$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa File: de8c254d-a582-3b01-9da5-fc1d49739f37.roa (raw, json) Hash identifier: fbZpdgViM+kaGok0JQM4FcJ/TnBARoQCw5gjKSLKxp0= Subject key identifier: 6E:E7:34:5B:E3:87:69:98:28:CF:B7:5B:C9:D0:55:9A:FD:02:99:B9 Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584BA6679FA3AAB5E1036CEA87C0 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 394625 IP address blocks: 199.38.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:9f:a3:aa:b5:e1:03:6c:ea:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=8214a16a-c948-4e51-913d-b8815173b2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ad:19:d9:51:24:92:b8:85:ad:48:5c:57:02: 39:02:f6:4d:18:52:f5:ac:52:17:08:7f:cd:1a:ad: 64:ee:65:78:d7:3d:8a:0f:c3:6f:32:c5:a1:ce:03: da:5e:18:50:cf:7f:b3:2f:a8:c8:ad:9d:4a:10:06: ba:8e:16:58:28:87:91:a1:e0:7c:70:8f:80:ea:38: 78:df:74:d8:66:e9:27:77:51:b2:0d:f4:13:b8:9a: 1b:d0:76:6f:b3:3e:39:86:b6:e4:0c:d6:f3:44:ab: 90:96:4e:3b:a6:12:69:3e:74:65:a3:72:fb:5b:ff: d5:d1:5c:50:fa:4c:cb:fe:50:41:bd:54:e3:d0:d2: 02:60:cb:0e:17:38:fd:91:2b:a1:20:ce:b9:a7:28: 3c:3a:03:2d:55:71:ad:03:b4:0c:a4:92:c4:6a:78: d4:ba:bd:d0:ed:e7:d7:0b:c8:ff:6e:5e:87:04:17: 13:70:0a:c7:68:64:de:71:8f:dd:4d:db:ae:6c:1b: 9b:48:1e:37:8b:2d:14:75:da:19:0d:f3:a4:28:82: 89:a9:7c:0a:25:ce:2c:1a:ff:aa:6e:b3:4e:76:c7: b0:bb:2e:d9:75:02:dc:f9:05:83:d4:c2:a6:bc:e3: 43:21:5a:54:bb:70:15:4a:13:26:6f:08:34:55:c9: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E7:34:5B:E3:87:69:98:28:CF:B7:5B:C9:D0:55:9A:FD:02:99:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 199.38.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:46:58:89:d0:c9:ab:4d:39:d8:a9:89:5c:da:43:d5:a4:71: 5c:4f:c8:95:dc:a9:c0:ec:51:22:2c:e1:de:27:be:c8:b3:69: d1:0f:ca:7b:e9:06:2d:b0:1c:fb:62:f8:4b:1d:1a:d6:a8:74: 87:a8:92:b7:2a:5e:d8:f4:38:30:56:f0:4b:de:2d:a2:68:dd: 0a:3c:34:c5:92:72:27:09:df:08:dd:a2:c9:2e:64:5f:a7:5c: 51:b9:aa:62:93:71:77:3c:ef:52:8e:b7:af:ed:11:23:62:cd: c3:98:38:03:41:b8:72:b4:30:3b:ba:c6:b4:aa:ec:71:4c:4d: 99:85:87:b8:0c:4b:b3:56:59:78:67:89:e0:44:b5:df:21:3d: c8:6f:a8:7d:0f:2a:d3:71:7b:3d:2d:6e:0e:f1:d3:88:5f:5e: 56:61:3a:e0:87:77:bc:d1:a6:58:62:66:e3:85:00:9c:68:f9: 7d:45:57:f0:f5:52:fa:46:5b:eb:fa:2a:d4:35:bc:b8:f1:a7: 2c:b5:64:d6:8c:cd:82:7a:32:bd:34:c6:12:9a:f9:39:36:3f: f9:6b:1b:0f:4e:59:8c:44:96:29:fe:28:bd:2a:dd:7d:c3:59: 8d:ca:2d:0c:f0:d2:c7:1f:ab:e4:68:57:4e:de:7f:64:e4:cd: 68:54:24:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ5+jqrXhA2zqh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ODIxNGExNmEtYzk0OC00ZTUxLTkxM2QtYjg4MTUxNzNiMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq0Z2VEkkriFrUhcVwI5AvZNGFL1rFIXCH/N Gq1k7mV41z2KD8NvMsWhzgPaXhhQz3+zL6jIrZ1KEAa6jhZYKIeRoeB8cI+A6jh4 33TYZuknd1GyDfQTuJob0HZvsz45hrbkDNbzRKuQlk47phJpPnRlo3L7W//V0VxQ +kzL/lBBvVTj0NICYMsOFzj9kSuhIM65pyg8OgMtVXGtA7QMpJLEanjUur3Q7efX C8j/bl6HBBcTcArHaGTecY/dTduubBubSB43iy0UddoZDfOkKIKJqXwKJc4sGv+q brNOdsewuy7ZdQLc+QWD1MKmvONDIVpUu3AVShMmbwg0VcmIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7nNFvjh2mYKM+3W8nQVZr9Apm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZGU4YzI1NGQtYTU4Mi0z YjAxLTlkYTUtZmMxZDQ5NzM5ZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxybyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRGWInQyatNOdipiVzaQ9WkcVxPyJXcqcDsUSIs4d4nvsizadEPynvp Bi2wHPti+EsdGtaodIeokrcqXtj0ODBW8EveLaJo3Qo8NMWScicJ3wjdoskuZF+n XFG5qmKTcXc871KOt6/tESNizcOYOANBuHK0MDu6xrSq7HFMTZmFh7gMS7NWWXhn ieBEtd8hPchvqH0PKtNxez0tbg7x04hfXlZhOuCHd7zRplhiZuOFAJxo+X1FV/D1 UvpGW+v6KtQ1vLjxpyy1ZNaMzYJ6Mr00xhKa+Tk2P/lrGw9OWYxElin+KL0q3X3D WY3KLQzw0scfq+RoV07ef2TkzWhUJMI= -----END CERTIFICATE-----Generated at Wed Nov 5 14:40:52 2025 by rpki-client