$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa File: fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa (raw, json) Hash identifier: sPPQs9jR8+ZowGq55YotWUPnfx/FbD1spCn00uaNOrQ= Subject key identifier: B0:0F:80:B6:FA:0C:66:15:E3:36:B3:E5:83:A5:6F:06:A1:B4:16:76 Certificate issuer: /CN=7da3df33-ad97-4a08-81e8-054f28d035ed Certificate serial: 010D0C9F4328584F4973ADC45B3561BAA3E121E8 Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 209 IP address blocks: 199.253.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ad:c4:5b:35:61:ba:a3:e1:21:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=86552cff-ecb7-43d7-a10e-7a58ee472c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d7:80:a3:a6:32:54:5d:12:65:1a:b8:18:35: 59:6a:d2:9c:34:1c:12:38:0b:c2:30:c4:0a:d8:ed: 3e:a9:6c:67:9a:6c:0d:72:72:1f:9c:77:8a:82:fb: ed:f1:49:ea:71:29:84:86:d0:fb:bf:c2:5b:cd:84: ec:86:6c:23:7c:4b:5b:5a:4d:1c:61:63:f0:62:27: 1b:c4:06:e4:13:35:44:9f:a1:e5:0e:6e:3d:4a:d8: 6d:f1:70:f6:05:fe:91:66:01:25:50:ee:9b:2f:82: 00:11:be:4f:24:22:96:ec:f1:1b:ed:2d:f4:78:64: ea:2a:3f:ea:72:33:a9:d4:b2:27:3a:44:83:9d:4c: f3:f1:d7:4f:9b:5a:ef:01:ea:13:8d:4e:de:c2:bc: 26:6b:26:bf:2d:b7:19:92:57:03:0c:e0:c7:f7:1c: 45:40:03:3b:50:22:b9:b6:cf:94:e1:22:24:95:57: f2:bb:21:7b:ea:15:3c:bc:6c:0d:46:70:39:2c:d6: d1:2e:d8:c8:89:3d:dc:88:1e:29:72:5e:30:ce:cd: 17:fb:4a:e2:3e:b9:c2:d2:ae:04:f8:8b:69:4a:cc: b2:4c:51:0f:2e:58:6f:ed:bb:17:a1:69:08:0f:76: 12:13:22:4d:43:a6:06:8b:0a:ac:5e:93:79:77:66: 0e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0F:80:B6:FA:0C:66:15:E3:36:B3:E5:83:A5:6F:06:A1:B4:16:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl X509v3 Authority Key Identifier: keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer sbgp-ipAddrBlock: critical IPv4: 199.253.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8b:b9:a2:c6:a6:0c:51:19:61:24:c1:50:14:6b:db:a9:95: 23:ac:56:1f:2c:44:c3:a5:2a:83:cf:be:2f:3a:62:f0:95:47: 3d:57:22:77:3e:91:d4:a1:7a:53:e6:cb:26:df:97:da:f6:57: 83:52:90:65:7a:a8:dc:ed:d1:cf:ac:79:0b:f9:a7:66:ba:e8: da:fa:9f:6a:4a:2c:d7:be:e2:dc:d5:a9:f7:1a:99:33:b7:ab: 53:ec:4b:6b:54:5b:b1:c5:99:c4:56:b2:92:ef:1f:11:f0:95: 03:5f:91:52:65:5d:54:04:65:87:a4:2a:c6:e8:0e:b1:81:0d: 36:7a:c8:55:6d:b4:5e:c5:4e:f3:2a:cd:b6:67:8e:5d:41:93: f4:09:e9:0c:88:24:ba:9c:af:c0:66:51:ee:09:44:23:6d:77: 40:d0:c4:0c:d4:a7:12:b3:b9:63:37:20:f1:1c:55:17:94:2e: ca:34:a3:c4:a1:3a:a8:b6:c2:47:1e:9c:06:61:17:06:c7:d9: 79:51:28:3e:7a:66:e0:25:e6:b7:9b:2f:73:e0:c5:f9:e6:15: 49:84:f2:39:70:dc:4b:e0:be:c5:27:70:23:fa:6d:ee:d2:ac: e4:ec:a4:91:23:56:89:93:0a:9c:50:0a:88:5c:ea:81:00:b5: e2:31:a5:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc63EWzVhuqPhIegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhM2RmMzMtYWQ5Ny00YTA4LTgxZTgtMDU0ZjI4ZDAz NWVkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODY1NTJjZmYtZWNiNy00M2Q3LWExMGUtN2E1OGVlNDcyYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdeAo6YyVF0SZRq4GDVZatKcNBwSOAvCMMQK 2O0+qWxnmmwNcnIfnHeKgvvt8UnqcSmEhtD7v8JbzYTshmwjfEtbWk0cYWPwYicb xAbkEzVEn6HlDm49Stht8XD2Bf6RZgElUO6bL4IAEb5PJCKW7PEb7S30eGTqKj/q cjOp1LInOkSDnUzz8ddPm1rvAeoTjU7ewrwmaya/LbcZklcDDODH9xxFQAM7UCK5 ts+U4SIklVfyuyF76hU8vGwNRnA5LNbRLtjIiT3ciB4pcl4wzs0X+0riPrnC0q4E +ItpSsyyTFEPLlhv7bsXoWkID3YSEyJNQ6YGiwqsXpN5d2YOhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAPgLb6DGYV4zaz5YOlbwahtBZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEz ZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRmMjhkMDM1ZWQvZmJiYTBhN2YtYjhlZi0z YWY0LWI5NjAtMTNmNzEwY2M1OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2RhM2RmMzMtYWQ5Ny00YTA4LTgx ZTgtMDU0ZjI4ZDAzNWVkLzdkYTNkZjMzLWFkOTctNGEwOC04MWU4LTA1NGYyOGQw MzVlZC5jcmwwHwYDVR0jBBgwFoAUm94pr6UJ6HVQdeBF8ykvsQ5kiF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEzZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRm MjhkMDM1ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeLuaLGpgxRGWEkwVAUa9uplSOsVh8sRMOlKoPPvi86YvCVRz1XInc+ kdShelPmyybfl9r2V4NSkGV6qNzt0c+seQv5p2a66Nr6n2pKLNe+4tzVqfcamTO3 q1PsS2tUW7HFmcRWspLvHxHwlQNfkVJlXVQEZYekKsboDrGBDTZ6yFVttF7FTvMq zbZnjl1Bk/QJ6QyIJLqcr8BmUe4JRCNtd0DQxAzUpxKzuWM3IPEcVReULso0o8Sh Oqi2wkcenAZhFwbH2XlRKD56ZuAl5rebL3PgxfnmFUmE8jlw3EvgvsUncCP6be7S rOTspJEjVomTCpxQCohc6oEAteIxpVo= -----END CERTIFICATE-----Generated at Fri Sep 25 23:08:48 2026 by rpki-client