
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/9c4c07de-67db-3825-8ec5-023eec187c79.roa
File: 9c4c07de-67db-3825-8ec5-023eec187c79.roa (raw, json)
Hash identifier: sMQ+ym5P/s5A7UiN2oJ5xtEEx52A1eQMt99rknYzXm8=
Subject key identifier: EF:46:4D:40:99:C7:E1:42:D2:96:FE:B0:48:56:DE:98:17:00:3D:AB
Certificate issuer: /CN=541b7255-dab8-4786-bbe3-843423870307
Certificate serial: 010D0C9F4328584EB2B19DE2BBA141D3A5EAF3C0
Authority key identifier: 85:FF:E3:42:77:91:43:69:FF:ED:3B:44:02:A3:D0:04:52:68:27:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/9c4c07de-67db-3825-8ec5-023eec187c79.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 400956
IP address blocks: 198.203.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 15 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:9d:e2:bb:a1:41:d3:a5:ea:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541b7255-dab8-4786-bbe3-843423870307
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=e5cc3f5d-0d85-462e-8bbe-3aaf3dc27d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:a5:7b:f0:b3:f5:e6:9e:28:89:0f:ee:e5:
7d:49:c1:3b:44:65:be:ce:1c:54:b4:8b:27:65:3c:
71:05:58:e9:07:8e:a6:05:31:c3:e2:75:07:07:19:
60:ed:5f:4f:80:b9:b3:5b:f5:0f:ac:b1:ef:41:ff:
bb:67:5c:8a:8c:5b:74:6a:5a:95:1b:93:df:17:f9:
12:95:b1:4a:bf:63:89:c4:e5:f3:db:17:c1:d2:a6:
24:1f:82:c8:e3:2c:20:9c:d4:03:5d:1b:35:43:64:
48:28:35:f7:d7:e0:bb:b5:05:1f:63:0d:8d:96:82:
d6:ae:fb:33:f9:e2:97:1e:28:1b:5f:d1:90:62:db:
26:e7:46:f4:cc:33:11:ff:3c:44:74:00:b5:dc:56:
5a:5b:c0:9a:e3:43:81:ee:fa:9d:b7:e7:d1:66:33:
a4:1e:89:df:24:b9:fa:64:9a:8c:7c:e3:51:12:2c:
da:6b:ff:04:60:87:5b:11:77:ff:6e:62:8d:ce:04:
18:92:c6:63:7a:a4:77:4d:5a:e1:ca:02:ea:18:95:
2c:f9:f0:30:62:f1:68:96:00:50:77:0b:4d:c2:44:
c8:23:ec:61:73:f7:d1:42:3f:1b:e1:63:5e:ec:b4:
81:f1:17:b6:7c:8b:0e:65:46:98:96:f0:9c:84:3b:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:4D:40:99:C7:E1:42:D2:96:FE:B0:48:56:DE:98:17:00:3D:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/9c4c07de-67db-3825-8ec5-023eec187c79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.crl
X509v3 Authority Key Identifier:
keyid:85:FF:E3:42:77:91:43:69:FF:ED:3B:44:02:A3:D0:04:52:68:27:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer
sbgp-ipAddrBlock: critical
IPv4:
198.203.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:19:98:76:00:ae:64:a0:d9:13:c5:1a:58:5f:9b:b2:25:ed:
66:a4:f1:97:8d:ac:2a:92:87:cb:4c:be:ab:3c:5f:c8:af:be:
3e:7c:b6:dc:e1:c3:fe:67:97:e4:13:76:02:f3:fe:84:75:95:
63:b6:cc:25:9f:4f:84:84:37:5a:16:e2:7c:50:12:70:c0:0c:
0d:71:17:90:e5:66:2e:48:b7:d5:bd:c7:ba:64:31:00:1d:90:
2f:ef:9e:c1:29:13:4e:d8:7f:c0:30:a2:7a:9a:65:0a:07:45:
29:ce:fe:15:82:fe:04:4f:cc:eb:05:26:d6:91:dd:96:e2:32:
3a:3e:ca:e8:e8:9f:be:7c:91:c4:ea:5c:55:54:db:a8:f0:9a:
16:83:25:40:81:91:62:eb:9f:73:8b:d9:04:35:be:6a:5d:00:
66:34:e2:89:e7:7a:d7:af:46:d7:73:fc:54:ac:9b:79:ae:3a:
4b:9f:06:60:53:8e:b0:f6:f4:cf:c1:d7:a6:a9:b7:7c:bd:35:
31:bf:16:5c:49:38:64:32:71:bf:80:55:48:3f:53:c6:2d:02:
5e:15:f6:f2:ec:0d:a8:50:26:14:a1:9a:fd:c1:5e:fe:ed:05:
ce:00:85:4e:f5:61:0e:81:5a:99:7f:e7:e7:ef:b4:74:71:20:
cd:07:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 18:16:30 2026 by rpki-client