$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa File: de8c254d-a582-3b01-9da5-fc1d49739f37.roa (raw, json) Hash identifier: tjI+0rI+FdjhZa8fpOPZ5H+XDQVEOFsLcstjDFrgb98= Subject key identifier: 5D:ED:98:79:68:86:0D:B8:CD:7E:93:04:42:11:3D:3A:B9:8E:EB:E5 Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584F8DD85128651BA4D521733980 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 394625 IP address blocks: 199.38.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:51:28:65:1b:a4:d5:21:73:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=52b0fcb6-d01e-473b-944b-77e837ecb900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:15:8b:b6:c8:e5:db:46:3e:a2:84:49:52:37: 54:16:84:d4:6d:19:d6:16:e2:8e:d9:e3:3a:25:11: f5:3f:ff:27:75:af:12:9b:16:5c:48:b7:7e:4d:f7: b9:74:e2:f1:b3:7a:0d:a4:10:2c:65:ce:af:90:67: 76:c3:a2:d8:af:5a:ca:ad:40:72:0d:fe:50:04:1d: 02:6d:8c:23:87:94:1b:78:67:b3:33:a3:b0:e5:2e: 6e:f6:21:93:6c:8d:cf:3c:30:77:18:6a:cf:30:d0: 03:70:e1:b1:e4:f6:ee:2f:8d:f2:76:1b:32:cb:2a: 02:6f:2c:54:b4:61:76:7c:02:aa:e9:78:14:8e:8b: 79:23:b2:99:8e:63:65:18:85:46:a2:2d:dc:1f:37: 0e:ea:e8:c7:38:54:26:2a:6e:d5:47:38:2c:34:af: 9f:f5:52:69:55:03:40:20:db:59:d3:e7:e4:b1:bc: 1f:1c:04:3f:81:89:b4:6c:df:1e:c9:7b:73:0c:10: a0:7d:af:ab:d4:36:83:3f:01:b1:99:47:8b:44:df: 79:ab:d0:28:e0:dd:c3:e4:c6:53:17:62:25:35:2f: 69:99:14:13:e5:8c:8e:8f:08:25:7e:df:fe:9e:47: d0:8f:24:22:68:c6:b8:d3:d8:cc:e4:5a:ce:de:5c: 64:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:ED:98:79:68:86:0D:B8:CD:7E:93:04:42:11:3D:3A:B9:8E:EB:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 199.38.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:fd:47:08:66:30:cc:a2:cc:f5:bc:7a:4f:5f:cc:0b:9f:ca: 23:a2:e8:d0:fe:df:38:97:12:7a:c9:48:b2:80:71:9c:21:2f: 41:39:b8:9f:90:68:1d:1a:fe:d6:28:7b:c3:6b:98:f9:5b:30: bf:80:e8:59:cb:17:fb:51:25:58:cc:2b:4b:2d:fb:47:43:6b: db:39:12:7e:79:da:fc:70:d3:c6:7e:66:f8:71:59:bd:4f:59: e6:35:d0:10:77:5a:b2:a7:04:72:4c:d2:9f:08:d5:6f:4f:de: af:81:5f:00:17:38:3a:31:b3:a6:67:ae:65:88:3d:fe:08:5c: 5c:da:0a:4f:d4:bc:55:75:26:06:98:5b:82:fa:9f:a8:2c:8e: 41:e6:aa:a7:f4:10:3d:c0:19:68:e8:b6:3a:9f:e6:ec:ab:d2: 96:a3:bf:65:de:44:82:29:56:17:93:2f:7a:11:8b:ac:6f:49: cd:84:f6:ea:08:a9:51:c0:2d:a8:25:67:9d:59:2e:2f:45:d6: f1:f9:c9:b0:27:31:a8:ac:20:9f:a8:41:50:55:2d:4a:1d:99: d5:42:2e:fc:01:7c:ec:f2:2a:1b:c0:a9:62:61:70:2b:2c:35: 37:7b:e7:d7:26:3f:41:2b:de:71:c3:b2:25:d4:2a:c9:4d:a6: 96:21:3d:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2FEoZRuk1SFzOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk NTJiMGZjYjYtZDAxZS00NzNiLTk0NGItNzdlODM3ZWNiOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBWLtsjl20Y+ooRJUjdUFoTUbRnWFuKO2eM6 JRH1P/8nda8SmxZcSLd+Tfe5dOLxs3oNpBAsZc6vkGd2w6LYr1rKrUByDf5QBB0C bYwjh5QbeGezM6Ow5S5u9iGTbI3PPDB3GGrPMNADcOGx5PbuL43ydhsyyyoCbyxU tGF2fAKq6XgUjot5I7KZjmNlGIVGoi3cHzcO6ujHOFQmKm7VRzgsNK+f9VJpVQNA INtZ0+fksbwfHAQ/gYm0bN8eyXtzDBCgfa+r1DaDPwGxmUeLRN95q9Ao4N3D5MZT F2IlNS9pmRQT5YyOjwglft/+nkfQjyQiaMa409jM5FrO3lxkXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3tmHlohg24zX6TBEIRPTq5juvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZGU4YzI1NGQtYTU4Mi0z YjAxLTlkYTUtZmMxZDQ5NzM5ZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxybyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL9RwhmMMyizPW8ek9fzAufyiOi6ND+3ziXEnrJSLKAcZwhL0E5uJ+Q aB0a/tYoe8NrmPlbML+A6FnLF/tRJVjMK0st+0dDa9s5En552vxw08Z+ZvhxWb1P WeY10BB3WrKnBHJM0p8I1W9P3q+BXwAXODoxs6ZnrmWIPf4IXFzaCk/UvFV1JgaY W4L6n6gsjkHmqqf0ED3AGWjotjqf5uyr0pajv2XeRIIpVheTL3oRi6xvSc2E9uoI qVHALaglZ51ZLi9F1vH5ybAnMaisIJ+oQVBVLUodmdVCLvwBfOzyKhvAqWJhcCss NTd759cmP0Er3nHDsiXUKslNppYhPTg= -----END CERTIFICATE-----Generated at Wed Nov 4 18:53:22 2026 by rpki-client