$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa File: ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa (raw, json) Hash identifier: H5Oza9C0rXVENB+encWmWLJcZ6uAx3pMz1zcdAVD/F8= Subject key identifier: 6D:23:9A:A5:65:24:AD:F4:A1:1C:ED:83:E3:A4:DD:F9:A8:51:F0:73 Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584EEA874F809875B10883F43100 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 394625 IP address blocks: 199.38.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:4f:80:98:75:b1:08:83:f4:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=831043fe-69b7-4470-9c04-85c81e9144c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:c2:e1:c6:f0:b2:30:36:c0:fc:22:d6:02: c4:b9:c5:86:27:c5:b4:d3:b9:f0:84:0b:57:31:b1: 2b:5c:da:75:ae:9f:a6:6b:53:56:e5:60:68:7b:5f: 14:ee:fb:7a:8a:f4:08:91:e8:f3:7b:72:2a:c2:57: 36:8e:70:c0:1c:39:38:21:e1:ee:6b:e7:99:90:46: 03:d3:72:26:a8:ad:c7:da:42:1e:24:ff:55:e8:33: ef:91:a4:bc:c6:46:c6:ea:21:52:31:02:85:57:41: 95:62:fe:8c:3d:75:eb:bb:e2:a1:5a:5b:ca:53:57: 5e:52:c5:2c:2e:83:bf:9a:87:29:92:5d:47:09:74: 5a:a9:07:5d:e2:30:a3:bd:e6:e8:ed:6b:40:93:6f: 6d:9b:ef:02:c9:36:02:75:b9:a5:3d:b3:f7:7f:5c: c9:cc:7e:5c:25:42:2d:81:81:1c:6d:ba:cf:cc:69: 56:0e:d0:f7:57:02:93:c9:81:5f:e8:39:09:a0:64: 3e:f8:a9:eb:c8:84:e2:83:4b:aa:d0:76:6a:73:ec: 24:f8:1e:52:c6:33:8d:af:58:5a:df:56:6e:e0:43: 33:e4:4b:04:00:c8:b3:8e:c2:81:80:76:eb:43:e0: fd:72:92:92:82:5d:59:2f:be:86:61:43:a4:55:4d: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:23:9A:A5:65:24:AD:F4:A1:1C:ED:83:E3:A4:DD:F9:A8:51:F0:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 199.38.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:c4:f2:03:a5:96:91:ab:f9:93:68:ec:4d:53:05:01:77:b9: e7:82:ec:da:01:b2:37:53:1c:21:2a:a4:24:cc:63:71:78:13: 36:43:8e:a2:4b:f7:02:6f:d7:e9:19:90:01:dc:90:bb:3f:1b: 27:cd:91:2e:19:ba:c8:19:a8:08:24:d3:a5:78:84:a4:f7:91: a6:76:14:39:62:f9:1d:cc:b3:c3:89:61:28:f5:37:ed:a0:20: f9:ed:6d:4b:2a:19:0c:fd:69:bf:59:d9:93:ce:a3:bb:05:23: ca:3b:0e:5e:e1:7c:1c:d1:d5:72:24:01:84:b6:66:8f:2f:00: 02:b9:e2:f3:83:4a:98:d6:57:0a:70:4e:3f:77:fc:3d:1e:5f: 03:03:2e:0c:93:3d:95:25:33:c5:65:05:42:12:7e:28:8f:1e: c0:ea:1b:03:70:84:a9:6a:33:74:49:64:6f:f2:38:a3:40:9c: d0:af:f7:4b:9d:1e:23:a3:c8:70:d3:cb:c5:ea:c7:8d:78:26: 8e:a2:34:92:18:c7:88:b5:8d:ea:c6:f3:c7:cf:02:1f:e8:fb: 11:3f:b2:3e:57:c7:9f:09:10:9e:ec:be:e1:a1:5f:6d:67:04: 86:61:87:28:09:e2:58:85:fe:47:e2:90:10:cd:ac:8a:9f:b6: 60:7f:f0:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh0+AmHWxCIP0MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ODMxMDQzZmUtNjliNy00NDcwLTljMDQtODVjODFlOTE0NGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNfC4cbwsjA2wPwi1gLEucWGJ8W007nwhAtX MbErXNp1rp+ma1NW5WBoe18U7vt6ivQIkejze3Iqwlc2jnDAHDk4IeHua+eZkEYD 03ImqK3H2kIeJP9V6DPvkaS8xkbG6iFSMQKFV0GVYv6MPXXru+KhWlvKU1deUsUs LoO/mocpkl1HCXRaqQdd4jCjvebo7WtAk29tm+8CyTYCdbmlPbP3f1zJzH5cJUIt gYEcbbrPzGlWDtD3VwKTyYFf6DkJoGQ++KnryITig0uq0HZqc+wk+B5SxjONr1ha 31Zu4EMz5EsEAMizjsKBgHbrQ+D9cpKSgl1ZL76GYUOkVU3UXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0jmqVlJK30oRztg+Ok3fmoUfBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZWNlY2VhNWUtZWFmNC0z YTBkLTg3NDEtM2UyNWY0YjcwMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxybwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7E8gOllpGr+ZNo7E1TBQF3ueeC7NoBsjdTHCEqpCTMY3F4EzZDjqJL 9wJv1+kZkAHckLs/GyfNkS4ZusgZqAgk06V4hKT3kaZ2FDli+R3Ms8OJYSj1N+2g IPntbUsqGQz9ab9Z2ZPOo7sFI8o7Dl7hfBzR1XIkAYS2Zo8vAAK54vODSpjWVwpw Tj93/D0eXwMDLgyTPZUlM8VlBUISfiiPHsDqGwNwhKlqM3RJZG/yOKNAnNCv90ud HiOjyHDTy8Xqx414Jo6iNJIYx4i1jerG88fPAh/o+xE/sj5Xx58JEJ7svuGhX21n BIZhhygJ4liF/kfikBDNrIqftmB/8Co= -----END CERTIFICATE-----Generated at Sat Sep 12 09:43:05 2026 by rpki-client