$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/fe4abb12-f680-3f33-931d-d8452560c378.roa File: fe4abb12-f680-3f33-931d-d8452560c378.roa (raw, json) Hash identifier: FPA41C4TK/MI8jksKtnnBePo+iOAjpdq9mlQoJV5NeQ= Subject key identifier: B0:EA:DC:FF:35:54:15:03:8B:06:A9:8C:AF:5A:AB:82:1F:5D:1C:52 Certificate issuer: /CN=981ab9bf-5f34-4622-99ac-a75fc5fb7bca Certificate serial: 010D0C9F4328584F374D155862A337C8A925CE00 Authority key identifier: 57:CC:B0:D0:A6:68:1E:16:E2:27:88:F1:F3:12:9C:1E:A9:E3:8B:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/fe4abb12-f680-3f33-931d-d8452560c378.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 394325 IP address blocks: 199.71.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:15:58:62:a3:37:c8:a9:25:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981ab9bf-5f34-4622-99ac-a75fc5fb7bca Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=bb28c90f-daf1-466e-9080-f96c116c960e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:0c:f4:22:46:14:2a:95:fd:e4:83:94:f7: 5c:03:5f:03:93:07:f8:97:ac:7b:e2:d4:60:ab:26: bd:7b:1a:18:12:96:7b:17:2b:2c:a5:76:a0:07:ba: 6b:87:62:f5:ae:80:48:bc:ff:fd:b9:19:87:f8:1b: 7f:9d:b1:0b:4b:80:a5:2b:4e:a1:f5:73:b8:10:1b: ed:78:c1:a0:80:81:0f:1d:39:70:45:f6:48:e7:88: 66:2f:b1:08:53:ad:f3:07:d9:2c:c7:59:18:a1:4f: e5:36:30:b1:53:55:f7:60:53:43:5b:8b:82:20:2a: 80:b9:1f:3c:0b:68:82:e7:4e:38:7b:85:ba:92:2a: 0a:9b:8a:d0:4e:10:0d:fe:05:b6:21:c4:4b:14:56: d7:a0:c6:2d:42:23:02:7a:74:e0:67:51:bb:d7:1a: f2:10:87:54:37:df:fe:d4:16:31:b4:49:c9:b5:94: 1b:17:85:d4:7f:95:dd:3d:dc:80:b4:c5:1e:71:60: 19:f4:11:23:7a:9a:e1:41:e7:55:5c:08:78:04:fe: 32:fb:2b:34:ae:bc:a0:3c:fa:8f:e1:64:b2:db:80: f2:a4:f3:d2:b7:fd:2f:fb:69:6f:12:a9:93:ab:df: 0f:a7:88:ff:ea:9f:7e:bc:81:e2:09:a2:49:97:cc: 34:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EA:DC:FF:35:54:15:03:8B:06:A9:8C:AF:5A:AB:82:1F:5D:1C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/fe4abb12-f680-3f33-931d-d8452560c378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.crl X509v3 Authority Key Identifier: keyid:57:CC:B0:D0:A6:68:1E:16:E2:27:88:F1:F3:12:9C:1E:A9:E3:8B:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.cer sbgp-ipAddrBlock: critical IPv4: 199.71.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:79:a9:2a:73:2d:d1:64:39:b4:80:74:5f:77:5d:6d:80:95: 78:a9:b7:5a:62:47:b6:2b:00:fc:88:74:97:a1:a4:51:5d:92: 4a:94:47:b0:4a:35:f9:6c:0b:86:d4:60:c3:96:82:f7:89:15: e2:4b:56:ca:19:b5:fe:02:73:f0:3c:32:42:15:4b:c2:dc:77: 18:3d:e4:cf:7d:53:ec:87:6f:10:28:58:19:fb:46:17:51:46: 7c:00:48:56:12:74:e3:be:dd:05:c7:28:11:ce:0b:11:27:a1: 4e:ef:2a:e5:9d:16:cd:57:79:16:0d:2f:e3:15:f5:49:27:16: 5c:b2:2f:14:02:a7:a5:db:14:7e:57:6c:44:59:2d:83:a7:f5: e6:1e:c4:25:ad:37:7a:41:46:26:cb:57:9a:a8:2e:f1:cb:dc: 00:ae:c3:b3:67:8d:2d:e8:13:14:59:29:0a:a2:a5:78:5f:69: 34:12:65:40:23:29:81:ca:d1:4a:e3:7d:2e:c2:bf:c2:55:f8: 41:b8:2b:8e:b9:13:0e:77:91:f0:30:d4:71:c3:78:ef:9d:f7: 2d:16:30:54:89:b4:46:9c:d6:6f:18:57:62:a1:8c:f8:f0:2c: 07:9c:76:80:af:fb:98:d3:10:86:a3:30:24:50:ce:f7:8a:dd: 2d:c8:de:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TRVYYqM3yKklzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxYWI5YmYtNWYzNC00NjIyLTk5YWMtYTc1ZmM1ZmI3 YmNhMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YmIyOGM5MGYtZGFmMS00NjZlLTkwODAtZjk2YzExNmM5NjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu54M9CJGFCqV/eSDlPdcA18Dkwf4l6x74tRg qya9exoYEpZ7FysspXagB7prh2L1roBIvP/9uRmH+Bt/nbELS4ClK06h9XO4EBvt eMGggIEPHTlwRfZI54hmL7EIU63zB9ksx1kYoU/lNjCxU1X3YFNDW4uCICqAuR88 C2iC5044e4W6kioKm4rQThAN/gW2IcRLFFbXoMYtQiMCenTgZ1G71xryEIdUN9/+ 1BYxtEnJtZQbF4XUf5XdPdyAtMUecWAZ9BEjeprhQedVXAh4BP4y+ys0rrygPPqP 4WSy24DypPPSt/0v+2lvEqmTq98Pp4j/6p9+vIHiCaJJl8w05QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDq3P81VBUDiwapjK9aq4IfXRxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ODFh YjliZi01ZjM0LTQ2MjItOTlhYy1hNzVmYzVmYjdiY2EvZmU0YWJiMTItZjY4MC0z ZjMzLTkzMWQtZDg0NTI1NjBjMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTgxYWI5YmYtNWYzNC00NjIyLTk5 YWMtYTc1ZmM1ZmI3YmNhLzk4MWFiOWJmLTVmMzQtNDYyMi05OWFjLWE3NWZjNWZi N2JjYS5jcmwwHwYDVR0jBBgwFoAUV8yw0KZoHhbiJ4jx8xKcHqnjiw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ODFhYjliZi01ZjM0LTQ2MjItOTlhYy1hNzVm YzVmYjdiY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0fRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA55qSpzLdFkObSAdF93XW2AlXipt1piR7YrAPyIdJehpFFdkkqUR7BK NflsC4bUYMOWgveJFeJLVsoZtf4Cc/A8MkIVS8Lcdxg95M99U+yHbxAoWBn7RhdR RnwASFYSdOO+3QXHKBHOCxEnoU7vKuWdFs1XeRYNL+MV9UknFlyyLxQCp6XbFH5X bERZLYOn9eYexCWtN3pBRibLV5qoLvHL3ACuw7NnjS3oExRZKQqipXhfaTQSZUAj KYHK0UrjfS7Cv8JV+EG4K465Ew53kfAw1HHDeO+d9y0WMFSJtEac1m8YV2KhjPjw LAecdoCv+5jTEIajMCRQzveK3S3I3hE= -----END CERTIFICATE-----Generated at Sun Oct 4 01:25:17 2026 by rpki-client