$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ded29543-1e94-313f-ac46-6c9ebfa2436a.roa File: ded29543-1e94-313f-ac46-6c9ebfa2436a.roa (raw, json) Hash identifier: I8TvzBdIGdaPrlrwMpoUOxa114FFHR6d2FkOVVw9VDc= Subject key identifier: 21:B1:93:AE:96:DC:9A:94:45:39:B1:29:6B:14:0B:A7:A0:32:1E:FC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0820A3D2FDC33A1512EE Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ded29543-1e94-313f-ac46-6c9ebfa2436a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.230.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:08:20:a3:d2:fd:c3:3a:15:12:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=a3d6d5fe-0bb1-4a6c-9e40-59f885f76f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6c:c9:e6:41:ec:9d:d1:3e:75:f4:bc:8c:bc: bb:b8:aa:40:c8:15:0b:25:96:b6:c7:6b:fc:5c:70: e7:56:82:5d:58:8b:91:71:4f:af:86:a8:8d:9c:5e: 69:ad:d1:43:fb:6a:fe:ef:12:a4:85:a5:39:7f:7e: 99:f8:51:bf:62:c2:63:87:7b:a8:5f:1c:88:21:3d: d1:1a:76:6b:3a:64:8e:8e:8e:af:44:ad:8a:24:bd: 84:85:91:10:53:55:5a:c8:5c:a5:cc:70:a0:4c:aa: 6e:66:7f:d9:fd:dd:f4:39:cd:36:70:4a:fa:26:f7: 94:6d:80:6c:a6:40:8a:78:fa:ac:4c:c0:c0:c9:dc: dd:96:d8:09:c3:80:d0:0e:41:58:d4:a0:54:90:22: 8d:55:19:a2:be:6a:1b:ed:96:fa:7b:40:11:0f:23: a6:53:42:a3:b6:a1:99:7a:8d:51:da:af:9b:99:6d: d3:4f:f6:24:16:8d:e3:d1:04:b6:ab:ec:e3:45:10: 33:04:93:fc:77:47:e6:6d:4f:38:3d:f9:be:f4:92: 89:b1:4b:c4:e8:76:7a:23:35:36:9f:f2:26:3b:41: 9f:49:6f:1b:75:2b:38:1e:c5:a2:69:98:bc:fd:7e: 7a:c3:20:d8:68:d6:bb:8c:f3:1f:99:1b:fc:21:c3: 3a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B1:93:AE:96:DC:9A:94:45:39:B1:29:6B:14:0B:A7:A0:32:1E:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ded29543-1e94-313f-ac46-6c9ebfa2436a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.230.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:2d:52:ce:4c:dc:7e:b0:dd:1e:60:2e:63:b8:96:4b:3a:2e: ff:5d:c0:91:7a:d4:2a:fb:42:33:23:c2:fb:b4:4f:53:1f:85: 75:3d:c3:43:75:e2:34:a0:a5:8f:1b:06:f5:ee:1b:62:65:76: 96:77:61:17:a2:f8:a3:08:c7:21:f1:ae:9c:2a:ec:d9:b9:5d: 85:ad:e2:b4:c8:40:10:94:e7:51:e0:3e:0c:22:47:9c:dc:7d: 9a:40:0e:96:f2:20:24:51:2c:a5:a3:e1:9f:07:e1:d6:d5:82: fa:d2:e5:6f:ab:ae:1d:64:5d:cc:96:fb:13:0d:fe:a1:50:2b: 04:64:dd:0f:51:10:10:41:e7:b4:33:b3:a4:95:6a:16:a3:90: 42:d3:17:ce:36:cd:dd:bc:4d:a8:1e:18:74:3c:95:bb:92:06: 10:95:02:34:52:1d:ca:5b:42:9c:36:93:53:f1:e1:6f:0b:bc: de:a0:38:46:6f:be:0a:83:e0:5a:71:f6:ab:0d:25:43:27:8a: ba:86:32:4c:6e:47:c7:50:c7:02:48:86:95:05:c6:a2:30:7c: da:0a:d8:54:53:a9:f1:d3:3b:87:8d:64:9f:c6:51:37:c2:8f: e5:dc:2a:8c:32:e7:a8:bc:81:0b:2a:a4:3f:01:f9:3d:1f:28: ed:52:63:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAggo9L9wzoVEu4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YTNkNmQ1ZmUtMGJiMS00YTZjLTllNDAtNTlmODg1Zjc2ZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGzJ5kHsndE+dfS8jLy7uKpAyBULJZa2x2v8 XHDnVoJdWIuRcU+vhqiNnF5prdFD+2r+7xKkhaU5f36Z+FG/YsJjh3uoXxyIIT3R GnZrOmSOjo6vRK2KJL2EhZEQU1VayFylzHCgTKpuZn/Z/d30Oc02cEr6JveUbYBs pkCKePqsTMDAydzdltgJw4DQDkFY1KBUkCKNVRmivmob7Zb6e0ARDyOmU0KjtqGZ eo1R2q+bmW3TT/YkFo3j0QS2q+zjRRAzBJP8d0fmbU84Pfm+9JKJsUvE6HZ6IzU2 n/ImO0GfSW8bdSs4HsWiaZi8/X56wyDYaNa7jPMfmRv8IcM6dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGxk66W3JqURTmxKWsUC6egMh78MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGVkMjk1NDMtMWU5NC0z MTNmLWFjNDYtNmM5ZWJmYTI0MzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI+bPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIctUs5M3H6w3R5gLmO4lks6Lv9dwJF61Cr7QjMjwvu0T1MfhXU9w0N1 4jSgpY8bBvXuG2JldpZ3YRei+KMIxyHxrpwq7Nm5XYWt4rTIQBCU51HgPgwiR5zc fZpADpbyICRRLKWj4Z8H4dbVgvrS5W+rrh1kXcyW+xMN/qFQKwRk3Q9REBBB57Qz s6SVahajkELTF842zd28TageGHQ8lbuSBhCVAjRSHcpbQpw2k1Px4W8LvN6gOEZv vgqD4Fpx9qsNJUMnirqGMkxuR8dQxwJIhpUFxqIwfNoK2FRTqfHTO4eNZJ/GUTfC j+XcKowy56i8gQsqpD8B+T0fKO1SY+Q= -----END CERTIFICATE-----Generated at Fri Apr 4 21:48:06 2025 by rpki-client