$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa File: de8c254d-a582-3b01-9da5-fc1d49739f37.roa (raw, json) Hash identifier: I2LIvnUtSA70FnInlnBKYM6CJwARABll0NPiY7tN2aw= Subject key identifier: 50:AB:D4:F9:B4:30:CE:76:EB:74:09:31:42:2E:A6:4C:B9:E4:3A:CD Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584EEA874F8E21EDA96368FA0B80 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 394625 IP address blocks: 199.38.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:4f:8e:21:ed:a9:63:68:fa:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=f4df1e6b-af27-483b-9f98-d6a582303503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:8d:2f:f0:82:8a:94:4f:57:90:4e:b4:ec: 87:1a:de:f7:a8:ca:b6:97:7b:bf:22:d7:95:c5:61: 60:89:17:39:1b:43:08:49:93:75:83:d1:09:1d:b9: 33:d8:6e:e3:ad:d3:08:2d:7a:0e:56:e9:d7:0b:04: 62:b4:9a:d2:c4:7c:76:87:6c:84:93:d0:8b:78:df: d9:5d:23:ee:61:8d:04:46:db:00:0d:6d:b4:57:0a: 74:ee:d8:ae:f0:0e:65:ae:29:1a:22:24:96:03:8d: ca:0e:83:06:7d:4c:ed:87:5b:14:01:1b:a1:0c:48: 77:48:8b:44:74:ce:2e:71:b1:00:98:5f:a9:b0:09: 87:66:1f:45:43:7f:13:88:9a:ba:40:b0:79:ae:4b: 23:36:05:9f:f6:7f:ed:bd:c4:ad:22:76:ea:f3:19: cb:cf:f1:08:89:d4:6b:3d:79:01:d2:f9:7a:93:24: 6d:c2:67:e0:49:5e:7c:6e:a5:9f:2e:3c:36:0d:19: d6:66:53:25:1b:a2:34:89:d7:5c:17:bb:db:45:7e: e7:03:67:44:0c:e2:a7:72:34:61:fd:8b:30:fc:b8: 26:ce:f2:8f:01:78:57:26:0e:a9:00:6e:a4:4d:15: 33:10:4e:61:9f:ef:c8:8b:66:90:06:0b:1d:75:5a: 3c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AB:D4:F9:B4:30:CE:76:EB:74:09:31:42:2E:A6:4C:B9:E4:3A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 199.38.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1c:27:e9:e3:fc:13:9d:b3:aa:83:8e:82:fd:9f:54:50:7e: ee:0b:0a:e8:97:e4:1e:45:a5:9c:cb:8f:47:8d:35:cd:c9:fe: a7:61:b0:53:93:d6:0f:72:af:b6:2f:51:5e:55:a4:79:7d:e5: c8:21:2f:3c:83:80:c0:1e:3b:92:e6:aa:90:fd:ec:b2:3c:5d: b5:ef:80:6a:d2:c0:a0:cd:ea:5d:e7:f2:77:4d:9e:57:e3:0c: ff:12:f2:81:54:dc:6d:42:3c:c3:31:bf:9c:ad:94:6e:d7:2e: 53:6f:d0:52:b5:a4:ea:6b:0b:90:a6:41:f3:60:a1:bc:fe:f5: ad:45:eb:1f:a1:ea:b1:ec:ff:d7:ff:99:bd:69:c0:3e:b0:12: 5e:84:55:4f:38:d0:ee:e5:ae:4c:f3:88:c9:8e:fe:fd:7f:df: 51:4a:cf:d2:d4:63:77:fa:98:69:e7:72:a8:3c:c5:88:f8:ef: 42:d4:6d:8b:01:82:53:91:b7:fc:62:26:72:6e:55:6c:e5:31: f1:ff:01:32:69:74:26:bb:df:a0:b4:73:8f:6c:9b:e0:f7:75: 8c:53:08:4f:4e:d7:99:01:2a:26:6a:19:0e:c0:11:a8:22:c0: 51:12:09:71:52:93:15:e2:16:ee:b4:e1:03:38:4c:0b:f2:32: 72:1d:9f:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh0+OIe2pY2j6C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZjRkZjFlNmItYWYyNy00ODNiLTlmOTgtZDZhNTgyMzAzNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunqNL/CCipRPV5BOtOyHGt73qMq2l3u/IteV xWFgiRc5G0MISZN1g9EJHbkz2G7jrdMILXoOVunXCwRitJrSxHx2h2yEk9CLeN/Z XSPuYY0ERtsADW20Vwp07tiu8A5lrikaIiSWA43KDoMGfUzth1sUARuhDEh3SItE dM4ucbEAmF+psAmHZh9FQ38TiJq6QLB5rksjNgWf9n/tvcStInbq8xnLz/EIidRr PXkB0vl6kyRtwmfgSV58bqWfLjw2DRnWZlMlG6I0iddcF7vbRX7nA2dEDOKncjRh /Ysw/LgmzvKPAXhXJg6pAG6kTRUzEE5hn+/Ii2aQBgsddVo8nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCr1Pm0MM5263QJMUIupky55DrNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZGU4YzI1NGQtYTU4Mi0z YjAxLTlkYTUtZmMxZDQ5NzM5ZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxybyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4cJ+nj/BOds6qDjoL9n1RQfu4LCuiX5B5FpZzLj0eNNc3J/qdhsFOT 1g9yr7YvUV5VpHl95cghLzyDgMAeO5LmqpD97LI8XbXvgGrSwKDN6l3n8ndNnlfj DP8S8oFU3G1CPMMxv5ytlG7XLlNv0FK1pOprC5CmQfNgobz+9a1F6x+h6rHs/9f/ mb1pwD6wEl6EVU840O7lrkzziMmO/v1/31FKz9LUY3f6mGnncqg8xYj470LUbYsB glORt/xiJnJuVWzlMfH/ATJpdCa736C0c49sm+D3dYxTCE9O15kBKiZqGQ7AEagi wFESCXFSkxXiFu604QM4TAvyMnIdnzI= -----END CERTIFICATE-----Generated at Sat Sep 12 09:45:35 2026 by rpki-client