$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/9b514442-6772-3c09-810e-f1b03e196827.roa File: 9b514442-6772-3c09-810e-f1b03e196827.roa (raw, json) Hash identifier: 5DPlzxCYUwvuZIG8zBu+zwsXQ2KFaVZ19vr6wWA9Zf8= Subject key identifier: BB:08:AB:2D:C9:70:10:75:23:19:7E:EF:77:CE:4A:F8:85:AE:3C:01 Certificate issuer: /CN=541b7255-dab8-4786-bbe3-843423870307 Certificate serial: 010D0C9F4328584F498C08F6889B281BBCCE8880 Authority key identifier: 85:FF:E3:42:77:91:43:69:FF:ED:3B:44:02:A3:D0:04:52:68:27:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/9b514442-6772-3c09-810e-f1b03e196827.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400956 IP address blocks: 198.203.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:08:f6:88:9b:28:1b:bc:ce:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=541b7255-dab8-4786-bbe3-843423870307 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0a1ed986-440e-4389-98de-6b7bfc78032f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:b1:b7:29:c6:4e:d0:eb:44:a4:ec:e6:7c: 45:49:07:9d:81:9a:67:99:16:fa:88:a5:f8:56:b2: 8e:7a:ef:70:a0:38:20:6b:34:95:e0:f7:50:ca:c1: 46:ef:d2:8f:ba:95:87:f8:40:b6:cc:b1:2a:34:5e: d0:fa:e6:c8:7e:81:a9:50:89:26:08:fe:3c:84:dc: c8:de:3a:42:4a:70:37:24:07:53:ed:05:54:e8:dc: 23:24:9f:1b:21:28:db:b9:56:19:5f:04:67:26:50: c7:07:51:ad:7d:87:66:96:e5:31:69:d5:a4:6c:61: 09:18:9b:89:8d:ad:f5:87:8d:ec:be:a0:b7:95:25: be:29:ec:bd:c8:de:ba:16:cd:9c:e4:4c:32:93:b6: df:df:83:d1:e1:d3:5a:6f:22:e4:ae:ab:92:16:cd: 2b:68:8e:20:f8:cd:5f:af:b0:38:c0:b0:87:cb:ff: 1b:99:6d:10:fd:a9:1a:cf:11:0e:8b:cc:9c:25:85: cd:f5:4a:62:dc:47:4d:f7:0e:06:2e:cc:b9:75:e9: eb:52:1b:32:87:d9:39:10:f3:92:ab:a7:bb:e4:24: b7:35:42:94:10:44:e6:92:95:ad:be:00:97:de:40: 9a:b4:f1:28:37:0f:61:83:a5:16:fa:62:31:2f:80: e5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:08:AB:2D:C9:70:10:75:23:19:7E:EF:77:CE:4A:F8:85:AE:3C:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/9b514442-6772-3c09-810e-f1b03e196827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.crl X509v3 Authority Key Identifier: keyid:85:FF:E3:42:77:91:43:69:FF:ED:3B:44:02:A3:D0:04:52:68:27:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer sbgp-ipAddrBlock: critical IPv4: 198.203.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:3d:e2:c9:68:40:f8:8c:6a:c8:47:e2:2e:df:cc:d4:36:f5: 31:17:65:cc:15:13:3c:93:35:8b:ec:e5:8f:a4:aa:65:92:33: 9b:24:8b:9e:b7:1a:6c:c1:22:35:56:07:1b:fc:3f:a8:09:07: 72:1e:c7:1f:ef:d4:09:b8:49:48:58:d9:70:84:9e:03:0e:74: 98:08:eb:3c:74:b5:4b:a4:bf:0a:0b:9e:2d:80:10:d5:ab:7f: ba:7b:ec:04:31:10:b9:97:ef:da:e9:43:09:a6:ba:e7:c4:db: 27:0d:e0:99:a4:49:29:d0:cd:aa:8b:cd:67:24:a7:6e:8b:30: 70:ca:ed:bb:34:d5:aa:3b:94:c0:b5:13:f6:d9:23:cd:cb:13: ea:bb:c1:5b:00:5e:b0:18:1a:6a:9a:c1:57:b4:3b:0e:cc:f9: ef:70:a1:74:95:e2:0b:ec:b2:57:60:99:da:de:d0:f1:08:2c: c6:0c:fa:f3:45:3e:d3:77:43:21:f3:f7:ef:94:c9:8b:7f:97: 5c:47:72:3a:c9:15:c7:d1:73:57:8c:d4:17:7c:60:c1:62:44: 07:c1:8c:b4:0b:e8:e9:74:dc:0d:54:fa:d9:cc:c6:a0:f2:64: 0f:2f:43:9e:5f:cb:91:6d:30:33:9c:7d:55:d1:92:b6:cc:57: c8:80:fc:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjAj2iJsoG7zOiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQxYjcyNTUtZGFiOC00Nzg2LWJiZTMtODQzNDIzODcw MzA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGExZWQ5ODYtNDQwZS00Mzg5LTk4ZGUtNmI3YmZjNzgwMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgaxtynGTtDrRKTs5nxFSQedgZpnmRb6iKX4 VrKOeu9woDggazSV4PdQysFG79KPupWH+EC2zLEqNF7Q+ubIfoGpUIkmCP48hNzI 3jpCSnA3JAdT7QVU6NwjJJ8bISjbuVYZXwRnJlDHB1GtfYdmluUxadWkbGEJGJuJ ja31h43svqC3lSW+Key9yN66Fs2c5Ewyk7bf34PR4dNabyLkrquSFs0raI4g+M1f r7A4wLCHy/8bmW0Q/akazxEOi8ycJYXN9Upi3EdN9w4GLsy5denrUhsyh9k5EPOS q6e75CS3NUKUEETmkpWtvgCX3kCatPEoNw9hg6UW+mIxL4DlRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsIqy3JcBB1Ixl+73fOSviFrjwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81NDFi NzI1NS1kYWI4LTQ3ODYtYmJlMy04NDM0MjM4NzAzMDcvOWI1MTQ0NDItNjc3Mi0z YzA5LTgxMGUtZjFiMDNlMTk2ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNTQxYjcyNTUtZGFiOC00Nzg2LWJi ZTMtODQzNDIzODcwMzA3LzU0MWI3MjU1LWRhYjgtNDc4Ni1iYmUzLTg0MzQyMzg3 MDMwNy5jcmwwHwYDVR0jBBgwFoAUhf/jQneRQ2n/7TtEAqPQBFJoJ44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81NDFiNzI1NS1kYWI4LTQ3ODYtYmJlMy04NDM0 MjM4NzAzMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxsvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU94sloQPiMashH4i7fzNQ29TEXZcwVEzyTNYvs5Y+kqmWSM5ski563 GmzBIjVWBxv8P6gJB3Iexx/v1Am4SUhY2XCEngMOdJgI6zx0tUukvwoLni2AENWr f7p77AQxELmX79rpQwmmuufE2ycN4JmkSSnQzaqLzWckp26LMHDK7bs01ao7lMC1 E/bZI83LE+q7wVsAXrAYGmqawVe0Ow7M+e9woXSV4gvssldgmdre0PEILMYM+vNF PtN3QyHz9++UyYt/l1xHcjrJFcfRc1eM1Bd8YMFiRAfBjLQL6Ol03A1U+tnMxqDy ZA8vQ55fy5FtMDOcfVXRkrbMV8iA/Ko= -----END CERTIFICATE-----Generated at Tue Oct 13 23:06:36 2026 by rpki-client