$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa File: 04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa (raw, json) Hash identifier: 3xdbYzYlQCHwiPA5JzpBvdU1X5V947CmVoa3YA/Y3P8= Subject key identifier: A9:01:75:55:87:5D:FC:67:F4:AA:6E:A0:B9:A8:55:7E:00:97:36:F1 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584E97B505FF091F03C6B1C80800 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 4540 IP address blocks: 204.8.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:05:ff:09:1f:03:c6:b1:c8:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=cf8fbd7a-e002-4b46-b040-0a647a30793e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:43:90:9c:e8:ec:a3:70:9e:4c:07:d3:9e: d9:6c:6d:ab:09:6d:0a:92:ef:86:83:2b:c1:a8:db: 40:82:15:15:00:93:4f:32:f9:c9:a6:07:6f:32:dc: 0f:21:bd:08:80:59:46:15:af:57:c5:fb:a6:03:b5: 03:64:b7:cb:1a:3c:3c:46:d1:81:7a:9a:44:48:c3: 54:25:e1:b9:26:25:96:dd:d9:c2:d0:94:63:c1:84: ee:69:e9:78:f8:97:0d:f7:b0:f6:e2:fe:98:86:42: f9:48:b2:67:10:e2:d9:e9:e8:78:f8:63:31:bb:42: 5d:86:1a:51:85:e2:cb:fd:aa:c4:78:49:22:d8:7c: ec:b4:67:54:87:ac:60:95:75:46:6d:90:35:6a:2d: 4d:ce:47:8c:d0:0f:9f:4b:42:44:05:f9:41:c9:a3: dc:b8:8b:e5:f0:c3:78:85:d2:3e:ea:4a:5d:71:72: d9:2a:04:9a:fc:fb:f3:47:2f:61:b5:6c:1b:e7:8d: 5d:6b:99:32:c5:c3:34:27:e0:2f:1e:9d:c4:b0:ad: 99:0d:2c:4a:0c:84:03:8d:c3:53:7c:f9:89:f0:d8: 4e:f2:c4:b2:2d:f6:1f:e3:62:98:c0:b3:ac:d1:da: cf:ad:2c:bc:dc:af:de:de:d9:44:5d:68:81:99:d9: 24:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:01:75:55:87:5D:FC:67:F4:AA:6E:A0:B9:A8:55:7E:00:97:36:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 204.8.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:79:e7:0d:fd:55:54:47:bf:6c:f1:dc:30:d0:9c:23:8c:ac: 91:6f:bd:55:fd:9c:03:0f:f7:ab:cb:57:1e:a8:5b:76:05:90: 72:d8:5b:6e:81:46:e1:36:04:af:52:b3:19:75:c3:1d:d8:8a: b8:af:fb:e3:9b:69:17:db:9e:80:4a:55:d9:54:bc:91:bf:09: cd:62:4d:9d:05:92:b6:8e:a1:80:77:61:21:9e:86:3f:af:25: 74:47:31:75:57:f4:d6:94:a4:28:14:6c:e1:da:65:bf:d0:f8: 26:80:73:3d:2b:f8:fe:bd:76:28:1b:db:be:7f:94:fb:26:79: 86:92:45:47:dd:c2:a9:73:69:1b:2a:80:ed:ce:9b:b6:33:8c: 25:0d:97:cf:49:65:22:97:82:f8:53:85:09:00:dd:8e:3f:2c: 39:49:ad:5f:e5:8b:bc:ae:a3:93:ef:f0:ab:0d:20:dc:65:e5: cf:cc:c8:fc:8b:19:6b:d3:c0:82:b2:d3:e9:83:7c:02:2c:70: 86:de:16:50:fe:88:8b:21:eb:ed:9f:b1:7b:d6:d3:04:a3:83: 44:26:87:39:34:32:fd:49:a7:4d:1a:1c:79:3b:bf:73:aa:fd: f5:99:11:d9:ad:97:22:90:71:66:d1:f9:27:f9:fa:90:3b:39: 6e:72:9b:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQX/CR8DxrHICAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk Y2Y4ZmJkN2EtZTAwMi00YjQ2LWIwNDAtMGE2NDdhMzA3OTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOZDkJzo7KNwnkwH057ZbG2rCW0Kku+GgyvB qNtAghUVAJNPMvnJpgdvMtwPIb0IgFlGFa9XxfumA7UDZLfLGjw8RtGBeppESMNU JeG5JiWW3dnC0JRjwYTuael4+JcN97D24v6YhkL5SLJnEOLZ6eh4+GMxu0JdhhpR heLL/arEeEki2HzstGdUh6xglXVGbZA1ai1NzkeM0A+fS0JEBflByaPcuIvl8MN4 hdI+6kpdcXLZKgSa/PvzRy9htWwb541da5kyxcM0J+AvHp3EsK2ZDSxKDIQDjcNT fPmJ8NhO8sSyLfYf42KYwLOs0drPrSy83K/e3tlEXWiBmdkk+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkBdVWHXfxn9KpuoLmoVX4AlzbxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMDRlN2U1MGQtNzYzZi0z MjZhLWFiMDUtY2NmYzlmZmE1MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR55w39VVRHv2zx3DDQnCOMrJFvvVX9nAMP96vLVx6oW3YFkHLYW26B RuE2BK9Ssxl1wx3Yiriv++ObaRfbnoBKVdlUvJG/Cc1iTZ0FkraOoYB3YSGehj+v JXRHMXVX9NaUpCgUbOHaZb/Q+CaAcz0r+P69digb275/lPsmeYaSRUfdwqlzaRsq gO3Om7YzjCUNl89JZSKXgvhThQkA3Y4/LDlJrV/li7yuo5Pv8KsNINxl5c/MyPyL GWvTwIKy0+mDfAIscIbeFlD+iIsh6+2fsXvW0wSjg0Qmhzk0Mv1Jp00aHHk7v3Oq /fWZEdmtlyKQcWbR+Sf5+pA7OW5ym0M= -----END CERTIFICATE-----Generated at Fri Jul 24 06:06:38 2026 by rpki-client