$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa File: ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa (raw, json) Hash identifier: koSI28iz+eglJca2CuO3XU2rBpx2hszvR5EdwHSSh5c= Subject key identifier: CF:81:2E:B4:2C:35:B7:5A:DA:4F:62:5D:10:B3:D3:18:28:F1:7A:41 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584AD3A11E067CE2AAD4B58D3E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 396982 IP address blocks: 34.12.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:1e:06:7c:e2:aa:d4:b5:8d:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=deb422fd-dc3d-41ff-8990-8fb1ce5f8b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:21:7e:d0:e2:b7:a0:49:d0:f5:84:91:4a:d1: 5b:b5:8c:2b:71:28:1b:7d:2f:be:89:aa:2c:98:51: 7c:9b:e0:15:e0:0b:ad:f6:d6:f2:f5:b3:9a:c5:05: 85:cc:d2:29:3d:85:3e:36:38:91:e9:a0:9c:f1:1a: 5a:2e:a4:16:f7:1e:b7:74:86:69:c6:f8:6d:29:6f: 95:3d:60:44:84:f5:8e:71:8e:01:72:a0:8a:b5:35: cc:cd:13:61:91:ca:12:46:52:5e:f1:4a:c4:95:e3: e0:37:2e:98:33:71:68:0c:27:8f:21:7d:26:5a:aa: 20:49:ae:20:54:78:99:70:72:84:d7:5c:63:76:cb: 6a:7c:15:9f:eb:da:f5:27:dc:f1:e4:c4:8f:9d:4e: ce:6f:50:8e:c4:5d:de:96:cc:76:1c:5a:22:8d:47: 66:09:1c:06:cc:56:4f:18:c1:d1:cb:cd:be:07:18: 5a:20:d6:7e:f0:df:bd:09:c3:bb:e6:fc:f4:5f:b0: 51:1d:b8:bb:73:7b:12:da:20:93:ec:bd:e9:58:89: fe:55:4e:22:d3:0f:e1:7f:ec:c8:dc:af:59:84:0e: a6:5e:bf:b4:cf:e3:f7:cb:43:eb:55:87:18:30:52: 3d:4f:fd:79:b2:87:90:d0:5d:a8:35:8f:f2:98:c3: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:81:2E:B4:2C:35:B7:5A:DA:4F:62:5D:10:B3:D3:18:28:F1:7A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.12.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b8:aa:7f:bd:fc:ac:13:20:42:53:9b:79:4c:79:63:f1:b1: e3:7e:f8:15:1f:fd:1b:c0:f8:76:ea:71:f1:55:cb:65:00:ad: a3:14:69:5e:21:0c:4c:fe:8d:41:ab:b5:ce:1f:99:aa:27:d2: b9:10:57:f1:5f:6f:c2:97:5d:ec:fe:6a:ef:94:ed:eb:12:4f: 9c:df:d3:b8:54:08:e2:57:45:93:56:74:55:15:e1:f7:c6:33: ed:ad:f8:0b:62:2c:08:3a:89:3a:73:98:30:f2:53:51:b6:21: 63:c9:61:75:ef:2d:e9:b1:09:99:0e:31:82:af:42:cb:63:4e: 08:99:97:5f:0c:fe:4e:a6:a2:ea:a7:8a:d7:ae:2a:0a:f6:4f: 73:7f:35:70:0e:75:92:26:74:35:bf:4e:c7:c1:e2:59:6d:f8: 09:9d:a8:ef:67:f3:a2:28:99:55:09:4f:7a:8a:9b:df:f1:e7: b8:d2:89:8e:c5:d1:d7:fd:19:68:6f:3d:ea:55:b1:3d:d8:1b: 39:2b:ce:60:1d:72:8c:36:fa:69:c3:4d:34:a9:48:65:8a:24: a5:bf:dd:8c:a0:09:26:74:e6:aa:81:e1:cf:1b:38:9d:40:17: 49:d1:96:e5:24:c8:9e:56:36:f8:89:5a:73:74:2f:eb:dc:5b: 13:c5:84:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToR4GfOKq1LWNPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZGViNDIyZmQtZGMzZC00MWZmLTg5OTAtOGZiMWNlNWY4YjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCF+0OK3oEnQ9YSRStFbtYwrcSgbfS++iaos mFF8m+AV4Aut9tby9bOaxQWFzNIpPYU+NjiR6aCc8RpaLqQW9x63dIZpxvhtKW+V PWBEhPWOcY4BcqCKtTXMzRNhkcoSRlJe8UrElePgNy6YM3FoDCePIX0mWqogSa4g VHiZcHKE11xjdstqfBWf69r1J9zx5MSPnU7Ob1COxF3elsx2HFoijUdmCRwGzFZP GMHRy82+BxhaINZ+8N+9CcO75vz0X7BRHbi7c3sS2iCT7L3pWIn+VU4i0w/hf+zI 3K9ZhA6mXr+0z+P3y0PrVYcYMFI9T/15soeQ0F2oNY/ymMOp0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+BLrQsNbda2k9iXRCz0xgo8XpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmE5ZTI4YzctMjdhMS0z MGY5LWJhMzgtOGUxZmZjNzViNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu4qn+9/KwTIEJTm3lMeWPxseN++BUf/RvA+HbqcfFVy2UAraMUaV4h DEz+jUGrtc4fmaon0rkQV/Ffb8KXXez+au+U7esST5zf07hUCOJXRZNWdFUV4ffG M+2t+AtiLAg6iTpzmDDyU1G2IWPJYXXvLemxCZkOMYKvQstjTgiZl18M/k6mouqn iteuKgr2T3N/NXAOdZImdDW/TsfB4llt+AmdqO9n86IomVUJT3qKm9/x57jSiY7F 0df9GWhvPepVsT3YGzkrzmAdcow2+mnDTTSpSGWKJKW/3YygCSZ05qqB4c8bOJ1A F0nRluUkyJ5WNviJWnN0L+vcWxPFhCQ= -----END CERTIFICATE-----Generated at Sat Aug 23 22:07:19 2025 by rpki-client