$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/1864f875-b51c-3f70-9310-c813ffa14bbb.roa File: 1864f875-b51c-3f70-9310-c813ffa14bbb.roa (raw, json) Hash identifier: ZWPbl8JDzXwmA7srTrhkTWHzcl2mtEr/AyVKN/lp5oU= Subject key identifier: 69:17:0E:80:83:3C:11:81:92:99:3D:6E:F1:7B:39:0D:3E:3F:FF:A1 Certificate issuer: /CN=0a387fbb-813d-452e-8a43-3425e95bbecc Certificate serial: 010D0C9F4328584D2560B7ECFDBE900A0457BD80 Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/1864f875-b51c-3f70-9310-c813ffa14bbb.roa Signing time: Thu 12 Mar 2026 17:21:22 +0000 ROA not before: Thu 12 Mar 2026 17:21:22 +0000 ROA not after: Wed 10 Jun 2026 17:21:22 +0000 asID: 401333 IP address blocks: 75.98.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:60:b7:ec:fd:be:90:0a:04:57:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc Validity Not Before: Mar 12 17:21:22 2026 GMT Not After : Jun 10 17:21:22 2026 GMT Subject: CN=1dd72389-9fb9-4dae-99ab-c3b672b6d17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4d:69:76:1f:fb:d8:00:b9:8f:13:6b:95:67: 46:8e:bb:05:6c:46:1c:6b:54:93:70:30:a4:35:a3: 66:10:3f:5f:c7:e5:40:e8:51:71:dc:55:66:27:a4: ce:09:63:4a:12:56:41:f9:82:69:56:75:ab:e0:9e: 7c:30:3a:c4:23:06:00:6c:18:09:cb:ee:82:40:be: d9:74:9d:20:68:22:db:b3:14:5d:9f:29:9e:db:0a: 9c:69:a5:67:c5:69:01:10:d5:38:b5:4c:84:04:ed: 1e:64:fb:93:79:8f:c2:01:7d:8f:b8:07:18:0a:41: 33:e0:3c:0e:cb:f4:f7:dc:53:6e:2c:d0:de:de:36: 69:3d:81:68:2c:cc:a8:89:33:61:97:9f:9d:ea:5d: 74:1d:77:cd:e0:17:ad:ce:06:3c:19:38:3e:3c:25: 69:e2:78:46:21:d5:0e:50:92:65:f4:2a:10:8b:93: de:33:18:ca:18:7e:e4:c4:f7:46:13:23:93:c0:f7: 33:76:31:8d:af:6f:d1:2a:c2:52:ca:f4:f5:39:1a: 11:5d:ce:fa:0f:91:4c:d0:51:46:70:8e:9e:87:ae: 50:1e:5d:5b:20:47:f5:53:6d:0f:da:3d:53:36:9a: 5e:d1:63:1d:9b:7f:0c:5e:60:e2:39:32:7c:b6:e3: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:17:0E:80:83:3C:11:81:92:99:3D:6E:F1:7B:39:0D:3E:3F:FF:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/1864f875-b51c-3f70-9310-c813ffa14bbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl X509v3 Authority Key Identifier: keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer sbgp-ipAddrBlock: critical IPv4: 75.98.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ae:ad:44:15:8f:08:41:2a:32:11:21:bb:27:23:90:04:81: a5:c5:11:f4:f2:ee:68:6f:39:99:36:7e:ae:e4:c9:05:d8:48: 31:04:ab:67:da:e5:60:3f:e3:39:ca:8f:ca:b9:4b:80:e0:2c: 77:45:5c:d8:8b:0d:b0:6a:57:c2:27:f9:fb:de:a1:15:d5:7b: c2:c6:ec:b3:c5:48:d7:a4:de:59:a6:32:9f:21:39:ba:63:0f: 4e:bb:d2:d1:84:e2:85:19:68:2e:8c:8c:3a:d4:f2:b6:9c:be: 7d:f9:4f:ef:ae:06:f1:6f:ef:93:91:c3:bc:29:0b:e7:16:49: 0d:1f:5d:7c:70:85:15:b8:61:5d:82:82:72:ed:86:02:39:7f: dd:93:de:f1:34:4d:e0:0f:b2:d8:e5:71:17:60:ae:75:0c:8b: f8:8f:cc:29:74:68:b8:97:bc:af:6e:54:3c:0d:f3:bd:b9:a8: 14:cc:5e:3d:4e:43:73:45:fe:b1:ad:cb:41:05:c4:45:33:e0: 2a:e8:e8:f6:31:ee:10:be:86:2f:75:15:4b:34:2d:e6:18:14: 21:8b:43:ce:00:dd:c2:01:3f:83:7f:38:f2:fb:04:41:b2:82: d4:58:79:bd:c4:ca:d1:c4:80:a2:a0:89:54:69:05:78:a9:19: d7:74:69:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0lYLfs/b6QCgRXvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEzODdmYmItODEzZC00NTJlLThhNDMtMzQyNWU5NWJi ZWNjMB4XDTI2MDMxMjE3MjEyMloXDTI2MDYxMDE3MjEyMlowLzEtMCsGA1UEAxMk MWRkNzIzODktOWZiOS00ZGFlLTk5YWItYzNiNjcyYjZkMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk1pdh/72AC5jxNrlWdGjrsFbEYca1STcDCk NaNmED9fx+VA6FFx3FVmJ6TOCWNKElZB+YJpVnWr4J58MDrEIwYAbBgJy+6CQL7Z dJ0gaCLbsxRdnyme2wqcaaVnxWkBENU4tUyEBO0eZPuTeY/CAX2PuAcYCkEz4DwO y/T33FNuLNDe3jZpPYFoLMyoiTNhl5+d6l10HXfN4BetzgY8GTg+PCVp4nhGIdUO UJJl9CoQi5PeMxjKGH7kxPdGEyOTwPczdjGNr2/RKsJSyvT1ORoRXc76D5FM0FFG cI6eh65QHl1bIEf1U20P2j1TNppe0WMdm38MXmDiOTJ8tuPN5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkXDoCDPBGBkpk9bvF7OQ0+P/+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4 N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1ZTk1YmJlY2MvMTg2NGY4NzUtYjUxYy0z ZjcwLTkzMTAtYzgxM2ZmYTE0YmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGEzODdmYmItODEzZC00NTJlLThh NDMtMzQyNWU5NWJiZWNjLzBhMzg3ZmJiLTgxM2QtNDUyZS04YTQzLTM0MjVlOTVi YmVjYy5jcmwwHwYDVR0jBBgwFoAU0YPe7zgSQOCS6eXYUdv7BGEFo9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1 ZTk1YmJlY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2LrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGurUQVjwhBKjIRIbsnI5AEgaXFEfTy7mhvOZk2fq7kyQXYSDEEq2fa 5WA/4znKj8q5S4DgLHdFXNiLDbBqV8In+fveoRXVe8LG7LPFSNek3lmmMp8hObpj D0670tGE4oUZaC6MjDrU8racvn35T++uBvFv75ORw7wpC+cWSQ0fXXxwhRW4YV2C gnLthgI5f92T3vE0TeAPstjlcRdgrnUMi/iPzCl0aLiXvK9uVDwN8725qBTMXj1O Q3NF/rGty0EFxEUz4Cro6PYx7hC+hi91FUs0LeYYFCGLQ84A3cIBP4N/OPL7BEGy gtRYeb3EytHEgKKgiVRpBXipGdd0aRk= -----END CERTIFICATE-----Generated at Thu Mar 26 09:26:58 2026 by rpki-client