$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5839a766-9f1f-308e-bf25-c48110bcaefc.roa File: 5839a766-9f1f-308e-bf25-c48110bcaefc.roa (raw, json) Hash identifier: 8/W5AcW3+Hjisf4Ci/p/mkLkNVCED/tCncHcZxhxA/k= Subject key identifier: 4B:56:20:54:C1:6E:D6:CB:55:43:FD:09:66:F4:5D:17:41:F9:B4:FB Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584CF9B78558A909C51269C3B780 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5839a766-9f1f-308e-bf25-c48110bcaefc.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 400591 IP address blocks: 204.8.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:85:58:a9:09:c5:12:69:c3:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=e3e79ab9-3ee3-47c6-9a52-9ea28e112692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:e4:3e:24:d4:60:d7:da:bd:fd:55:c8:a7: a3:26:a2:a4:21:7c:62:11:47:57:8b:c4:15:6f:70: 9c:db:0d:e0:3d:7a:d6:78:3c:d8:87:9a:00:5a:68: ef:4a:4f:00:65:f5:b4:17:23:fe:ff:92:9a:17:75: e5:6f:61:d0:6a:49:54:43:a5:c7:97:af:61:d2:8c: a0:48:dd:fd:4f:e1:0d:96:4c:5a:51:50:74:64:c2: 9f:ca:5a:6a:7d:6b:5a:d2:8b:cb:0a:14:e1:7d:5e: 1b:b4:bf:54:51:ce:65:21:97:75:e3:a0:57:b4:4f: 8d:37:2f:07:18:20:5a:e5:09:00:3f:88:ff:79:85: ee:e2:89:45:06:b3:30:b0:24:14:e0:41:0a:28:24: f4:39:1a:f5:c5:17:fb:d9:65:cc:9f:c5:d7:d6:b3: 15:d1:5a:4a:96:19:94:ed:e3:37:e6:d6:22:d5:68: 93:65:d5:a6:6d:d1:8a:f1:64:4f:04:e8:79:81:cc: 1d:70:8e:72:6c:72:05:85:50:1e:36:54:02:76:0f: 1e:4c:1c:f8:47:91:82:34:fd:8f:56:1e:90:c0:07: 32:96:b3:e2:12:f5:ed:eb:cd:a1:85:a1:21:ec:54: 02:4a:76:cc:09:ee:a9:c9:b8:db:cc:50:b3:92:27: 6a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:56:20:54:C1:6E:D6:CB:55:43:FD:09:66:F4:5D:17:41:F9:B4:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5839a766-9f1f-308e-bf25-c48110bcaefc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 204.8.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ca:bb:52:1c:71:42:70:e3:9b:b8:fa:f3:ae:ca:e6:99:74: ba:d5:1a:ee:ca:3d:ca:cb:90:54:63:a8:be:fe:e6:4e:b9:87: b6:93:c8:41:5d:ae:06:97:cc:19:f0:5f:19:19:51:04:a7:42: 24:0b:ce:83:22:4c:94:cd:6c:64:07:c6:41:74:94:5e:74:7b: 2b:db:c4:05:28:59:57:c2:2e:84:65:9a:dd:a1:9e:61:e3:1b: c6:6b:fb:4d:60:81:cc:ab:d8:30:5e:6b:8b:7a:be:38:3e:6e: e5:c9:14:a3:97:8e:ac:36:4c:0a:a5:f0:dc:27:b6:63:ff:69: 9b:bc:d5:2f:6c:8b:42:8a:0b:ff:26:a7:cb:2f:49:8c:47:63: 43:6e:5d:0f:71:98:cb:73:84:51:8e:09:72:9d:64:ad:e4:78: 0d:a8:71:92:ba:03:26:9e:ee:66:64:17:e0:c6:d7:bc:c2:18: 9d:1c:b9:1c:46:74:32:70:27:e5:64:a5:9d:7b:56:56:13:b6: 92:a2:af:eb:ea:43:5e:b8:32:2f:24:49:e4:94:5c:e4:02:d0: 4c:f7:27:b7:e7:00:39:d7:1d:93:94:0f:6d:be:75:95:c7:79: d7:b1:c9:02:20:38:98:7b:af:86:24:f5:26:44:e4:94:c0:86: 0e:c3:f0:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4VYqQnFEmnDt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZTNlNzlhYjktM2VlMy00N2M2LTlhNTItOWVhMjhlMTEyNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoofkPiTUYNfavf1VyKejJqKkIXxiEUdXi8QV b3Cc2w3gPXrWeDzYh5oAWmjvSk8AZfW0FyP+/5KaF3Xlb2HQaklUQ6XHl69h0oyg SN39T+ENlkxaUVB0ZMKfylpqfWta0ovLChThfV4btL9UUc5lIZd146BXtE+NNy8H GCBa5QkAP4j/eYXu4olFBrMwsCQU4EEKKCT0ORr1xRf72WXMn8XX1rMV0VpKlhmU 7eM35tYi1WiTZdWmbdGK8WRPBOh5gcwdcI5ybHIFhVAeNlQCdg8eTBz4R5GCNP2P Vh6QwAcylrPiEvXt682hhaEh7FQCSnbMCe6pybjbzFCzkidqFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtWIFTBbtbLVUP9CWb0XRdB+bT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNTgzOWE3NjYtOWYxZi0z MDhlLWJmMjUtYzQ4MTEwYmNhZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTKu1IccUJw45u4+vOuyuaZdLrVGu7KPcrLkFRjqL7+5k65h7aTyEFd rgaXzBnwXxkZUQSnQiQLzoMiTJTNbGQHxkF0lF50eyvbxAUoWVfCLoRlmt2hnmHj G8Zr+01ggcyr2DBea4t6vjg+buXJFKOXjqw2TAql8NwntmP/aZu81S9si0KKC/8m p8svSYxHY0NuXQ9xmMtzhFGOCXKdZK3keA2ocZK6Ayae7mZkF+DG17zCGJ0cuRxG dDJwJ+VkpZ17VlYTtpKir+vqQ164Mi8kSeSUXOQC0Ez3J7fnADnXHZOUD22+dZXH edexyQIgOJh7r4Yk9SZE5JTAhg7D8MA= -----END CERTIFICATE-----Generated at Fri Feb 27 10:13:13 2026 by rpki-client