$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa File: 514b984c-cac0-3f94-a6d5-e507ad0ad953.roa (raw, json) Hash identifier: UV2cyJOu5A/F8q6VXH+kRfkJK/KagCJEmHkKUDHGVVQ= Subject key identifier: F3:9C:38:7C:3E:3F:2D:F3:E9:F5:21:11:8D:22:F2:6D:FC:61:54:3A Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B398704C21739029A651819C0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 400591 IP address blocks: 204.8.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:04:c2:17:39:02:9a:65:18:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=f9d8ea4c-7e18-409c-94c2-ea34bdad6b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:48:73:3a:8a:c1:c3:e8:54:7b:71:4f:44:1a: 7e:34:f0:02:a6:3d:4c:ee:5d:17:f2:e9:ad:65:a2: bb:5e:8a:5b:3d:25:c3:e9:60:27:cd:aa:2e:f8:aa: 07:57:f8:a1:90:ad:4d:ad:33:e6:ad:9b:ca:f6:ab: ca:8f:89:ef:a5:af:b9:93:85:03:c0:58:03:4a:48: e3:06:31:b1:15:97:a5:a0:85:d2:30:5f:95:27:13: 27:18:54:1b:90:fc:1c:e2:50:7f:38:6f:22:15:e1: f4:54:d1:31:6c:7a:10:5c:10:21:9f:61:cd:fb:6b: 0a:9f:27:e9:1c:1e:40:29:4d:0a:73:77:8e:06:90: bb:4c:2b:f6:5c:fc:b8:59:bb:24:74:a8:f4:0a:07: b7:19:85:8a:76:6a:8f:33:86:20:5a:17:9a:96:fa: b1:cf:71:95:26:cb:95:c9:d6:e0:e4:e7:89:c1:7d: bd:cb:a6:fa:cd:04:eb:b0:cd:ac:7f:59:79:bf:3c: cf:ab:87:30:a4:3c:da:6d:ac:c7:77:70:a4:b9:be: 48:8f:5c:b9:b0:27:9e:6d:4d:64:0e:a4:8b:ca:08: 9d:23:9b:f1:bd:e3:e0:44:9f:17:c8:85:d1:67:ec: 30:99:73:c1:68:f5:59:99:00:77:ba:c0:20:9b:52: 9a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9C:38:7C:3E:3F:2D:F3:E9:F5:21:11:8D:22:F2:6D:FC:61:54:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 204.8.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b5:15:eb:2c:31:b5:f2:31:4f:20:5f:40:04:b0:6c:f5:bd: 3b:a9:54:ec:f8:13:b9:7e:fe:05:4f:fa:39:5f:62:13:6a:6b: 7e:a8:1d:fe:d6:6b:bc:a3:b3:c3:53:39:e6:21:45:b1:46:5e: b6:bc:5d:3e:e2:10:0f:dd:6c:6d:9b:00:2f:81:27:4c:51:dd: fc:fa:f3:38:f7:13:a6:03:8d:7c:37:be:fd:47:49:68:af:ab: 9f:e6:39:d3:15:bc:c5:f7:ee:95:46:79:5f:07:92:fc:fc:f7: d2:a9:38:a7:f1:ef:f6:ae:ed:d4:55:0f:1f:e0:86:78:49:ff: e6:be:82:dc:c2:61:a3:95:ec:e6:32:a1:d7:26:e4:d4:bb:5e: 52:81:73:9c:df:b9:12:bc:ed:94:a0:ce:89:0c:d8:e5:dd:c3: 7d:a8:4f:b2:90:65:9e:fa:dc:1c:f6:3c:f8:bf:4b:e2:2d:dd: 17:9d:5f:c8:7d:83:66:f4:16:dd:0f:f4:34:9a:61:70:cd:8e: 81:e8:cd:22:8a:25:d1:43:c0:8f:ba:5a:cb:c6:28:68:e8:c7: 02:95:dd:5e:d8:8c:dc:a0:1b:b9:1a:52:1c:e8:c3:e6:db:86: 46:de:27:a2:e8:cf:70:34:df:3f:7f:e2:89:2e:70:fa:9d:56: 0a:c9:e5:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwTCFzkCmmUYGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk ZjlkOGVhNGMtN2UxOC00MDljLTk0YzItZWEzNGJkYWQ2Yjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UhzOorBw+hUe3FPRBp+NPACpj1M7l0X8umt ZaK7XopbPSXD6WAnzaou+KoHV/ihkK1NrTPmrZvK9qvKj4nvpa+5k4UDwFgDSkjj BjGxFZeloIXSMF+VJxMnGFQbkPwc4lB/OG8iFeH0VNExbHoQXBAhn2HN+2sKnyfp HB5AKU0Kc3eOBpC7TCv2XPy4WbskdKj0Cge3GYWKdmqPM4YgWhealvqxz3GVJsuV ydbg5OeJwX29y6b6zQTrsM2sf1l5vzzPq4cwpDzabazHd3Ckub5Ij1y5sCeebU1k DqSLygidI5vxvePgRJ8XyIXRZ+wwmXPBaPVZmQB3usAgm1KaTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOcOHw+Py3z6fUhEY0i8m38YVQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNTE0Yjk4NGMtY2FjMC0z Zjk0LWE2ZDUtZTUwN2FkMGFkOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAe1FessMbXyMU8gX0AEsGz1vTupVOz4E7l+/gVP+jlfYhNqa36oHf7W a7yjs8NTOeYhRbFGXra8XT7iEA/dbG2bAC+BJ0xR3fz68zj3E6YDjXw3vv1HSWiv q5/mOdMVvMX37pVGeV8Hkvz899KpOKfx7/au7dRVDx/ghnhJ/+a+gtzCYaOV7OYy odcm5NS7XlKBc5zfuRK87ZSgzokM2OXdw32oT7KQZZ763Bz2PPi/S+It3RedX8h9 g2b0Ft0P9DSaYXDNjoHozSKKJdFDwI+6WsvGKGjoxwKV3V7YjNygG7kaUhzow+bb hkbeJ6Loz3A03z9/4okucPqdVgrJ5fs= -----END CERTIFICATE-----Generated at Fri Oct 10 22:29:55 2025 by rpki-client