$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa File: ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa (raw, json) Hash identifier: ZDpOmWyQi9ctkh3apQUIDv8l5y0+vbGibTBs8XlcCnk= Subject key identifier: 68:7B:F0:72:B7:2E:21:6F:C0:13:5C:9A:61:3A:B2:F7:DC:3B:2D:FE Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584F8DD85119B57905FE7CD6BE90 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 394625 IP address blocks: 199.38.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:51:19:b5:79:05:fe:7c:d6:be:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=0095e82d-5858-4ea2-94c4-c662888e54d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0f:15:92:42:50:ea:c1:a8:3e:a9:a5:b6:6d: 5c:1a:7f:69:0f:db:74:b7:dd:a3:a2:a2:8f:6b:3e: 08:7b:f4:77:0e:9a:ac:33:20:9c:f0:96:c2:8c:82: 14:45:59:0b:43:55:55:c2:5a:37:4d:a8:73:a0:96: 8a:76:ee:c1:23:26:cf:ac:06:a7:dc:ad:4c:48:f6: 57:a8:b9:14:2d:55:42:1b:69:9e:24:d3:2d:69:79: cd:9f:1c:76:17:33:97:c3:ce:6e:79:ac:f7:7d:62: b3:56:97:32:a7:1c:86:7f:94:22:52:87:09:12:56: 76:b5:c7:d4:89:25:88:1b:e3:24:47:40:3a:f4:b5: 3f:4b:20:3c:8e:1a:f6:37:34:ca:ae:9e:38:22:17: 70:01:40:8d:9a:0d:a9:e8:10:bc:a8:5d:bc:71:69: f3:21:8d:df:53:20:c0:6e:e3:b4:95:0c:bd:3b:f1: 7a:c9:18:b8:35:05:0e:68:bb:12:1b:db:b6:76:51: fe:f2:cd:59:3a:b9:c1:89:1c:37:cd:c9:17:39:cf: 53:39:5a:af:3f:50:de:11:fb:dc:55:a6:9d:86:24: b9:41:d5:7f:01:1c:e5:ae:60:58:7c:c0:ca:19:34: 22:cb:c8:53:9d:2b:71:f3:ea:b4:3f:81:fa:10:d2: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7B:F0:72:B7:2E:21:6F:C0:13:5C:9A:61:3A:B2:F7:DC:3B:2D:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 199.38.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b3:f2:db:f5:fd:3e:87:c7:1c:e4:33:85:21:33:85:e4:38: a0:a4:09:0e:95:6b:d4:c0:6c:ac:c8:75:ca:85:8d:29:77:e2: 22:91:c3:d9:5c:fe:e4:a8:1e:37:e6:7f:fd:ec:d8:8b:26:12: 66:c5:15:b9:7a:05:16:43:5d:8b:6c:81:c8:b0:8f:95:09:21: cb:63:99:3c:02:8e:3b:20:a4:3a:ad:0c:06:e2:ed:63:75:45: 5f:2d:a4:14:54:d5:a8:b1:6d:91:7b:85:cd:bb:a0:27:18:59: 94:00:44:f4:8b:db:bb:d2:26:d5:11:2a:3f:08:59:7e:15:f3: c9:96:12:e1:f1:47:e0:f9:54:b2:41:7a:df:74:f3:29:5a:26: 76:ca:f8:7f:09:b3:cc:ba:a2:8c:09:d8:83:a2:67:8a:bb:e6: a6:e7:91:a9:7a:10:7e:bd:89:cb:1a:32:96:6d:ee:26:1c:a4: 80:8a:9f:27:ef:92:19:a2:64:af:f2:f8:35:93:05:4c:04:14: 49:e7:e9:c6:65:d8:44:6e:68:b7:4f:d8:7d:df:9c:e2:14:3b: fe:3d:78:48:b1:cc:e0:9c:71:9e:14:c5:36:f8:b2:f3:72:12: ce:23:15:e8:f7:54:62:3b:e6:41:37:28:0c:b2:05:64:01:1f: 94:9b:48:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2FEZtXkF/nzWvpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk MDA5NWU4MmQtNTg1OC00ZWEyLTk0YzQtYzY2Mjg4OGU1NGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A8VkkJQ6sGoPqmltm1cGn9pD9t0t92joqKP az4Ie/R3DpqsMyCc8JbCjIIURVkLQ1VVwlo3TahzoJaKdu7BIybPrAan3K1MSPZX qLkULVVCG2meJNMtaXnNnxx2FzOXw85ueaz3fWKzVpcypxyGf5QiUocJElZ2tcfU iSWIG+MkR0A69LU/SyA8jhr2NzTKrp44IhdwAUCNmg2p6BC8qF28cWnzIY3fUyDA buO0lQy9O/F6yRi4NQUOaLsSG9u2dlH+8s1ZOrnBiRw3zckXOc9TOVqvP1DeEfvc VaadhiS5QdV/ARzlrmBYfMDKGTQiy8hTnStx8+q0P4H6ENJilQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh78HK3LiFvwBNcmmE6svfcOy3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZWNlY2VhNWUtZWFmNC0z YTBkLTg3NDEtM2UyNWY0YjcwMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxybwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOz8tv1/T6HxxzkM4UhM4XkOKCkCQ6Va9TAbKzIdcqFjSl34iKRw9lc /uSoHjfmf/3s2IsmEmbFFbl6BRZDXYtsgciwj5UJIctjmTwCjjsgpDqtDAbi7WN1 RV8tpBRU1aixbZF7hc27oCcYWZQARPSL27vSJtURKj8IWX4V88mWEuHxR+D5VLJB et908ylaJnbK+H8Js8y6oowJ2IOiZ4q75qbnkal6EH69icsaMpZt7iYcpICKnyfv khmiZK/y+DWTBUwEFEnn6cZl2ERuaLdP2H3fnOIUO/49eEixzOCccZ4UxTb4svNy Es4jFej3VGI75kE3KAyyBWQBH5SbSFw= -----END CERTIFICATE-----Generated at Thu Nov 5 04:37:55 2026 by rpki-client