$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e008f08-2535-31c3-9efc-4c5fa333820a.roa File: 0e008f08-2535-31c3-9efc-4c5fa333820a.roa (raw, json) Hash identifier: wwu72fuQeKWzCFJ5n0kZ4pE5M0gFduMcZPrKhIkm6Zc= Subject key identifier: 29:5D:6F:B3:25:98:90:94:81:9F:7E:90:EA:54:B2:83:01:31:54:C4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AF0F14FC8C3805D9715D06600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e008f08-2535-31c3-9efc-4c5fa333820a.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396982 IP address blocks: 34.50.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:4f:c8:c3:80:5d:97:15:d0:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=88298203-b4ce-4fae-990c-b71ba9e96dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:09:d3:d1:34:b7:e2:bd:ce:d3:94:08:d6: d5:9f:69:70:bb:a7:6e:b7:8b:25:0a:ed:86:9e:1f: e0:15:64:7d:43:fd:87:5c:58:78:cc:f7:49:d3:54: f7:f4:9a:3d:2b:f4:dd:97:45:3e:77:89:88:c4:b0: 30:71:91:8e:92:ad:c5:f6:df:06:78:9a:1f:6c:7c: 0b:17:19:f2:ac:28:ef:29:72:10:86:2b:6d:a9:39: e4:94:c1:c4:9f:4d:6b:0d:94:82:2c:bd:5a:59:79: 1e:16:1e:1b:b2:10:dc:5b:60:1e:51:48:3a:27:c0: 1d:47:d8:ef:5a:44:bd:c7:75:e3:0f:91:29:19:08: 09:35:dd:a8:ac:a0:97:8d:e0:08:9c:45:83:a9:87: f8:43:a4:df:61:aa:9a:65:93:00:ec:7f:25:01:7d: 3a:72:fb:b8:75:e6:e0:5b:c8:d2:5c:04:b6:e6:88: 3f:6b:fa:bf:4c:78:64:c6:62:28:a7:d4:ef:16:69: e3:98:3f:aa:ff:8b:39:78:cc:71:48:d6:02:34:0e: 68:07:95:c5:bc:a5:00:fb:10:9b:0f:60:60:25:d4: 8d:32:0e:b1:85:7d:de:3b:35:a7:4b:54:23:5d:05: 2f:ba:18:58:4c:a8:34:d1:48:ac:ca:6d:a1:78:59: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5D:6F:B3:25:98:90:94:81:9F:7E:90:EA:54:B2:83:01:31:54:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e008f08-2535-31c3-9efc-4c5fa333820a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.50.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d7:0b:e5:16:14:6d:1b:c2:c7:b1:c7:a8:6c:f0:54:b9:3d: 82:bf:f5:9b:0b:b9:ae:7a:34:b8:b1:5d:84:8a:9c:76:93:9c: 08:8a:73:07:94:7f:f5:29:a1:bb:9c:48:98:04:bf:a9:e8:d9: 65:eb:d6:ab:b6:da:a1:f1:36:28:10:50:b1:24:b0:09:da:b5: ca:f7:e6:a1:e0:62:f3:42:c6:e4:f8:73:9f:6a:ee:8c:ea:89: ea:fe:83:dd:1a:95:ca:cd:c1:41:cf:cc:71:f9:da:b8:c7:87: 0b:14:4d:10:66:4d:1a:68:3c:03:3f:4b:fc:c9:25:f2:0c:f8: ad:85:14:36:aa:3d:55:ec:da:00:8f:3c:08:c8:8e:16:71:ea: 88:ad:69:5b:56:84:ea:56:f9:58:ac:ed:3a:ef:98:d0:72:86: 26:5e:26:ff:cb:5c:04:ca:84:55:01:2c:46:e5:9d:95:32:17: a8:53:05:93:18:7d:8a:99:cf:00:03:fb:22:74:bb:93:64:80: d2:09:0b:9a:65:20:c9:5d:be:ca:04:2a:74:0f:8a:1e:0f:bd: 5d:94:f8:47:5e:a1:a6:fa:a3:63:51:65:17:ab:84:89:c3:29: 8a:7e:8b:0e:9b:bd:92:8b:b1:c1:c7:3d:79:a5:fe:24:7a:4c: cd:6a:b4:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8U/Iw4BdlxXQZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ODgyOTgyMDMtYjRjZS00ZmFlLTk5MGMtYjcxYmE5ZTk2ZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtagJ09E0t+K9ztOUCNbVn2lwu6dut4slCu2G nh/gFWR9Q/2HXFh4zPdJ01T39Jo9K/Tdl0U+d4mIxLAwcZGOkq3F9t8GeJofbHwL FxnyrCjvKXIQhittqTnklMHEn01rDZSCLL1aWXkeFh4bshDcW2AeUUg6J8AdR9jv WkS9x3XjD5EpGQgJNd2orKCXjeAInEWDqYf4Q6TfYaqaZZMA7H8lAX06cvu4debg W8jSXAS25og/a/q/THhkxmIop9TvFmnjmD+q/4s5eMxxSNYCNA5oB5XFvKUA+xCb D2BgJdSNMg6xhX3eOzWnS1QjXQUvuhhYTKg00Uisym2heFnUWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCldb7MlmJCUgZ9+kOpUsoMBMVTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGUwMDhmMDgtMjUzNS0z MWMzLTllZmMtNGM1ZmEzMzM4MjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIjKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnXC+UWFG0bwsexx6hs8FS5PYK/9ZsLua56NLixXYSKnHaTnAiKcweU f/UpobucSJgEv6no2WXr1qu22qHxNigQULEksAnatcr35qHgYvNCxuT4c59q7ozq ier+g90alcrNwUHPzHH52rjHhwsUTRBmTRpoPAM/S/zJJfIM+K2FFDaqPVXs2gCP PAjIjhZx6oitaVtWhOpW+Vis7TrvmNByhiZeJv/LXATKhFUBLEblnZUyF6hTBZMY fYqZzwAD+yJ0u5NkgNIJC5plIMldvsoEKnQPih4PvV2U+Edeoab6o2NRZRerhInD KYp+iw6bvZKLscHHPXml/iR6TM1qtM0= -----END CERTIFICATE-----Generated at Sat Aug 23 22:04:41 2025 by rpki-client