$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8ae5896-3a19-3d36-b616-0da78a074e6c.roa File: f8ae5896-3a19-3d36-b616-0da78a074e6c.roa (raw, json) Hash identifier: qzWs2Zxi+Ccno84FjB8B/BfXTw6bchtAL2EnmkaIZ0g= Subject key identifier: 28:3E:75:AD:5E:DF:82:0B:A1:78:A9:86:D9:2C:8B:1A:8F:71:36:13 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B72C1E876E8A216A8CDD1A280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8ae5896-3a19-3d36-b616-0da78a074e6c.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 396982 IP address blocks: 34.158.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:e8:76:e8:a2:16:a8:cd:d1:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=7b9b400e-052d-43c1-99f9-aa61db490989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:f4:e1:ed:8d:c2:c5:96:d1:94:36:1c:9a: e8:5e:c0:9e:2e:51:c7:a4:ed:18:37:b7:67:6f:83: 00:0f:2b:07:6d:20:f5:fe:bf:f5:47:0c:8a:40:28: ce:f9:ef:ad:52:14:33:4f:97:d4:01:7d:b9:97:81: 37:ff:f1:46:68:64:e5:5a:86:41:8c:7e:2a:c0:f1: eb:b5:d1:78:6b:3b:68:a9:1a:4b:9b:10:ad:0f:90: 54:d3:fc:cc:19:aa:02:e7:ca:96:a3:f6:35:b1:2b: 82:5d:a6:44:a9:90:19:95:16:89:2c:95:a2:94:e5: d1:c9:54:de:1d:1a:9f:c2:c8:ea:5e:62:6e:6c:7a: 8e:d5:f2:21:3e:de:5f:f2:0a:1a:ff:f5:5a:36:f0: 5e:32:fc:8c:22:86:b6:0d:f8:7e:83:ec:44:45:44: 77:35:91:67:e7:b6:86:70:1f:5a:0a:9e:1b:44:60: 87:3d:32:c8:19:d1:86:52:82:43:e0:93:60:7c:cf: 86:49:8f:f5:39:31:35:74:b6:b7:a4:b4:51:19:99: e8:3b:0a:f3:af:dd:42:89:e7:94:9c:0c:bd:0f:63: 74:a3:e1:2d:2e:42:e1:50:79:12:7e:b6:31:e6:09: c7:f7:68:db:5d:05:d1:b9:94:13:12:3f:cd:91:57: c6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3E:75:AD:5E:DF:82:0B:A1:78:A9:86:D9:2C:8B:1A:8F:71:36:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8ae5896-3a19-3d36-b616-0da78a074e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.158.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:17:e4:60:70:f3:69:4e:b2:7b:7c:30:44:e6:7c:1d:32:07: f9:e2:4a:7b:93:1f:78:8a:9a:49:ba:b2:6e:8a:3b:5e:35:6d: 18:95:c8:c6:84:30:a8:13:d9:a8:ce:ad:94:93:74:5e:d8:4a: e6:70:53:8d:5e:6e:32:99:3d:a3:6b:82:ac:6e:57:52:5d:2e: a0:52:8b:5b:f2:b1:57:18:2a:e2:b0:6c:9c:dd:ee:e6:e4:65: f2:55:a8:10:ab:6f:66:37:70:64:b6:d2:6f:47:42:8b:78:4c: 2b:5d:39:72:96:52:f9:08:92:15:2a:9a:fe:e9:b7:c9:96:7e: ab:d7:6f:e9:73:2c:20:9b:84:d8:79:1a:b3:ed:67:13:65:50: 9b:f6:af:1e:df:f5:bd:cf:7f:af:2d:ca:60:bc:61:cc:1f:a8: eb:cf:52:72:c6:06:ba:50:be:42:41:be:fd:f3:07:98:db:54: a7:fd:ad:85:55:5b:9f:a3:76:66:db:a7:0e:27:54:df:f4:f7: a8:e4:bd:92:fb:21:45:b1:21:ac:27:5e:ba:49:16:d7:bd:58: ef:af:75:5a:99:72:b1:1a:31:77:28:46:ff:90:65:ec:5d:e8: fb:be:ae:fe:89:82:f6:3b:86:0c:41:ca:e6:a6:9c:7f:f3:0a: 94:66:5e:a0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtyweh26KIWqM3RooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk N2I5YjQwMGUtMDUyZC00M2MxLTk5ZjktYWE2MWRiNDkwOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S/04e2NwsWW0ZQ2HJroXsCeLlHHpO0YN7dn b4MADysHbSD1/r/1RwyKQCjO+e+tUhQzT5fUAX25l4E3//FGaGTlWoZBjH4qwPHr tdF4aztoqRpLmxCtD5BU0/zMGaoC58qWo/Y1sSuCXaZEqZAZlRaJLJWilOXRyVTe HRqfwsjqXmJubHqO1fIhPt5f8goa//VaNvBeMvyMIoa2Dfh+g+xERUR3NZFn57aG cB9aCp4bRGCHPTLIGdGGUoJD4JNgfM+GSY/1OTE1dLa3pLRRGZnoOwrzr91CieeU nAy9D2N0o+EtLkLhUHkSfrYx5gnH92jbXQXRuZQTEj/NkVfGKQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCg+da1e34ILoXiphtksixqPcTYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjhhZTU4OTYtM2ExOS0z ZDM2LWI2MTYtMGRhNzhhMDc0ZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIp4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVhfkYHDzaU6ye3wwROZ8HTIH+eJKe5MfeIqaSbqyboo7XjVtGJXIxoQw qBPZqM6tlJN0XthK5nBTjV5uMpk9o2uCrG5XUl0uoFKLW/KxVxgq4rBsnN3u5uRl 8lWoEKtvZjdwZLbSb0dCi3hMK105cpZS+QiSFSqa/um3yZZ+q9dv6XMsIJuE2Hka s+1nE2VQm/avHt/1vc9/ry3KYLxhzB+o689ScsYGulC+QkG+/fMHmNtUp/2thVVb n6N2ZtunDidU3/T3qOS9kvshRbEhrCdeukkW171Y7691WplysRoxdyhG/5Bl7F3o +76u/omC9juGDEHK5qacf/MKlGZeoA== -----END CERTIFICATE-----Generated at Mon Oct 20 07:36:51 2025 by rpki-client