$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa File: 04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa (raw, json) Hash identifier: hH3B8HXGfM51HGL3QGUFA3dT/ccDs8xfhvqSils0+ZE= Subject key identifier: AC:0C:DC:0C:64:C3:C1:71:C5:B5:1C:42:7E:1E:85:AD:69:9E:D4:89 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584DB77032DC10C0F322AED3E100 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 4540 IP address blocks: 204.8.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:32:dc:10:c0:f3:22:ae:d3:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=c0d34708-4fd6-4f55-8968-504c03aae412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:62:8a:60:8b:be:46:a3:5b:5f:3a:e6:73: 52:02:2c:5b:c3:85:66:63:7c:b6:34:fd:09:36:be: 9e:61:50:5a:74:fa:b4:91:15:12:f0:45:4d:57:7a: bb:c6:0b:92:23:ef:6c:4d:40:3f:24:3b:e5:ff:0e: 01:e8:ce:db:b7:f7:13:e7:54:99:b0:91:3c:d7:0c: 93:27:0c:26:6e:08:e6:f3:32:69:31:28:2e:51:d2: 9c:7a:00:92:bd:10:ba:20:de:78:1a:33:cd:7d:23: 8a:ef:8c:ee:53:ea:ee:70:9d:59:28:10:fa:c0:85: 50:15:df:41:bf:73:c5:f0:2a:3f:7c:89:a7:c0:69: f0:90:6d:05:2d:93:f8:65:bd:b2:14:4c:49:28:e1: 87:df:e7:7c:53:6c:74:b4:a5:87:95:80:90:27:e8: 61:e0:24:2c:13:42:f6:44:13:91:24:a9:0f:87:75: 76:f9:62:d3:51:0a:a2:1e:e2:b0:db:9d:ed:18:0a: 90:21:71:98:eb:3b:5f:70:f1:f4:e3:24:63:da:a8: b0:38:22:24:9a:e4:6a:49:be:79:91:84:ad:2e:ff: a0:68:5b:0a:3c:48:cb:bd:dc:29:ea:86:e9:30:02: 72:b9:8f:b4:0a:17:c2:f6:65:24:ef:03:28:fa:1b: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0C:DC:0C:64:C3:C1:71:C5:B5:1C:42:7E:1E:85:AD:69:9E:D4:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 204.8.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:87:30:4b:9d:c9:60:bb:64:48:81:0d:3f:1a:94:42:f1:c1: a8:3a:6a:86:74:1d:70:ba:e4:68:11:8e:7a:70:43:44:4c:da: 1e:a0:28:83:67:85:57:52:b1:15:29:00:84:08:0d:f4:83:6d: 72:0a:e2:77:8b:42:a1:cc:ad:28:29:29:fa:ed:e6:4e:60:04: 98:c3:57:7f:04:81:b2:78:bb:47:fa:3e:ef:cf:e6:56:b3:7c: 9b:bc:49:4b:9d:ae:8a:50:d2:f6:29:ce:7e:39:b4:75:86:8f: 1c:a0:46:b2:09:86:68:4f:f5:4f:f7:4c:25:f6:35:f9:65:c2: 8a:08:2e:bb:8a:61:aa:c1:fe:63:7f:42:99:58:cd:3a:1f:f8: 18:d3:b2:28:bd:d1:76:15:fe:76:c7:b3:0a:c0:83:a0:28:9a: 8d:3d:07:2e:d8:7e:fd:c1:e6:bb:1f:7e:0c:3d:5d:cf:75:83: 34:c6:35:ee:93:76:65:74:48:95:03:10:28:ed:a8:2b:75:97: 0d:82:ef:0d:5a:53:5b:88:17:e7:dd:94:5c:50:46:3e:b7:c3: 92:4a:66:4a:6c:50:ca:a0:68:33:ed:f8:6c:e8:28:31:3b:77: 65:6a:f7:02:ab:48:10:d0:8f:28:bb:d2:37:23:b4:4d:7e:01: 62:d9:4d:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDLcEMDzIq7T4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk YzBkMzQ3MDgtNGZkNi00ZjU1LTg5NjgtNTA0YzAzYWFlNDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8ZiimCLvkajW1865nNSAixbw4VmY3y2NP0J Nr6eYVBadPq0kRUS8EVNV3q7xguSI+9sTUA/JDvl/w4B6M7bt/cT51SZsJE81wyT Jwwmbgjm8zJpMSguUdKcegCSvRC6IN54GjPNfSOK74zuU+rucJ1ZKBD6wIVQFd9B v3PF8Co/fImnwGnwkG0FLZP4Zb2yFExJKOGH3+d8U2x0tKWHlYCQJ+hh4CQsE0L2 RBORJKkPh3V2+WLTUQqiHuKw253tGAqQIXGY6ztfcPH04yRj2qiwOCIkmuRqSb55 kYStLv+gaFsKPEjLvdwp6obpMAJyuY+0ChfC9mUk7wMo+hucNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwM3Axkw8FxxbUcQn4eha1pntSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMDRlN2U1MGQtNzYzZi0z MjZhLWFiMDUtY2NmYzlmZmE1MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOHMEudyWC7ZEiBDT8alELxwag6aoZ0HXC65GgRjnpwQ0RM2h6gKINn hVdSsRUpAIQIDfSDbXIK4neLQqHMrSgpKfrt5k5gBJjDV38EgbJ4u0f6Pu/P5laz fJu8SUudropQ0vYpzn45tHWGjxygRrIJhmhP9U/3TCX2NfllwooILruKYarB/mN/ QplYzTof+BjTsii90XYV/nbHswrAg6Aomo09By7Yfv3B5rsffgw9Xc91gzTGNe6T dmV0SJUDECjtqCt1lw2C7w1aU1uIF+fdlFxQRj63w5JKZkpsUMqgaDPt+GzoKDE7 d2Vq9wKrSBDQjyi70jcjtE1+AWLZTXg= -----END CERTIFICATE-----Generated at Wed May 13 09:51:45 2026 by rpki-client