$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/ecebfbfb-3d3e-3198-8041-e0c6b2869c9e.roa File: ecebfbfb-3d3e-3198-8041-e0c6b2869c9e.roa (raw, json) Hash identifier: SVgrvaS+LGMVpRdJBEG5idhV3UUfGNpIVPHcSQd604k= Subject key identifier: 87:9D:43:26:DD:D6:F3:F2:92:23:A1:F4:FD:5F:3A:12:A4:02:A7:54 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584F498B1A4BEC5079B0EBE55FA0 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/ecebfbfb-3d3e-3198-8041-e0c6b2869c9e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30029 IP address blocks: 198.98.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:1a:4b:ec:50:79:b0:eb:e5:5f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=def0dc2b-b27c-4198-8e5e-22e84a85bda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:98:d9:0d:5c:c2:85:1c:52:f6:28:4a:ba:9d: e8:df:9c:f0:40:6e:4b:f0:7e:27:d4:5d:20:20:a2: 78:87:7e:66:09:11:f9:51:a4:e6:dd:bb:3a:e2:e1: 02:d3:cd:fc:eb:d1:7b:76:42:4b:c3:05:75:d7:28: d8:94:94:df:21:75:a3:3a:a1:ea:32:a6:26:86:13: 33:d8:69:98:25:cd:29:5c:04:bc:00:5e:6a:48:9e: 1b:39:34:e3:dc:0e:71:23:24:f2:1f:01:b1:29:af: c9:9b:1d:b8:fd:00:62:74:bf:72:68:0d:47:8b:39: d1:e1:3d:3e:07:bf:fa:4e:71:24:c1:43:9a:58:b8: 6f:f2:90:48:3d:2d:13:b4:60:42:e8:af:30:a9:e7: 23:a0:22:fa:f7:a7:fd:5c:36:4a:2b:93:ad:45:79: 77:50:20:55:66:ca:3b:80:ae:57:97:e4:00:b1:00: b5:9b:c7:ac:83:4a:a1:1e:b1:0c:e0:5f:1e:06:fd: 1f:44:ef:ab:48:a8:6b:1a:78:5a:2f:a3:e3:7f:7a: e0:aa:ef:7c:5d:d6:b5:f7:b4:d4:a4:f8:59:00:f3: 25:7a:b8:4c:5d:20:84:90:08:53:18:76:31:42:65: 7e:85:92:98:ee:6c:38:87:e7:9e:05:a3:8e:df:57: 9f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9D:43:26:DD:D6:F3:F2:92:23:A1:F4:FD:5F:3A:12:A4:02:A7:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/ecebfbfb-3d3e-3198-8041-e0c6b2869c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 198.98.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e5:78:cf:97:18:54:76:96:d3:5d:cc:ff:1b:5e:15:ac:2a: fe:5f:f3:4f:7d:7f:06:a6:ba:df:28:20:9a:24:8a:fd:0e:ba: 12:84:60:3b:8b:93:ac:2d:2e:72:3a:c9:f1:5a:6d:e3:e8:17: 46:f1:77:d1:f3:78:fe:9c:83:6c:98:0b:10:e7:91:00:00:61: 63:41:71:8e:c1:d0:79:32:1b:93:95:20:6f:50:e3:7c:ae:64: b4:2e:6c:6f:f8:36:5d:e1:fb:8c:a6:76:b9:e8:2c:af:65:c0: 4c:24:e9:ff:74:b6:47:73:cd:f7:13:6e:1d:67:da:3e:3d:ab: 81:35:fd:6f:e1:81:80:93:45:67:08:ca:9f:ed:bb:bb:dc:84: 78:3d:a2:47:56:00:67:f9:1f:34:69:01:c1:36:f4:1f:46:ce: 65:09:35:62:e1:0c:9a:dc:26:2a:d7:fa:3d:c5:b4:a3:36:46: 15:dd:52:2f:3a:7c:95:09:cf:55:53:cf:30:43:fd:ec:c5:06: bb:6f:ff:fb:7d:ba:5c:88:21:88:c5:a8:d3:e0:d6:1d:7c:83: 32:4d:c3:a2:34:30:a1:17:a2:76:2f:53:1f:2d:ec:99:fc:a5: c9:5b:a3:11:32:6a:b2:67:fd:76:f0:94:e7:a9:d3:80:ad:0f: 5e:7f:74:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JixpL7FB5sOvlX6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGVmMGRjMmItYjI3Yy00MTk4LThlNWUtMjJlODRhODViZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35jZDVzChRxS9ihKup3o35zwQG5L8H4n1F0g IKJ4h35mCRH5UaTm3bs64uEC083869F7dkJLwwV11yjYlJTfIXWjOqHqMqYmhhMz 2GmYJc0pXAS8AF5qSJ4bOTTj3A5xIyTyHwGxKa/Jmx24/QBidL9yaA1HiznR4T0+ B7/6TnEkwUOaWLhv8pBIPS0TtGBC6K8wqecjoCL696f9XDZKK5OtRXl3UCBVZso7 gK5Xl+QAsQC1m8esg0qhHrEM4F8eBv0fRO+rSKhrGnhaL6Pjf3rgqu98Xda197TU pPhZAPMlerhMXSCEkAhTGHYxQmV+hZKY7mw4h+eeBaOO31efMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIedQybd1vPykiOh9P1fOhKkAqdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvZWNlYmZiZmItM2QzZS0z MTk4LTgwNDEtZTBjNmIyODY5YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDleM+XGFR2ltNdzP8bXhWsKv5f8099fwamut8oIJokiv0OuhKEYDuL k6wtLnI6yfFabePoF0bxd9HzeP6cg2yYCxDnkQAAYWNBcY7B0HkyG5OVIG9Q43yu ZLQubG/4Nl3h+4ymdrnoLK9lwEwk6f90tkdzzfcTbh1n2j49q4E1/W/hgYCTRWcI yp/tu7vchHg9okdWAGf5HzRpAcE29B9GzmUJNWLhDJrcJirX+j3FtKM2RhXdUi86 fJUJz1VTzzBD/ezFBrtv//t9ulyIIYjFqNPg1h18gzJNw6I0MKEXonYvUx8t7Jn8 pclboxEyarJn/XbwlOep04CtD15/dFU= -----END CERTIFICATE-----Generated at Sat Sep 26 13:52:19 2026 by rpki-client