$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa File: 04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa (raw, json) Hash identifier: QdlHekTvyUn0fq2VBtOJnVDrVR8NhEKfhX+e0EekMtw= Subject key identifier: 83:C1:BB:9D:8E:4C:94:AC:BB:D2:8C:D3:3C:C6:FE:18:F4:3C:54:88 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584F3A17D347D66EA62262212A80 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 4540 IP address blocks: 204.8.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d3:47:d6:6e:a6:22:62:21:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=4bb6b32c-e21b-4566-af63-eb6b08882f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:55:85:7e:24:cf:fc:d3:79:0d:a0:b6:5f:30: 03:ae:e4:8e:fc:05:09:40:92:fa:ca:5d:29:f3:ed: 40:7d:a1:6c:1f:80:df:80:61:bf:41:9e:da:a9:ba: fc:3c:2a:04:27:cf:f2:bc:75:ad:91:cf:93:9a:27: 10:53:36:34:bf:c7:7e:bd:03:54:f9:f2:af:d5:e0: f9:9c:b0:67:41:9a:8f:39:d3:2f:4a:52:41:ae:8e: a5:3c:a0:07:7f:b1:4d:f8:fc:87:32:65:b8:eb:79: 71:de:73:18:93:29:6e:23:17:07:3d:7f:8d:46:64: 62:63:c5:94:69:64:c9:d1:dd:53:46:59:f9:f0:ac: 96:96:cf:06:74:b3:1a:08:9e:86:e5:14:ab:ab:05: c1:90:bf:fe:90:56:c2:8e:0f:67:03:a6:91:9a:58: 56:17:9e:b5:13:34:84:2c:0f:b5:9e:3c:43:ed:0d: e2:12:af:c3:71:10:0b:ec:90:9a:ff:a8:6a:28:8d: e2:37:b8:84:e1:3a:7c:5e:47:4f:f2:69:93:64:9c: f9:7b:da:5d:5f:f1:e9:7a:c9:00:45:8e:90:ec:90: de:85:b2:f7:b7:f0:f1:f6:cd:a1:68:55:dd:51:78: e0:34:38:26:fa:7c:97:44:ef:77:62:81:2a:aa:0a: 6f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C1:BB:9D:8E:4C:94:AC:BB:D2:8C:D3:3C:C6:FE:18:F4:3C:54:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 204.8.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:30:e3:50:36:f8:a2:3e:1f:9c:5e:88:b0:b6:84:99:b7:04: 40:fe:41:98:78:b4:25:ec:76:13:be:49:b0:f2:17:c7:af:7d: 80:3d:05:18:73:3e:d6:a5:6a:fe:51:66:97:9b:5b:08:18:9e: 2b:d2:de:c1:66:9d:cb:e9:eb:10:5c:90:20:a3:fb:08:31:33: e6:5a:e4:34:73:be:64:ce:a2:7c:3a:26:3f:77:7c:df:22:95: 0c:58:f4:bd:e2:cf:96:90:21:84:96:12:b7:53:44:32:1d:3e: f6:f9:b8:b2:69:37:d2:a4:88:db:e9:2c:fa:c0:54:35:3d:a5: bd:78:b5:19:3c:68:76:b1:94:fd:cf:48:5a:5d:74:08:42:17: e0:28:2a:9a:08:ae:58:4a:83:68:87:db:42:59:c1:fc:87:0e: 42:b8:11:2a:55:b7:07:8b:9d:8c:ae:7e:2a:79:ff:d7:a7:2e: b8:b3:26:86:5b:ee:39:e7:c2:04:44:d8:8a:f3:1d:e4:68:54: 91:ee:2b:57:b4:4e:74:b3:5d:8f:88:6a:3d:d6:39:c3:ef:7c: 2d:3c:2a:39:f9:92:c8:4a:76:df:ed:6c:33:22:e4:15:ad:04: 5d:ce:0d:06:72:db:37:e1:be:72:48:eb:7b:62:ee:6a:89:3b: 28:e2:55:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9NH1m6mImIhKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk NGJiNmIzMmMtZTIxYi00NTY2LWFmNjMtZWI2YjA4ODgyZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVWFfiTP/NN5DaC2XzADruSO/AUJQJL6yl0p 8+1AfaFsH4DfgGG/QZ7aqbr8PCoEJ8/yvHWtkc+TmicQUzY0v8d+vQNU+fKv1eD5 nLBnQZqPOdMvSlJBro6lPKAHf7FN+PyHMmW463lx3nMYkyluIxcHPX+NRmRiY8WU aWTJ0d1TRln58KyWls8GdLMaCJ6G5RSrqwXBkL/+kFbCjg9nA6aRmlhWF561EzSE LA+1njxD7Q3iEq/DcRAL7JCa/6hqKI3iN7iE4Tp8XkdP8mmTZJz5e9pdX/HpeskA RY6Q7JDehbL3t/Dx9s2haFXdUXjgNDgm+nyXRO93YoEqqgpvDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPBu52OTJSsu9KM0zzG/hj0PFSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMDRlN2U1MGQtNzYzZi0z MjZhLWFiMDUtY2NmYzlmZmE1MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADww41A2+KI+H5xeiLC2hJm3BED+QZh4tCXsdhO+SbDyF8evfYA9BRhz Ptalav5RZpebWwgYnivS3sFmncvp6xBckCCj+wgxM+Za5DRzvmTOonw6Jj93fN8i lQxY9L3iz5aQIYSWErdTRDIdPvb5uLJpN9KkiNvpLPrAVDU9pb14tRk8aHaxlP3P SFpddAhCF+AoKpoIrlhKg2iH20JZwfyHDkK4ESpVtweLnYyufip5/9enLrizJoZb 7jnnwgRE2IrzHeRoVJHuK1e0TnSzXY+Iaj3WOcPvfC08Kjn5kshKdt/tbDMi5BWt BF3ODQZy2zfhvnJI63ti7mqJOyjiVYQ= -----END CERTIFICATE-----Generated at Mon Sep 21 21:43:21 2026 by rpki-client