$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/827d8887-e52b-303b-a249-a9d675c75f4f.roa File: 827d8887-e52b-303b-a249-a9d675c75f4f.roa (raw, json) Hash identifier: cLTvGJDT52n4jTlQwJxy1av3uAYtr2cm4WfnaeEYx70= Subject key identifier: 6D:3E:72:B5:38:BE:56:74:E5:0B:5A:47:1C:00:EC:BB:1C:3D:08:C6 Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584D67DFBA74F071E4E6E86C1D40 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/827d8887-e52b-303b-a249-a9d675c75f4f.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 394625 IP address blocks: 199.38.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ba:74:f0:71:e4:e6:e8:6c:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=46561092-c141-4c0d-8935-b08a430f8c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b2:fa:ff:09:26:eb:ae:97:91:62:03:4c:ba: e0:ac:e5:50:db:b2:e0:b5:6a:a7:b0:b7:91:85:dd: b2:cb:ed:89:79:3d:bf:ec:18:2b:b5:c5:af:ea:96: 6e:36:8a:67:50:98:59:90:19:99:bc:40:8e:9e:c2: 1e:ca:1c:4a:74:12:8c:46:9f:47:64:97:9c:c5:d6: cc:5e:e3:92:e0:1f:89:59:c2:e2:e2:e6:4a:34:10: 9e:1d:e2:f4:20:ea:4a:b1:60:d2:cc:71:eb:b9:6e: 02:e1:dc:40:b3:28:18:be:be:8a:44:51:66:3d:22: 6d:9f:61:17:9e:ed:4c:c4:d2:66:bc:53:c9:2b:7d: 08:9d:a6:af:bd:a3:7f:5c:9b:df:b5:51:66:00:1d: 6a:de:12:fb:1d:4b:08:e2:84:3b:08:70:4b:70:c0: e0:7a:40:dd:6d:8c:69:81:51:92:bc:2a:bf:b3:05: c6:45:f6:7b:81:3d:51:3e:d5:3b:0e:5b:c6:5c:98: 5b:7c:1d:98:b8:2b:6d:47:52:37:00:bd:ef:0b:f8: 1a:9f:af:5a:06:38:69:89:17:17:b4:2c:0a:00:40: 90:5a:16:d0:f6:0a:17:98:65:8a:99:5d:9b:c1:ed: 5d:9f:af:46:dc:d5:4a:0f:af:5e:8c:94:f3:fe:9d: e3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3E:72:B5:38:BE:56:74:E5:0B:5A:47:1C:00:EC:BB:1C:3D:08:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/827d8887-e52b-303b-a249-a9d675c75f4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 199.38.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:8e:21:dc:48:a7:d3:3e:a0:16:6a:d2:cc:11:28:7c:80:d1: ae:33:7e:1d:a3:ac:38:2f:07:76:d0:1b:4e:4d:bc:78:3e:a3: b4:21:0c:1d:c3:31:9a:d6:ad:64:4a:a8:67:f3:ff:e4:15:31: 76:e0:44:9d:28:6d:ce:e7:e5:ab:03:6d:1b:81:28:3e:fb:6c: 1b:79:e3:e7:d5:cf:72:a6:87:49:14:fb:03:d0:d6:8c:c3:81: 01:44:4d:ae:ac:5c:42:ca:e6:ec:4b:fa:f7:6c:79:15:27:84: ea:2a:9a:a4:fd:11:41:9d:c6:cb:db:35:8e:34:51:0a:91:62: d6:f7:d1:ec:f2:7b:0a:45:71:cd:c9:1f:67:2c:fe:50:9e:f6: 33:8d:8e:9b:a4:4e:54:7b:68:f7:31:da:dd:06:d9:d5:32:b3: 3c:2e:c7:1f:75:6f:ab:b8:49:14:a1:a1:57:f2:f6:de:40:7e: 62:21:f0:dd:46:f0:d7:ee:2f:d3:08:51:7b:59:74:73:65:66: 10:ee:c0:82:7d:9b:b3:c3:05:35:d3:22:98:2d:e4:2c:7b:28: 17:3e:77:19:52:4c:b1:91:d7:ba:b5:d3:2f:39:0e:c0:96:98: d3:a9:2b:00:68:ad:c4:bf:14:db:5b:cc:82:e7:82:29:a7:17: 59:7f:56:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37p08HHk5uhsHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NDY1NjEwOTItYzE0MS00YzBkLTg5MzUtYjA4YTQzMGY4YzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrL6/wkm666XkWIDTLrgrOVQ27LgtWqnsLeR hd2yy+2JeT2/7BgrtcWv6pZuNopnUJhZkBmZvECOnsIeyhxKdBKMRp9HZJecxdbM XuOS4B+JWcLi4uZKNBCeHeL0IOpKsWDSzHHruW4C4dxAsygYvr6KRFFmPSJtn2EX nu1MxNJmvFPJK30InaavvaN/XJvftVFmAB1q3hL7HUsI4oQ7CHBLcMDgekDdbYxp gVGSvCq/swXGRfZ7gT1RPtU7DlvGXJhbfB2YuCttR1I3AL3vC/gan69aBjhpiRcX tCwKAECQWhbQ9goXmGWKmV2bwe1dn69G3NVKD69ejJTz/p3jiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0+crU4vlZ05QtaRxwA7LscPQjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvODI3ZDg4ODctZTUyYi0z MDNiLWEyNDktYTlkNjc1Yzc1ZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiOIdxIp9M+oBZq0swRKHyA0a4zfh2jrDgvB3bQG05NvHg+o7QhDB3D MZrWrWRKqGfz/+QVMXbgRJ0obc7n5asDbRuBKD77bBt54+fVz3Kmh0kU+wPQ1ozD gQFETa6sXELK5uxL+vdseRUnhOoqmqT9EUGdxsvbNY40UQqRYtb30ezyewpFcc3J H2cs/lCe9jONjpukTlR7aPcx2t0G2dUyszwuxx91b6u4SRShoVfy9t5AfmIh8N1G 8NfuL9MIUXtZdHNlZhDuwIJ9m7PDBTXTIpgt5Cx7KBc+dxlSTLGR17q10y85DsCW mNOpKwBorcS/FNtbzILngimnF1l/Vrk= -----END CERTIFICATE-----Generated at Fri Apr 17 20:30:02 2026 by rpki-client