$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/9c4c07de-67db-3825-8ec5-023eec187c79.roa File: 9c4c07de-67db-3825-8ec5-023eec187c79.roa (raw, json) Hash identifier: Z7HxnnDPHWVa5bFioOYbvkNs/R/SLxyaBQn4k9POf5o= Subject key identifier: 56:77:40:20:49:41:49:3A:A8:F7:50:FF:0C:76:F8:85:BA:46:B8:BD Certificate issuer: /CN=541b7255-dab8-4786-bbe3-843423870307 Certificate serial: 010D0C9F4328584F549DA14BD5E3D3E2C834F380 Authority key identifier: 85:FF:E3:42:77:91:43:69:FF:ED:3B:44:02:A3:D0:04:52:68:27:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/9c4c07de-67db-3825-8ec5-023eec187c79.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 400956 IP address blocks: 198.203.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a1:4b:d5:e3:d3:e2:c8:34:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=541b7255-dab8-4786-bbe3-843423870307 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=8e667faa-0c93-4b6b-b2ab-a510a02b607f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:ce:26:6f:70:ca:56:6e:0f:05:5c:44:1e: f9:c2:e8:20:85:d4:58:39:80:e9:63:f7:25:51:cd: a8:cb:84:53:e8:2a:f6:a2:f2:a9:85:48:9f:1c:a8: 5e:26:4f:62:ab:1e:1d:84:6c:42:5d:a8:01:91:3b: 82:38:cf:33:d1:64:90:9f:ce:e6:20:f7:11:6f:e9: e5:70:b0:5b:65:c2:8b:bb:ca:d3:45:52:12:da:0d: 0f:f8:b0:59:c2:5e:89:74:1a:9a:f2:d0:2d:6b:33: 39:93:64:a7:16:bb:7a:3c:ec:2b:42:49:96:33:e5: 0a:6a:30:7a:a8:b2:c8:4c:5e:76:5c:4f:79:d4:f9: a6:c1:e0:4c:43:5d:a2:18:7e:24:c0:37:5f:ad:c4: c0:d4:e9:c0:ef:ab:5a:f0:80:c6:52:0d:1d:6d:58: 6f:97:d0:64:8d:9b:cc:99:a0:08:64:70:e5:47:f8: d3:fb:38:4c:90:2b:38:fa:8d:db:1c:83:6c:c9:49: 06:91:ef:9d:bd:5f:64:38:13:fd:0e:d4:42:f0:40: 8b:b0:e1:25:eb:81:bf:50:8d:00:8c:57:de:48:e1: 6e:3b:54:5f:29:5f:5f:6b:b0:23:78:c3:e4:c1:57: ff:42:df:0d:2a:6d:ee:c2:c6:db:23:fe:aa:18:5d: d8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:77:40:20:49:41:49:3A:A8:F7:50:FF:0C:76:F8:85:BA:46:B8:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/9c4c07de-67db-3825-8ec5-023eec187c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.crl X509v3 Authority Key Identifier: keyid:85:FF:E3:42:77:91:43:69:FF:ED:3B:44:02:A3:D0:04:52:68:27:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer sbgp-ipAddrBlock: critical IPv4: 198.203.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:70:91:d7:41:f7:69:6a:5b:5e:c7:dd:ad:f2:84:03:cc:38: 90:93:8f:95:c5:b1:3b:98:3d:25:33:bc:61:66:62:a4:f0:ee: a5:77:ef:3f:ec:68:30:0b:bf:d6:8f:7b:c1:09:aa:9b:af:0f: f4:e1:0f:da:94:4c:86:8c:a5:08:f7:e4:20:f2:c3:52:42:52: 64:08:b8:38:61:fa:a2:94:90:46:00:eb:16:49:6c:ed:36:6c: d5:ca:67:81:8d:cc:cf:47:7d:5e:4b:de:8b:d6:d4:0c:ed:dc: 03:93:d9:e0:b4:78:2c:a1:c2:08:d5:6c:da:98:e9:15:cf:9e: 4c:8d:68:96:b9:ff:ea:5f:6a:ea:b8:f8:54:15:e4:94:ba:0f: da:e6:ab:06:ce:c7:06:28:74:19:f3:ed:6a:cc:e0:10:f3:c4: 05:e2:b7:3f:80:21:b1:e5:95:75:5b:b9:58:6d:b8:67:7f:ff: 74:dc:c7:bc:86:f5:5e:f7:57:a3:7e:ea:3c:e1:d8:5d:21:74: bf:c5:98:8a:f2:75:c0:07:7e:c4:31:19:83:6e:09:73:fd:23: 13:10:f4:c4:ed:c9:df:10:4a:15:77:c4:15:88:0c:fc:6f:82: d7:9a:79:d8:df:ec:46:9e:72:f0:aa:a0:ef:5d:f5:90:fa:4c: f0:22:8c:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnaFL1ePT4sg084AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQxYjcyNTUtZGFiOC00Nzg2LWJiZTMtODQzNDIzODcw MzA3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OGU2NjdmYWEtMGM5My00YjZiLWIyYWItYTUxMGEwMmI2MDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQDOJm9wylZuDwVcRB75wugghdRYOYDpY/cl Uc2oy4RT6Cr2ovKphUifHKheJk9iqx4dhGxCXagBkTuCOM8z0WSQn87mIPcRb+nl cLBbZcKLu8rTRVIS2g0P+LBZwl6JdBqa8tAtazM5k2SnFrt6POwrQkmWM+UKajB6 qLLITF52XE951PmmweBMQ12iGH4kwDdfrcTA1OnA76ta8IDGUg0dbVhvl9BkjZvM maAIZHDlR/jT+zhMkCs4+o3bHINsyUkGke+dvV9kOBP9DtRC8ECLsOEl64G/UI0A jFfeSOFuO1RfKV9fa7AjeMPkwVf/Qt8NKm3uwsbbI/6qGF3Y+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ3QCBJQUk6qPdQ/wx2+IW6Rri9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81NDFi NzI1NS1kYWI4LTQ3ODYtYmJlMy04NDM0MjM4NzAzMDcvOWM0YzA3ZGUtNjdkYi0z ODI1LThlYzUtMDIzZWVjMTg3Yzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNTQxYjcyNTUtZGFiOC00Nzg2LWJi ZTMtODQzNDIzODcwMzA3LzU0MWI3MjU1LWRhYjgtNDc4Ni1iYmUzLTg0MzQyMzg3 MDMwNy5jcmwwHwYDVR0jBBgwFoAUhf/jQneRQ2n/7TtEAqPQBFJoJ44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81NDFiNzI1NS1kYWI4LTQ3ODYtYmJlMy04NDM0 MjM4NzAzMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsvLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhwkddB92lqW17H3a3yhAPMOJCTj5XFsTuYPSUzvGFmYqTw7qV37z/s aDALv9aPe8EJqpuvD/ThD9qUTIaMpQj35CDyw1JCUmQIuDhh+qKUkEYA6xZJbO02 bNXKZ4GNzM9HfV5L3ovW1Azt3AOT2eC0eCyhwgjVbNqY6RXPnkyNaJa5/+pfauq4 +FQV5JS6D9rmqwbOxwYodBnz7WrM4BDzxAXitz+AIbHllXVbuVhtuGd//3Tcx7yG 9V73V6N+6jzh2F0hdL/FmIrydcAHfsQxGYNuCXP9IxMQ9MTtyd8QShV3xBWIDPxv gteaedjf7EaecvCqoO9d9ZD6TPAijNI= -----END CERTIFICATE-----Generated at Tue Oct 13 23:06:30 2026 by rpki-client