$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/abbfaddf-5c20-3660-aea9-7a3cec49c265.roa File: abbfaddf-5c20-3660-aea9-7a3cec49c265.roa (raw, json) Hash identifier: aWpRbob9aHP5Wh4s8maP+0y+YQILkv7UXxmGCCa65m0= Subject key identifier: 02:03:43:BF:61:D4:AA:56:6C:DC:D3:E7:6F:F9:2C:18:F6:91:EA:83 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EBB11A85C21D063A1CD6F6980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/abbfaddf-5c20-3660-aea9-7a3cec49c265.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 203 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:a8:5c:21:d0:63:a1:cd:6f:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=b68fde75-d800-4603-976a-046c963a40e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:c3:ab:d2:a6:55:56:f3:3b:c6:7f:97:8b: c2:e7:fa:b8:98:4a:1d:8e:34:8d:0c:1a:42:48:d2: 24:6d:14:90:88:38:3c:d0:e4:12:bd:e5:8b:69:1c: d6:c8:ce:ae:2b:0a:f4:19:66:12:3f:f3:bf:5b:de: a0:c0:ed:c3:51:90:9f:34:dd:34:7d:2f:5b:60:70: a2:43:26:07:ab:74:de:ae:0c:06:fc:5c:bf:c9:1f: bf:db:15:71:9c:f6:22:70:95:8c:24:23:e5:ee:8e: 2e:ea:b3:a8:67:02:15:71:0c:49:11:a6:45:9d:1d: 26:bc:64:24:18:50:0c:4b:7f:89:06:02:cf:d0:93: 75:55:d3:d8:47:cf:17:f1:2d:83:59:a7:1e:04:98: c5:c9:32:2c:84:a5:1a:bc:e7:7b:e6:b2:c0:ad:2a: f4:1a:d5:a5:77:40:56:8b:66:32:eb:21:e7:fb:de: 93:ce:18:0e:c4:1d:3a:d0:19:11:6d:82:d6:5d:f7: 2b:4f:4e:48:a0:12:8c:34:e7:7e:41:3b:5f:c6:d1: 0a:8f:ce:a3:4f:32:d9:8b:85:fa:2b:a1:af:9a:8b: 77:70:36:44:11:4a:50:0c:bf:1c:8b:64:87:ce:d2: c2:b0:4a:2c:f9:4e:db:f2:ba:bc:51:42:e1:b2:6d: d2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:03:43:BF:61:D4:AA:56:6C:DC:D3:E7:6F:F9:2C:18:F6:91:EA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/abbfaddf-5c20-3660-aea9-7a3cec49c265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:30:43:fe:72:1e:c3:1e:2f:53:0e:61:64:16:52:3b:14:ce: c4:18:26:2a:2e:8c:ae:85:cc:40:e6:58:ee:b3:a7:32:c1:ac: 37:57:cc:83:37:16:10:8f:bc:2a:c1:46:e3:85:1e:46:92:5e: 65:f0:5e:d6:db:49:76:c0:8d:fa:ff:a2:1e:ad:c3:5e:46:d5: 7d:76:23:98:3a:f1:61:69:47:d4:6e:7d:d9:ee:ff:10:1b:41: a9:3f:16:99:14:bd:1f:d7:bc:56:90:e5:1e:8b:2f:fb:ce:91: 0f:14:33:30:e1:d3:a6:26:55:42:9c:a3:41:b9:34:00:da:49: 38:78:fc:32:4b:98:da:a2:08:9a:7b:92:e4:e5:2d:de:84:e0: a4:28:2b:78:71:db:d9:ed:3f:50:c7:ff:ca:3d:25:e1:7d:16: 50:28:27:fb:6b:fb:5f:50:ae:ce:d7:1a:3b:92:68:34:98:7c: 65:e8:d4:a9:6a:37:38:e9:9d:f1:75:c9:51:be:69:a1:ba:aa: 5a:c2:75:ff:09:7a:a5:b0:f1:31:5d:6a:82:64:dd:21:98:28: 46:6e:f0:79:cd:d7:1e:b3:2a:94:43:a9:c0:54:c2:78:c6:99: 8b:3f:45:90:dc:b5:7a:fd:3d:de:ca:10:00:0d:0d:15:b9:d6: 0f:7e:0f:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EahcIdBjoc1vaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YjY4ZmRlNzUtZDgwMC00NjAzLTk3NmEtMDQ2Yzk2M2E0MGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorfDq9KmVVbzO8Z/l4vC5/q4mEodjjSNDBpC SNIkbRSQiDg80OQSveWLaRzWyM6uKwr0GWYSP/O/W96gwO3DUZCfNN00fS9bYHCi QyYHq3TergwG/Fy/yR+/2xVxnPYicJWMJCPl7o4u6rOoZwIVcQxJEaZFnR0mvGQk GFAMS3+JBgLP0JN1VdPYR88X8S2DWaceBJjFyTIshKUavOd75rLArSr0GtWld0BW i2Yy6yHn+96TzhgOxB060BkRbYLWXfcrT05IoBKMNOd+QTtfxtEKj86jTzLZi4X6 K6Gvmot3cDZEEUpQDL8ci2SHztLCsEos+U7b8rq8UULhsm3SywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIDQ79h1KpWbNzT52/5LBj2keqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWJiZmFkZGYtNWMyMC0z NjYwLWFlYTktN2EzY2VjNDljMjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwwQ/5yHsMeL1MOYWQWUjsUzsQYJioujK6FzEDmWO6zpzLBrDdXzIM3 FhCPvCrBRuOFHkaSXmXwXtbbSXbAjfr/oh6tw15G1X12I5g68WFpR9Rufdnu/xAb Qak/FpkUvR/XvFaQ5R6LL/vOkQ8UMzDh06YmVUKco0G5NADaSTh4/DJLmNqiCJp7 kuTlLd6E4KQoK3hx29ntP1DH/8o9JeF9FlAoJ/tr+19Qrs7XGjuSaDSYfGXo1Klq NzjpnfF1yVG+aaG6qlrCdf8JeqWw8TFdaoJk3SGYKEZu8HnN1x6zKpRDqcBUwnjG mYs/RZDctXr9Pd7KEAANDRW51g9+D+I= -----END CERTIFICATE-----Generated at Wed Sep 9 00:52:50 2026 by rpki-client