$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa File: ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa (raw, json) Hash identifier: RgP5nV2xmIXQ05UNg5VhpFXGliKkkspQAPzwo2L/8LU= Subject key identifier: 67:D2:D8:5B:2B:1D:F6:C9:02:C6:05:15:82:51:AE:50:66:10:94:05 Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584BA6679F902B7FF74846564000 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 394625 IP address blocks: 199.38.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:9f:90:2b:7f:f7:48:46:56:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=3bba264d-c363-4996-a56b-efe2c388378e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:66:73:c7:bc:21:28:43:87:4a:ec:aa:1c:2d: f1:d0:18:c3:f7:f7:d7:1f:dc:cd:19:6d:1a:bb:27: 53:a7:41:54:52:4a:af:e8:30:b5:b3:d5:7a:77:a6: 41:c0:4d:9e:b2:42:9d:30:81:94:69:3f:29:b0:99: 87:7c:4e:d1:da:bb:82:c7:a3:df:3c:c2:4a:0b:92: 13:6b:be:37:dd:1d:45:fc:ef:aa:4a:db:4f:ba:26: 4d:a7:24:8e:60:8f:6f:33:48:45:4a:6c:59:01:a8: bb:82:09:44:cc:f6:cd:8d:ff:e3:59:f7:4a:24:e3: 9f:9b:8c:3f:64:00:87:47:90:c0:b1:7a:b5:61:8a: f2:7d:61:ef:81:50:db:f3:05:02:2d:9b:a7:e1:9b: 73:47:d0:f7:be:45:1b:c3:22:64:3f:00:d6:d9:fa: c4:bd:d9:dc:f5:bc:d9:73:71:a6:76:d1:84:50:78: a6:a2:e6:6f:2e:7c:ec:cc:c6:13:71:e8:a4:a8:38: e2:03:b8:38:40:5f:13:4e:03:73:4b:09:ee:3a:11: bd:0e:fe:cb:3c:78:c5:9e:34:93:e7:41:82:f3:25: d4:6c:b3:8b:d3:84:09:8d:99:c0:03:65:f9:32:28: d6:d4:7d:44:89:53:82:a8:15:98:53:92:b4:f3:86: b6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D2:D8:5B:2B:1D:F6:C9:02:C6:05:15:82:51:AE:50:66:10:94:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 199.38.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b8:4b:eb:1c:39:2d:73:f5:e3:1e:20:91:b7:e6:b9:bc:d3: 2e:90:d5:48:e8:a1:1b:6c:15:f1:64:ce:67:84:ef:73:82:b3: 8e:26:9d:6c:50:0a:a1:18:d3:ca:02:26:0f:b0:06:6d:33:4d: f7:20:86:54:4a:1d:3b:4e:77:ab:5a:a9:2d:d3:4b:55:bf:9f: 4d:7a:d1:e9:a7:2f:93:39:b4:87:da:cc:e3:6f:a2:46:35:8f: 3e:d6:e1:96:8b:4d:7e:8d:b0:10:a0:f7:f3:c1:57:c7:58:95: d9:dc:3f:cf:30:e8:8a:78:db:c5:96:37:f5:ac:64:94:4c:60: ca:58:9e:f6:11:b7:85:b4:fa:f5:c8:5d:b2:59:06:87:78:17: 7d:a1:d8:84:22:28:1d:00:06:08:fe:be:97:06:5d:99:f5:b4: 08:55:43:ff:10:a6:cd:6a:31:0c:f1:02:bb:b4:ca:90:15:78: c2:7f:e1:f2:98:cc:56:bb:0d:9d:91:de:4f:3e:42:ba:52:81: 59:10:cd:96:34:9f:4c:5f:a6:d4:a9:e3:a3:02:f7:7a:20:ae: 30:fc:bb:a7:ef:0a:a1:51:4f:e2:4a:45:aa:24:5a:89:22:b2: 53:b2:25:37:c2:6b:7d:e1:bc:dc:0d:c7:76:8d:f3:32:ab:93: ad:3a:8b:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ5+QK3/3SEZWQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk M2JiYTI2NGQtYzM2My00OTk2LWE1NmItZWZlMmMzODgzNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGZzx7whKEOHSuyqHC3x0BjD9/fXH9zNGW0a uydTp0FUUkqv6DC1s9V6d6ZBwE2eskKdMIGUaT8psJmHfE7R2ruCx6PfPMJKC5IT a7433R1F/O+qSttPuiZNpySOYI9vM0hFSmxZAai7gglEzPbNjf/jWfdKJOOfm4w/ ZACHR5DAsXq1YYryfWHvgVDb8wUCLZun4ZtzR9D3vkUbwyJkPwDW2frEvdnc9bzZ c3GmdtGEUHimouZvLnzszMYTceikqDjiA7g4QF8TTgNzSwnuOhG9Dv7LPHjFnjST 50GC8yXUbLOL04QJjZnAA2X5MijW1H1EiVOCqBWYU5K084a27wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfS2FsrHfbJAsYFFYJRrlBmEJQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZWNlY2VhNWUtZWFmNC0z YTBkLTg3NDEtM2UyNWY0YjcwMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxybwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq4S+scOS1z9eMeIJG35rm80y6Q1UjooRtsFfFkzmeE73OCs44mnWxQ CqEY08oCJg+wBm0zTfcghlRKHTtOd6taqS3TS1W/n0160emnL5M5tIfazONvokY1 jz7W4ZaLTX6NsBCg9/PBV8dYldncP88w6Ip428WWN/WsZJRMYMpYnvYRt4W0+vXI XbJZBod4F32h2IQiKB0ABgj+vpcGXZn1tAhVQ/8Qps1qMQzxAru0ypAVeMJ/4fKY zFa7DZ2R3k8+QrpSgVkQzZY0n0xfptSp46MC93ogrjD8u6fvCqFRT+JKRaokWoki slOyJTfCa33hvNwNx3aN8zKrk606i54= -----END CERTIFICATE-----Generated at Wed Nov 5 14:39:38 2025 by rpki-client