$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/ecebfbfb-3d3e-3198-8041-e0c6b2869c9e.roa File: ecebfbfb-3d3e-3198-8041-e0c6b2869c9e.roa (raw, json) Hash identifier: MwDMi4FLuUCPcvpLpHvz5JDoi56Yy0HMQhKAzcKt7RE= Subject key identifier: 84:F4:61:84:DE:95:E5:3A:A4:09:70:51:EA:71:53:0B:70:41:31:5E Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584DC830567143E7750796CCA280 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/ecebfbfb-3d3e-3198-8041-e0c6b2869c9e.roa Signing time: Sun 10 May 2026 01:00:24 +0000 ROA not before: Sun 10 May 2026 01:00:24 +0000 ROA not after: Sat 08 Aug 2026 01:00:24 +0000 asID: 30029 IP address blocks: 198.98.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c8:30:56:71:43:e7:75:07:96:cc:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: May 10 01:00:24 2026 GMT Not After : Aug 8 01:00:24 2026 GMT Subject: CN=1f69c479-9301-4d41-a7e7-07b3498126dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:42:76:70:9e:49:21:7a:cb:fe:bd:8e:81: 77:90:7d:57:a4:33:ef:97:72:a1:ec:09:50:b1:e9: 9e:50:a0:72:fe:81:fd:f9:b5:5f:69:00:0a:06:40: e5:6b:87:03:ea:73:02:66:9c:1b:a8:3e:fb:13:46: d0:31:cd:91:30:c6:eb:54:1c:9e:cc:49:06:24:d8: 92:b5:16:1f:8b:34:3f:a5:3f:c3:c6:ad:f0:67:e8: bd:67:ca:84:3a:25:8c:1c:8a:e2:b5:b7:a6:f0:13: 4a:1e:4e:e0:5f:ed:5e:cb:8a:4b:ad:5d:20:74:ae: d8:74:b8:89:2c:bc:ad:ef:09:db:84:63:fa:65:d6: 30:40:41:f7:71:bd:74:67:34:0a:41:d1:83:91:85: df:15:27:b8:a0:1a:e2:17:ad:98:a2:bf:16:c1:77: 54:35:ab:13:5c:ae:5d:93:cc:b2:07:15:3f:be:ce: 4e:7f:77:80:14:b4:43:1c:03:2a:b8:2e:28:43:2d: 3a:15:ce:c1:5a:85:6a:86:55:62:dc:97:fd:83:e4: d4:17:bd:ee:a1:d5:0a:24:c4:8b:eb:fe:28:88:34: d1:5d:ab:ff:34:94:46:21:c4:7d:4f:7e:4a:1c:f7: 65:b4:9f:10:a7:50:fb:94:f9:17:1f:f0:1b:26:54: dd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F4:61:84:DE:95:E5:3A:A4:09:70:51:EA:71:53:0B:70:41:31:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/ecebfbfb-3d3e-3198-8041-e0c6b2869c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 198.98.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:97:20:6a:1b:ee:22:60:52:85:7c:81:2a:30:f4:f4:ae:c4: a9:45:a1:c9:23:36:14:3f:04:aa:ea:bc:78:d0:91:cd:09:68: 5c:2f:77:7e:be:b9:8f:5f:39:62:42:18:24:41:3b:ac:39:63: 64:d9:8b:13:27:ef:1e:ff:c2:1c:19:b0:d1:2f:f1:b2:ca:df: e4:04:28:99:39:b7:d5:4b:f8:8d:55:63:3e:10:0a:e6:3f:e8: 91:7a:89:27:95:47:a8:f1:e3:cd:94:19:3d:48:53:1f:9c:7c: d4:4c:16:7b:98:56:f2:95:eb:fa:6c:46:41:33:2a:f7:66:61: b5:25:5e:8b:41:67:22:a7:56:65:aa:95:8d:53:7c:47:ff:e5: 1b:5c:cf:7f:74:0d:66:6f:4c:9f:e7:78:48:71:9e:a0:ad:81: a8:76:00:33:c7:3c:50:11:89:7b:20:12:4e:8e:df:c8:a5:37: 17:ae:32:b4:1b:1d:13:8d:83:cf:4a:ae:72:0b:1d:fd:9f:04: 07:cc:9c:08:b7:5d:ea:ef:0c:2d:e4:fa:6a:0f:83:fd:91:4b: bd:bc:d7:8f:a8:85:a4:b1:01:44:7b:83:fd:22:99:b9:5b:6c: b8:16:a0:cc:14:41:42:0c:8b:f4:a5:3e:70:37:79:19:b4:ea: e5:0d:d1:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3IMFZxQ+d1B5bMooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk MWY2OWM0NzktOTMwMS00ZDQxLWE3ZTctMDdiMzQ5ODEyNmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeNCdnCeSSF6y/69joF3kH1XpDPvl3Kh7AlQ semeUKBy/oH9+bVfaQAKBkDla4cD6nMCZpwbqD77E0bQMc2RMMbrVByezEkGJNiS tRYfizQ/pT/Dxq3wZ+i9Z8qEOiWMHIritbem8BNKHk7gX+1ey4pLrV0gdK7YdLiJ LLyt7wnbhGP6ZdYwQEH3cb10ZzQKQdGDkYXfFSe4oBriF62Yor8WwXdUNasTXK5d k8yyBxU/vs5Of3eAFLRDHAMquC4oQy06Fc7BWoVqhlVi3Jf9g+TUF73uodUKJMSL 6/4oiDTRXav/NJRGIcR9T35KHPdltJ8Qp1D7lPkXH/AbJlTdSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIT0YYTeleU6pAlwUepxUwtwQTFeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvZWNlYmZiZmItM2QzZS0z MTk4LTgwNDEtZTBjNmIyODY5YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqXIGob7iJgUoV8gSow9PSuxKlFockjNhQ/BKrqvHjQkc0JaFwvd36+ uY9fOWJCGCRBO6w5Y2TZixMn7x7/whwZsNEv8bLK3+QEKJk5t9VL+I1VYz4QCuY/ 6JF6iSeVR6jx482UGT1IUx+cfNRMFnuYVvKV6/psRkEzKvdmYbUlXotBZyKnVmWq lY1TfEf/5Rtcz390DWZvTJ/neEhxnqCtgah2ADPHPFARiXsgEk6O38ilNxeuMrQb HRONg89KrnILHf2fBAfMnAi3XervDC3k+moPg/2RS72814+ohaSxAUR7g/0imblb bLgWoMwUQUIMi/SlPnA3eRm06uUN0a0= -----END CERTIFICATE-----Generated at Wed May 13 10:47:41 2026 by rpki-client