$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aee7b4ac-bdaa-35cc-a517-12805e63920d.roa File: aee7b4ac-bdaa-35cc-a517-12805e63920d.roa (raw, json) Hash identifier: GcmCBbfZ9X6t5wjRDd+Fo6GYCsn2ple4DM8y5IrCVsE= Subject key identifier: 2E:23:69:FA:D6:23:47:29:CD:02:CC:26:AA:90:48:8A:8F:7D:DA:42 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AEE269CAEABE36D0883B60E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aee7b4ac-bdaa-35cc-a517-12805e63920d.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 214611 IP address blocks: 34.3.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:9c:ae:ab:e3:6d:08:83:b6:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=a22d2598-f831-461a-88bf-eaac7de977be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b2:af:c7:bb:b8:d5:ef:28:7a:cf:da:b4:8a: 7b:2a:ed:ff:f2:c2:c7:10:d0:17:cb:9f:37:9b:04: 2e:1a:74:34:24:2b:be:60:15:b0:99:b6:3b:b0:92: a3:7b:97:ca:98:89:96:21:5b:df:2d:32:09:62:a0: 6c:19:6a:3d:53:bf:46:99:f2:9b:a2:b1:b6:98:ec: 3d:a8:c3:8e:15:d0:54:89:fb:44:ad:5f:b6:b5:ae: 61:ca:a4:98:e1:e5:6f:5b:ea:72:5d:aa:1b:c9:39: 47:d4:72:bb:7a:bd:84:9f:17:94:67:05:19:64:77: d9:64:44:29:0b:57:55:6f:38:ce:07:de:18:8e:d4: fa:23:79:cf:ba:d8:1e:9d:62:c0:c1:8b:7e:5f:fe: bb:f6:f5:3f:66:ef:75:39:a9:25:9d:ae:fd:17:07: 73:91:72:a2:a8:3f:48:5a:82:2a:fd:11:d9:e2:e1: e4:06:55:f8:de:bd:ae:f6:07:76:bb:79:e1:3c:53: 81:5a:83:50:2e:1a:d1:b8:93:aa:0f:89:02:33:9c: 4b:3a:c9:4c:36:9e:86:53:f7:11:a3:bd:d1:a3:8b: 6c:48:2e:dc:35:a0:2e:6c:cf:d9:ff:2d:1f:87:d6: a4:10:77:8b:99:01:bd:0e:cb:85:a5:43:26:3b:7d: 0a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:23:69:FA:D6:23:47:29:CD:02:CC:26:AA:90:48:8A:8F:7D:DA:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aee7b4ac-bdaa-35cc-a517-12805e63920d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d5:a5:92:c2:65:73:e6:c3:e9:b5:21:7d:4c:cd:b0:a7:86: a0:2b:09:ee:db:68:36:b0:3d:c2:ad:08:6a:a3:e2:ed:77:55: f6:df:7d:3c:a5:46:92:80:47:30:d1:7b:d3:48:14:fb:6c:e8: 7c:69:01:02:71:a7:93:99:ea:82:b0:56:dc:40:23:56:9d:03: 1e:1c:50:cc:33:50:7c:97:cd:04:7a:ad:9d:ff:73:df:98:5c: 3f:5f:34:c0:2a:c5:57:1b:b3:74:72:a7:ad:8c:de:9e:01:5d: 6a:b0:63:56:b8:e5:f6:e8:f9:2d:91:79:18:d2:fc:ff:f6:08: ca:23:68:01:82:df:49:48:08:50:7a:09:3f:f6:12:2d:3a:2b: 08:b2:e7:f6:81:73:f9:21:6a:d0:e2:7a:8e:d0:8b:c8:e7:8f: 35:3f:56:02:4d:12:ce:6d:46:bf:77:28:2d:9b:d0:b2:38:11: 3d:fb:df:1a:8e:a2:c2:19:45:b8:c8:7c:57:f0:85:a0:36:32: c2:89:08:c0:a1:0b:90:64:08:b1:10:e0:9f:bb:72:28:4e:52: a3:b6:ee:5b:9e:ef:02:8f:b3:4c:2e:e8:fc:03:14:b3:e3:64: 8b:17:92:81:b4:b3:6d:e4:3a:b9:93:69:8c:7a:4c:38:93:ca: 2d:98:32:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJpyuq+NtCIO2DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk YTIyZDI1OTgtZjgzMS00NjFhLTg4YmYtZWFhYzdkZTk3N2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrKvx7u41e8oes/atIp7Ku3/8sLHENAXy583 mwQuGnQ0JCu+YBWwmbY7sJKje5fKmImWIVvfLTIJYqBsGWo9U79GmfKborG2mOw9 qMOOFdBUiftErV+2ta5hyqSY4eVvW+pyXaobyTlH1HK7er2EnxeUZwUZZHfZZEQp C1dVbzjOB94YjtT6I3nPutgenWLAwYt+X/679vU/Zu91Oaklna79FwdzkXKiqD9I WoIq/RHZ4uHkBlX43r2u9gd2u3nhPFOBWoNQLhrRuJOqD4kCM5xLOslMNp6GU/cR o73Ro4tsSC7cNaAubM/Z/y0fh9akEHeLmQG9DsuFpUMmO30KXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4jafrWI0cpzQLMJqqQSIqPfdpCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWVlN2I0YWMtYmRhYS0z NWNjLWE1MTctMTI4MDVlNjM5MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIgOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHVpZLCZXPmw+m1IX1MzbCnhqArCe7baDawPcKtCGqj4u13VfbffTyl RpKARzDRe9NIFPts6HxpAQJxp5OZ6oKwVtxAI1adAx4cUMwzUHyXzQR6rZ3/c9+Y XD9fNMAqxVcbs3Ryp62M3p4BXWqwY1a45fbo+S2ReRjS/P/2CMojaAGC30lICFB6 CT/2Ei06Kwiy5/aBc/khatDieo7Qi8jnjzU/VgJNEs5tRr93KC2b0LI4ET373xqO osIZRbjIfFfwhaA2MsKJCMChC5BkCLEQ4J+7cihOUqO27lue7wKPs0wu6PwDFLPj ZIsXkoG0s23kOrmTaYx6TDiTyi2YMik= -----END CERTIFICATE-----Generated at Sat Aug 23 22:11:08 2025 by rpki-client