$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ccee52f9-5da8-364e-b6fb-6c8d09d63930.roa File: ccee52f9-5da8-364e-b6fb-6c8d09d63930.roa (raw, json) Hash identifier: vYdrWCB/dfDiplfe5gM0leJdbe5vIkolJWM4aT5z4TI= Subject key identifier: 7C:7E:53:F6:68:18:D9:69:22:4A:15:37:44:9D:1C:13:39:5A:E3:86 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584DB77032E90E0093E3C2DE8FE0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ccee52f9-5da8-364e-b6fb-6c8d09d63930.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 4540 IP address blocks: 204.8.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:32:e9:0e:00:93:e3:c2:de:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=dfefc2df-b19a-48f0-9884-8d15c0c58258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:a2:be:39:e4:f8:ca:29:dd:55:27:09:e5: f7:c1:c0:37:75:2d:5e:13:a8:f2:73:e6:65:b9:ce: 7a:eb:84:6a:60:11:6b:a7:fb:ef:7a:66:00:86:fe: fe:a3:74:c7:05:83:ed:2b:81:39:61:b6:5e:fd:9f: 14:05:ba:ef:df:49:4c:24:53:09:9f:76:63:5a:ee: a4:f0:79:6a:e4:df:f0:8e:da:be:3f:88:83:06:c3: 6f:f9:c1:87:9e:b6:b2:68:5e:f2:1a:a5:04:4d:02: cd:cf:6e:bb:ee:bf:68:48:d5:c0:66:45:ff:3a:b1: 5e:93:3b:63:67:7a:7a:c5:9a:dd:5a:d4:7f:92:9e: a4:fd:6a:7b:b9:52:4a:1e:2e:d0:1f:dd:09:3d:0d: 37:d7:9c:11:21:0d:2e:f7:39:59:a8:77:d6:16:df: a6:c6:0b:1c:17:52:b5:8d:1b:9d:79:81:bd:09:d4: a4:1a:84:dc:e9:c2:5b:56:e2:a8:39:08:fe:8f:70: b4:5c:65:8c:b7:89:32:a2:24:c9:bb:5a:15:62:d2: b9:c9:4f:7a:9f:53:bf:00:a8:ff:52:33:73:6d:bc: 0d:41:21:56:50:97:85:a3:2f:15:ca:9c:67:46:ad: 8e:ff:27:f0:a8:a8:02:ea:2d:1b:9c:d0:69:e5:f3: 8e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7E:53:F6:68:18:D9:69:22:4A:15:37:44:9D:1C:13:39:5A:E3:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ccee52f9-5da8-364e-b6fb-6c8d09d63930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 204.8.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:5e:7b:ca:08:4c:4d:97:0c:9e:f5:d2:eb:70:17:09:74:6b: 19:22:d7:7e:20:f8:d1:96:be:23:47:5f:c3:4e:1b:13:be:9d: 69:f2:93:f6:83:c2:cc:ab:50:71:c5:7b:2d:46:b2:d4:cd:25: bc:6c:af:26:e7:d6:7c:d1:97:4a:5b:2b:50:2b:80:a7:ce:96: 97:0f:b5:66:c0:0a:dc:c7:0b:27:58:53:46:24:89:fd:ec:c9: e4:70:ca:ab:4a:70:df:74:6d:b2:37:40:73:44:f8:7b:91:ad: e5:1d:ed:1c:86:b8:f9:f9:1d:49:ba:b6:1c:08:1a:33:0b:4a: aa:be:60:63:f6:c3:31:ef:bf:55:6b:22:8c:49:01:95:de:cf: 93:a9:4c:cd:f5:ff:44:77:c6:a0:18:93:f9:8c:90:d4:d4:06: ac:dd:9f:1d:06:e7:b5:26:3a:8c:a0:a3:3b:3f:32:72:85:ab: 76:e7:12:8c:03:b2:fb:f0:ad:44:ad:15:e4:76:7a:32:fd:99: 5b:99:15:6b:80:ac:96:4e:9e:e9:54:2d:33:a2:f6:37:1b:b2: 0c:07:45:7a:19:04:4c:9a:f5:6b:e7:e2:ac:c9:62:a7:38:bd: 15:09:a5:6d:bc:fb:1f:17:66:93:ee:53:1c:34:a3:49:77:46: 1a:ce:b4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDLpDgCT48Lej+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk ZGZlZmMyZGYtYjE5YS00OGYwLTk4ODQtOGQxNWMwYzU4MjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkOivjnk+Mop3VUnCeX3wcA3dS1eE6jyc+Zl uc5664RqYBFrp/vvemYAhv7+o3THBYPtK4E5YbZe/Z8UBbrv30lMJFMJn3ZjWu6k 8Hlq5N/wjtq+P4iDBsNv+cGHnrayaF7yGqUETQLNz2677r9oSNXAZkX/OrFekztj Z3p6xZrdWtR/kp6k/Wp7uVJKHi7QH90JPQ0315wRIQ0u9zlZqHfWFt+mxgscF1K1 jRudeYG9CdSkGoTc6cJbVuKoOQj+j3C0XGWMt4kyoiTJu1oVYtK5yU96n1O/AKj/ UjNzbbwNQSFWUJeFoy8VypxnRq2O/yfwqKgC6i0bnNBp5fOOEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHx+U/ZoGNlpIkoVN0SdHBM5WuOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvY2NlZTUyZjktNWRhOC0z NjRlLWI2ZmItNmM4ZDA5ZDYzOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhee8oITE2XDJ710utwFwl0axki134g+NGWviNHX8NOGxO+nWnyk/aD wsyrUHHFey1GstTNJbxsrybn1nzRl0pbK1ArgKfOlpcPtWbACtzHCydYU0Ykif3s yeRwyqtKcN90bbI3QHNE+HuRreUd7RyGuPn5HUm6thwIGjMLSqq+YGP2wzHvv1Vr IoxJAZXez5OpTM31/0R3xqAYk/mMkNTUBqzdnx0G57UmOoygozs/MnKFq3bnEowD svvwrUStFeR2ejL9mVuZFWuArJZOnulULTOi9jcbsgwHRXoZBEya9Wvn4qzJYqc4 vRUJpW28+x8XZpPuUxw0o0l3RhrOtD8= -----END CERTIFICATE-----Generated at Wed May 13 06:46:36 2026 by rpki-client