$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8ae072f-c308-3d62-8ba8-4d3bfac5129e.roa File: c8ae072f-c308-3d62-8ba8-4d3bfac5129e.roa (raw, json) Hash identifier: 5xdqiuI4Yw/uwu1qImhME8IHhT/d4G6XjQ/BXxIqLT0= Subject key identifier: AE:7F:4F:7C:E1:4F:60:54:CA:9F:1F:B9:F7:95:5E:41:B2:A6:85:CF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB931A12FBCB35A36ED940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8ae072f-c308-3d62-8ba8-4d3bfac5129e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.168.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:93:1a:12:fb:cb:35:a3:6e:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=79a600c6-1a3c-458a-bc4d-f5d7f6fc2954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f7:5a:33:73:c5:24:e1:b3:11:72:a1:a8:5d: 5c:b5:5d:12:9b:f3:2b:fb:35:08:c9:eb:6f:42:84: 55:09:2a:f2:ec:9e:ed:d5:c3:f8:47:79:0d:58:4c: 47:b2:98:38:07:b6:d3:7c:6e:3f:98:96:5d:77:47: e9:ba:f7:3b:26:93:4a:35:76:ea:c5:03:21:ca:67: e8:c9:07:74:f0:1c:23:96:62:21:81:7e:36:7e:84: 7b:c2:1d:01:8f:9c:58:0d:a8:d0:8a:17:08:3f:ab: b0:e6:42:79:b5:d2:a3:8a:bc:7f:5f:22:84:e5:e2: 88:3c:f7:e5:86:a0:b8:84:15:3a:97:4a:53:9b:5b: e5:7a:fc:54:21:72:9e:b7:21:1b:22:42:52:0b:f6: f3:dd:d6:7b:9f:87:9c:73:ae:19:19:24:9e:36:f7: 79:4d:bb:1f:c0:10:b8:1b:56:8e:1e:70:42:33:63: fe:15:94:0f:bd:8b:3b:35:43:04:72:87:17:7b:d0: 41:8c:7e:03:2f:57:72:d2:eb:68:d2:8f:a5:02:3f: 97:f2:b0:61:c0:c3:54:3e:ee:d2:ae:07:ef:2e:78: 1e:d8:f7:5a:fb:af:9a:b3:6f:02:e4:bd:49:3e:b3: 22:2d:95:d7:81:68:6d:ec:9a:28:e7:74:87:6a:b7: 01:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7F:4F:7C:E1:4F:60:54:CA:9F:1F:B9:F7:95:5E:41:B2:A6:85:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8ae072f-c308-3d62-8ba8-4d3bfac5129e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.168.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f0:cc:63:f8:cb:47:ab:c9:c7:51:36:17:28:01:a9:6c:a4: 5b:e1:89:fa:98:8c:9e:e0:73:70:63:c4:d8:98:19:97:49:4b: 67:bb:81:52:ac:60:09:d2:71:65:a1:13:50:0d:08:39:30:4d: 43:7a:c7:2b:61:a5:b6:75:4d:54:23:7a:36:a8:bc:1b:de:c3: 9d:68:9d:39:4e:2d:cf:fb:56:2a:d3:fb:14:0d:3e:33:90:39: b4:fa:af:af:10:1d:9e:83:4b:ef:d3:ae:3b:c3:37:3f:85:bf: 92:f7:dc:61:5a:db:ad:0c:28:ef:18:9b:5f:89:ec:fe:4c:22: d1:de:9a:c2:4d:c0:65:52:a4:4a:dc:8f:8d:0e:7a:72:b4:61: f5:5f:cb:31:25:db:32:3c:8f:ee:7f:01:7c:86:f5:4c:f9:2b: fa:aa:8a:3d:a2:04:b7:96:9d:4b:10:41:ab:dd:7b:9d:9c:76: 28:bf:e2:40:26:d9:03:c5:eb:50:ef:15:fe:cc:ff:fc:bb:e6: 4f:f1:2c:d3:45:7f:4b:83:c9:c7:36:b4:0d:10:b6:ea:d0:dd: 48:93:25:5f:c6:d0:f3:b2:3e:53:af:fb:1a:8b:c8:83:be:05: 1a:94:a7:93:b9:c4:59:c7:3b:03:0e:0d:75:cf:62:dc:49:bd: 67:70:df:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25MaEvvLNaNu2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NzlhNjAwYzYtMWEzYy00NThhLWJjNGQtZjVkN2Y2ZmMyOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPdaM3PFJOGzEXKhqF1ctV0Sm/Mr+zUIyetv QoRVCSry7J7t1cP4R3kNWExHspg4B7bTfG4/mJZdd0fpuvc7JpNKNXbqxQMhymfo yQd08BwjlmIhgX42foR7wh0Bj5xYDajQihcIP6uw5kJ5tdKjirx/XyKE5eKIPPfl hqC4hBU6l0pTm1vlevxUIXKetyEbIkJSC/bz3dZ7n4ecc64ZGSSeNvd5TbsfwBC4 G1aOHnBCM2P+FZQPvYs7NUMEcocXe9BBjH4DL1dy0uto0o+lAj+X8rBhwMNUPu7S rgfvLnge2Pda+6+as28C5L1JPrMiLZXXgWht7Joo53SHarcB9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5/T3zhT2BUyp8fufeVXkGypoXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzhhZTA3MmYtYzMwOC0z ZDYyLThiYTgtNGQzYmZhYzUxMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDwzGP4y0erycdRNhcoAalspFvhifqYjJ7gc3BjxNiYGZdJS2e7gVKs YAnScWWhE1ANCDkwTUN6xythpbZ1TVQjejaovBvew51onTlOLc/7VirT+xQNPjOQ ObT6r68QHZ6DS+/TrjvDNz+Fv5L33GFa260MKO8Ym1+J7P5MItHemsJNwGVSpErc j40OenK0YfVfyzEl2zI8j+5/AXyG9Uz5K/qqij2iBLeWnUsQQavde52cdii/4kAm 2QPF61DvFf7M//y75k/xLNNFf0uDycc2tA0QturQ3UiTJV/G0POyPlOv+xqLyIO+ BRqUp5O5xFnHOwMODXXPYtxJvWdw32A= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:06 2025 by rpki-client