$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/2a61bf7a-6b4a-3b4f-9edb-cdd77c54017a.roa File: 2a61bf7a-6b4a-3b4f-9edb-cdd77c54017a.roa (raw, json) Hash identifier: BQqRyRZ8y4y5sJKrg9/bLJ9SeIxW0hrIwJjUVrX1Ej8= Subject key identifier: 01:13:93:FE:87:5E:27:40:1E:5E:C4:E0:C6:1F:A2:51:0D:B4:71:1D Certificate issuer: /CN=0a387fbb-813d-452e-8a43-3425e95bbecc Certificate serial: 010D0C9F4328584D89D062691433A8C54F55FE98 Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/2a61bf7a-6b4a-3b4f-9edb-cdd77c54017a.roa Signing time: Fri 17 Apr 2026 16:47:11 +0000 ROA not before: Fri 17 Apr 2026 16:47:11 +0000 ROA not after: Thu 16 Jul 2026 16:47:11 +0000 asID: 401333 IP address blocks: 75.98.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:d0:62:69:14:33:a8:c5:4f:55:fe:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc Validity Not Before: Apr 17 16:47:11 2026 GMT Not After : Jul 16 16:47:11 2026 GMT Subject: CN=e322b5ac-5dc0-47ce-a969-e3e7a31f3966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:ce:ae:5f:ad:36:6a:c4:57:ab:40:c7:48: 43:1a:9a:76:57:a5:02:92:5c:95:30:ca:e7:36:fa: 76:fc:77:13:1d:1e:f9:36:a9:57:32:00:94:6f:e4: 77:44:28:13:7e:41:ee:ce:b0:89:5c:bb:a7:32:1c: ef:41:fe:74:ae:fd:4b:0a:1a:26:b2:91:58:3e:b8: 90:06:5a:ab:13:3a:f4:1a:9e:4d:e2:52:d5:0f:02: e6:69:60:7c:99:bd:84:ca:8c:e6:0b:26:5d:ce:12: f4:93:b0:f6:3c:ce:cc:1e:9d:e6:f8:2c:71:eb:67: ad:91:2e:7d:76:58:e2:68:62:ef:df:b6:70:ba:a4: 7b:40:bc:20:54:42:51:63:e5:bf:2f:9d:37:fa:32: 40:e1:72:50:84:ca:40:4e:f8:03:bc:47:c4:81:c1: 12:a2:7f:08:0c:85:c8:53:77:d6:06:80:b7:b4:c0: d1:5e:41:81:61:38:6b:ba:ec:61:b8:4d:79:8c:9e: 7e:f7:a1:ad:88:62:c3:a5:1f:e5:a4:b0:43:ff:98: c4:db:a7:9a:f6:eb:62:7f:91:29:e5:1d:60:35:a1: 0e:f8:dd:72:79:0e:03:a1:16:5f:a7:71:46:6b:75: bf:64:35:56:ea:68:c7:67:ea:dc:93:2a:78:20:ef: 49:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:13:93:FE:87:5E:27:40:1E:5E:C4:E0:C6:1F:A2:51:0D:B4:71:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/2a61bf7a-6b4a-3b4f-9edb-cdd77c54017a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl X509v3 Authority Key Identifier: keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer sbgp-ipAddrBlock: critical IPv4: 75.98.