$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa File: ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa (raw, json) Hash identifier: eCxnR3MBWcYed92XDSkLTHzvG3zu69lMJD59Yh+vJRM= Subject key identifier: AC:DB:54:F7:F0:BC:A2:CA:68:BB:67:B2:7E:45:66:52:F3:D1:A8:12 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584DD0906786935A52EBEECE4780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 397238 IP address blocks: 156.154.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:67:86:93:5a:52:eb:ee:ce:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=95e2c508-8db9-46da-a18e-88ce7a333f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e3:09:aa:a6:91:dd:37:20:86:d2:26:62:0e: 16:42:11:d7:c0:4b:13:c0:2b:1f:be:34:b3:7e:87: a9:df:34:cb:48:2b:15:7e:2b:80:e6:6e:4f:ac:47: cf:e0:36:c9:c2:c8:ad:45:50:28:44:4c:02:72:dd: 63:b9:8e:2b:5d:22:c3:70:d4:2d:2e:eb:b5:16:cf: f7:50:54:58:33:72:1b:9d:e2:d8:0c:17:8e:e8:74: 81:71:a5:e3:39:99:f1:c7:5f:9c:21:c7:68:d7:21: 34:f2:4c:94:51:ea:42:84:3e:e7:6b:09:69:d2:a6: 01:f1:8c:69:05:e1:48:39:a7:48:36:bc:02:1e:25: 03:01:d5:53:b8:ea:6d:c2:0c:d2:93:a9:b5:36:28: 50:3c:3e:dd:2f:1c:ed:fb:74:9f:b9:72:f9:ac:f1: 34:02:11:15:e7:46:a1:de:60:70:b2:3c:ed:76:3c: 7c:a2:e9:97:90:f4:a5:62:bc:2e:5b:4d:ca:4a:cf: 39:ef:c9:11:75:34:78:5e:99:89:b8:bd:a5:1f:49: de:50:a5:8e:df:eb:aa:27:f7:70:26:57:47:68:76: 93:48:67:be:17:fa:1c:0f:67:d4:19:e9:a8:f5:3b: e1:62:ce:43:39:e7:20:e3:2c:63:5c:3b:2a:59:a7: ae:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DB:54:F7:F0:BC:A2:CA:68:BB:67:B2:7E:45:66:52:F3:D1:A8:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b2:8d:d4:aa:e7:1a:aa:8e:af:4a:42:c8:29:bf:41:29:65: e0:58:80:37:8b:89:66:43:5c:91:bc:fd:86:18:98:59:cd:27: c4:ff:05:bb:0d:6d:63:ec:ac:d6:7e:79:46:63:b6:f2:06:8b: 73:9f:c5:92:e1:c9:8f:ab:6b:17:d5:46:d8:53:df:76:ce:ea: e3:60:3c:67:31:2d:ee:6d:47:a7:ec:31:d4:b0:04:f3:b1:16: dc:23:05:c7:95:7d:38:d7:23:b8:eb:52:fb:2a:44:23:88:90: b5:0d:28:96:71:56:9b:38:73:ca:28:d7:b2:c0:26:d2:72:76: 8e:a0:38:dc:5f:56:e9:4d:7b:bf:0d:f0:f2:31:35:de:63:a4: 69:6d:9f:51:71:cc:44:ec:e6:4e:98:39:25:00:fc:93:07:51: c2:3f:59:b1:d4:22:d9:0b:27:65:bd:da:b7:91:ad:77:e5:74: fd:04:a2:1e:79:f8:cd:21:6c:92:52:f5:1f:08:f0:85:7a:09: d6:d1:18:60:66:84:f2:85:5c:92:8f:44:70:1b:8e:7f:2a:1c: 8d:ad:5a:96:ff:00:4c:59:12:38:44:85:82:18:2a:4c:14:3d: 6c:e2:70:00:e8:26:f6:b1:71:8c:b5:6d:18:07:60:42:7b:9d: 7c:19:75:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkGeGk1pS6+7OR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk OTVlMmM1MDgtOGRiOS00NmRhLWExOGUtODhjZTdhMzMzZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OMJqqaR3TcghtImYg4WQhHXwEsTwCsfvjSz foep3zTLSCsVfiuA5m5PrEfP4DbJwsitRVAoREwCct1juY4rXSLDcNQtLuu1Fs/3 UFRYM3IbneLYDBeO6HSBcaXjOZnxx1+cIcdo1yE08kyUUepChD7nawlp0qYB8Yxp BeFIOadINrwCHiUDAdVTuOptwgzSk6m1NihQPD7dLxzt+3SfuXL5rPE0AhEV50ah 3mBwsjztdjx8oumXkPSlYrwuW03KSs8578kRdTR4XpmJuL2lH0neUKWO3+uqJ/dw JldHaHaTSGe+F/ocD2fUGemo9TvhYs5DOecg4yxjXDsqWaeuAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzbVPfwvKLKaLtnsn5FZlLz0agSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWNmZDEwY2QtYjA2My0z MTAyLWE4ZjQtOTQ1NmQ4ZjEwZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCyjdSq5xqqjq9KQsgpv0EpZeBYgDeLiWZDXJG8/YYYmFnNJ8T/BbsN bWPsrNZ+eUZjtvIGi3OfxZLhyY+raxfVRthT33bO6uNgPGcxLe5tR6fsMdSwBPOx FtwjBceVfTjXI7jrUvsqRCOIkLUNKJZxVps4c8oo17LAJtJydo6gONxfVulNe78N 8PIxNd5jpGltn1FxzETs5k6YOSUA/JMHUcI/WbHUItkLJ2W92reRrXfldP0Eoh55 +M0hbJJS9R8I8IV6CdbRGGBmhPKFXJKPRHAbjn8qHI2tWpb/AExZEjhEhYIYKkwU PWzicADoJvaxcYy1bRgHYEJ7nXwZdeI= -----END CERTIFICATE-----Generated at Wed May 13 10:16:13 2026 by rpki-client