$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa File: ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa (raw, json) Hash identifier: ceQq8JBSl1LVrKJxgz5DxxOEzXDBAC75F0iDMmOnWDw= Subject key identifier: CF:E6:8C:4F:94:50:47:BD:C1:04:F5:67:0E:95:C7:51:54:5C:DB:6A Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584AC5AB839ED5375A2142586D80 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 394625 IP address blocks: 199.38.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:83:9e:d5:37:5a:21:42:58:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=ad60ada4-9b80-45e4-a195-e0ca44392491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b6:3c:3a:90:7d:93:a2:bb:cc:f6:75:7e:65: 3a:45:46:5d:10:dd:7c:3b:2b:d3:b2:26:f8:0d:09: 4e:ac:5e:13:62:74:ca:8b:8f:73:65:c4:04:0f:1a: fb:dc:ef:89:0f:65:7a:89:25:74:74:fc:ce:18:e0: 09:1e:49:79:d4:2a:54:a7:52:4b:24:ff:46:21:96: 48:a7:76:c0:83:eb:72:90:8d:25:8c:4e:05:74:bf: 13:52:75:68:40:f0:03:69:21:88:00:5d:a0:08:69: af:c6:55:f4:e7:48:3d:13:1a:6d:80:d3:bb:ae:36: 16:0e:2a:b7:19:89:0e:e5:9a:22:88:4d:51:41:41: 0d:ee:4d:1f:c2:b0:85:35:e4:06:0e:7e:7f:e5:39: 2b:b2:f7:ca:4c:d0:22:1a:f0:83:f1:85:97:79:12: df:7f:08:cc:e3:96:cb:cd:79:e4:7f:04:eb:fd:d7: d2:60:b4:16:75:8b:ef:7e:46:2b:18:76:16:e2:e7: af:33:70:52:68:47:34:44:9c:48:d2:eb:1c:ec:e8: cd:03:34:80:58:84:71:4c:97:f8:d7:73:58:9b:c2: 4c:61:f7:e0:3e:93:2b:16:98:92:6e:66:a4:15:04: b1:c4:79:37:07:fc:e6:8e:27:d2:2d:c9:9a:aa:ea: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E6:8C:4F:94:50:47:BD:C1:04:F5:67:0E:95:C7:51:54:5C:DB:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 199.38.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:27:b4:3c:8b:da:bb:5f:74:11:6c:5d:2c:eb:a9:18:f4:10: a5:a0:13:cd:af:00:a2:63:77:45:7c:ab:5c:60:62:9a:f4:45: 18:67:03:a8:6a:93:5c:98:66:7e:26:ed:7a:16:70:36:c3:a3: b3:cb:37:ea:46:ff:d7:63:ec:ac:71:0a:9a:8e:3d:8a:24:25: d7:84:c0:69:3d:98:72:ea:43:93:a8:20:57:bf:d1:d3:f0:4a: 0d:f5:05:30:64:62:44:36:d7:ea:e9:0e:29:34:e8:97:3e:0c: 2a:ed:e4:19:8f:e4:f6:fb:80:8d:a8:3c:ce:74:9d:9f:13:3a: e8:43:9d:50:b5:61:00:00:60:94:a9:b6:40:93:8a:91:63:2c: 6c:3c:ee:54:60:70:27:58:d3:ce:63:e1:ac:c1:66:4b:f6:94: e9:f3:58:37:fd:d7:6b:36:f4:42:7a:5a:ec:3c:15:ea:8f:b7: e1:3b:1d:44:09:c6:65:b7:99:9d:ab:33:a5:08:a3:f8:96:6f: b6:f7:aa:3d:a9:50:a1:e4:5d:44:20:69:0d:3d:f6:5d:bc:87: 9d:54:17:e9:52:52:36:48:58:a6:f4:3e:b1:71:b0:39:dc:c8: b4:b9:f9:1e:ae:b6:f1:17:b4:99:01:df:99:88:69:0a:00:2e: 69:e3:a6:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4Oe1TdaIUJYbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk YWQ2MGFkYTQtOWI4MC00NWU0LWExOTUtZTBjYTQ0MzkyNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLY8OpB9k6K7zPZ1fmU6RUZdEN18OyvTsib4 DQlOrF4TYnTKi49zZcQEDxr73O+JD2V6iSV0dPzOGOAJHkl51CpUp1JLJP9GIZZI p3bAg+tykI0ljE4FdL8TUnVoQPADaSGIAF2gCGmvxlX050g9ExptgNO7rjYWDiq3 GYkO5ZoiiE1RQUEN7k0fwrCFNeQGDn5/5TkrsvfKTNAiGvCD8YWXeRLffwjM45bL zXnkfwTr/dfSYLQWdYvvfkYrGHYW4uevM3BSaEc0RJxI0usc7OjNAzSAWIRxTJf4 13NYm8JMYffgPpMrFpiSbmakFQSxxHk3B/zmjifSLcmaquq5/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/mjE+UUEe9wQT1Zw6Vx1FUXNtqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZWNlY2VhNWUtZWFmNC0z YTBkLTg3NDEtM2UyNWY0YjcwMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxybwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsntDyL2rtfdBFsXSzrqRj0EKWgE82vAKJjd0V8q1xgYpr0RRhnA6hq k1yYZn4m7XoWcDbDo7PLN+pG/9dj7KxxCpqOPYokJdeEwGk9mHLqQ5OoIFe/0dPw Sg31BTBkYkQ21+rpDik06Jc+DCrt5BmP5Pb7gI2oPM50nZ8TOuhDnVC1YQAAYJSp tkCTipFjLGw87lRgcCdY085j4azBZkv2lOnzWDf912s29EJ6Wuw8FeqPt+E7HUQJ xmW3mZ2rM6UIo/iWb7b3qj2pUKHkXUQgaQ099l28h51UF+lSUjZIWKb0PrFxsDnc yLS5+R6utvEXtJkB35mIaQoALmnjplI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:45:38 2025 by rpki-client