$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa File: 04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa (raw, json) Hash identifier: NFwL/zaaM63t5mtRaAqNjTxDJaVideY5cvfyGojpOi8= Subject key identifier: EE:BC:93:84:A3:FA:16:18:53:4C:92:5D:9D:AD:67:36:94:F3:F6:EF Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C1ED72835BD8B55284380 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 204.8.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:1e:d7:28:35:bd:8b:55:28:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=4662f043-8f26-4051-bc26-b09a8b9eaa70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8a:98:b6:bb:b3:44:78:71:26:0d:cc:71:cb: 79:2a:68:fd:16:51:e6:89:57:c0:20:98:81:c4:81: 8f:c3:b0:40:32:29:fe:87:e8:23:90:68:b6:a4:ba: f0:b2:c0:c2:4b:79:88:bd:2f:ac:77:26:cc:aa:de: 8d:9f:45:05:d8:f3:98:1c:c0:18:ab:18:fb:ed:99: c1:bb:1f:b3:16:f1:c5:be:e4:6a:52:cc:5a:36:89: 5b:eb:13:0c:ec:9d:fc:db:28:17:b1:dd:26:23:6e: a5:ef:33:c3:83:7a:3c:9e:3a:96:f3:6c:14:06:0f: 8e:c7:bd:a7:e9:d9:0a:26:df:f4:14:5f:55:05:85: 2d:c1:f4:26:a5:d2:8e:11:6e:68:a7:75:d8:88:82: 7a:2d:d0:7b:a6:fa:9b:6d:76:60:4c:5f:b3:ef:d2: 8a:4e:c9:3e:ad:3c:f3:94:75:54:c5:8a:51:a2:19: 42:75:e3:be:80:59:10:6a:de:0a:c7:b5:b8:75:27: 61:61:d9:12:b8:c5:6a:3d:0c:16:f2:f0:0e:ec:f4: 87:f0:f8:90:f8:ea:d6:48:a2:de:85:a9:7f:70:f2: c4:a8:e3:d2:f7:ed:c2:8d:ce:b7:28:61:04:ba:2e: ca:54:d8:3e:4d:59:71:9a:2d:63:7b:5d:f3:0c:a7: 4e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BC:93:84:A3:FA:16:18:53:4C:92:5D:9D:AD:67:36:94:F3:F6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 204.8.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:3d:a9:1a:3b:62:0b:49:7d:ae:c1:18:72:1a:29:2e:10:15: 3f:84:c3:5d:ea:2c:02:2c:72:52:ef:c5:25:b8:d0:d4:04:f6: e8:17:bb:a1:d2:5e:ec:0f:aa:06:74:81:c4:60:f3:fb:b2:ad: a9:24:dc:e6:d2:7f:c3:e6:f4:3f:fd:10:8a:79:9e:f5:31:04: 72:5b:06:f6:56:89:ed:00:91:f5:de:e1:ad:4e:75:ed:aa:12: 03:a8:5b:75:5e:bd:ae:ae:d4:ac:6a:5b:54:11:d3:ab:6a:da: 11:9c:ca:0b:f2:59:46:95:48:fe:a3:f0:a3:b7:45:51:2c:85: 42:67:19:f0:6f:7d:2d:25:a6:4d:6b:ae:6a:36:2c:7a:4e:c6: 76:72:f1:67:9a:5f:b8:0f:7d:90:11:70:13:fa:43:e0:31:cd: a2:86:b9:fa:8c:3d:b6:eb:3c:56:fd:ec:47:14:1c:8d:a3:69: fb:b3:2c:9a:4c:57:ba:3a:a2:cd:9c:eb:1b:09:86:6d:8c:a2: 1d:ee:a0:6d:8f:9b:9d:e2:92:90:d2:29:83:5d:09:24:05:c4: 69:fd:43:e9:1f:23:ca:56:28:9a:69:39:8f:b1:2f:59:b2:b1: f2:c6:d0:f7:5a:66:b1:4a:5b:42:6e:fd:50:e1:d9:49:c9:1a: a0:0c:e0:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPB7XKDW9i1UoQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NDY2MmYwNDMtOGYyNi00MDUxLWJjMjYtYjA5YThiOWVhYTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooqYtruzRHhxJg3Mcct5Kmj9FlHmiVfAIJiB xIGPw7BAMin+h+gjkGi2pLrwssDCS3mIvS+sdybMqt6Nn0UF2POYHMAYqxj77ZnB ux+zFvHFvuRqUsxaNolb6xMM7J382ygXsd0mI26l7zPDg3o8njqW82wUBg+Ox72n 6dkKJt/0FF9VBYUtwfQmpdKOEW5op3XYiIJ6LdB7pvqbbXZgTF+z79KKTsk+rTzz lHVUxYpRohlCdeO+gFkQat4Kx7W4dSdhYdkSuMVqPQwW8vAO7PSH8PiQ+OrWSKLe hal/cPLEqOPS9+3Cjc63KGEEui7KVNg+TVlxmi1je13zDKdO3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO68k4Sj+hYYU0ySXZ2tZzaU8/bvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMDRlN2U1MGQtNzYzZi0z MjZhLWFiMDUtY2NmYzlmZmE1MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQ9qRo7YgtJfa7BGHIaKS4QFT+Ew13qLAIsclLvxSW40NQE9ugXu6HS XuwPqgZ0gcRg8/uyrakk3ObSf8Pm9D/9EIp5nvUxBHJbBvZWie0AkfXe4a1Ode2q EgOoW3Veva6u1KxqW1QR06tq2hGcygvyWUaVSP6j8KO3RVEshUJnGfBvfS0lpk1r rmo2LHpOxnZy8WeaX7gPfZARcBP6Q+AxzaKGufqMPbbrPFb97EcUHI2jafuzLJpM V7o6os2c6xsJhm2Moh3uoG2Pm53ikpDSKYNdCSQFxGn9Q+kfI8pWKJppOY+xL1my sfLG0PdaZrFKW0Ju/VDh2UnJGqAM4Eo= -----END CERTIFICATE-----Generated at Fri Oct 10 22:33:16 2025 by rpki-client