$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8ae5896-3a19-3d36-b616-0da78a074e6c.roa File: f8ae5896-3a19-3d36-b616-0da78a074e6c.roa (raw, json) Hash identifier: Bn6aGenHUGeMK5dGtpOlSzidQ6HNLhEdXL6N26zjFeI= Subject key identifier: E5:C8:FE:48:56:F4:94:3A:A9:1C:71:36:3B:24:80:BE:6F:C4:91:C6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A920622C325253D7568B17DE8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8ae5896-3a19-3d36-b616-0da78a074e6c.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.158.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:22:c3:25:25:3d:75:68:b1:7d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=2efd4599-4584-4182-9a14-f21826159b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cc:88:1a:09:de:9b:2f:e1:df:a7:23:0b:a6: 6a:46:31:4f:8e:09:56:58:1e:15:79:32:c9:35:d7: e8:fd:ce:00:af:71:97:76:70:57:28:13:17:0e:38: 01:b0:bd:50:c8:6f:28:e5:0a:60:44:bf:1f:60:90: 2f:92:bc:3e:89:f5:0c:91:d6:10:de:03:87:91:cc: 86:5a:9b:ad:40:f7:63:9a:be:15:82:f3:1e:c5:11: 76:2c:da:f8:12:0d:64:09:22:64:85:2b:9c:b0:59: 75:d2:2f:83:2b:b0:45:ab:53:a8:44:30:e9:47:96: 06:40:73:8e:60:63:c5:a9:82:fd:f1:bd:6a:be:93: 11:24:ea:47:cd:ca:90:ba:28:e0:d0:5d:d8:40:9b: 5b:6c:42:6d:13:0f:17:e8:89:28:04:86:20:ed:3a: 61:7d:6d:1b:33:c4:ad:f3:48:33:81:42:36:ad:2c: 17:7a:49:b2:6b:ed:f4:79:38:1d:7d:0a:a4:cb:b9: f4:a9:0d:9d:70:87:cd:f9:2d:17:8b:46:83:2b:cd: 4a:e5:50:77:31:0d:c2:ad:cb:68:99:22:a4:70:81: 28:f8:aa:21:a1:b3:ca:c9:61:64:b5:71:44:a9:37: 8e:ae:78:5d:e0:93:2a:05:e3:f2:4a:90:b4:09:6d: 83:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C8:FE:48:56:F4:94:3A:A9:1C:71:36:3B:24:80:BE:6F:C4:91:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8ae5896-3a19-3d36-b616-0da78a074e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.158.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:5e:53:d6:20:c4:cc:60:21:c1:48:75:4d:c2:8e:70:a5:6e: 31:34:8c:cf:e2:16:e6:10:03:75:db:9e:be:4c:01:35:b3:8a: e0:d9:47:63:25:62:60:83:62:c7:3e:cf:41:31:c3:a4:e5:59: 97:7f:04:94:c1:6a:dc:4d:b9:bc:85:14:a4:65:61:17:9e:78: ad:dd:d5:24:51:f7:ca:4d:3d:25:52:06:b2:33:8f:8b:51:2f: f2:34:e7:ba:7a:23:2e:2f:6d:bc:f2:d4:42:0c:cd:87:1b:9a: b8:30:0d:dd:68:8f:09:2e:88:7c:63:8a:1a:8a:fe:3a:1d:b3: 90:5a:7f:54:0d:69:ac:78:e8:3b:c6:7b:c7:d5:70:8a:eb:ea: 22:6b:0d:c2:de:2c:9d:88:50:91:97:41:0b:18:9c:c0:88:ad: 53:3e:61:e2:54:2a:f7:69:5e:b6:c7:6a:e9:83:bc:33:0a:d1: bb:cb:90:f1:61:ad:43:c1:20:90:fd:3b:c9:cb:1b:1d:89:7a: 79:54:c8:ee:b0:2f:0c:e2:a4:4f:a3:65:51:23:4d:85:2d:91: 6e:24:5a:a7:51:cc:03:9d:4d:38:95:e1:10:32:c2:8c:00:56: 30:f2:fc:4f:82:df:36:32:d6:0b:98:ce:83:59:9e:5b:d5:2f: 61:2c:86:05 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqSBiLDJSU9dWixfegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk MmVmZDQ1OTktNDU4NC00MTgyLTlhMTQtZjIxODI2MTU5YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8yIGgnemy/h36cjC6ZqRjFPjglWWB4VeTLJ Ndfo/c4Ar3GXdnBXKBMXDjgBsL1QyG8o5QpgRL8fYJAvkrw+ifUMkdYQ3gOHkcyG WputQPdjmr4VgvMexRF2LNr4Eg1kCSJkhSucsFl10i+DK7BFq1OoRDDpR5YGQHOO YGPFqYL98b1qvpMRJOpHzcqQuijg0F3YQJtbbEJtEw8X6IkoBIYg7TphfW0bM8St 80gzgUI2rSwXekmya+30eTgdfQqky7n0qQ2dcIfN+S0Xi0aDK81K5VB3MQ3Crcto mSKkcIEo+KohobPKyWFktXFEqTeOrnhd4JMqBePySpC0CW2DoQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOXI/khW9JQ6qRxxNjskgL5vxJHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjhhZTU4OTYtM2ExOS0z ZDM2LWI2MTYtMGRhNzhhMDc0ZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIp4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcF5T1iDEzGAhwUh1TcKOcKVuMTSMz+IW5hADdduevkwBNbOK4NlHYyVi YINixz7PQTHDpOVZl38ElMFq3E25vIUUpGVhF554rd3VJFH3yk09JVIGsjOPi1Ev 8jTnunojLi9tvPLUQgzNhxuauDAN3WiPCS6IfGOKGor+Oh2zkFp/VA1prHjoO8Z7 x9VwiuvqImsNwt4snYhQkZdBCxicwIitUz5h4lQq92letsdq6YO8MwrRu8uQ8WGt Q8EgkP07ycsbHYl6eVTI7rAvDOKkT6NlUSNNhS2RbiRap1HMA51NOJXhEDLCjABW MPL8T4LfNjLWC5jOg1meW9UvYSyGBQ== -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:13 2025 by rpki-client