$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa File: 514b984c-cac0-3f94-a6d5-e507ad0ad953.roa (raw, json) Hash identifier: 56H1VBgEPQ1P1nJwTe2eJFJ49g46dqcOcoOAAwtdqrU= Subject key identifier: 4E:BA:5E:12:82:CC:9B:8E:3F:2C:43:91:E3:0E:05:E0:8A:0F:2B:91 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584EA7889779118429B63FB665C0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400591 IP address blocks: 204.8.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:97:79:11:84:29:b6:3f:b6:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2b6544ce-2227-423c-9aad-1abdde663198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9f:b7:a7:79:bd:b5:fe:14:2c:2c:26:03:c1: 61:6e:33:49:c7:0f:02:50:69:06:35:07:fa:e8:15: e5:6a:18:7f:00:eb:37:40:33:b2:3c:ef:12:ce:9d: 76:f9:2d:bd:1e:34:a6:c7:e8:d9:4e:00:15:04:32: 94:2f:e7:61:dd:eb:9c:b8:84:da:15:57:6b:a5:7d: 73:22:47:d3:df:fb:ec:3f:82:ef:ac:80:22:9e:0e: 91:cc:5a:49:b7:8d:98:35:07:39:d4:b5:75:9d:df: c2:63:0c:67:cf:c1:c6:eb:ec:1b:29:4e:dd:87:03: 9f:3c:78:91:bc:b2:64:24:fa:22:cd:b2:e5:4c:bf: 18:db:a9:25:b0:63:b4:a9:e4:1e:91:fa:12:78:a2: 3c:88:78:06:2a:7f:44:fa:94:73:ff:e3:a8:bb:98: 3c:9d:a6:85:e7:b3:bc:38:1e:d5:cb:d6:22:02:eb: 66:f1:56:8d:43:81:67:3d:36:70:cf:6b:d8:80:72: 27:7b:e4:10:ee:fa:03:82:ca:80:3f:35:12:1d:8b: 54:68:2f:31:28:59:a1:1d:d2:0d:5c:2f:3c:11:e9: 60:80:8e:90:61:a4:7f:1a:3e:78:08:36:a8:15:66: 93:88:fa:ae:b0:2d:b9:43:c5:70:dd:2f:8f:fb:1a: 2c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BA:5E:12:82:CC:9B:8E:3F:2C:43:91:E3:0E:05:E0:8A:0F:2B:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 204.8.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4a:d7:2b:88:06:f7:85:e5:26:af:e5:0a:1b:e0:d0:e3:32: b9:75:d5:7e:82:91:4e:d2:d1:a5:1b:93:1c:74:32:42:1a:30: e8:ee:fb:7e:76:c3:b2:df:57:bf:71:83:28:93:30:4b:fe:b9: cd:87:fe:34:d9:a9:7f:9a:1f:f9:c9:09:8a:c1:e1:22:7d:a7: 96:8e:0c:2d:eb:af:7a:78:92:1e:bf:00:80:48:06:7d:92:c7: a6:a6:91:52:11:76:d5:d8:10:58:87:6e:b4:ca:2e:72:86:13: b4:21:c0:46:4c:6c:6c:bf:dd:10:e9:4a:1a:07:15:9e:4c:eb: 0e:e2:3a:86:7e:72:bd:18:f1:83:0c:df:8d:63:20:96:e0:dd: dd:e4:22:c0:53:04:62:c7:a7:70:00:81:ce:ad:43:e1:a6:d3: 94:c2:42:c8:4f:1e:05:68:ef:28:70:f0:55:2f:82:38:55:11: ac:50:88:19:74:d8:a7:f0:2f:a9:26:d2:22:5e:db:f3:e0:c6: 3f:96:92:1c:49:93:dc:13:21:29:84:27:c5:61:b8:af:e3:4a: 6e:7c:22:ef:c7:1f:3c:3e:0a:a5:67:86:3d:85:3c:58:2b:3b: 32:b4:8b:b9:4f:17:44:5c:f4:84:b3:da:10:31:91:d4:d4:92: 2c:3c:8b:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJd5EYQptj+2ZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmI2NTQ0Y2UtMjIyNy00MjNjLTlhYWQtMWFiZGRlNjYzMTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ+3p3m9tf4ULCwmA8FhbjNJxw8CUGkGNQf6 6BXlahh/AOs3QDOyPO8Szp12+S29HjSmx+jZTgAVBDKUL+dh3eucuITaFVdrpX1z IkfT3/vsP4LvrIAing6RzFpJt42YNQc51LV1nd/CYwxnz8HG6+wbKU7dhwOfPHiR vLJkJPoizbLlTL8Y26klsGO0qeQekfoSeKI8iHgGKn9E+pRz/+Oou5g8naaF57O8 OB7Vy9YiAutm8VaNQ4FnPTZwz2vYgHIne+QQ7voDgsqAPzUSHYtUaC8xKFmhHdIN XC88EelggI6QYaR/Gj54CDaoFWaTiPqusC25Q8Vw3S+P+xoslQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE66XhKCzJuOPyxDkeMOBeCKDyuRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNTE0Yjk4NGMtY2FjMC0z Zjk0LWE2ZDUtZTUwN2FkMGFkOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1K1yuIBveF5Sav5Qob4NDjMrl11X6CkU7S0aUbkxx0MkIaMOju+352 w7LfV79xgyiTMEv+uc2H/jTZqX+aH/nJCYrB4SJ9p5aODC3rr3p4kh6/AIBIBn2S x6amkVIRdtXYEFiHbrTKLnKGE7QhwEZMbGy/3RDpShoHFZ5M6w7iOoZ+cr0Y8YMM 341jIJbg3d3kIsBTBGLHp3AAgc6tQ+Gm05TCQshPHgVo7yhw8FUvgjhVEaxQiBl0 2KfwL6km0iJe2/Pgxj+WkhxJk9wTISmEJ8VhuK/jSm58Iu/HHzw+CqVnhj2FPFgr OzK0i7lPF0Rc9ISz2hAxkdTUkiw8i8w= -----END CERTIFICATE-----Generated at Wed Jul 29 20:35:14 2026 by rpki-client