$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ded29543-1e94-313f-ac46-6c9ebfa2436a.roa File: ded29543-1e94-313f-ac46-6c9ebfa2436a.roa (raw, json) Hash identifier: +fDqUVInhLDBXPVtsO4A/pEK+GexMGsPyba8kZ0lRR0= Subject key identifier: 65:03:46:49:15:B3:CB:F4:CB:61:D4:A4:07:6E:49:DB:22:6D:1D:D0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78525C82C569ACE40C64080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ded29543-1e94-313f-ac46-6c9ebfa2436a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.230.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:25:c8:2c:56:9a:ce:40:c6:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e4c37542-0194-4b78-8778-f3aa8599d3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:68:8e:81:d6:a5:dc:bc:6d:67:6b:81:69: 39:29:27:36:d8:ec:50:66:fd:f3:a4:46:00:bb:63: 62:3b:65:8b:4f:cf:49:4a:f9:7d:d3:32:b4:ff:9f: d8:41:a3:64:a9:95:42:dd:b7:ac:96:aa:7c:16:76: 0e:42:cc:9d:85:cf:b3:0c:fd:84:d4:65:45:39:e2: 7c:55:20:ca:e6:0d:f4:69:06:5e:28:91:7a:29:4b: 51:8b:2d:37:06:fe:8c:03:d3:b7:d8:9d:c8:85:5d: 15:38:ab:e6:02:18:86:ab:33:52:be:db:08:c6:17: 89:e4:4f:0f:da:b5:09:68:82:db:31:75:7d:77:3e: 31:3d:3c:71:f0:f8:d2:07:8d:bd:4b:39:64:81:9b: 1b:57:4c:e2:bd:70:03:1e:e6:df:a5:1c:31:ec:f7: 2d:40:b8:4b:09:87:ba:80:0e:9b:68:89:47:2c:18: c1:5a:4f:79:5a:1f:47:02:01:0b:64:ce:17:5f:06: 10:1d:c3:99:db:d4:81:8b:4e:f6:fb:2c:64:30:cc: c7:8c:22:40:90:63:ba:25:3f:2c:d6:6d:64:34:82: 18:4f:6c:dd:ce:93:f3:4d:5f:58:f2:be:44:6d:39: c5:80:32:98:df:79:18:e4:08:9a:c0:6d:f5:d9:f8: 92:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:03:46:49:15:B3:CB:F4:CB:61:D4:A4:07:6E:49:DB:22:6D:1D:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ded29543-1e94-313f-ac46-6c9ebfa2436a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.230.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a4:e7:1e:80:2c:bc:0b:83:4e:90:21:c7:61:5c:03:08:49: 02:be:bc:be:d2:f8:6d:1f:a2:c4:75:9b:f8:8c:d0:59:23:b3: aa:62:ff:c6:ea:f6:6e:33:be:3b:a1:db:9b:cd:1a:b3:7f:f8: 49:e4:83:59:e5:82:e2:42:00:b5:2e:99:11:8a:f9:16:b0:3c: c0:91:05:fe:d3:5e:9d:cd:9f:74:d7:8f:26:11:6e:52:c2:42: cf:6e:07:15:56:47:39:cd:76:f2:aa:5b:5f:5a:8c:4c:bb:00: 89:cd:16:a4:8e:c7:02:89:71:12:a2:5b:26:96:be:68:a5:7e: c4:db:c0:5c:12:e2:7d:0c:09:d5:73:ab:95:0a:ae:e8:39:84: 6d:0b:fb:93:f6:b9:8d:45:ef:3a:4e:26:d2:c3:ff:13:7a:0e: a6:b8:0b:eb:1a:70:78:a2:d5:52:b8:0e:97:67:d7:2f:64:2b: 52:41:05:83:85:eb:20:3c:81:33:0d:03:4d:96:d3:48:76:1b: c5:04:87:66:a2:89:9f:65:42:84:22:a5:cf:91:6e:4f:f7:e1: 8b:fc:39:c9:05:3f:2d:0e:42:de:e2:fb:47:39:af:2d:3f:a9: 29:59:80:a4:b8:b9:ec:98:0f:10:a5:43:44:45:8d:ec:77:41: 76:76:95:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSXILFaazkDGQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTRjMzc1NDItMDE5NC00Yjc4LTg3NzgtZjNhYTg1OTlkM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyttojoHWpdy8bWdrgWk5KSc22OxQZv3zpEYA u2NiO2WLT89JSvl90zK0/5/YQaNkqZVC3beslqp8FnYOQsydhc+zDP2E1GVFOeJ8 VSDK5g30aQZeKJF6KUtRiy03Bv6MA9O32J3IhV0VOKvmAhiGqzNSvtsIxheJ5E8P 2rUJaILbMXV9dz4xPTxx8PjSB429SzlkgZsbV0zivXADHubfpRwx7PctQLhLCYe6 gA6baIlHLBjBWk95Wh9HAgELZM4XXwYQHcOZ29SBi072+yxkMMzHjCJAkGO6JT8s 1m1kNIIYT2zdzpPzTV9Y8r5EbTnFgDKY33kY5AiawG312fiS1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUDRkkVs8v0y2HUpAduSdsibR3QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGVkMjk1NDMtMWU5NC0z MTNmLWFjNDYtNmM5ZWJmYTI0MzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI+bPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqk5x6ALLwLg06QIcdhXAMISQK+vL7S+G0fosR1m/iM0Fkjs6pi/8bq 9m4zvjuh25vNGrN/+Enkg1nlguJCALUumRGK+RawPMCRBf7TXp3Nn3TXjyYRblLC Qs9uBxVWRznNdvKqW19ajEy7AInNFqSOxwKJcRKiWyaWvmilfsTbwFwS4n0MCdVz q5UKrug5hG0L+5P2uY1F7zpOJtLD/xN6Dqa4C+sacHii1VK4Dpdn1y9kK1JBBYOF 6yA8gTMNA02W00h2G8UEh2aiiZ9lQoQipc+Rbk/34Yv8OckFPy0OQt7i+0c5ry0/ qSlZgKS4ueyYDxClQ0RFjex3QXZ2lSI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:16:45 2025 by rpki-client