$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bca9f9d7-d0db-3df9-acf8-7d93676af797.roa File: bca9f9d7-d0db-3df9-acf8-7d93676af797.roa (raw, json) Hash identifier: YAiwA9imyxpWlGRMjCpz6S4VQnZoe7tf9IyYmS83GIQ= Subject key identifier: 2D:CA:A3:B0:8F:E7:0B:18:86:13:E6:B5:58:4E:6C:DC:61:E7:EF:17 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F5C9E10042A0E0D18A80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bca9f9d7-d0db-3df9-acf8-7d93676af797.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 203 IP address blocks: 20.149.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f5:c9:e1:00:42:a0:e0:d1:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=5c89f7f6-5d29-4978-9adb-90e1cf7b0883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:7b:e1:01:d5:2e:58:fc:cb:20:3e:9e:83: ae:74:8d:12:48:23:a9:68:a6:8a:0b:05:03:85:39: 73:8d:b7:99:aa:97:8c:a7:2b:b2:20:2e:ec:48:30: b4:e1:50:31:e0:9b:3f:c2:80:4a:b1:d6:13:c4:a4: 24:94:2b:f6:ce:23:98:b1:d7:c8:87:a5:bd:42:07: c3:7c:2a:1f:a2:5e:3d:b6:9b:12:d5:e6:6c:f0:4b: 6f:26:e0:76:e5:8d:1f:c7:4d:ce:f8:40:64:d9:0f: c9:9d:57:3c:31:b0:7a:c1:89:29:4e:67:38:a9:a1: be:9c:aa:1e:17:13:b8:8e:0b:6c:7d:75:ab:cd:a3: 35:91:7c:dc:91:e3:04:64:d6:e3:4c:ba:9d:29:d1: c9:ef:83:92:d7:e8:d2:aa:b6:a1:09:3e:2d:df:3d: 51:17:44:b6:89:e6:2e:af:71:91:c9:b8:91:9e:8d: 78:5e:fb:ff:69:67:b1:e7:8f:f3:9e:25:6f:d9:0f: a1:1f:64:7a:95:ec:59:c5:c4:86:c5:12:e3:df:ec: 35:bf:e6:2a:5a:90:dd:bc:e0:74:ef:b9:cd:3a:75: 7c:f4:9c:bf:b6:7e:5a:fa:65:b0:9c:e0:50:8e:d8: ac:02:cf:0e:4a:6a:aa:35:a6:e2:dd:33:e3:89:13: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CA:A3:B0:8F:E7:0B:18:86:13:E6:B5:58:4E:6C:DC:61:E7:EF:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bca9f9d7-d0db-3df9-acf8-7d93676af797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f1:36:aa:d5:36:49:e1:41:a5:62:8a:81:7e:e4:6a:51:c4: 65:8f:21:cc:ac:29:ac:f4:07:a0:19:6f:cb:84:82:13:c5:79: 3b:f4:18:35:3f:ac:0e:d8:6d:23:95:cd:10:95:49:d4:14:78: b6:db:b2:01:34:ef:02:4d:9c:51:30:56:ae:a7:cc:25:31:0a: c7:70:4f:ab:76:98:b9:5f:ff:cd:8c:f3:45:e1:46:85:c1:71: 6e:c1:eb:52:ae:9f:8a:60:09:91:55:c0:7e:31:41:15:3e:d9: 11:4e:8b:01:0a:c4:2c:71:cc:7a:51:a2:b1:1c:6b:56:f8:66: fc:2e:20:7a:5b:95:21:fb:1e:9c:cd:a9:99:ae:e9:51:3a:f5: 0f:a5:07:9b:32:5d:c8:55:3e:e6:af:56:2b:c6:e3:47:c5:83: 90:ba:85:42:09:ee:76:fb:75:65:f3:a4:8b:19:90:e1:1e:3d: f0:2c:a2:56:a0:44:e8:ef:fb:9d:b9:a2:06:52:6e:c9:9c:ca: e5:3b:5d:5e:00:b1:95:77:50:6d:3e:fc:ec:fe:42:6c:1a:14: 19:ce:cb:7c:2c:15:51:87:51:dc:a3:1c:2f:ab:7b:4a:81:c1: 3f:6c:7e:c7:42:ae:c9:89:b1:91:95:5e:2c:7e:0b:98:e1:5d: 33:64:e3:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfXJ4QBCoODRioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk NWM4OWY3ZjYtNWQyOS00OTc4LTlhZGItOTBlMWNmN2IwODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5974QHVLlj8yyA+noOudI0SSCOpaKaKCwUD hTlzjbeZqpeMpyuyIC7sSDC04VAx4Js/woBKsdYTxKQklCv2ziOYsdfIh6W9QgfD fCofol49tpsS1eZs8EtvJuB25Y0fx03O+EBk2Q/JnVc8MbB6wYkpTmc4qaG+nKoe FxO4jgtsfXWrzaM1kXzckeMEZNbjTLqdKdHJ74OS1+jSqrahCT4t3z1RF0S2ieYu r3GRybiRno14Xvv/aWex54/zniVv2Q+hH2R6lexZxcSGxRLj3+w1v+YqWpDdvOB0 77nNOnV89Jy/tn5a+mWwnOBQjtisAs8OSmqqNabi3TPjiRP2TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3Ko7CP5wsYhhPmtVhObNxh5+8XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYmNhOWY5ZDctZDBkYi0z ZGY5LWFjZjgtN2Q5MzY3NmFmNzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLxNqrVNknhQaViioF+5GpRxGWPIcysKaz0B6AZb8uEghPFeTv0GDU/ rA7YbSOVzRCVSdQUeLbbsgE07wJNnFEwVq6nzCUxCsdwT6t2mLlf/82M80XhRoXB cW7B61Kun4pgCZFVwH4xQRU+2RFOiwEKxCxxzHpRorEca1b4ZvwuIHpblSH7HpzN qZmu6VE69Q+lB5syXchVPuavVivG40fFg5C6hUIJ7nb7dWXzpIsZkOEePfAsolag ROjv+525ogZSbsmcyuU7XV4AsZV3UG0+/Oz+QmwaFBnOy3wsFVGHUdyjHC+re0qB wT9sfsdCrsmJsZGVXix+C5jhXTNk44Y= -----END CERTIFICATE-----Generated at Tue May 6 11:01:01 2025 by rpki-client