$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/ded54dbe-b2a2-323b-9704-aceb1f14e558.roa File: ded54dbe-b2a2-323b-9704-aceb1f14e558.roa (raw, json) Hash identifier: 17/xeqBlEm/ym1Q5TeyVo26JBU1HF6GrLE1AjUhARnU= Subject key identifier: A1:EE:9F:45:6B:F9:A0:B1:C9:42:12:EA:BF:9D:89:B2:72:BA:E2:F4 Certificate issuer: /CN=0a387fbb-813d-452e-8a43-3425e95bbecc Certificate serial: 010D0C9F4328584FADF3388358426E96D5F38100 Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/ded54dbe-b2a2-323b-9704-aceb1f14e558.roa Signing time: Sat 31 Oct 2026 01:00:13 +0000 ROA not before: Sat 31 Oct 2026 01:00:13 +0000 ROA not after: Fri 29 Jan 2027 02:00:13 +0000 asID: 401333 IP address blocks: 75.98.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ad:f3:38:83:58:42:6e:96:d5:f3:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc Validity Not Before: Oct 31 01:00:13 2026 GMT Not After : Jan 29 02:00:13 2027 GMT Subject: CN=4c8fefbc-5fbe-41a1-9218-3ec3e9906ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:d5:54:b9:3d:79:d0:79:90:50:d6:0d:1e: 99:d2:81:03:e2:58:5d:e7:6c:67:47:42:26:46:47: 2d:67:b0:26:12:c5:0f:18:30:2d:fb:ae:a3:c0:a1: ae:a4:cc:61:86:7e:b8:4c:7b:1e:9c:b2:61:fb:89: 99:73:ac:fa:3b:ee:10:bb:a4:63:e9:0a:22:d3:83: c2:ba:38:43:d2:58:5f:0d:62:d7:31:27:e2:2c:3c: 88:e9:e8:a3:ec:b7:c2:9e:8d:4f:35:22:06:a3:c6: 4d:99:d7:ec:1f:d6:b9:0c:ed:c1:6d:c8:ba:08:f5: 34:ce:57:8f:a9:57:7f:d9:cb:38:99:38:79:2e:5d: f3:81:9b:f3:0e:94:62:90:68:6d:6b:2d:1e:e6:4a: 69:81:e1:ca:f3:90:f4:ae:c8:73:6b:52:b7:7b:de: b6:26:b6:06:48:ed:a7:ab:2d:38:72:52:f1:dd:30: fe:14:5d:22:1a:8b:32:0b:63:3f:33:a7:eb:04:c4: 5a:ca:5f:6a:64:0f:80:77:ce:c1:c2:31:c9:66:43: 7f:03:a3:1f:c8:2d:78:ed:68:5a:e9:16:4c:77:28: 50:d4:ae:d2:a8:70:4f:e4:e9:63:cb:e2:a9:28:3c: be:ca:4d:22:f9:4d:80:58:32:91:ef:fd:bd:ee:c2: 34:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EE:9F:45:6B:F9:A0:B1:C9:42:12:EA:BF:9D:89:B2:72:BA:E2:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/ded54dbe-b2a2-323b-9704-aceb1f14e558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl X509v3 Authority Key Identifier: keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer sbgp-ipAddrBlock: critical IPv4: 75.98.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:91:49:bd:3e:da:a6:30:7d:b8:d4:ce:8e:92:30:d3:56:37: bd:26:69:9e:41:73:73:62:60:84:28:75:05:ee:0c:97:f0:b6: de:56:67:ed:3c:2c:00:9c:4a:39:88:33:c1:8d:1c:d9:38:db: 84:52:01:70:83:63:22:26:2a:96:27:98:de:21:da:44:20:78: 9a:c5:e2:ad:d3:50:c7:3d:0c:e9:ab:9d:67:9b:27:27:5f:21: 69:1f:64:47:4b:29:0e:f8:c0:de:59:0f:73:cf:47:70:4f:cf: e9:55:6a:48:e0:af:0f:34:cf:d2:6b:05:56:af:01:d4:fb:79: 5d:32:43:11:af:0d:25:b2:d7:27:7c:b0:05:12:c6:7b:90:54: 18:ed:1f:a5:93:55:7e:c5:3b:40:64:89:62:49:47:78:72:cc: 4c:a5:6d:48:21:2e:3f:6a:09:23:d3:44:fb:52:60:1c:f0:66: 10:61:95:18:66:e9:69:90:59:15:17:93:d4:cc:e6:67:fe:88: 64:cd:d8:98:6d:05:43:99:d0:d5:68:a3:a3:00:c5:1d:75:25: 9f:33:1c:af:15:18:80:38:3c:ae:bb:88:ff:dd:b6:1c:35:f9: e9:57:ab:f1:6e:b7:82:b5:60:03:3b:57:98:f3:fe:c9:a3:b1: 1a:34:9d:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+t8ziDWEJultXzgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEzODdmYmItODEzZC00NTJlLThhNDMtMzQyNWU5NWJi ZWNjMB4XDTI2MTAzMTAxMDAxM1oXDTI3MDEyOTAyMDAxM1owLzEtMCsGA1UEAxMk NGM4ZmVmYmMtNWZiZS00MWExLTkyMTgtM2VjM2U5OTA2YWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttLVVLk9edB5kFDWDR6Z0oED4lhd52xnR0Im RkctZ7AmEsUPGDAt+66jwKGupMxhhn64THsenLJh+4mZc6z6O+4Qu6Rj6Qoi04PC ujhD0lhfDWLXMSfiLDyI6eij7LfCno1PNSIGo8ZNmdfsH9a5DO3Bbci6CPU0zleP qVd/2cs4mTh5Ll3zgZvzDpRikGhtay0e5kppgeHK85D0rshza1K3e962JrYGSO2n qy04clLx3TD+FF0iGosyC2M/M6frBMRayl9qZA+Ad87BwjHJZkN/A6MfyC147Wha 6RZMdyhQ1K7SqHBP5Oljy+KpKDy+yk0i+U2AWDKR7/297sI06QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHun0Vr+aCxyUIS6r+dibJyuuL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4 N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1ZTk1YmJlY2MvZGVkNTRkYmUtYjJhMi0z MjNiLTk3MDQtYWNlYjFmMTRlNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGEzODdmYmItODEzZC00NTJlLThh NDMtMzQyNWU5NWJiZWNjLzBhMzg3ZmJiLTgxM2QtNDUyZS04YTQzLTM0MjVlOTVi YmVjYy5jcmwwHwYDVR0jBBgwFoAU0YPe7zgSQOCS6eXYUdv7BGEFo9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1 ZTk1YmJlY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2LlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGORSb0+2qYwfbjUzo6SMNNWN70maZ5Bc3NiYIQodQXuDJfwtt5WZ+08 LACcSjmIM8GNHNk424RSAXCDYyImKpYnmN4h2kQgeJrF4q3TUMc9DOmrnWebJydf IWkfZEdLKQ74wN5ZD3PPR3BPz+lVakjgrw80z9JrBVavAdT7eV0yQxGvDSWy1yd8 sAUSxnuQVBjtH6WTVX7FO0BkiWJJR3hyzEylbUghLj9qCSPTRPtSYBzwZhBhlRhm 6WmQWRUXk9TM5mf+iGTN2JhtBUOZ0NVoo6MAxR11JZ8zHK8VGIA4PK67iP/dthw1 +elXq/Fut4K1YAM7V5jz/smjsRo0nc4= -----END CERTIFICATE-----Generated at Sun Nov 15 10:05:19 2026 by rpki-client