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e7:bc:9d:1a:e8:0e:cf:40:d8:3c:b7:e2:e1:a8:79:b8:e4: 73:08:04:56:6d:40:d7:e7:cd:58:d6:aa:72:22:03:6c:d1:85: 70:65:a5:e8:7c:66:d7:cb:2d:f6:a1:51:50:82:de:c8:d6:21: f3:13:3c:b5:f1:a5:77:49:4e:fe:ab:69:9b:82:d8:46:2e:8e: db:90:b6:00:ad:8d:b0:86:e2:4d:11:a3:ca:ba:d8:a1:7b:ef: cf:3c:40:6a:01:a8:7e:0f:dd:b9:0d:e3:82:26:39:f9:03:8e: e8:f0:ca:6d:ba:a0:53:dc:82:2f:f5:04:dc:b2:ca:42:17:6d: 77:b4:cf:f2:3d:72:f2:39:c8:0c:c5:40:a2:3e:66:3b:37:9f: d7:02:cc:df:61:ac:b9:3e:50:77:e1:0b:89:4c:fc:26:3f:cf: 01:ff:4a:b9:c4:0c:a9:4e:28:5d:94:29:91:99:5c:73:ab:0f: 20:5d:a9:79:cd:51:bf:cc:a3:eb:56:f7:b2:87:14:51:f6:5f: 80:45:81:79:40:aa:96:17:b0:e3:41:09:6b:0a:f9:81:83:84: 21:9a:e1:ba:17:52:a7:48:a4:8d:1d:f9:22:7f:79:6d:3b:78: 61:68:7a:bf:81:0a:f0:49:a7:df:da:d6:4a:9a:5e:63:79:45: 50:56:94:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2J0GJpFDOoxU9V/pgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEzODdmYmItODEzZC00NTJlLThhNDMtMzQyNWU5NWJi ZWNjMB4XDTI2MDQxNzE2NDcxMVoXDTI2MDcxNjE2NDcxMVowLzEtMCsGA1UEAxMk ZTMyMmI1YWMtNWRjMC00N2NlLWE5NjktZTNlN2EzMWYzOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtPOrl+tNmrEV6tAx0hDGpp2V6UCklyVMMrn Nvp2/HcTHR75NqlXMgCUb+R3RCgTfkHuzrCJXLunMhzvQf50rv1LChomspFYPriQ BlqrEzr0Gp5N4lLVDwLmaWB8mb2EyozmCyZdzhL0k7D2PM7MHp3m+Cxx62etkS59 dljiaGLv37ZwuqR7QLwgVEJRY+W/L503+jJA4XJQhMpATvgDvEfEgcESon8IDIXI U3fWBoC3tMDRXkGBYThruuxhuE15jJ5+96GtiGLDpR/lpLBD/5jE26ea9utif5Ep 5R1gNaEO+N1yeQ4DoRZfp3FGa3W/ZDVW6mjHZ+rckyp4IO9JMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAETk/6HXidAHl7E4MYfolENtHEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4 N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1ZTk1YmJlY2MvMmE2MWJmN2EtNmI0YS0z YjRmLTllZGItY2RkNzdjNTQwMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGEzODdmYmItODEzZC00NTJlLThh NDMtMzQyNWU5NWJiZWNjLzBhMzg3ZmJiLTgxM2QtNDUyZS04YTQzLTM0MjVlOTVi YmVjYy5jcmwwHwYDVR0jBBgwFoAU0YPe7zgSQOCS6eXYUdv7BGEFo9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1 ZTk1YmJlY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2LqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfnvJ0a6A7PQNg8t+LhqHm45HMIBFZtQNfnzVjWqnIiA2zRhXBlpeh8 ZtfLLfahUVCC3sjWIfMTPLXxpXdJTv6raZuC2EYujtuQtgCtjbCG4k0Ro8q62KF7 7888QGoBqH4P3bkN44ImOfkDjujwym26oFPcgi/1BNyyykIXbXe0z/I9cvI5yAzF QKI+Zjs3n9cCzN9hrLk+UHfhC4lM/CY/zwH/SrnEDKlOKF2UKZGZXHOrDyBdqXnN Ub/Mo+tW97KHFFH2X4BFgXlAqpYXsONBCWsK+YGDhCGa4boXUqdIpI0d+SJ/eW07 eGFoer+BCvBJp9/a1kqaXmN5RVBWlF0= -----END CERTIFICATE-----Generated at Wed May 13 02:34:05 2026 by rpki-client