$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/abbfaddf-5c20-3660-aea9-7a3cec49c265.roa File: abbfaddf-5c20-3660-aea9-7a3cec49c265.roa (raw, json) Hash identifier: KYcDFOkz6KxNe7MQ5GoK9Z1Ah3eXMq3eDVGeyMeWaTc= Subject key identifier: 71:0D:59:56:29:49:6D:6E:D1:91:A4:33:CE:D7:B4:42:22:D1:F0:9E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E18AEDE9508F7A54417954500 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/abbfaddf-5c20-3660-aea9-7a3cec49c265.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 203 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:de:95:08:f7:a5:44:17:95:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=8a89abf3-b27b-4fc1-aff4-77777221dc9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b8:48:2c:8e:58:fa:ad:bd:27:e4:56:0e:48: 84:e3:94:79:8c:f9:02:36:b9:d7:cf:57:39:4c:ec: 89:71:92:92:55:d9:a5:2d:56:b9:6a:32:89:72:5e: 91:ac:1f:5f:03:f9:1d:f1:71:94:41:44:29:f3:75: 31:c7:e6:1f:8d:e5:d8:e6:1a:9f:57:3e:92:6b:60: 70:91:8a:58:50:27:60:89:54:3a:91:b1:9a:64:67: f9:bd:7c:1f:7e:29:d6:8d:ba:37:b4:17:92:60:c1: 10:0d:7e:cc:eb:44:a1:db:b6:e9:a4:8d:fd:5b:7f: 73:e2:6a:df:3e:7e:0d:d9:b5:74:0b:ae:45:35:6f: fc:ed:6f:7a:84:9d:3c:46:df:38:ca:f2:3c:6d:b8: d5:d2:d6:f5:9a:2d:8e:af:9c:d4:89:cd:5f:87:db: 8c:65:5e:c5:c5:20:53:a3:c7:be:ce:75:5b:a6:11: f3:14:4f:e8:35:22:5c:3d:cd:1d:88:94:7f:d3:d9: e6:4d:ea:dc:fe:6b:0a:d5:dd:b1:95:d0:96:08:f5: 81:ac:7a:79:2c:73:34:6e:3d:f2:eb:af:7f:d3:98: c5:7a:60:19:78:ef:89:f2:19:15:7b:6c:5f:cb:b6: 3e:bd:17:7c:6f:f7:58:d9:55:d3:ce:fc:61:66:95: b4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0D:59:56:29:49:6D:6E:D1:91:A4:33:CE:D7:B4:42:22:D1:F0:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/abbfaddf-5c20-3660-aea9-7a3cec49c265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:30:00:62:16:8b:32:8f:59:a7:16:78:0e:74:4d:bd:b9:8b: 1a:15:ac:b1:d4:d8:25:35:a7:41:c5:17:c3:fc:51:c6:82:3f: f4:5a:79:df:60:b8:dc:dc:d3:3d:e0:86:39:a0:68:76:62:2d: 49:76:8c:ae:2d:99:69:28:6d:a9:25:31:40:f9:50:9b:aa:37: 58:36:f4:52:47:10:22:65:ae:26:60:be:02:9c:13:49:75:c3: ab:07:bb:7d:48:f1:41:69:9f:d7:d0:72:10:5b:65:b4:08:aa: f5:27:7a:9e:fc:59:14:b5:47:e6:da:fe:78:cf:d7:b1:2e:3c: 67:dd:d2:9e:54:eb:a7:a1:74:77:14:1c:92:74:8c:83:19:b1: e1:64:85:ce:57:65:0c:69:7b:bb:4f:f5:e6:90:22:21:c2:65: bf:4c:0c:f8:e3:ba:f0:54:70:56:8c:03:01:30:16:0e:24:f6: fb:7d:e3:9e:14:96:e2:6e:1a:49:b7:e8:00:e2:90:9b:f9:9b: b5:79:ab:8b:2d:cc:9f:d1:6e:eb:61:9d:53:e5:a0:c8:86:93: 71:86:ce:d2:20:c9:6e:3c:ac:3e:3a:68:cb:32:4c:39:64:1e: eb:69:b7:92:9c:66:40:26:df:d1:b8:37:3b:ca:85:e5:dc:fe: 8c:8c:6a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Yrt6VCPelRBeVRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk OGE4OWFiZjMtYjI3Yi00ZmMxLWFmZjQtNzc3NzcyMjFkYzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7hILI5Y+q29J+RWDkiE45R5jPkCNrnXz1c5 TOyJcZKSVdmlLVa5ajKJcl6RrB9fA/kd8XGUQUQp83Uxx+YfjeXY5hqfVz6Sa2Bw kYpYUCdgiVQ6kbGaZGf5vXwffinWjbo3tBeSYMEQDX7M60Sh27bppI39W39z4mrf Pn4N2bV0C65FNW/87W96hJ08Rt84yvI8bbjV0tb1mi2Or5zUic1fh9uMZV7FxSBT o8e+znVbphHzFE/oNSJcPc0diJR/09nmTerc/msK1d2xldCWCPWBrHp5LHM0bj3y 669/05jFemAZeO+J8hkVe2xfy7Y+vRd8b/dY2VXTzvxhZpW0fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHENWVYpSW1u0ZGkM87XtEIi0fCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWJiZmFkZGYtNWMyMC0z NjYwLWFlYTktN2EzY2VjNDljMjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0wAGIWizKPWacWeA50Tb25ixoVrLHU2CU1p0HFF8P8UcaCP/Raed9g uNzc0z3ghjmgaHZiLUl2jK4tmWkobaklMUD5UJuqN1g29FJHECJlriZgvgKcE0l1 w6sHu31I8UFpn9fQchBbZbQIqvUnep78WRS1R+ba/njP17EuPGfd0p5U66ehdHcU HJJ0jIMZseFkhc5XZQxpe7tP9eaQIiHCZb9MDPjjuvBUcFaMAwEwFg4k9vt9454U luJuGkm36ADikJv5m7V5q4stzJ/RbuthnVPloMiGk3GGztIgyW48rD46aMsyTDlk Hutpt5KcZkAm39G4NzvKheXc/oyMajM= -----END CERTIFICATE-----Generated at Mon Jun 8 17:57:04 2026 by rpki-client