-client